This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json) Hash identifier: iEHULRvWybnspfdO9xX71ohUjfZVAlrzl1JazeEhKDI= Subject key identifier: 97:AC:37:66:CF:1D:17:53:8A:82:F8:7F:56:B7:8A:8C:CF:BE:0D:E6 Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Certificate serial: 019B2B1D4B77061CE1CB21066FD2FBA34111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 07:01:38 +0000 Manifest this update: Wed 17 Dec 2025 07:01:38 +0000 Manifest next update: Thu 18 Dec 2025 07:01:38 +0000 Files and hashes: 1: NEVyHfghC_0IzY6RTdXjWpjvCt0.roa (hash: xHfTcNtnEobrDQmw9/aNxrvi78pLeFshtErwqNjdN7Q=) 2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: D2JGyGegmGdkOhLWqOEpHW0FxJDcNyZIXemayO/xPDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:4b:77:06:1c:e1:cb:21:06:6f:d2:fb:a3:41:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Validity Not Before: Dec 17 07:01:38 2025 GMT Not After : Dec 18 07:01:38 2025 GMT Subject: CN=97ac3766cf1d17538a82f87f56b78a8ccfbe0de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:f3:5b:d2:4d:4c:fc:49:63:41:1c:c5:a6: 5f:87:62:e5:42:74:f0:05:27:ea:9b:36:33:65:a2: 1f:8d:5b:a0:83:88:d1:14:da:72:7c:d9:36:eb:4a: a3:18:72:7f:b2:e4:67:ae:91:74:97:14:6a:90:10: 5e:de:25:77:27:6c:90:88:db:4b:1c:4b:d6:61:80: 34:e2:82:88:77:9c:38:fb:22:e8:3d:69:87:61:06: 0f:3c:a2:bd:1b:2d:4a:c7:51:74:22:a2:64:14:e7: da:09:5e:f9:ee:1a:a7:da:bf:33:e6:d8:17:b3:79: 41:f4:fb:1e:10:cb:5e:b1:32:ea:b9:3d:10:0a:c8: eb:5a:45:d8:98:04:31:00:62:77:88:b0:71:da:19: bc:0b:4e:17:c6:37:b8:a4:20:b8:a2:90:7d:b9:c0: 21:d7:83:74:95:5a:a0:e6:e5:b3:a5:44:71:33:2e: bc:27:f0:40:eb:6d:93:d4:12:69:81:f4:a9:8f:77: 54:45:37:0f:25:e3:c9:e3:32:a9:6e:94:11:3d:e0: 84:c6:6d:55:ea:ee:a5:14:35:29:62:59:45:f1:32: 28:67:bd:fd:e4:c0:25:b9:c1:b9:1d:0f:7c:e3:a0: 60:03:9d:f6:e3:ee:70:7b:cc:b9:2a:62:fe:47:41: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AC:37:66:CF:1D:17:53:8A:82:F8:7F:56:B7:8A:8C:CF:BE:0D:E6 X509v3 Authority Key Identifier: keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8f:c1:3a:da:62:72:2f:af:20:ed:e4:f8:79:81:68:71:de: 12:ea:4a:13:7e:b2:e4:66:25:10:81:f5:19:45:0f:9c:7e:a3: 80:98:8b:b0:61:85:c8:71:7c:4c:0a:ee:58:eb:4c:1b:ac:9b: bf:a6:88:58:22:74:de:60:4b:48:43:4d:88:43:b0:a0:6e:98: 7c:a2:75:e2:ea:63:bf:5a:37:22:a5:b2:12:2e:02:d6:41:ca: b6:22:6e:4b:39:48:83:88:a2:32:86:86:74:be:98:60:06:98: 39:d2:5f:81:15:6b:d4:63:b2:2f:df:cb:83:94:c2:ad:a7:76: 83:0d:48:81:ff:84:c2:ee:0d:b8:7a:20:ef:94:6f:6c:68:e7: 91:84:87:62:41:29:e9:82:22:28:b8:4a:bc:3d:62:24:b9:7d: 83:f4:51:32:71:b1:7e:a1:17:03:d2:14:8f:12:25:b9:01:aa: 62:4b:39:32:34:d8:01:76:2c:dc:b0:a1:ad:72:19:14:84:a9: e9:cd:5f:4c:10:0d:60:33:7c:e8:29:65:a5:b6:58:e2:16:9d: 1d:ec:7f:7f:62:07:a9:8e:91:0d:97:3b:e7:c6:9e:35:5e:46: 13:7d:a3:a3:40:e4:5f:2d:70:9b:c6:5d:00:a9:89:1f:5d:83: 48:ff:e9:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHUt3BhzhyyEGb9L7o0ERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3 MmY5M2IwHhcNMjUxMjE3MDcwMTM4WhcNMjUxMjE4MDcwMTM4WjAzMTEwLwYDVQQD Eyg5N2FjMzc2NmNmMWQxNzUzOGE4MmY4N2Y1NmI3OGE4Y2NmYmUwZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobjzW9JNTPxJY0EcxaZfh2LlQnTw BSfqmzYzZaIfjVugg4jRFNpyfNk260qjGHJ/suRnrpF0lxRqkBBe3iV3J2yQiNtL HEvWYYA04oKId5w4+yLoPWmHYQYPPKK9Gy1Kx1F0IqJkFOfaCV757hqn2r8z5tgX s3lB9PseEMtesTLquT0QCsjrWkXYmAQxAGJ3iLBx2hm8C04Xxje4pCC4opB9ucAh 14N0lVqg5uWzpURxMy68J/BA622T1BJpgfSpj3dURTcPJePJ4zKpbpQRPeCExm1V 6u6lFDUpYllF8TIoZ7395MAlucG5HQ9846BgA5324+5we8y5KmL+R0FujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJesN2bPHRdTioL4f1a3iozPvg3mMB8GA1UdIwQY MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt NGI1OTU3YWE3NDdmLzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo/BOtpi ci+vIO3k+HmBaHHeEupKE36y5GYlEIH1GUUPnH6jgJiLsGGFyHF8TAruWOtMG6yb v6aIWCJ03mBLSENNiEOwoG6YfKJ14upjv1o3IqWyEi4C1kHKtiJuSzlIg4iiMoaG dL6YYAaYOdJfgRVr1GOyL9/Lg5TCrad2gw1Igf+Ewu4NuHog75RvbGjnkYSHYkEp 6YIiKLhKvD1iJLl9g/RRMnGxfqEXA9IUjxIluQGqYks5MjTYAXYs3LChrXIZFISp 6c1fTBANYDN86CllpbZY4hadHex/f2IHqY6RDZc758aeNV5GE32jo0DkXy1wm8Zd AKmJH12DSP/pug== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:30 2025 by rpki-client