This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json) Hash identifier: fS9kEheyPpMIWZeQoibTN5M9qfSp2omlcR4t8EEUSWM= Subject key identifier: 9C:73:F6:03:F5:77:C2:7A:22:62:EF:7E:64:83:BF:3B:D1:7D:EC:21 Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Certificate serial: 019B2C9D8FD530D9DF0924EA344D3DC2ACC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 14:01:21 +0000 Manifest this update: Wed 17 Dec 2025 14:01:21 +0000 Manifest next update: Thu 18 Dec 2025 14:01:21 +0000 Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=) 2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: zxEik332Z2KsR0ctIJMQ2w9zJPUvhJw+FCQL8/599Ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:8f:d5:30:d9:df:09:24:ea:34:4d:3d:c2:ac:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Validity Not Before: Dec 17 14:01:21 2025 GMT Not After : Dec 18 14:01:21 2025 GMT Subject: CN=9c73f603f577c27a2262ef7e6483bf3bd17dec21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:fc:16:76:90:cb:2e:08:85:fa:b1:c1:8d: 9f:2e:3a:c1:ea:27:55:2a:ce:ab:fb:6d:a9:38:ac: 2e:3e:ba:35:85:ea:f1:72:00:6c:cf:2e:f1:79:51: 6f:0e:ee:8b:1d:c4:3c:4b:7f:43:05:db:c9:c5:e2: 1e:e1:87:e1:d3:56:9d:b4:8f:2a:a7:3c:24:54:7c: b6:ed:51:f1:85:ac:ef:23:68:59:82:bd:1c:73:52: ce:7e:46:e1:25:47:11:64:f1:4f:7b:12:17:e6:2d: 19:00:bc:91:70:15:d6:96:7f:ee:2d:5c:d1:98:0a: 73:ef:84:9f:f9:4b:03:bf:63:ea:4e:6a:01:da:b5: 52:0e:d7:e2:a1:0b:cb:78:aa:fb:d8:bf:43:e4:35: 29:6f:be:53:ad:06:21:73:5d:db:db:3d:a4:81:4c: 6c:a9:9f:35:c7:ba:42:92:91:1d:55:9b:0c:9c:b3: 23:42:20:cf:0c:81:04:f1:fc:ea:24:30:8d:41:c4: 35:c5:39:4b:92:d8:4d:10:76:5f:89:a0:f7:27:b0: bf:f2:09:f2:08:7e:0e:1e:5b:be:60:5c:dc:fb:57: 33:f3:30:6d:21:f5:e3:09:2d:eb:ee:20:a2:ba:cc: 72:28:52:ae:09:2b:b4:76:bf:ef:6c:4d:82:c2:97: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:F6:03:F5:77:C2:7A:22:62:EF:7E:64:83:BF:3B:D1:7D:EC:21 X509v3 Authority Key Identifier: keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3e:bb:00:a1:75:86:d0:81:76:08:71:aa:65:1d:6b:eb:ab: c6:bd:2b:fd:59:19:56:f2:b1:08:4f:60:8c:50:ab:56:1f:c1: fa:00:98:5b:41:d4:a5:41:ca:1b:d9:6e:af:fb:fe:ba:af:a7: 2a:21:47:f0:69:28:57:9b:e4:06:36:4c:08:a2:cc:aa:e8:fa: f2:b2:dc:76:2d:76:29:64:f3:5b:00:b6:a8:ee:e2:cb:53:5b: 9f:a8:8e:5c:b8:91:8a:71:54:04:67:d9:24:12:a3:01:ad:3c: 9f:3a:96:54:2e:fc:ab:b9:0d:0e:28:9d:72:60:bf:8c:47:40: c8:a6:cf:06:59:9f:27:c7:63:0c:4e:ff:f2:31:cc:bf:a8:5d: ed:4d:7f:1a:cc:03:47:20:df:13:5b:d6:e0:97:74:61:2b:50: b6:51:2a:86:d9:9d:52:f3:a5:bc:33:30:9e:15:76:49:5d:dc: 1c:fd:db:b5:1a:7c:7a:7f:00:6c:e4:96:11:92:68:e9:4b:ee: 21:cc:26:5d:54:33:18:02:9c:28:37:57:7b:fe:8f:36:15:d1: 0c:1c:ad:2f:b2:2d:15:bc:52:d8:63:fe:61:2a:82:ac:ed:01: f7:8f:91:63:07:82:c7:f1:d9:7a:e1:3b:e4:73:24:01:8a:32: 0f:9f:73:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnY/VMNnfCSTqNE09wqzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz OWFlZTEwHhcNMjUxMjE3MTQwMTIxWhcNMjUxMjE4MTQwMTIxWjAzMTEwLwYDVQQD Eyg5YzczZjYwM2Y1NzdjMjdhMjI2MmVmN2U2NDgzYmYzYmQxN2RlYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRH8FnaQyy4IhfqxwY2fLjrB6idV Ks6r+22pOKwuPro1herxcgBszy7xeVFvDu6LHcQ8S39DBdvJxeIe4Yfh01adtI8q pzwkVHy27VHxhazvI2hZgr0cc1LOfkbhJUcRZPFPexIX5i0ZALyRcBXWln/uLVzR mApz74Sf+UsDv2PqTmoB2rVSDtfioQvLeKr72L9D5DUpb75TrQYhc13b2z2kgUxs qZ81x7pCkpEdVZsMnLMjQiDPDIEE8fzqJDCNQcQ1xTlLkthNEHZfiaD3J7C/8gny CH4OHlu+YFzc+1cz8zBtIfXjCS3r7iCiusxyKFKuCSu0dr/vbE2CwpeQ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxz9gP1d8J6ImLvfmSDvzvRfewhMB8GA1UdIwQY MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqj67AKF1 htCBdghxqmUda+urxr0r/VkZVvKxCE9gjFCrVh/B+gCYW0HUpUHKG9lur/v+uq+n KiFH8GkoV5vkBjZMCKLMquj68rLcdi12KWTzWwC2qO7iy1Nbn6iOXLiRinFUBGfZ JBKjAa08nzqWVC78q7kNDiidcmC/jEdAyKbPBlmfJ8djDE7/8jHMv6hd7U1/GswD RyDfE1vW4Jd0YStQtlEqhtmdUvOlvDMwnhV2SV3cHP3btRp8en8AbOSWEZJo6Uvu IcwmXVQzGAKcKDdXe/6PNhXRDBytL7ItFbxS2GP+YSqCrO0B94+RYweCx/HZeuE7 5HMkAYoyD59zyg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:06:42 2025 by rpki-client