This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json) Hash identifier: vtIZGOrJmKeXB7LcWpf8B/Qt+MlWHpHp5fBDlrpR6lg= Subject key identifier: 99:38:76:2E:B9:F8:97:1A:E4:AB:66:BF:DA:AD:5E:01:90:E5:DF:C3 Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51 Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51 Certificate serial: 019B32D7B0C7CA0CBEA45A0765AFCD612B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft Manifest number: 0A3C Signing time: Thu 18 Dec 2025 19:02:34 +0000 Manifest this update: Thu 18 Dec 2025 19:02:34 +0000 Manifest next update: Fri 19 Dec 2025 19:02:34 +0000 Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=) 2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: Zt0QSeXLigjz6GcBcm/f5qaZa0pRxsn7puOjw+S+GnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:b0:c7:ca:0c:be:a4:5a:07:65:af:cd:61:2b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51 Validity Not Before: Dec 18 19:02:34 2025 GMT Not After : Dec 19 19:02:34 2025 GMT Subject: CN=9938762eb9f8971ae4ab66bfdaad5e0190e5dfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:86:7d:23:d8:0a:59:9b:d9:8f:25:96:39: 1f:f0:a1:bf:70:b2:d1:65:92:a1:de:d2:15:fd:06: f0:f7:f7:98:6d:0a:0b:f9:8c:f8:5d:de:76:3a:95: 25:9d:ba:bf:63:ee:53:87:6f:85:89:2f:80:e1:b1: 8e:45:72:86:81:6b:36:77:53:a8:c3:ba:7c:0b:99: 7b:4f:26:ea:a2:26:2d:b5:15:c0:7e:2d:a3:4b:a7: d2:cb:1b:c5:d2:13:81:e7:24:10:6e:2d:ef:97:f5: 44:31:94:c0:03:e2:bf:e0:89:78:4c:8d:cb:4d:c4: 2e:9b:c8:f1:42:16:51:bc:52:da:a3:95:e8:a7:53: e1:4c:01:e6:57:48:c6:66:73:41:f1:01:8e:0b:ff: 12:9c:d5:3f:59:58:af:a6:f3:51:29:5b:9a:2f:47: 59:0b:b8:4e:d0:c4:ae:b6:1b:b0:4b:e5:87:83:d8: 61:1e:6c:6d:f6:e6:b6:80:d7:c2:18:9d:b5:36:01: ae:22:43:9a:af:e8:fa:de:0b:9e:c8:26:3b:79:e7: 6e:03:a3:25:00:4e:ba:36:64:e9:3b:e3:39:02:cf: 12:3e:12:82:5b:b5:fb:80:94:e4:a4:b5:44:97:e7: a2:a7:31:9d:36:62:fe:de:16:d7:7a:a8:2b:c8:88: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:38:76:2E:B9:F8:97:1A:E4:AB:66:BF:DA:AD:5E:01:90:E5:DF:C3 X509v3 Authority Key Identifier: keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f4:75:9d:55:54:74:33:43:f7:26:8d:ee:82:35:43:2a:b8: ba:8d:1d:bc:9f:5b:15:18:da:e2:48:01:13:9e:33:f7:9e:7a: 7c:03:3a:85:4a:a9:22:3d:42:17:83:d9:7d:c2:93:11:bb:21: 8a:8e:ff:fe:6b:2e:e8:42:e5:3c:d4:b5:e5:6a:2b:12:fb:61: 55:b8:bd:7e:6f:c3:53:a3:b9:5d:ad:7c:da:30:f4:0d:da:85: 8a:4c:e7:f7:39:fb:7b:92:45:e6:b1:48:01:54:42:56:4f:d8: 95:6d:8b:9c:3d:78:47:20:7f:9b:b5:91:1e:36:c6:53:22:7c: f3:6c:cc:0f:3d:fe:30:78:bd:96:a4:90:06:43:d8:4f:80:38: 6b:1c:d8:7f:27:7f:79:2b:7c:20:d5:1a:68:8e:3a:c3:f1:b6: e8:a6:01:1d:02:66:34:b0:89:bb:08:cf:d1:da:aa:8a:08:37: a5:9a:79:a7:03:3e:4f:d9:b8:95:99:ed:4a:86:3c:06:b3:2e: a4:51:06:ac:b3:1a:a4:3c:6a:fd:4a:4e:4d:06:2a:29:90:7e: e4:3f:58:77:80:91:8a:ab:a7:b3:93:6e:9c:ba:3a:30:61:6c: 18:6a:17:6e:ee:6c:f4:bc:20:29:7d:b3:95:0e:b4:88:14:30: 11:a2:1f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy17DHygy+pFoHZa/NYSuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy NGRiNTEwHhcNMjUxMjE4MTkwMjM0WhcNMjUxMjE5MTkwMjM0WjAzMTEwLwYDVQQD Eyg5OTM4NzYyZWI5Zjg5NzFhZTRhYjY2YmZkYWFkNWUwMTkwZTVkZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t2GfSPYClmb2Y8lljkf8KG/cLLR ZZKh3tIV/Qbw9/eYbQoL+Yz4Xd52OpUlnbq/Y+5Th2+FiS+A4bGORXKGgWs2d1Oo w7p8C5l7TybqoiYttRXAfi2jS6fSyxvF0hOB5yQQbi3vl/VEMZTAA+K/4Il4TI3L TcQum8jxQhZRvFLao5Xop1PhTAHmV0jGZnNB8QGOC/8SnNU/WVivpvNRKVuaL0dZ C7hO0MSuthuwS+WHg9hhHmxt9ua2gNfCGJ21NgGuIkOar+j63gueyCY7eeduA6Ml AE66NmTpO+M5As8SPhKCW7X7gJTkpLVEl+eipzGdNmL+3hbXeqgryIht4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk4di65+Jca5Ktmv9qtXgGQ5d/DMB8GA1UdIwQY MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPR1nVVU dDND9yaN7oI1Qyq4uo0dvJ9bFRja4kgBE54z9556fAM6hUqpIj1CF4PZfcKTEbsh io7//msu6ELlPNS15WorEvthVbi9fm/DU6O5Xa182jD0DdqFikzn9zn7e5JF5rFI AVRCVk/YlW2LnD14RyB/m7WRHjbGUyJ882zMDz3+MHi9lqSQBkPYT4A4axzYfyd/ eSt8INUaaI46w/G26KYBHQJmNLCJuwjP0dqqigg3pZp5pwM+T9m4lZntSoY8BrMu pFEGrLMapDxq/UpOTQYqKZB+5D9Yd4CRiquns5NunLo6MGFsGGoXbu5s9LwgKX2z lQ60iBQwEaIf6g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:09:57 2025 by rpki-client