This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json) Hash identifier: LunIJtxiHwN2EZIYcij9l4Rl5rkXn5Jmzv7yHlbl4kE= Subject key identifier: A8:B6:1A:4B:FA:13:BE:CB:79:8A:23:ED:F6:1B:F0:53:1B:E0:30:FC Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710 Certificate serial: 019B597741EF74349DE4AF1B5A2E3CD030FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft Manifest number: 05AB Signing time: Fri 26 Dec 2025 07:02:26 +0000 Manifest this update: Fri 26 Dec 2025 07:02:26 +0000 Manifest next update: Sat 27 Dec 2025 07:02:26 +0000 Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=) 2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: LXV/AHPGO7b8yC5ix1zIhVp7cS5DGunJkm9hBt5aBJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:41:ef:74:34:9d:e4:af:1b:5a:2e:3c:d0:30:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710 Validity Not Before: Dec 26 07:02:26 2025 GMT Not After : Dec 27 07:02:26 2025 GMT Subject: CN=a8b61a4bfa13becb798a23edf61bf0531be030fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:ac:b4:2a:03:a4:90:63:7c:e5:4e:b1:da: ae:c7:37:dd:84:6d:39:b9:0e:cb:b1:f3:b7:f2:2b: 7d:4d:80:57:36:14:cb:bf:a6:f0:fb:9e:41:38:e6: a5:99:e7:76:20:82:e8:f7:37:26:47:92:e1:5f:5b: aa:78:7c:28:69:07:e3:61:ac:29:be:84:19:05:6b: 30:fe:e0:11:63:a2:af:c5:fa:e6:99:30:ad:75:f7: cb:12:1b:fe:c8:09:50:e2:db:10:78:d0:23:c1:63: 55:0a:59:f0:68:48:44:29:a1:da:52:66:0d:6a:dd: ba:03:c6:34:09:e5:e4:5f:f0:07:71:81:1e:d4:b0: b6:5d:ca:d6:1f:f9:22:33:04:a1:4c:6e:40:13:86: 33:68:5e:9d:77:ec:e0:72:06:99:72:45:a3:25:00: 65:46:7c:6b:71:56:31:b9:dd:7b:68:14:19:30:b1: 4a:c8:e8:52:84:22:ff:21:cd:5f:e2:f7:72:19:8d: 2e:3d:d1:a6:fc:1d:38:27:2c:d3:0d:06:bf:21:00: f4:ca:12:f4:a0:6e:e0:8e:61:84:53:d6:a7:63:cd: 2b:cb:3b:50:8c:82:95:f9:15:da:90:3c:18:d6:6b: 0e:71:5a:73:e1:dd:01:eb:28:7f:06:be:e9:94:e9: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:1A:4B:FA:13:BE:CB:79:8A:23:ED:F6:1B:F0:53:1B:E0:30:FC X509v3 Authority Key Identifier: keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5c:e5:97:bb:5d:fa:dd:5e:74:a5:08:00:dd:eb:2a:e2:5e: 03:a0:7d:fe:ff:6d:06:1d:3d:54:4d:8f:9b:2f:a0:b5:52:47: 55:85:0b:c0:b8:0c:6d:09:ae:42:89:1b:62:ec:97:11:79:3b: 77:ee:a8:b5:7a:be:5f:87:20:30:62:74:8d:14:28:55:98:5e: 84:d8:d3:67:a4:ce:77:ee:a5:6f:e0:a7:54:08:e1:5b:78:b4: 17:bb:6c:f8:9f:3e:ea:57:ec:88:0e:6f:81:db:b5:ac:cd:ec: b3:27:2a:10:55:8b:1f:51:1a:74:8b:90:fd:b2:47:c5:c5:09: 85:75:0e:86:56:85:a9:22:34:2d:26:23:d5:6c:ed:58:cd:59: d9:d4:e8:30:13:50:e2:f0:bc:0b:7e:67:3b:97:6e:52:0c:ef: 7d:c7:84:9d:ad:76:d9:8e:8c:87:71:b4:9f:a5:47:b5:8a:bc: 9b:ea:25:16:39:a2:38:a8:e8:dc:56:47:5e:95:04:c8:77:63: 02:83:3d:3b:06:fd:51:f9:83:61:3f:10:be:e6:2e:a0:2d:2d: 91:e8:37:93:7f:20:c2:f2:c0:2a:54:36:d2:e7:8c:10:7d:4f: ee:63:76:4b:38:68:6e:b8:f8:d1:71:c2:e3:fc:14:43:46:99: 96:7c:32:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0HvdDSd5K8bWi480DD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDA3Y2RlNjc4MmZkNGZjNTY4ODU3ZTg0ODQ2NTViNTAy NDg3MTAwHhcNMjUxMjI2MDcwMjI2WhcNMjUxMjI3MDcwMjI2WjAzMTEwLwYDVQQD EyhhOGI2MWE0YmZhMTNiZWNiNzk4YTIzZWRmNjFiZjA1MzFiZTAzMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2astCoDpJBjfOVOsdquxzfdhG05 uQ7LsfO38it9TYBXNhTLv6bw+55BOOalmed2IILo9zcmR5LhX1uqeHwoaQfjYawp voQZBWsw/uARY6KvxfrmmTCtdffLEhv+yAlQ4tsQeNAjwWNVClnwaEhEKaHaUmYN at26A8Y0CeXkX/AHcYEe1LC2XcrWH/kiMwShTG5AE4YzaF6dd+zgcgaZckWjJQBl RnxrcVYxud17aBQZMLFKyOhShCL/Ic1f4vdyGY0uPdGm/B04JyzTDQa/IQD0yhL0 oG7gjmGEU9anY80ryztQjIKV+RXakDwY1msOcVpz4d0B6yh/Br7plOkYNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi2Gkv6E77LeYoj7fYb8FMb4DD8MB8GA1UdIwQY MBaAFHrQfN5ngv1PxWiFfoSEZVtQJIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQt MDVhMWQ1Y2I4ZWViLzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQtMDVhMWQ1Y2I4ZWVi LzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1zll7td +t1edKUIAN3rKuJeA6B9/v9tBh09VE2Pmy+gtVJHVYULwLgMbQmuQokbYuyXEXk7 d+6otXq+X4cgMGJ0jRQoVZhehNjTZ6TOd+6lb+CnVAjhW3i0F7ts+J8+6lfsiA5v gdu1rM3ssycqEFWLH1EadIuQ/bJHxcUJhXUOhlaFqSI0LSYj1WztWM1Z2dToMBNQ 4vC8C35nO5duUgzvfceEna122Y6Mh3G0n6VHtYq8m+olFjmiOKjo3FZHXpUEyHdj AoM9Owb9UfmDYT8QvuYuoC0tkeg3k38gwvLAKlQ20ueMEH1P7mN2Szhobrj40XHC 4/wUQ0aZlnwyiA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client