This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json) Hash identifier: Mh4G39T4Sdh3a4uaWRcwaBwr7pOiDPwZN/98hqcS3rw= Subject key identifier: 42:6D:B3:16:9B:26:AF:A7:37:DA:68:24:EC:98:AF:7A:DB:14:E1:67 Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b Certificate serial: 019AF5AE742D30737F7A75FD332E8BBEDD30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft Manifest number: 1116 Signing time: Sat 06 Dec 2025 22:00:41 +0000 Manifest this update: Sat 06 Dec 2025 22:00:41 +0000 Manifest next update: Sun 07 Dec 2025 22:00:41 +0000 Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=) 2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: eyEhO0k8EPkV2d2OamTNK/81V+MvUXv/KDeHapA7mtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:74:2d:30:73:7f:7a:75:fd:33:2e:8b:be:dd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b Validity Not Before: Dec 6 22:00:41 2025 GMT Not After : Dec 7 22:00:41 2025 GMT Subject: CN=426db3169b26afa737da6824ec98af7adb14e167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c4:eb:96:90:e1:ce:22:54:14:ab:52:9b:b3: d0:0d:c7:ed:89:b1:5f:c7:56:4e:37:dd:50:df:b8: 08:eb:ae:a1:2d:9b:c8:63:56:24:41:08:43:fe:03: 32:13:72:64:7b:73:55:ed:d6:46:a9:d5:75:6e:12: 10:3c:06:19:19:4a:7a:62:d0:2d:08:e3:00:8e:af: ad:7e:86:53:59:98:31:36:91:53:17:d3:7f:12:ed: 0a:93:cf:f6:14:d8:38:bc:e7:c0:bf:b4:8d:77:d0: a6:ee:0e:3e:0f:8c:5d:91:00:02:76:6f:75:60:8e: 50:0b:7b:84:67:64:e9:fc:4f:9d:e1:dc:0f:a9:99: bf:fb:15:7f:f7:2c:40:72:8d:6d:ff:d3:41:c6:a9: de:fd:c2:d5:8c:71:57:f4:88:4b:7e:b8:d9:b9:ba: 6c:50:c1:4d:ad:b7:79:21:c2:2b:9a:1f:53:1c:78: b6:f2:b4:5c:41:05:4f:58:bd:1c:9d:ce:c7:7e:50: 84:1e:20:d7:a7:a7:df:64:9d:c9:7d:97:76:d3:ab: 22:dd:2a:ed:2a:ab:0d:2b:79:06:8e:d3:c9:b8:80: 32:86:35:c9:71:c3:11:89:37:a2:59:a1:f9:df:35: b4:ae:52:2a:9d:db:01:4f:dd:e9:3a:2a:a5:7e:15: b3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6D:B3:16:9B:26:AF:A7:37:DA:68:24:EC:98:AF:7A:DB:14:E1:67 X509v3 Authority Key Identifier: keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:db:26:5b:b0:05:b1:60:73:4a:f9:0c:35:71:a0:56:0b:11: 7d:32:6c:fa:22:8b:f9:b7:72:70:38:bc:c6:6f:b5:74:54:15: 18:87:26:2f:5d:de:b4:fe:fc:58:04:af:06:e3:57:80:08:87: ec:88:d1:0a:5f:de:db:29:7c:04:e8:4a:28:80:3d:d2:fd:41: b6:7b:10:3e:f6:9c:f3:dc:c8:51:f4:1c:5e:e6:78:15:28:23: 6e:96:ee:56:32:dc:fa:5f:0d:19:14:06:f5:ba:be:43:11:41: 79:2f:35:5b:2a:dd:de:04:48:1b:31:d4:e3:fe:a7:fb:a7:a4: ff:4e:67:6d:3a:ab:97:89:53:dc:99:c8:d2:43:f7:b8:b5:fc: f8:89:95:d6:5f:7b:ce:15:a8:2b:b0:cb:69:46:1b:30:93:c8: 8b:ff:e1:12:5b:a1:ee:39:93:61:f8:c6:4d:3f:a1:57:8f:ff: 12:e3:db:7b:01:43:11:ff:09:12:4f:29:50:62:b8:f6:c9:39: 9c:00:b5:a5:f8:73:b4:6a:c0:d9:ee:de:10:86:0f:2b:36:8e: 03:5c:41:15:73:2c:a5:13:e0:3f:b9:9e:a8:6e:de:71:c5:6a: 62:4c:f9:7f:0b:09:49:af:e5:f7:eb:d2:a7:98:3c:1c:61:fc: 6e:f3:0b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rnQtMHN/enX9My6Lvt0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjFlYWJiZTVlZTBjMDQ5NjgwZTJhYmM5NTUzNDM5ZWM2 NDNjMGIwHhcNMjUxMjA2MjIwMDQxWhcNMjUxMjA3MjIwMDQxWjAzMTEwLwYDVQQD Eyg0MjZkYjMxNjliMjZhZmE3MzdkYTY4MjRlYzk4YWY3YWRiMTRlMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9sTrlpDhziJUFKtSm7PQDcftibFf x1ZON91Q37gI666hLZvIY1YkQQhD/gMyE3Jke3NV7dZGqdV1bhIQPAYZGUp6YtAt COMAjq+tfoZTWZgxNpFTF9N/Eu0Kk8/2FNg4vOfAv7SNd9Cm7g4+D4xdkQACdm91 YI5QC3uEZ2Tp/E+d4dwPqZm/+xV/9yxAco1t/9NBxqne/cLVjHFX9IhLfrjZubps UMFNrbd5IcIrmh9THHi28rRcQQVPWL0cnc7HflCEHiDXp6ffZJ3JfZd206si3Srt KqsNK3kGjtPJuIAyhjXJccMRiTeiWaH53zW0rlIqndsBT93pOiqlfhWz0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJtsxabJq+nN9poJOyYr3rbFOFnMB8GA1UdIwQY MBaAFJOx6rvl7gwEloDiq8lVNDnsZDwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYt OWQyOGJmNWVmM2MxLzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYtOWQyOGJmNWVmM2Mx LzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptsmW7AF sWBzSvkMNXGgVgsRfTJs+iKL+bdycDi8xm+1dFQVGIcmL13etP78WASvBuNXgAiH 7IjRCl/e2yl8BOhKKIA90v1BtnsQPvac89zIUfQcXuZ4FSgjbpbuVjLc+l8NGRQG 9bq+QxFBeS81Wyrd3gRIGzHU4/6n+6ek/05nbTqrl4lT3JnI0kP3uLX8+ImV1l97 zhWoK7DLaUYbMJPIi//hEluh7jmTYfjGTT+hV4//EuPbewFDEf8JEk8pUGK49sk5 nAC1pfhztGrA2e7eEIYPKzaOA1xBFXMspRPgP7meqG7eccVqYkz5fwsJSa/l9+vS p5g8HGH8bvMLrA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:36 2025 by rpki-client