This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json) Hash identifier: 7t2I7v57qRH4isQd1J7Xp9tmKa6QVTDwpyiPtdwGH1w= Subject key identifier: 64:CB:E7:A8:47:0C:6C:61:6A:F3:0A:FD:1C:60:C2:05:A5:19:6F:BC Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6 Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6 Certificate serial: 019B3E357F68481455E883C183BDCFAFB2EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft Manifest number: 0528 Signing time: Sun 21 Dec 2025 00:00:51 +0000 Manifest this update: Sun 21 Dec 2025 00:00:51 +0000 Manifest next update: Mon 22 Dec 2025 00:00:51 +0000 Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: cMHmUdtSgEjvjSt4UxDiggTtB9S4f0dU5Kd29pHWl9I=) 2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=) 3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:7f:68:48:14:55:e8:83:c1:83:bd:cf:af:b2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6 Validity Not Before: Dec 21 00:00:51 2025 GMT Not After : Dec 22 00:00:51 2025 GMT Subject: CN=64cbe7a8470c6c616af30afd1c60c205a5196fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:6e:11:3e:af:c4:d0:85:5b:7e:b2:73:24: 70:82:7f:af:6b:97:2e:dc:0b:cb:e1:84:12:7d:7c: 55:df:d2:25:e2:1d:e1:f4:2f:f6:f0:5e:b6:79:10: 7c:39:57:1c:f0:5a:b7:8d:80:27:a2:74:c2:da:00: a7:56:a1:ae:f8:85:e3:0c:0c:48:df:b8:ee:70:3b: 30:ee:7f:62:0b:2d:82:6b:3a:9a:85:f2:47:8c:1c: b7:1d:75:7b:36:94:29:71:cc:4a:45:09:b6:55:1f: 8d:a3:86:85:0b:c9:c2:5a:41:38:1e:ae:a3:73:84: 6d:e7:8f:d9:a5:4d:0b:3b:79:4f:ee:f1:d9:4a:4a: 3d:12:b9:e6:f9:e0:1d:d0:d2:14:35:21:c7:f2:b0: 3d:8a:99:27:8e:e2:6a:0e:5b:9a:7d:d8:93:af:f6: b2:8a:57:e3:c1:5c:19:55:2f:dc:24:4d:5f:fd:cc: f5:a2:01:de:44:54:71:47:45:3d:82:ea:44:32:b2: 47:f5:52:e5:3e:5e:65:17:d8:6f:49:32:23:5a:7c: 6d:e3:ca:71:ee:b0:e6:99:21:b3:86:02:ae:a7:26: 00:10:28:43:7c:a5:37:09:d9:00:11:9e:d7:9b:d3: 40:0d:fd:f0:ca:e1:5d:62:e2:50:dc:56:fb:74:13: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CB:E7:A8:47:0C:6C:61:6A:F3:0A:FD:1C:60:C2:05:A5:19:6F:BC X509v3 Authority Key Identifier: keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e4:40:3e:86:7a:4c:2e:dd:73:81:92:9c:ef:13:3c:bc:2a: 69:ca:ac:f7:42:65:94:99:0f:34:a8:d8:fe:a7:0a:17:76:c4: a7:a4:2d:32:5d:42:99:c5:79:93:9a:0b:61:fa:b7:8a:8a:c9: 06:af:2e:e6:07:eb:da:ce:21:10:d9:02:a2:0c:7e:5c:1a:bc: 57:35:84:b7:2b:4e:9c:44:21:5c:a2:6f:69:0b:7a:4f:ef:7a: 8e:7c:81:63:80:f5:ea:02:b3:d8:98:8d:4a:79:e1:70:b0:db: cc:eb:1f:db:93:b5:6a:34:11:64:cd:33:83:65:96:30:e1:75: ce:37:96:5d:39:87:c5:33:ec:25:2c:d8:ca:af:da:2a:94:11: 7d:45:27:68:4e:e8:3f:65:36:e2:63:b2:3f:00:67:99:c2:42: 29:fc:9e:b4:71:1d:56:ec:7b:0a:e2:f6:95:14:a3:26:a2:37: 16:73:2f:b0:94:eb:31:eb:7f:bd:83:e0:ae:63:5a:23:6f:80: c0:35:70:58:c9:f0:61:0c:a6:06:e4:f5:37:2c:44:5e:5b:76: e8:f6:49:1e:2a:62:4f:3b:06:a3:a5:2b:db:f4:4e:a9:e8:72: 7f:ca:f1:45:26:fb:9b:15:7b:cf:49:25:f9:62:72:77:d9:57: ca:e5:b8:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NX9oSBRV6IPBg73Pr7LuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1 MzY5ZjYwHhcNMjUxMjIxMDAwMDUxWhcNMjUxMjIyMDAwMDUxWjAzMTEwLwYDVQQD Eyg2NGNiZTdhODQ3MGM2YzYxNmFmMzBhZmQxYzYwYzIwNWE1MTk2ZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTxuET6vxNCFW36ycyRwgn+va5cu 3AvL4YQSfXxV39Il4h3h9C/28F62eRB8OVcc8Fq3jYAnonTC2gCnVqGu+IXjDAxI 37jucDsw7n9iCy2CazqahfJHjBy3HXV7NpQpccxKRQm2VR+No4aFC8nCWkE4Hq6j c4Rt54/ZpU0LO3lP7vHZSko9Ernm+eAd0NIUNSHH8rA9ipknjuJqDluafdiTr/ay ilfjwVwZVS/cJE1f/cz1ogHeRFRxR0U9gupEMrJH9VLlPl5lF9hvSTIjWnxt48px 7rDmmSGzhgKupyYAEChDfKU3CdkAEZ7Xm9NADf3wyuFdYuJQ3Fb7dBOIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTL56hHDGxhavMK/RxgwgWlGW+8MB8GA1UdIwQY MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1 LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeRAPoZ6 TC7dc4GSnO8TPLwqacqs90JllJkPNKjY/qcKF3bEp6QtMl1CmcV5k5oLYfq3iorJ Bq8u5gfr2s4hENkCogx+XBq8VzWEtytOnEQhXKJvaQt6T+96jnyBY4D16gKz2JiN SnnhcLDbzOsf25O1ajQRZM0zg2WWMOF1zjeWXTmHxTPsJSzYyq/aKpQRfUUnaE7o P2U24mOyPwBnmcJCKfyetHEdVux7CuL2lRSjJqI3FnMvsJTrMet/vYPgrmNaI2+A wDVwWMnwYQymBuT1NyxEXlt26PZJHipiTzsGo6Ur2/ROqehyf8rxRSb7mxV7z0kl +WJyd9lXyuW4nA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:25 2025 by rpki-client