This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json) Hash identifier: j78P5ssVQORx2uI0j/1+oEbok1qY57K4BX+oxBALIf4= Subject key identifier: 6F:A2:B0:D9:7D:DE:FD:66:D3:0F:B9:39:F1:6D:1C:8E:30:2D:B5:21 Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Certificate serial: 019B2BF8B0E6B45778647FD4DD17F3B2A10E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft Manifest number: 12C0 Signing time: Wed 17 Dec 2025 11:01:17 +0000 Manifest this update: Wed 17 Dec 2025 11:01:17 +0000 Manifest next update: Thu 18 Dec 2025 11:01:17 +0000 Files and hashes: 1: 7sZHEb-3j0UDknNTVR4r3jEHiPw.roa (hash: kjKnTMuWRl0f+MG1heWAt7d7HgqUPWdFN6Svv/sgCx8=) 2: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=) 3: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: mtM/ql7mplnFqUGsRL7fCHqExRlk6xgomyiF2mcCT20=) 4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:b0:e6:b4:57:78:64:7f:d4:dd:17:f3:b2:a1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Validity Not Before: Dec 17 11:01:17 2025 GMT Not After : Dec 18 11:01:17 2025 GMT Subject: CN=6fa2b0d97ddefd66d30fb939f16d1c8e302db521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:d7:8c:db:2c:69:59:cf:83:eb:7d:eb:f8: fd:5e:27:b8:ce:6a:05:17:01:20:0c:f9:8b:95:35: 37:fa:a1:be:ca:95:3e:f5:f2:4a:70:7d:a4:66:1c: ea:36:24:c0:e3:da:5e:54:93:3c:a9:e7:eb:fb:74: 58:68:63:0f:6b:51:d2:a9:e7:15:10:32:45:90:08: 67:e4:ce:0c:f7:21:9b:72:12:38:0d:ea:e2:64:8e: e1:3c:f4:f4:0b:6e:a1:08:7d:7f:42:d8:31:86:15: da:f9:f7:ae:21:51:f0:be:62:85:76:26:ef:78:a0: 79:8f:ec:78:aa:95:ff:34:82:f1:5b:8f:98:b3:44: b5:a7:74:76:f9:17:72:73:f7:b4:0b:40:3f:28:49: 4f:8f:d0:d6:e3:15:ca:ba:d2:9d:11:18:df:55:f9: 26:c9:cd:ed:62:ef:75:97:40:17:24:92:f8:b7:83: 11:f2:f0:c7:e8:81:00:ca:13:01:24:12:4c:d5:d7: 0e:e5:dc:87:44:92:6c:cd:c0:c4:ad:e7:c6:08:f6: 61:80:fb:24:b2:e0:e7:9f:5d:73:09:bc:a2:a0:c5: a9:70:f1:3e:79:70:c6:80:55:86:02:e4:b5:95:9f: dc:20:01:f5:ab:51:a4:68:f7:bd:0e:91:5f:25:f1: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:B0:D9:7D:DE:FD:66:D3:0F:B9:39:F1:6D:1C:8E:30:2D:B5:21 X509v3 Authority Key Identifier: keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:55:4c:b3:f7:1c:2f:21:59:b9:19:20:3c:4c:e6:e4:9d:34: d1:ae:bc:40:ad:2a:67:5e:ba:00:21:d9:ce:02:68:f5:af:ff: 98:0c:5c:1d:aa:5f:e6:25:b9:8b:82:99:8f:d9:b6:2a:b8:01: 59:ba:14:75:6e:ce:f4:22:53:42:18:2b:56:b0:5e:d7:83:8d: 32:cb:d1:67:44:c5:6b:c1:43:28:f4:e1:da:62:5e:81:03:0c: 1d:3a:06:6b:17:66:52:c7:d8:77:ab:47:b9:9e:71:63:ed:a4: 8d:e9:89:3e:00:b9:7b:68:71:a6:22:5f:04:09:20:88:70:23: f5:19:25:a5:ff:f5:b8:e7:5e:02:48:4b:e4:5d:3a:d3:6d:03: 93:fa:de:a7:92:95:dd:9e:2f:63:ac:9a:f7:ae:2b:22:42:a2: 57:1d:0d:90:ce:09:11:d5:61:fd:fb:1b:83:c0:c6:7c:f1:98: ba:69:4a:79:73:a9:a8:56:ac:ec:37:72:b5:c6:34:be:2a:03: ca:48:7e:a8:fd:12:18:bc:45:23:8e:4d:e0:e6:ef:2e:ae:67: 65:49:77:d1:11:c9:7f:16:54:7f:27:f1:34:8d:31:99:38:64: 33:60:20:77:60:04:29:1f:46:89:9d:8d:6e:87:02:dc:b0:01: f2:ab:6b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+LDmtFd4ZH/U3RfzsqEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz NTU5Y2YwHhcNMjUxMjE3MTEwMTE3WhcNMjUxMjE4MTEwMTE3WjAzMTEwLwYDVQQD Eyg2ZmEyYjBkOTdkZGVmZDY2ZDMwZmI5MzlmMTZkMWM4ZTMwMmRiNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO3XjNssaVnPg+t96/j9Xie4zmoF FwEgDPmLlTU3+qG+ypU+9fJKcH2kZhzqNiTA49peVJM8qefr+3RYaGMPa1HSqecV EDJFkAhn5M4M9yGbchI4DeriZI7hPPT0C26hCH1/QtgxhhXa+feuIVHwvmKFdibv eKB5j+x4qpX/NILxW4+Ys0S1p3R2+Rdyc/e0C0A/KElPj9DW4xXKutKdERjfVfkm yc3tYu91l0AXJJL4t4MR8vDH6IEAyhMBJBJM1dcO5dyHRJJszcDErefGCPZhgPsk suDnn11zCbyioMWpcPE+eXDGgFWGAuS1lZ/cIAH1q1GkaPe9DpFfJfFWAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+isNl93v1m0w+5OfFtHI4wLbUhMB8GA1UdIwQY MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt YmFmMjRkZDU4MzlmLzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalVMs/cc LyFZuRkgPEzm5J000a68QK0qZ166ACHZzgJo9a//mAxcHapf5iW5i4KZj9m2KrgB WboUdW7O9CJTQhgrVrBe14ONMsvRZ0TFa8FDKPTh2mJegQMMHToGaxdmUsfYd6tH uZ5xY+2kjemJPgC5e2hxpiJfBAkgiHAj9Rklpf/1uOdeAkhL5F06020Dk/rep5KV 3Z4vY6ya964rIkKiVx0NkM4JEdVh/fsbg8DGfPGYumlKeXOpqFas7DdytcY0vioD ykh+qP0SGLxFI45N4ObvLq5nZUl30RHJfxZUfyfxNI0xmThkM2Agd2AEKR9GiZ2N bocC3LAB8qtrLQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:18:20 2025 by rpki-client