This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json) Hash identifier: JXZsiArpu62gBc3FzUHnWvMc3VyEZvYyR6cLxSQ0sgc= Subject key identifier: 8B:FF:B8:B6:1C:0D:44:11:20:5A:0B:AC:03:A3:59:FA:86:B4:C7:82 Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Certificate serial: 019B5C401357FD3B06DD08399D83B98B2E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft Manifest number: 05EC Signing time: Fri 26 Dec 2025 20:01:01 +0000 Manifest this update: Fri 26 Dec 2025 20:01:01 +0000 Manifest next update: Sat 27 Dec 2025 20:01:01 +0000 Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=) 2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: xp4P9fxlWxCjp1+zdgYv9WoHO6jHTfmNKlGtCafBvnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:13:57:fd:3b:06:dd:08:39:9d:83:b9:8b:2e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Validity Not Before: Dec 26 20:01:01 2025 GMT Not After : Dec 27 20:01:01 2025 GMT Subject: CN=8bffb8b61c0d4411205a0bac03a359fa86b4c782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:42:d5:4c:c2:7e:ee:36:b0:b7:ca:3d:1e:24: a5:5a:7d:7d:f7:73:ae:de:b2:ca:e0:84:36:ba:ff: 20:a8:6c:ea:98:6a:9d:81:3d:3e:2e:30:48:18:0c: ec:71:55:51:6c:85:a4:2d:94:49:b4:f4:e3:64:6f: f7:9b:ee:7d:b0:7d:37:7a:37:c7:38:48:2c:8d:16: dc:1c:14:90:8f:e1:91:15:0e:c7:a1:31:84:36:34: 82:85:ca:30:67:7c:90:47:3f:7c:89:76:bf:15:40: f8:d7:74:d1:9b:fe:b5:2c:fc:65:08:c9:72:96:4c: 9b:73:57:a2:2b:cb:a5:46:1c:66:af:ed:29:ff:35: 02:a5:e8:98:3d:ae:ab:17:2e:46:3b:67:21:57:ad: 9d:7a:14:54:13:79:2e:50:4b:6c:32:d6:3f:fb:87: 81:4a:a4:fa:77:fd:34:1b:f5:95:8f:62:09:64:99: 38:40:f2:34:d4:0b:05:7d:61:1d:a8:da:c1:5f:e1: a7:fe:56:f1:ec:16:54:ec:c4:72:80:83:f1:53:26: 2f:82:fb:a8:7d:36:1f:d6:cb:7d:71:e5:47:ce:ad: 4f:08:b7:55:16:cd:a5:90:ba:9e:2d:03:9f:65:ef: 9b:00:3c:da:7c:cd:48:5d:6c:e0:d9:5c:26:08:b7: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:B8:B6:1C:0D:44:11:20:5A:0B:AC:03:A3:59:FA:86:B4:C7:82 X509v3 Authority Key Identifier: keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6a:b7:46:1f:1e:47:c6:5a:e0:05:c7:c7:51:1e:b5:4c:0d: 36:21:2f:ac:0a:73:e3:e2:a8:e3:f4:51:ed:f1:bf:b0:c2:45: 34:48:aa:9c:12:ac:a8:2a:b0:bd:d1:59:09:b8:39:d9:37:d8: 77:e3:63:28:ec:a5:49:68:f3:47:ed:29:b4:85:b0:28:4b:09: 14:f3:9e:e8:7a:98:ae:21:a1:c3:24:36:0f:f0:d7:71:a1:a0: 21:c0:47:b1:c2:87:ef:81:7c:4e:48:27:fd:80:94:25:57:ea: 0d:a0:37:17:5e:2e:0a:b8:ff:c0:15:9b:c6:bd:a6:f9:b5:2a: 4e:78:9b:a6:40:e3:ab:ee:87:b1:c3:72:31:9d:a7:74:cf:cf: 76:9f:ba:6a:c6:bd:c0:d1:d1:41:07:56:84:8c:7b:98:d9:5c: c1:fd:85:30:71:45:42:7e:8b:54:98:ba:f5:d7:d1:5b:55:73: 2e:35:d9:a3:f9:b6:0d:21:c3:26:e7:41:da:05:bd:b9:b7:df: 4c:c8:6a:d8:9b:ab:cf:e2:17:70:6d:df:94:e3:17:e7:e8:9f: 75:ab:e0:7e:14:84:d4:81:24:ad:28:a6:a5:e5:eb:c1:e6:bb: 54:20:1f:3f:f0:20:ad:f0:07:5d:92:90:66:93:f9:d3:35:b7: 7c:b3:cd:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQBNX/TsG3Qg5nYO5iy6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjkyYmRlYTViOTdhY2FiYzJmNjU4YzQxMmJmNzQ2ZWUw ZTIwN2QwHhcNMjUxMjI2MjAwMTAxWhcNMjUxMjI3MjAwMTAxWjAzMTEwLwYDVQQD Eyg4YmZmYjhiNjFjMGQ0NDExMjA1YTBiYWMwM2EzNTlmYTg2YjRjNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kLVTMJ+7jawt8o9HiSlWn1993Ou 3rLK4IQ2uv8gqGzqmGqdgT0+LjBIGAzscVVRbIWkLZRJtPTjZG/3m+59sH03ejfH OEgsjRbcHBSQj+GRFQ7HoTGENjSChcowZ3yQRz98iXa/FUD413TRm/61LPxlCMly lkybc1eiK8ulRhxmr+0p/zUCpeiYPa6rFy5GO2chV62dehRUE3kuUEtsMtY/+4eB SqT6d/00G/WVj2IJZJk4QPI01AsFfWEdqNrBX+Gn/lbx7BZU7MRygIPxUyYvgvuo fTYf1st9ceVHzq1PCLdVFs2lkLqeLQOfZe+bADzafM1IXWzg2VwmCLdJFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv/uLYcDUQRIFoLrAOjWfqGtMeCMB8GA1UdIwQY MBaAFLe5K96luXrKvC9ljEEr90buDiB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODIt ZGQ5MDA5YjMzMTdkLzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODItZGQ5MDA5YjMzMTdk LzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2q3Rh8e R8Za4AXHx1EetUwNNiEvrApz4+Ko4/RR7fG/sMJFNEiqnBKsqCqwvdFZCbg52TfY d+NjKOylSWjzR+0ptIWwKEsJFPOe6HqYriGhwyQ2D/DXcaGgIcBHscKH74F8Tkgn /YCUJVfqDaA3F14uCrj/wBWbxr2m+bUqTnibpkDjq+6HscNyMZ2ndM/Pdp+6asa9 wNHRQQdWhIx7mNlcwf2FMHFFQn6LVJi69dfRW1VzLjXZo/m2DSHDJudB2gW9ubff TMhq2Jurz+IXcG3flOMX5+ifdavgfhSE1IEkrSimpeXrwea7VCAfP/AgrfAHXZKQ ZpP50zW3fLPN9g== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:55 2025 by rpki-client