This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json) Hash identifier: bb71Fn2YvO+aJbj4T8qvR1D2RUbq37xpy01qWiLFqg4= Subject key identifier: AA:24:DB:07:40:AE:70:FD:BF:FB:E8:BF:3A:6B:10:36:80:6B:2D:17 Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Certificate serial: 019B3C104FFE3EE3A6BAAD3F631DDD490244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 14:01:00 +0000 Manifest this update: Sat 20 Dec 2025 14:01:00 +0000 Manifest next update: Sun 21 Dec 2025 14:01:00 +0000 Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: jtf4emsWZHES7IuTUkbnJGBvQhRRL7Wl5ckYg9GZ7SU=) 2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:4f:fe:3e:e3:a6:ba:ad:3f:63:1d:dd:49:02:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Validity Not Before: Dec 20 14:01:00 2025 GMT Not After : Dec 21 14:01:00 2025 GMT Subject: CN=aa24db0740ae70fdbffbe8bf3a6b1036806b2d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:82:2b:c6:65:7c:74:a6:78:b3:00:58:91: 48:c9:dc:84:2b:e9:e2:48:4a:d3:b5:3a:51:e9:7d: b7:ac:05:fb:69:1f:8c:8a:ef:1f:65:17:3b:51:ad: 06:bd:01:8b:26:c7:13:49:d4:e6:9a:f0:a1:c4:9c: 2b:81:56:70:f7:81:4d:3e:b0:63:ff:50:37:21:fb: 50:10:d2:52:81:c5:a4:c3:d9:a0:cc:ed:08:02:bc: 49:b1:fb:aa:72:c0:e3:8c:66:ca:76:82:ce:3d:c5: 26:98:23:d3:eb:cf:57:20:fb:24:80:27:f9:79:51: 12:c9:ae:42:37:29:ac:25:71:d3:9a:85:24:a8:3d: 9c:e1:d0:f1:1d:c7:e1:bf:34:b8:b1:a6:1f:57:f0: e8:18:7d:1f:c6:90:00:0a:6f:4a:9b:ab:6f:2d:6d: c3:fe:9e:b7:f8:a2:f7:93:3c:a2:7c:33:30:99:a9: a3:0c:75:f7:ba:56:6f:e4:f7:50:d4:f6:7d:e4:4d: ad:41:73:31:55:d0:cc:e3:d1:3a:22:d6:b4:af:90: 38:2a:50:44:92:07:cd:ba:e6:8a:bb:0e:ab:9e:b5: 7e:8e:1c:dd:68:b5:a3:d8:dd:9e:0c:8c:5a:46:31: a4:8d:a9:84:d2:80:1d:b7:ee:cb:46:25:41:04:61: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:DB:07:40:AE:70:FD:BF:FB:E8:BF:3A:6B:10:36:80:6B:2D:17 X509v3 Authority Key Identifier: keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d5:de:49:db:6b:66:db:34:9c:e0:c6:86:d6:c2:9d:76:b2: 4a:cf:0d:25:be:82:7e:87:60:af:7b:aa:af:8d:48:bc:ce:0e: 42:b8:ab:4d:9f:a9:8d:b7:70:bc:9f:bb:31:bf:f0:d3:76:d6: 5d:44:da:50:a5:34:d1:19:c2:ae:34:5c:96:96:7c:55:cd:22: 1c:51:a8:cc:c7:43:f4:f9:65:ff:2f:b7:2d:ca:88:65:c7:95: e7:48:86:79:8f:b1:02:39:cb:b0:1d:2f:62:8c:ff:8a:d6:f2: 9e:b0:f4:95:e7:9e:4b:d6:00:b7:91:71:90:23:fc:65:9d:32: b7:2b:61:96:91:80:b2:b2:44:29:d2:ca:94:63:4b:bf:1f:e8: 72:22:e1:0e:a6:77:2e:84:71:de:6f:d5:f6:bc:a5:41:68:48: 4a:c4:17:e9:90:21:e1:27:8f:fb:4f:d6:c5:e9:80:37:76:13: b0:64:f8:08:e3:ac:38:b5:83:9c:76:80:a5:b1:9f:5b:c3:b4: 64:8f:1c:64:85:ab:57:05:0a:f8:30:cd:ef:48:d1:5f:07:ff: 46:a6:cc:13:8b:0d:8f:3f:c2:b6:dd:76:06:a6:c9:79:a5:ac: 4c:7b:77:4d:86:e1:f8:7d:f0:c4:6d:01:6c:71:f9:f0:74:fc: a5:60:4b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EE/+PuOmuq0/Yx3dSQJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi Yzk5MWIwHhcNMjUxMjIwMTQwMTAwWhcNMjUxMjIxMTQwMTAwWjAzMTEwLwYDVQQD EyhhYTI0ZGIwNzQwYWU3MGZkYmZmYmU4YmYzYTZiMTAzNjgwNmIyZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss2CK8ZlfHSmeLMAWJFIydyEK+ni SErTtTpR6X23rAX7aR+Miu8fZRc7Ua0GvQGLJscTSdTmmvChxJwrgVZw94FNPrBj /1A3IftQENJSgcWkw9mgzO0IArxJsfuqcsDjjGbKdoLOPcUmmCPT689XIPskgCf5 eVESya5CNymsJXHTmoUkqD2c4dDxHcfhvzS4saYfV/DoGH0fxpAACm9Km6tvLW3D /p63+KL3kzyifDMwmamjDHX3ulZv5PdQ1PZ95E2tQXMxVdDM49E6Ita0r5A4KlBE kgfNuuaKuw6rnrV+jhzdaLWj2N2eDIxaRjGkjamE0oAdt+7LRiVBBGGaSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKok2wdArnD9v/vovzprEDaAay0XMB8GA1UdIwQY MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt MzZlMzlmZWQ3YmVkLzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9XeSdtr Zts0nODGhtbCnXaySs8NJb6Cfodgr3uqr41IvM4OQrirTZ+pjbdwvJ+7Mb/w03bW XUTaUKU00RnCrjRclpZ8Vc0iHFGozMdD9Pll/y+3LcqIZceV50iGeY+xAjnLsB0v Yoz/itbynrD0leeeS9YAt5FxkCP8ZZ0ytythlpGAsrJEKdLKlGNLvx/ociLhDqZ3 LoRx3m/V9rylQWhISsQX6ZAh4SeP+0/WxemAN3YTsGT4COOsOLWDnHaApbGfW8O0 ZI8cZIWrVwUK+DDN70jRXwf/RqbME4sNjz/Ctt12BqbJeaWsTHt3TYbh+H3wxG0B bHH58HT8pWBLFw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:14:57 2025 by rpki-client