This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json) Hash identifier: rBKN0x5RVYu0A6GxRCTXMDiPI5///6ZMByUr/VJz4rA= Subject key identifier: 57:41:19:D0:3A:62:29:21:5B:06:36:09:5B:51:CA:64:D8:3D:36:B5 Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Certificate serial: 019AF3C04515C29CED7FD3F9E67F1CB32637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 13:00:55 +0000 Manifest this update: Sat 06 Dec 2025 13:00:55 +0000 Manifest next update: Sun 07 Dec 2025 13:00:55 +0000 Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=) 2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: EqHlKXF//L/K7uyBa0VRErlwuqFxnIOwHhdMn/2j3KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:45:15:c2:9c:ed:7f:d3:f9:e6:7f:1c:b3:26:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Validity Not Before: Dec 6 13:00:55 2025 GMT Not After : Dec 7 13:00:55 2025 GMT Subject: CN=574119d03a6229215b0636095b51ca64d83d36b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:b1:41:98:cd:97:28:b1:35:ad:ca:d1:52: 64:61:5a:ad:b2:a3:fe:bf:65:03:6f:04:45:2a:73: da:d2:30:cd:ad:49:32:c3:db:de:03:5e:e8:5a:8f: 94:31:27:ca:dd:ea:6d:df:ce:ab:94:65:4a:7f:96: e5:59:9d:78:4e:ed:f7:e6:f8:29:0b:28:52:8d:5f: 5e:82:19:55:63:e6:45:e2:af:2c:4a:62:52:75:71: e3:a6:6f:b2:69:95:f5:52:e6:61:38:c9:2d:ab:a3: 79:7c:43:23:dc:92:16:f3:86:fc:35:73:c1:7d:b5: 75:cb:b7:e8:bf:bf:a3:73:dd:40:8d:f1:3e:14:17: b7:94:64:f1:4a:ca:c9:03:56:66:62:7a:10:80:e6: ba:db:74:a8:df:9d:f0:88:d5:c3:c5:bf:25:f0:88: 11:8b:eb:62:68:d9:a0:99:58:30:d7:88:d5:35:8a: 51:db:51:c0:fc:72:d6:70:90:fb:1d:5a:03:18:66: 1a:3e:5a:ea:15:f0:2e:66:cf:2b:d4:80:4a:ef:f7: aa:f3:56:0c:62:71:b2:14:5a:f1:e9:77:d2:ee:73: 98:17:fa:22:e1:16:a1:5b:50:f6:63:da:3d:91:39: 6f:fb:6e:84:1f:ee:aa:78:a9:da:cb:72:a1:d2:f3: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:41:19:D0:3A:62:29:21:5B:06:36:09:5B:51:CA:64:D8:3D:36:B5 X509v3 Authority Key Identifier: keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:bf:c7:57:6d:bc:62:51:0f:90:53:9d:88:54:cd:0d:89:30: f6:7f:d2:89:cb:a8:3d:97:1e:8e:f4:57:1f:fd:41:28:49:32: 68:16:0c:0a:e0:61:a2:0c:7f:89:5f:6f:cd:41:eb:d7:e2:a0: 88:6c:9c:f9:9c:6f:92:d0:0c:4b:0e:96:21:b7:f1:e6:e1:40: bc:6f:32:dd:c5:ec:d5:94:d9:00:8b:85:45:10:d5:6b:c2:2b: fa:28:b5:b5:dd:f1:f6:4f:94:29:2d:8d:47:f3:72:a4:bf:1f: a9:1d:16:73:62:a1:1e:a5:2e:8b:1a:e4:8a:55:bd:00:46:0c: ce:88:1e:6f:74:4b:67:5f:41:5d:c9:db:2d:71:0d:d5:8f:0b: ce:c9:c6:42:19:6d:91:ec:ef:e3:d0:9e:7e:13:5e:e1:7e:5b: 49:a6:20:49:96:22:cc:fa:b6:93:53:91:10:39:7d:86:c3:d4: 9a:8d:3b:38:d2:5e:67:52:4f:2c:53:81:9e:88:7c:28:04:a6: 60:ce:10:a3:ab:46:a1:0b:9e:41:58:d8:73:9d:94:f5:ec:ae: e2:42:fb:13:08:06:d4:b8:f3:34:5c:00:00:ad:b9:8c:80:fa: de:5e:a4:79:1a:99:12:a9:cf:9e:e4:a0:7f:ea:ec:92:db:af: e1:92:5b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEUVwpztf9P55n8csyY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2 NTYzN2IwHhcNMjUxMjA2MTMwMDU1WhcNMjUxMjA3MTMwMDU1WjAzMTEwLwYDVQQD Eyg1NzQxMTlkMDNhNjIyOTIxNWIwNjM2MDk1YjUxY2E2NGQ4M2QzNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaexQZjNlyixNa3K0VJkYVqtsqP+ v2UDbwRFKnPa0jDNrUkyw9veA17oWo+UMSfK3ept386rlGVKf5blWZ14Tu335vgp CyhSjV9eghlVY+ZF4q8sSmJSdXHjpm+yaZX1UuZhOMktq6N5fEMj3JIW84b8NXPB fbV1y7fov7+jc91AjfE+FBe3lGTxSsrJA1ZmYnoQgOa623So353wiNXDxb8l8IgR i+tiaNmgmVgw14jVNYpR21HA/HLWcJD7HVoDGGYaPlrqFfAuZs8r1IBK7/eq81YM YnGyFFrx6XfS7nOYF/oi4RahW1D2Y9o9kTlv+26EH+6qeKnay3Kh0vPNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdBGdA6YikhWwY2CVtRymTYPTa1MB8GA1UdIwQY MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2 LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7/HV228 YlEPkFOdiFTNDYkw9n/SicuoPZcejvRXH/1BKEkyaBYMCuBhogx/iV9vzUHr1+Kg iGyc+ZxvktAMSw6WIbfx5uFAvG8y3cXs1ZTZAIuFRRDVa8Ir+ii1td3x9k+UKS2N R/NypL8fqR0Wc2KhHqUuixrkilW9AEYMzogeb3RLZ19BXcnbLXEN1Y8LzsnGQhlt kezv49CefhNe4X5bSaYgSZYizPq2k1OREDl9hsPUmo07ONJeZ1JPLFOBnoh8KASm YM4Qo6tGoQueQVjYc52U9eyu4kL7EwgG1LjzNFwAAK25jID63l6keRqZEqnPnuSg f+rsktuv4ZJbwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:53 2025 by rpki-client