This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json) Hash identifier: b5qodQke/9okGF6pvAqybdSjFzkYvImfjodRm4IXh0k= Subject key identifier: 65:13:6E:DB:34:A5:A2:D3:F6:B3:6C:F7:43:F7:26:02:68:7B:6C:8B Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019B30432DE9AE774BDA2331F0265D667B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft Manifest number: 17A7 Signing time: Thu 18 Dec 2025 07:01:07 +0000 Manifest this update: Thu 18 Dec 2025 07:01:07 +0000 Manifest next update: Fri 19 Dec 2025 07:01:07 +0000 Files and hashes: 1: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (hash: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI=) 2: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (hash: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME=) 3: QL2SSYulhakA75BZZF7HAK2KA1o.roa (hash: GkirDpEuIjH7IlkFK7z0eYAoS+FFH+rtgzQ90Bk1Etc=) 4: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=) 5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: xp7Nj5IxJG5iX/sAV2cXi6a2Qvoq/U9A4qj+Z4JTTZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:2d:e9:ae:77:4b:da:23:31:f0:26:5d:66:7b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 18 07:01:07 2025 GMT Not After : Dec 19 07:01:07 2025 GMT Subject: CN=65136edb34a5a2d3f6b36cf743f72602687b6c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:2e:9e:26:08:93:fe:ea:f7:32:8f:2a:1b: ee:41:d8:ab:f4:50:33:6f:70:94:e4:88:ff:22:3f: 6f:f4:b8:3f:56:a8:33:79:04:37:81:71:16:74:d8: 33:d0:5e:8d:86:3a:e7:96:39:ad:c0:34:c7:14:7e: 30:cf:63:a7:76:b4:5a:59:d6:c1:08:f8:6f:75:45: fe:08:d5:5a:c8:6b:e5:7c:3d:8d:e3:9b:ab:7e:23: 46:4b:73:dc:a0:ce:93:b0:a9:fe:f6:c6:50:1b:10: 3c:05:3b:f2:e2:f8:6e:81:26:b2:d6:93:96:8d:8b: 4c:44:e4:46:ac:c2:20:7d:40:ad:7c:0e:dc:0a:ae: 12:f8:c2:0c:36:ad:87:0d:03:b2:e6:53:8b:84:18: e5:68:d9:54:bb:91:6f:ca:a9:c5:1b:9a:a7:12:f8: d6:56:0b:02:e9:ac:62:16:e2:ec:27:7c:8e:0f:41: 38:22:34:8c:2f:fe:13:71:d6:4f:c1:34:e7:98:26: e2:e4:5c:35:7f:a0:a4:ee:20:76:82:de:23:44:c5: fc:ef:9a:e0:60:d2:1f:24:9c:20:15:ed:0c:2a:e1: aa:e9:f4:da:ee:f6:54:df:14:2e:76:74:c4:e1:b0: 25:ac:64:71:5f:a3:0c:61:ff:10:a0:ad:6c:e6:57: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:13:6E:DB:34:A5:A2:D3:F6:B3:6C:F7:43:F7:26:02:68:7B:6C:8B X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:91:f2:c4:a5:85:ec:0a:ee:55:62:e6:ab:89:60:04:3d:fe: 76:88:ca:de:4b:7c:84:e7:40:18:4f:9c:0b:d0:34:18:71:f7: 4f:23:0d:11:be:e0:50:94:ff:7e:ce:37:af:b0:15:e3:94:22: 88:e4:25:8d:04:37:ec:d0:6a:c3:ad:6b:d4:43:09:f9:e3:1e: a6:2a:9f:cf:ab:ad:1c:74:31:bb:48:d2:96:8b:ae:95:f8:78: af:95:15:22:1f:f9:f6:c4:2d:f8:15:e0:a3:a9:2b:36:ba:8d: 75:7e:bc:62:70:25:74:a5:a9:da:df:e7:1a:53:53:69:ca:76: 7f:61:2e:99:ef:37:fd:7f:6b:8b:bc:e1:15:76:57:9f:f0:7c: 2e:c7:cd:a7:50:25:f2:0d:a1:7d:81:74:a0:5e:31:5c:1d:a7: 95:f8:3c:0b:61:4a:0b:21:72:c2:53:90:f2:91:36:7c:35:e1: de:26:7a:f3:30:3f:eb:3c:7d:47:a9:14:fe:44:8f:ab:63:70: 75:1c:b7:f4:af:61:6f:50:3a:a9:6b:aa:ef:de:e9:14:51:bd: 80:a7:26:ee:a4:d4:b6:fa:3a:08:f4:cc:e9:3a:16:e3:b9:37: c2:35:99:bc:6d:4d:1d:e8:3b:60:0b:34:39:85:e5:3b:61:18: 8c:b3:65:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQy3prndL2iMx8CZdZnsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjE4MDcwMTA3WhcNMjUxMjE5MDcwMTA3WjAzMTEwLwYDVQQD Eyg2NTEzNmVkYjM0YTVhMmQzZjZiMzZjZjc0M2Y3MjYwMjY4N2I2YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwuniYIk/7q9zKPKhvuQdir9FAz b3CU5Ij/Ij9v9Lg/VqgzeQQ3gXEWdNgz0F6NhjrnljmtwDTHFH4wz2OndrRaWdbB CPhvdUX+CNVayGvlfD2N45urfiNGS3PcoM6TsKn+9sZQGxA8BTvy4vhugSay1pOW jYtMRORGrMIgfUCtfA7cCq4S+MIMNq2HDQOy5lOLhBjlaNlUu5FvyqnFG5qnEvjW VgsC6axiFuLsJ3yOD0E4IjSML/4TcdZPwTTnmCbi5Fw1f6Ck7iB2gt4jRMX875rg YNIfJJwgFe0MKuGq6fTa7vZU3xQudnTE4bAlrGRxX6MMYf8QoK1s5lfAUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUTbts0paLT9rNs90P3JgJoe2yLMB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5HyxKWF 7AruVWLmq4lgBD3+dojK3kt8hOdAGE+cC9A0GHH3TyMNEb7gUJT/fs43r7AV45Qi iOQljQQ37NBqw61r1EMJ+eMepiqfz6utHHQxu0jSlouulfh4r5UVIh/59sQt+BXg o6krNrqNdX68YnAldKWp2t/nGlNTacp2f2Eume83/X9ri7zhFXZXn/B8LsfNp1Al 8g2hfYF0oF4xXB2nlfg8C2FKCyFywlOQ8pE2fDXh3iZ68zA/6zx9R6kU/kSPq2Nw dRy39K9hb1A6qWuq797pFFG9gKcm7qTUtvo6CPTM6ToW47k3wjWZvG1NHeg7YAs0 OYXlO2EYjLNlRQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:14:53 2025 by rpki-client