This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json) Hash identifier: 3z17MENlk6H+w6zllxYnKMIh7ASFrDoCj8QTAU12OnQ= Subject key identifier: 37:B8:4B:C0:A8:3B:DB:36:67:F7:82:CA:E8:E7:6F:A0:19:A7:23:B4 Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25 Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25 Certificate serial: 019B288947B41E76AB64E33AEA1BEBF27B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft Manifest number: 0CD6 Signing time: Tue 16 Dec 2025 19:00:43 +0000 Manifest this update: Tue 16 Dec 2025 19:00:43 +0000 Manifest next update: Wed 17 Dec 2025 19:00:43 +0000 Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=) 2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: hzt0V+SwUXG2FiDZc4TrbKgCUbHWuIMLQoJFVH/N540=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:47:b4:1e:76:ab:64:e3:3a:ea:1b:eb:f2:7b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25 Validity Not Before: Dec 16 19:00:43 2025 GMT Not After : Dec 17 19:00:43 2025 GMT Subject: CN=37b84bc0a83bdb3667f782cae8e76fa019a723b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:e2:0d:84:f6:d4:80:18:79:91:07:21:31: b6:b5:61:d7:12:79:b7:86:a3:a3:98:3c:6f:0e:ef: b9:cb:15:ae:d7:bf:49:17:f3:59:94:04:38:06:5f: 95:2f:79:e1:4b:9e:ca:b0:f8:8a:36:37:e0:18:2c: fe:1c:1e:bb:33:54:6b:f7:a9:c8:9a:be:79:18:db: 68:fb:b7:e6:c4:77:18:5c:bd:fd:b4:07:d9:bb:b3: a2:0f:78:76:97:aa:92:fb:0c:c8:f4:dd:02:5a:0d: 62:df:59:ba:2d:70:2f:fd:cc:66:bc:87:ee:52:c9: cb:ee:0e:7c:28:53:76:ef:c9:01:a2:b5:6a:1f:2d: 06:36:76:54:dd:9b:79:f6:cd:e5:9b:32:bd:09:32: 47:20:d7:c8:0c:26:13:f3:52:dd:94:33:77:dc:88: 2c:62:ba:5a:be:a5:8c:88:db:f4:d6:c5:e7:eb:4e: f8:fe:85:e9:d6:bd:d3:d4:26:66:7d:a2:78:62:85: 59:83:17:46:7a:8f:4f:f5:b7:25:53:ca:b2:e8:ff: 53:ec:c1:54:dc:b1:ad:98:69:e8:db:40:80:23:f6: 2e:b3:60:9f:d7:d7:86:34:4e:e7:9b:57:3e:f3:c9: 01:44:02:47:94:48:43:b7:8d:71:7b:47:ad:c1:be: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:4B:C0:A8:3B:DB:36:67:F7:82:CA:E8:E7:6F:A0:19:A7:23:B4 X509v3 Authority Key Identifier: keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4f:3b:d0:04:8e:01:00:16:67:54:30:4e:dc:09:84:7f:17: 2f:0d:24:a9:78:fc:c5:0f:b7:fe:50:ee:ea:48:e5:99:88:df: ae:76:f4:2a:15:6c:a0:e0:0c:9d:ef:2b:3d:40:e9:3d:14:82: 2e:91:cd:28:0a:64:fe:bd:f3:8e:e4:5d:ac:a1:7b:f8:e1:e1: 05:92:8c:c9:a8:eb:1c:8a:e6:eb:96:c9:45:dc:28:d9:bc:9a: 7a:09:2d:21:b2:02:0e:9e:70:4d:2f:3e:dd:d5:f9:5d:e6:46: cc:87:07:ba:3f:38:95:a0:ed:88:6a:d2:ce:56:1f:e3:9b:c5: 7c:68:1c:3d:17:3c:c9:31:b5:c8:79:73:b9:4a:a9:31:40:52: 25:c8:d1:63:82:15:19:2f:a5:62:13:06:10:19:74:cb:00:1f: 44:6a:ba:4c:b9:8e:0d:23:2b:80:26:1b:24:79:53:c6:5e:5c: 06:98:bd:af:ed:6e:3a:5d:c4:ff:d4:2f:34:29:95:a0:f3:e9: 8b:81:5e:66:2b:00:9e:4c:74:44:fe:44:bf:ab:c4:0a:90:e9: 97:bc:1f:c9:de:c8:10:98:3a:f1:0d:28:c0:51:63:8d:4a:3c: b1:a8:1d:1a:19:5f:67:4e:22:f1:3e:b9:da:bf:12:4c:1d:2a: b6:36:36:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiUe0HnarZOM66hvr8nuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjVkMmI0M2FjYzBkOWYwN2FhMDBhYTkwZjAyNWM5NmQ1 Y2VjMjUwHhcNMjUxMjE2MTkwMDQzWhcNMjUxMjE3MTkwMDQzWjAzMTEwLwYDVQQD EygzN2I4NGJjMGE4M2JkYjM2NjdmNzgyY2FlOGU3NmZhMDE5YTcyM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidHiDYT21IAYeZEHITG2tWHXEnm3 hqOjmDxvDu+5yxWu179JF/NZlAQ4Bl+VL3nhS57KsPiKNjfgGCz+HB67M1Rr96nI mr55GNto+7fmxHcYXL39tAfZu7OiD3h2l6qS+wzI9N0CWg1i31m6LXAv/cxmvIfu UsnL7g58KFN278kBorVqHy0GNnZU3Zt59s3lmzK9CTJHINfIDCYT81LdlDN33Igs YrpavqWMiNv01sXn6074/oXp1r3T1CZmfaJ4YoVZgxdGeo9P9bclU8qy6P9T7MFU 3LGtmGno20CAI/Yus2Cf19eGNE7nm1c+88kBRAJHlEhDt41xe0etwb6KHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe4S8CoO9s2Z/eCyujnb6AZpyO0MB8GA1UdIwQY MBaAFLO10rQ6zA2fB6oAqpDwJcltXOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmIt MjRiOGMwMmZhODJhLzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmItMjRiOGMwMmZhODJh LzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0870ASO AQAWZ1QwTtwJhH8XLw0kqXj8xQ+3/lDu6kjlmYjfrnb0KhVsoOAMne8rPUDpPRSC LpHNKApk/r3zjuRdrKF7+OHhBZKMyajrHIrm65bJRdwo2byaegktIbICDp5wTS8+ 3dX5XeZGzIcHuj84laDtiGrSzlYf45vFfGgcPRc8yTG1yHlzuUqpMUBSJcjRY4IV GS+lYhMGEBl0ywAfRGq6TLmODSMrgCYbJHlTxl5cBpi9r+1uOl3E/9QvNCmVoPPp i4FeZisAnkx0RP5Ev6vECpDpl7wfyd7IEJg68Q0owFFjjUo8sagdGhlfZ04i8T65 2r8STB0qtjY2NA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:30:39 2025 by rpki-client