This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json) Hash identifier: IpL5AfESqub3rgAKFtB3kHs0tScVTcFOd8vxv2ddCEY= Subject key identifier: 21:F1:4C:16:97:F4:CC:1D:60:88:83:CE:8F:E1:DA:8A:DC:E8:05:72 Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Certificate serial: 019B4A029BE3AF911DDFB094A3704E51D0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 07:00:43 +0000 Manifest this update: Tue 23 Dec 2025 07:00:43 +0000 Manifest next update: Wed 24 Dec 2025 07:00:43 +0000 Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=) 2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: /oR40d11T21TIxPA8RQ4S7yhOVc9drJjrWnAbOr4Jx8=) 3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:9b:e3:af:91:1d:df:b0:94:a3:70:4e:51:d0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Validity Not Before: Dec 23 07:00:43 2025 GMT Not After : Dec 24 07:00:43 2025 GMT Subject: CN=21f14c1697f4cc1d608883ce8fe1da8adce80572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:2d:a4:5c:9e:d3:4a:3c:83:ac:6d:63:ee: 97:fa:70:ae:71:77:a0:19:09:e1:ac:5b:53:ff:d5: 21:28:7b:a2:ac:49:35:9b:68:21:26:e0:7e:37:4e: 48:75:75:87:91:e0:0d:69:d7:87:a4:f6:1b:c3:e5: ec:93:98:67:37:50:55:02:e9:4a:bf:0b:82:3c:d9: 7c:35:ab:09:f8:c7:a0:34:b4:9e:1c:fc:09:35:bc: ea:73:4b:b9:bf:39:0a:a9:12:ee:7e:14:ca:2f:ed: 7d:f3:3e:d5:ab:4a:73:cc:a5:75:5a:c1:de:9b:70: 30:8f:bc:84:d5:9e:60:21:a8:02:e4:82:cd:58:8c: 90:db:63:dd:06:d0:bb:16:be:ba:9f:61:73:da:a6: 2e:78:7c:49:31:72:c3:c9:99:39:34:ac:ca:69:b5: fe:c9:84:c9:86:cc:21:f3:1b:f0:88:5c:1f:f5:f6: 51:6c:03:24:83:b6:7c:a9:03:e3:96:83:01:9a:06: ce:11:0e:8f:64:a4:a3:9f:29:53:1b:d6:8e:53:d9: 43:3e:11:2f:fb:b7:b0:87:9d:ff:49:e2:38:73:31: 0a:cd:e4:95:83:93:11:8e:d6:76:9a:fe:fc:9d:c9: 72:3d:8f:91:20:c8:3a:13:44:d2:9a:a0:1e:83:e5: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:4C:16:97:F4:CC:1D:60:88:83:CE:8F:E1:DA:8A:DC:E8:05:72 X509v3 Authority Key Identifier: keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4e:df:8f:19:ac:86:c3:8e:7a:03:9a:e5:0a:f7:32:65:4c: 27:4b:ba:0c:fb:35:5b:de:6f:73:52:36:4c:18:5c:18:45:4c: 8f:ff:cb:f1:79:81:d0:63:d0:14:fa:f5:78:11:4b:4a:8c:f0: ef:2b:3e:0f:b7:06:2b:1c:54:a5:c6:3f:37:16:3f:95:8e:07: 3a:a3:fa:98:1f:01:36:bd:63:ce:74:a6:99:2d:31:02:78:9f: 0e:8d:90:75:77:a0:f7:6b:ee:7a:e4:10:63:d7:2a:75:87:bc: 98:ab:b4:ac:5c:1e:1e:8b:43:a3:78:41:a0:23:b5:9b:9d:69: f5:72:a1:16:2b:df:a4:87:cc:2e:63:e5:ed:32:10:6d:cf:09: fd:fa:66:12:38:b5:e4:c3:7e:68:04:b1:23:0f:44:38:98:8f: c5:1c:b2:f8:df:fc:24:31:3a:0b:d2:c3:ee:f2:4b:2e:ab:d8: bc:8b:09:74:96:2a:e3:43:35:25:87:ba:e0:ce:6d:b0:07:99: 04:bd:d8:ba:e0:b8:76:2b:eb:e8:da:ef:a5:93:6e:9c:41:34: 99:26:ec:1a:8b:20:84:1f:66:65:5b:4f:19:fb:6c:9c:4b:58: 17:51:b8:b4:ca:78:fa:68:49:0e:30:17:ba:e2:17:b9:73:cc: c1:18:ad:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKApvjr5Ed37CUo3BOUdCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz YzcyMzAwHhcNMjUxMjIzMDcwMDQzWhcNMjUxMjI0MDcwMDQzWjAzMTEwLwYDVQQD EygyMWYxNGMxNjk3ZjRjYzFkNjA4ODgzY2U4ZmUxZGE4YWRjZTgwNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE0tpFye00o8g6xtY+6X+nCucXeg GQnhrFtT/9UhKHuirEk1m2ghJuB+N05IdXWHkeANadeHpPYbw+Xsk5hnN1BVAulK vwuCPNl8NasJ+MegNLSeHPwJNbzqc0u5vzkKqRLufhTKL+198z7Vq0pzzKV1WsHe m3Awj7yE1Z5gIagC5ILNWIyQ22PdBtC7Fr66n2Fz2qYueHxJMXLDyZk5NKzKabX+ yYTJhswh8xvwiFwf9fZRbAMkg7Z8qQPjloMBmgbOEQ6PZKSjnylTG9aOU9lDPhEv +7ewh53/SeI4czEKzeSVg5MRjtZ2mv78nclyPY+RIMg6E0TSmqAeg+W2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHxTBaX9MwdYIiDzo/h2orc6AVyMB8GA1UdIwQY MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt NTUzOGRjMGJiMDk5LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5 LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP07fjxms hsOOegOa5Qr3MmVMJ0u6DPs1W95vc1I2TBhcGEVMj//L8XmB0GPQFPr1eBFLSozw 7ys+D7cGKxxUpcY/NxY/lY4HOqP6mB8BNr1jznSmmS0xAnifDo2QdXeg92vueuQQ Y9cqdYe8mKu0rFweHotDo3hBoCO1m51p9XKhFivfpIfMLmPl7TIQbc8J/fpmEji1 5MN+aASxIw9EOJiPxRyy+N/8JDE6C9LD7vJLLqvYvIsJdJYq40M1JYe64M5tsAeZ BL3YuuC4divr6NrvpZNunEE0mSbsGosghB9mZVtPGftsnEtYF1G4tMp4+mhJDjAX uuIXuXPMwRitjA== -----END CERTIFICATE-----Generated at Tue Dec 23 16:30:17 2025 by rpki-client