This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json) Hash identifier: CV0nYRH36t2RoMFsufk6mPA53KfakLjunUCLi55flgk= Subject key identifier: AD:14:87:7E:FD:E5:E7:3C:3C:86:79:07:2C:4C:9C:2E:22:AE:32:BF Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Certificate serial: 019B37216C3293110CA5FBD0AF909DF60C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 15:01:35 +0000 Manifest this update: Fri 19 Dec 2025 15:01:35 +0000 Manifest next update: Sat 20 Dec 2025 15:01:35 +0000 Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: 5sToAxXlj7gZTYns06p8bJ492AhZlm6RcF0tw4Cmfgw=) 2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=) 3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:6c:32:93:11:0c:a5:fb:d0:af:90:9d:f6:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Validity Not Before: Dec 19 15:01:35 2025 GMT Not After : Dec 20 15:01:35 2025 GMT Subject: CN=ad14877efde5e73c3c8679072c4c9c2e22ae32bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:67:6d:a3:a6:19:a6:ed:24:d2:55:28:b3: 10:45:eb:87:46:b5:a2:cc:1e:46:34:29:8c:a5:2c: d6:07:5c:5d:c7:b2:e5:cb:ff:d7:a2:bb:95:9f:55: f3:e6:fb:da:a3:9a:7a:a2:6e:52:be:36:ca:c5:59: e3:e5:d1:e1:d0:9a:d0:36:ac:14:a6:2d:9a:ff:db: f9:15:92:ca:fe:39:0f:a1:af:a5:64:3b:7f:22:6c: f6:de:36:55:bf:9f:17:22:f5:bd:97:e3:d1:ef:6f: 87:2a:cc:c7:0c:53:d5:96:78:51:e5:f9:0e:b1:41: 91:d1:15:fb:b9:01:0f:1b:e6:6e:3b:f2:ed:78:12: dc:2d:e4:8d:fb:2e:51:77:0b:d2:66:34:09:38:95: 53:c4:ff:4f:6e:0e:d5:8c:18:99:89:91:7b:fa:ca: 80:ef:3d:2a:8c:fd:9f:db:4c:a1:42:b7:cc:4c:4f: 97:a4:62:4c:61:35:74:ae:dc:1f:7f:19:06:2b:8d: 55:78:c1:1f:d6:bd:f6:91:1f:ab:31:a9:67:de:64: 9e:f3:78:0e:30:ac:c1:49:10:06:4d:94:96:2f:38: 04:d8:de:a7:3b:1d:c2:fd:f2:33:e9:46:e7:4c:f0: a0:28:3e:cc:b3:bc:3d:d3:9b:92:86:f3:82:81:32: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:14:87:7E:FD:E5:E7:3C:3C:86:79:07:2C:4C:9C:2E:22:AE:32:BF X509v3 Authority Key Identifier: keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ab:90:0c:6f:69:41:00:10:76:ff:7b:37:86:3a:6f:d9:df: 75:ed:60:8b:11:e4:d9:47:f4:b3:8a:29:0d:30:04:e6:cd:3a: b4:e2:91:e2:f3:7c:34:94:eb:ff:ee:d8:4b:d2:84:97:a8:09: 8c:1c:b7:27:cd:9a:87:9a:aa:2f:46:fd:f8:04:d4:46:97:36: 73:3a:ca:a5:09:66:01:9e:98:b5:7a:9c:e3:d1:80:4a:6b:b9: cb:6d:3c:cf:a4:be:bd:f9:c9:3e:80:9f:85:50:ff:c9:6e:ca: 02:db:97:07:31:fb:01:a7:c7:a5:cb:0b:13:0e:a3:43:a5:57: ae:42:8c:12:06:7d:4f:a3:8d:69:38:25:b6:81:ad:3f:4e:05: c2:8a:f3:bd:27:dc:88:5d:f1:8b:db:32:33:81:b9:99:ab:1f: 74:a1:2b:15:08:46:d5:07:59:43:a8:41:a8:92:a5:a7:e3:f4: a6:81:ae:d4:2c:41:0f:22:92:94:41:0f:49:38:8a:16:3f:38: c3:83:86:8d:13:b1:96:15:64:08:25:23:8d:e1:f0:70:9d:09: 96:b5:f9:cb:3b:48:af:13:77:b6:aa:77:0d:25:03:d6:36:79: 18:83:51:ef:2b:cb:34:ee:25:3a:5a:49:a8:44:0e:79:a4:e2: 7c:e4:e5:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWwykxEMpfvQr5Cd9gxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw ZmRlZWQwHhcNMjUxMjE5MTUwMTM1WhcNMjUxMjIwMTUwMTM1WjAzMTEwLwYDVQQD EyhhZDE0ODc3ZWZkZTVlNzNjM2M4Njc5MDcyYzRjOWMyZTIyYWUzMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvlnbaOmGabtJNJVKLMQReuHRrWi zB5GNCmMpSzWB1xdx7Lly//XoruVn1Xz5vvao5p6om5SvjbKxVnj5dHh0JrQNqwU pi2a/9v5FZLK/jkPoa+lZDt/Imz23jZVv58XIvW9l+PR72+HKszHDFPVlnhR5fkO sUGR0RX7uQEPG+ZuO/LteBLcLeSN+y5RdwvSZjQJOJVTxP9Pbg7VjBiZiZF7+sqA 7z0qjP2f20yhQrfMTE+XpGJMYTV0rtwffxkGK41VeMEf1r32kR+rMaln3mSe83gO MKzBSRAGTZSWLzgE2N6nOx3C/fIz6UbnTPCgKD7Ms7w905uShvOCgTJpYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0Uh3795ec8PIZ5ByxMnC4irjK/MB8GA1UdIwQY MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt MzgxNGM1N2ZlOWJiLzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQquQDG9p QQAQdv97N4Y6b9nfde1gixHk2Uf0s4opDTAE5s06tOKR4vN8NJTr/+7YS9KEl6gJ jBy3J82ah5qqL0b9+ATURpc2czrKpQlmAZ6YtXqc49GASmu5y208z6S+vfnJPoCf hVD/yW7KAtuXBzH7AafHpcsLEw6jQ6VXrkKMEgZ9T6ONaTgltoGtP04FworzvSfc iF3xi9syM4G5masfdKErFQhG1QdZQ6hBqJKlp+P0poGu1CxBDyKSlEEPSTiKFj84 w4OGjROxlhVkCCUjjeHwcJ0JlrX5yztIrxN3tqp3DSUD1jZ5GINR7yvLNO4lOlpJ qEQOeaTifOTlcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:09:57 2025 by rpki-client