This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json) Hash identifier: 9O7QtWKz9QXOzRWTP/zeBq9Q1t1mU8OjsdYznM4I51w= Subject key identifier: A8:00:22:CD:BF:3F:B6:1D:DB:37:41:DA:D8:84:DC:C4:01:9D:D8:0E Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23 Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323 Certificate serial: 019AF2E44EE90A9CF72F8C8F47865CB81B10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft Manifest number: 100F Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=) 2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: OUCwICjJxdOugP3xmqEM2XrVLei1l9GkQMKI5RGw6Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4e:e9:0a:9c:f7:2f:8c:8f:47:86:5c:b8:1b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323 Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=a80022cdbf3fb61ddb3741dad884dcc4019dd80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:0f:fb:39:c0:da:2f:4b:da:6f:63:ad:9b: d2:42:e0:16:36:c8:b5:4f:a6:46:35:2d:54:fc:26: da:2d:bc:f0:74:de:33:19:a3:c8:b7:b2:f3:cd:fe: fa:9d:78:24:7a:42:fe:35:5c:bd:23:f2:16:87:e8: 29:0d:20:48:4f:ba:f2:d8:86:25:f7:0c:f1:98:37: 54:21:be:64:73:fa:65:97:76:91:2b:aa:c6:77:c2: ee:de:50:a9:64:96:7f:61:c2:54:83:89:65:f5:49: a8:f8:98:35:16:4e:31:6c:2f:ed:2b:3c:ae:b4:35: 62:18:30:ba:a2:ee:30:6e:10:b0:af:e6:eb:8e:1a: ba:1c:c9:f7:f5:f1:47:33:83:30:bc:e0:43:4c:ff: 97:73:93:d4:75:49:df:7c:3a:bf:5f:2c:93:b0:c0: 0a:b7:67:89:e5:bf:f0:f1:37:b7:7c:92:b3:06:75: 2d:52:67:e6:31:fe:b8:b7:2a:d8:bf:fe:75:64:eb: 3d:1c:82:b8:a3:59:43:c7:23:24:8f:c2:75:bc:3d: 19:52:f3:31:d5:e7:56:b7:6b:2c:aa:c4:3e:45:47: 7d:67:ed:64:3b:a0:38:08:10:38:1d:0c:ee:e9:0a: d2:e7:b8:d2:d6:b7:af:a0:ad:73:4c:9a:32:c2:f3: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:00:22:CD:BF:3F:B6:1D:DB:37:41:DA:D8:84:DC:C4:01:9D:D8:0E X509v3 Authority Key Identifier: keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:be:08:3e:93:fd:95:1e:62:02:c8:cd:1e:81:21:40:db:e6: d2:53:09:ea:b0:64:45:c3:6b:77:3e:78:7e:cf:25:6d:d2:42: 49:96:0e:06:e2:b0:65:60:ee:96:67:31:e7:ac:ec:13:23:16: a2:43:22:ed:5c:fd:6b:f0:13:fb:30:1a:6e:45:cc:c8:c4:70: 4c:a0:4b:e9:e2:67:f1:cc:6a:e0:83:f7:aa:25:1b:c5:22:19: 83:e4:da:29:22:55:15:55:3f:68:8a:82:23:cb:03:22:ca:eb: d9:94:6c:97:95:6d:e7:05:d1:de:a7:4e:2e:72:cc:de:e5:7a: d2:9d:1f:e1:6d:af:66:b5:09:d0:b8:04:f6:ab:8d:03:34:c6: 8f:34:64:65:d1:b9:c9:a1:c3:b6:2e:81:f8:c7:42:79:9c:06: 3c:3a:ea:29:f3:95:33:15:7e:a7:c3:3f:fb:b8:dc:89:35:f1: 3b:c8:22:77:39:ae:9a:c7:0d:38:1d:18:ef:f3:5e:ee:d0:bc: 3a:09:1d:5f:4d:38:21:28:12:81:77:8b:34:d5:81:ed:5b:ac: cf:38:af:1c:a4:b8:1c:1f:1b:54:82:4f:60:3e:5a:35:fc:46: 54:2b:11:22:45:3d:2b:43:83:79:e0:5a:24:74:95:d0:06:1b: bc:bf:21:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E7pCpz3L4yPR4ZcuBsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjAwYjI5Mzk2ZTc4MDMzZWRiYWNhZmVmOTg1MGIxYjBl MzUzMjMwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD EyhhODAwMjJjZGJmM2ZiNjFkZGIzNzQxZGFkODg0ZGNjNDAxOWRkODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/EP+znA2i9L2m9jrZvSQuAWNsi1 T6ZGNS1U/CbaLbzwdN4zGaPIt7Lzzf76nXgkekL+NVy9I/IWh+gpDSBIT7ry2IYl 9wzxmDdUIb5kc/pll3aRK6rGd8Lu3lCpZJZ/YcJUg4ll9Umo+Jg1Fk4xbC/tKzyu tDViGDC6ou4wbhCwr+brjhq6HMn39fFHM4MwvOBDTP+Xc5PUdUnffDq/XyyTsMAK t2eJ5b/w8Te3fJKzBnUtUmfmMf64tyrYv/51ZOs9HIK4o1lDxyMkj8J1vD0ZUvMx 1edWt2ssqsQ+RUd9Z+1kO6A4CBA4HQzu6QrS57jS1revoK1zTJoywvP4JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgAIs2/P7Yd2zdB2tiE3MQBndgOMB8GA1UdIwQY MBaAFK+wCyk5bngDPtusr++YULGw41MjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdBTEtUbHVlQU0tMjZ5djc1aFFzYkRqVXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lNGNhNTYtMTM4Ni00MzJjLTk2Y2It NjVhOWE0ZGZhZDllLzEvcjdBTEtUbHVlQU0tMjZ5djc1aFFzYkRqVXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lNGNhNTYtMTM4Ni00MzJjLTk2Y2ItNjVhOWE0ZGZhZDll LzEvcjdBTEtUbHVlQU0tMjZ5djc1aFFzYkRqVXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr4IPpP9 lR5iAsjNHoEhQNvm0lMJ6rBkRcNrdz54fs8lbdJCSZYOBuKwZWDulmcx56zsEyMW okMi7Vz9a/AT+zAabkXMyMRwTKBL6eJn8cxq4IP3qiUbxSIZg+TaKSJVFVU/aIqC I8sDIsrr2ZRsl5Vt5wXR3qdOLnLM3uV60p0f4W2vZrUJ0LgE9quNAzTGjzRkZdG5 yaHDti6B+MdCeZwGPDrqKfOVMxV+p8M/+7jciTXxO8gidzmumscNOB0Y7/Ne7tC8 OgkdX004ISgSgXeLNNWB7VuszzivHKS4HB8bVIJPYD5aNfxGVCsRIkU9K0ODeeBa JHSV0AYbvL8hjw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:23 2025 by rpki-client