This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json) Hash identifier: /pedFTSbnmkr762TCAvOeDS8KmHxS9J7bimdF528+Wo= Subject key identifier: 73:AA:A0:8E:61:05:52:45:D1:5E:F2:A6:37:51:F8:BF:E4:16:F1:40 Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Certificate serial: 019B42EEAFF52D1A8C9BA4019324D4B967D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 22:01:37 +0000 Manifest this update: Sun 21 Dec 2025 22:01:37 +0000 Manifest next update: Mon 22 Dec 2025 22:01:37 +0000 Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=) 2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=) 3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: 4I+f0smG72ls/3Dn1TfnuW8Ybs89gHv3wxYFwXgmHnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:af:f5:2d:1a:8c:9b:a4:01:93:24:d4:b9:67:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Validity Not Before: Dec 21 22:01:37 2025 GMT Not After : Dec 22 22:01:37 2025 GMT Subject: CN=73aaa08e61055245d15ef2a63751f8bfe416f140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:d3:58:ea:10:0a:6b:6d:28:e9:f4:37:35: 55:89:e4:8a:60:20:d9:8b:1d:cf:ee:4b:eb:3a:3f: d6:fc:3e:a8:74:e8:e2:a0:71:5d:25:8a:47:35:91: a5:be:b0:d4:f8:eb:b2:88:90:f3:db:fc:04:a4:1b: 01:d2:0c:bb:ab:1f:99:0e:44:93:5c:1a:45:de:f3: e2:3d:f8:7b:40:75:f6:8a:ee:96:01:2b:d6:86:d4: 37:d9:99:e2:16:e9:d0:cb:f8:e8:95:a0:69:92:16: 05:c4:3a:46:ab:db:ea:6b:b8:9e:84:16:82:1a:51: f2:75:02:7b:2b:36:21:ae:c1:e4:52:c5:64:8a:a1: df:8e:88:ef:99:65:54:cc:82:87:37:52:b6:bc:1e: e6:20:92:0b:e1:eb:d7:54:3f:3b:3f:01:79:f1:3b: 4c:09:a6:32:99:02:95:4e:79:48:10:94:da:c7:a2: 52:05:69:59:52:52:c6:ea:64:56:07:df:32:10:02: dc:7f:6a:53:36:30:7d:0b:d9:c2:fe:2b:33:20:bc: 50:7e:59:12:3a:0f:af:a0:b3:8f:37:46:24:67:32: ff:8d:9d:5f:59:bd:d8:74:1d:84:0d:ba:68:6f:b5: 41:a7:68:25:1f:f4:34:87:05:dc:40:df:fb:f1:dd: 71:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:A0:8E:61:05:52:45:D1:5E:F2:A6:37:51:F8:BF:E4:16:F1:40 X509v3 Authority Key Identifier: keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b8:f7:3a:9f:d8:ee:09:bb:c6:b4:86:fb:ad:03:ab:0a:90: ba:a7:14:91:a8:e1:4f:50:f0:cd:28:a3:01:87:0b:94:43:f4: da:17:fa:d9:ea:5e:d1:dd:9c:74:98:cb:f0:05:a2:5d:bd:5d: 14:0c:3d:c5:70:b5:3a:ed:44:87:e8:8c:c9:7c:88:d2:ca:0c: 9f:e2:25:7c:40:7d:42:37:6c:bb:4c:a1:05:4d:2b:29:be:5d: 1a:ce:50:51:c4:eb:03:28:68:bf:94:5d:d1:fe:3d:c8:7f:f2: 22:2b:3a:bd:ca:45:bf:a6:5d:08:64:0c:e1:df:ae:7d:b6:c3: 48:24:02:e0:06:d2:45:c8:b1:93:42:ea:13:8e:9a:90:7a:99: ba:a4:8a:b6:f5:d1:64:ba:92:12:5f:84:7b:08:2b:f9:e5:a3: 31:09:7e:04:5a:48:3b:36:fb:75:2b:87:65:cc:6b:ac:b0:47: e9:14:c8:d0:7f:e7:4f:55:17:42:67:54:68:68:a5:38:be:6e: ef:ad:07:54:b0:e2:d4:41:dc:dd:26:f5:53:94:bd:7d:3d:c9: e1:68:fb:bd:e6:5d:41:e9:16:dc:b2:6a:d4:0b:b5:ba:20:4d: 0d:4e:0b:9a:2d:27:ca:a6:e2:9f:2d:9e:7e:94:1a:0e:c7:9f: 05:6e:3a:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7q/1LRqMm6QBkyTUuWfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3 YzBjMWIwHhcNMjUxMjIxMjIwMTM3WhcNMjUxMjIyMjIwMTM3WjAzMTEwLwYDVQQD Eyg3M2FhYTA4ZTYxMDU1MjQ1ZDE1ZWYyYTYzNzUxZjhiZmU0MTZmMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q/TWOoQCmttKOn0NzVVieSKYCDZ ix3P7kvrOj/W/D6odOjioHFdJYpHNZGlvrDU+OuyiJDz2/wEpBsB0gy7qx+ZDkST XBpF3vPiPfh7QHX2iu6WASvWhtQ32ZniFunQy/jolaBpkhYFxDpGq9vqa7iehBaC GlHydQJ7KzYhrsHkUsVkiqHfjojvmWVUzIKHN1K2vB7mIJIL4evXVD87PwF58TtM CaYymQKVTnlIEJTax6JSBWlZUlLG6mRWB98yEALcf2pTNjB9C9nC/iszILxQflkS Og+voLOPN0YkZzL/jZ1fWb3YdB2EDbpob7VBp2glH/Q0hwXcQN/78d1xjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOqoI5hBVJF0V7ypjdR+L/kFvFAMB8GA1UdIwQY MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt NmIzYTQ3NjY3Y2E4LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4 LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrj3Op/Y 7gm7xrSG+60DqwqQuqcUkajhT1DwzSijAYcLlEP02hf62epe0d2cdJjL8AWiXb1d FAw9xXC1Ou1Eh+iMyXyI0soMn+IlfEB9Qjdsu0yhBU0rKb5dGs5QUcTrAyhov5Rd 0f49yH/yIis6vcpFv6ZdCGQM4d+ufbbDSCQC4AbSRcixk0LqE46akHqZuqSKtvXR ZLqSEl+Eewgr+eWjMQl+BFpIOzb7dSuHZcxrrLBH6RTI0H/nT1UXQmdUaGilOL5u 760HVLDi1EHc3Sb1U5S9fT3J4Wj7veZdQekW3LJq1Au1uiBNDU4Lmi0nyqbiny2e fpQaDsefBW46RA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:21:47 2025 by rpki-client