This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json) Hash identifier: LPlv3o92sxV98Ij0LHGegPwigpsladVnON/tjOpi7HU= Subject key identifier: 3A:A8:0F:81:59:C5:6F:B8:E8:FB:2E:15:C6:8E:2D:15:7C:03:D4:78 Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019B360E90905E5285FDF76B55D2054303CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft Manifest number: 17AA Signing time: Fri 19 Dec 2025 10:01:22 +0000 Manifest this update: Fri 19 Dec 2025 10:01:22 +0000 Manifest next update: Sat 20 Dec 2025 10:01:22 +0000 Files and hashes: 1: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (hash: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI=) 2: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (hash: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME=) 3: QL2SSYulhakA75BZZF7HAK2KA1o.roa (hash: GkirDpEuIjH7IlkFK7z0eYAoS+FFH+rtgzQ90Bk1Etc=) 4: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=) 5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: CL3/1eG5P6I1njhNjtRKsEjAONI5gA8cB0NR8sjGChI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:90:90:5e:52:85:fd:f7:6b:55:d2:05:43:03:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 19 10:01:22 2025 GMT Not After : Dec 20 10:01:22 2025 GMT Subject: CN=3aa80f8159c56fb8e8fb2e15c68e2d157c03d478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:fc:a6:84:9d:c3:e2:59:88:60:00:03:81: ba:06:3c:fa:24:dd:c1:5d:83:46:6b:b7:48:a2:86: a2:30:41:24:2a:ae:a8:b9:4d:9d:5e:6f:92:fd:79: 72:86:20:67:eb:75:3c:98:0f:dc:f0:6f:11:f9:08: 5f:20:f1:b3:da:36:40:19:9d:ac:06:c5:88:a9:e2: a6:be:97:09:79:82:8b:0f:6f:ee:62:d9:26:97:e2: c8:a9:51:c3:6b:eb:f7:44:d7:64:48:d5:9f:f7:04: cb:fd:bb:4f:13:1f:4b:7a:98:74:cc:45:68:a2:91: ba:30:27:11:26:cd:b5:4e:d1:7e:2b:c5:13:ef:8b: 75:c8:b5:9a:41:75:2c:21:f7:11:d1:97:95:11:4f: 56:c9:ba:27:cc:a5:f4:14:eb:d1:0c:fc:0d:73:af: 46:04:55:41:ec:88:f3:50:78:f2:42:76:90:3a:34: b3:9a:8c:57:c3:df:71:b0:7c:a7:af:c0:cc:03:b0: 6f:bc:35:15:c6:81:f1:e0:3e:09:6f:4f:28:08:64: 53:b8:d3:88:aa:e8:31:bc:be:8f:55:04:83:7b:b9: 23:fd:9e:3f:68:d5:d4:22:d3:cc:0e:6d:d7:4e:d0: eb:50:2d:31:9a:cd:63:79:2d:72:ad:9b:5b:f7:f3: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:0F:81:59:C5:6F:B8:E8:FB:2E:15:C6:8E:2D:15:7C:03:D4:78 X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6c:3b:7f:dd:15:7e:6f:e0:e9:98:90:4c:61:52:20:30:7d: 88:2a:6b:bf:d9:98:d3:8c:2c:aa:5c:f5:3a:3a:e3:e1:d0:3a: 3d:e0:a7:86:80:84:89:68:39:78:42:b6:5f:ec:f5:cc:de:05: 73:d0:8c:23:4a:55:84:f6:81:19:07:5c:f2:84:bd:ca:e5:e0: 88:33:ba:c2:69:2b:c0:39:d4:e0:58:c8:00:8a:1c:9a:02:f5: 40:52:24:1b:a9:98:76:27:ee:b4:c2:06:9c:f2:20:ec:a8:fc: 35:b1:f1:04:52:a7:79:70:19:09:10:0e:1f:52:c0:d5:7e:ef: 24:de:75:e8:f2:0f:be:5b:1c:38:d0:f9:ba:e5:7b:cc:02:25: 19:b5:85:f2:73:5a:38:45:25:8c:68:e4:5d:3d:77:d7:ad:bc: a5:0c:7f:ac:17:fa:74:9a:f2:51:84:70:9a:43:93:64:35:0b: 32:f5:12:85:6c:ca:d7:2a:b2:7e:92:66:72:b9:ff:0c:c2:16: fc:87:57:c2:bb:1c:87:7a:3a:ad:5a:82:e4:18:41:e1:8e:a2: 0c:4f:4a:1f:f9:26:99:7d:13:0a:fd:f2:c5:65:dd:4f:65:cb: 5f:aa:71:1d:66:82:ed:a3:4b:d2:62:d4:7a:06:be:4f:8a:4e: 8b:72:37:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DpCQXlKF/fdrVdIFQwPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjE5MTAwMTIyWhcNMjUxMjIwMTAwMTIyWjAzMTEwLwYDVQQD EygzYWE4MGY4MTU5YzU2ZmI4ZThmYjJlMTVjNjhlMmQxNTdjMDNkNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6n8poSdw+JZiGAAA4G6Bjz6JN3B XYNGa7dIooaiMEEkKq6ouU2dXm+S/XlyhiBn63U8mA/c8G8R+QhfIPGz2jZAGZ2s BsWIqeKmvpcJeYKLD2/uYtkml+LIqVHDa+v3RNdkSNWf9wTL/btPEx9Leph0zEVo opG6MCcRJs21TtF+K8UT74t1yLWaQXUsIfcR0ZeVEU9WybonzKX0FOvRDPwNc69G BFVB7IjzUHjyQnaQOjSzmoxXw99xsHynr8DMA7BvvDUVxoHx4D4Jb08oCGRTuNOI qugxvL6PVQSDe7kj/Z4/aNXUItPMDm3XTtDrUC0xms1jeS1yrZtb9/Nn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqoD4FZxW+46PsuFcaOLRV8A9R4MB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWw7f90V fm/g6ZiQTGFSIDB9iCprv9mY04wsqlz1Ojrj4dA6PeCnhoCEiWg5eEK2X+z1zN4F c9CMI0pVhPaBGQdc8oS9yuXgiDO6wmkrwDnU4FjIAIocmgL1QFIkG6mYdifutMIG nPIg7Kj8NbHxBFKneXAZCRAOH1LA1X7vJN516PIPvlscOND5uuV7zAIlGbWF8nNa OEUljGjkXT131628pQx/rBf6dJryUYRwmkOTZDULMvUShWzK1yqyfpJmcrn/DMIW /IdXwrsch3o6rVqC5BhB4Y6iDE9KH/kmmX0TCv3yxWXdT2XLX6pxHWaC7aNL0mLU ega+T4pOi3I3TA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:21:48 2025 by rpki-client