This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json) Hash identifier: mDqX2Jj4D5jV14vSgIJ/s32C1y/yULlbTgaEArHpGoc= Subject key identifier: 49:1B:1C:81:75:11:EC:01:3A:1C:13:B4:52:5B:5E:E7:94:9B:09:EB Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Certificate serial: 019AF23F6357A266311E7063AFBAA049B484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: 56nNsQD5fhmKgW9wsztaFH2HQR0.roa (hash: ELMB3ISOh5rAiJ3WjaKpUk69zbZHQWDxYkfbd0e3MbM=) 2: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: mF+0xgpFu4YUvB1tEWKV9HXjjrfPcPs6trt78joAlVI=) 3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:63:57:a2:66:31:1e:70:63:af:ba:a0:49:b4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=491b1c817511ec013a1c13b4525b5ee7949b09eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ec:c7:01:25:6a:81:34:e5:93:45:70:52:50: 2d:10:51:83:c7:1d:09:6d:08:5f:89:5c:b5:7b:e7: a5:29:42:e2:3c:2d:18:97:0f:21:b8:aa:35:32:42: df:d8:81:46:7a:7d:18:33:af:68:fc:5b:6e:9f:2f: aa:30:0d:cd:1b:fa:ea:f9:5c:94:d7:00:4e:45:ee: 7b:c3:77:06:64:ee:59:37:e2:8e:93:1d:dc:d8:c7: 77:be:4e:5e:2f:cb:3f:25:9a:2a:e8:52:62:70:c8: 65:51:72:5e:b5:f4:f8:6b:0a:fd:2e:a2:8e:47:74: 02:46:d5:57:1e:e1:21:be:0e:e5:29:66:2f:0d:60: 44:34:e7:87:da:83:6a:62:f7:2f:8b:97:df:9f:10: df:a9:f2:66:9d:17:8c:66:59:4f:b0:e0:12:12:4e: 30:06:09:c8:e3:2e:76:a8:b8:01:00:0b:cf:de:05: 4b:67:7b:54:96:52:b2:85:07:06:01:c6:f6:87:94: 83:56:bf:12:4c:76:21:6f:ce:52:69:42:57:6f:29: eb:b2:a2:88:2c:b2:5d:9d:8f:d6:1f:6f:d9:24:6c: c2:cc:14:5a:9c:c3:67:07:c5:ba:13:a9:d0:36:5e: 5d:4e:97:49:ef:03:ef:01:b0:1f:bd:db:12:b5:50: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:1C:81:75:11:EC:01:3A:1C:13:B4:52:5B:5E:E7:94:9B:09:EB X509v3 Authority Key Identifier: keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:54:e3:1f:e4:78:c8:29:91:55:c1:44:5f:f6:43:88:08:53: fb:17:92:29:73:b5:83:b6:6c:57:c2:ee:dc:ab:d0:1e:6d:73: a6:a4:d9:7f:24:13:c5:d1:5c:95:69:3c:55:29:2b:37:41:0b: 28:dc:b8:ae:11:9a:80:0c:b5:70:0f:e6:98:2b:a6:07:23:3d: 26:9a:e1:b8:24:14:a9:15:f9:3f:0d:c8:bc:af:db:1b:86:c2: d3:49:29:d4:82:4a:8a:e1:8c:9c:39:82:c6:63:cc:00:06:54: 6b:27:db:1b:f7:10:3b:63:4e:a4:68:d1:9a:dd:57:33:36:68: f8:cf:98:9c:35:6f:3d:bf:9a:b9:71:29:be:f4:67:25:00:4d: a4:15:e8:ea:16:b8:9e:c0:ee:5b:d6:db:c5:30:be:1f:b9:47: 97:9e:c5:a0:4a:95:99:08:19:97:8a:fa:06:93:6e:16:d5:15: 23:12:34:fa:ff:31:fe:4e:4c:23:08:8e:e5:ed:b3:ea:50:0a: 0b:55:55:64:dc:5d:78:65:fc:6d:ca:b5:6b:74:39:e5:85:84: 8f:8a:89:bb:5e:fa:b1:5a:0b:a0:48:44:38:90:d7:73:4a:18: 97:ac:4f:f1:16:09:8e:16:8f:0c:f0:95:86:c1:f5:ce:79:a8: 05:ff:a9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2NXomYxHnBjr7qgSbSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1 ZDY0MGMwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD Eyg0OTFiMWM4MTc1MTFlYzAxM2ExYzEzYjQ1MjViNWVlNzk0OWIwOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OzHASVqgTTlk0VwUlAtEFGDxx0J bQhfiVy1e+elKULiPC0Ylw8huKo1MkLf2IFGen0YM69o/Ftuny+qMA3NG/rq+VyU 1wBORe57w3cGZO5ZN+KOkx3c2Md3vk5eL8s/JZoq6FJicMhlUXJetfT4awr9LqKO R3QCRtVXHuEhvg7lKWYvDWBENOeH2oNqYvcvi5ffnxDfqfJmnReMZllPsOASEk4w BgnI4y52qLgBAAvP3gVLZ3tUllKyhQcGAcb2h5SDVr8STHYhb85SaUJXbynrsqKI LLJdnY/WH2/ZJGzCzBRanMNnB8W6E6nQNl5dTpdJ7wPvAbAfvdsStVA9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkbHIF1EewBOhwTtFJbXueUmwnrMB8GA1UdIwQY MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlTjH+R4 yCmRVcFEX/ZDiAhT+xeSKXO1g7ZsV8Lu3KvQHm1zpqTZfyQTxdFclWk8VSkrN0EL KNy4rhGagAy1cA/mmCumByM9JprhuCQUqRX5Pw3IvK/bG4bC00kp1IJKiuGMnDmC xmPMAAZUayfbG/cQO2NOpGjRmt1XMzZo+M+YnDVvPb+auXEpvvRnJQBNpBXo6ha4 nsDuW9bbxTC+H7lHl57FoEqVmQgZl4r6BpNuFtUVIxI0+v8x/k5MIwiO5e2z6lAK C1VVZNxdeGX8bcq1a3Q55YWEj4qJu176sVoLoEhEOJDXc0oYl6xP8RYJjhaPDPCV hsH1znmoBf+pUg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:50 2025 by rpki-client