This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json) Hash identifier: Ahy/Q3QtzKkDg6Jeikpc80Kw1OAt00tHnueVxNuZuyY= Subject key identifier: 0F:F5:95:14:88:2F:B3:68:04:97:AD:56:87:D4:D4:D4:C5:1A:EC:15 Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c Certificate serial: 019B481449B847500E13594AD659BED954C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft Manifest number: 08BD Signing time: Mon 22 Dec 2025 22:00:47 +0000 Manifest this update: Mon 22 Dec 2025 22:00:47 +0000 Manifest next update: Tue 23 Dec 2025 22:00:47 +0000 Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: IexwrRIosC4doqafVk+HAV91IjPlf+JW5WEtZ6/pw5g=) 2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=) 3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:49:b8:47:50:0e:13:59:4a:d6:59:be:d9:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c Validity Not Before: Dec 22 22:00:47 2025 GMT Not After : Dec 23 22:00:47 2025 GMT Subject: CN=0ff59514882fb3680497ad5687d4d4d4c51aec15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:ef:f2:f8:05:61:2d:58:54:cc:ad:37:32: 55:ae:f2:7d:83:98:43:c3:07:0c:b2:fd:58:78:cc: a4:08:63:c4:67:7d:f0:c4:52:f8:7e:de:14:6b:99: 21:41:bb:ed:83:6b:d7:64:a0:7f:6e:f6:5a:56:bd: a4:84:f5:b0:0f:2d:3e:92:96:ec:9a:20:ce:33:a6: 0c:4b:28:4e:7d:ab:4e:25:f4:bb:60:86:fe:82:fe: 75:30:8b:06:f0:b5:05:0c:42:27:c6:7c:ce:40:94: 97:0b:5a:d7:15:07:e6:36:e9:17:a7:43:65:c8:43: 27:b6:05:93:dc:85:06:57:92:11:b5:f2:3f:3c:85: d1:d6:80:77:46:85:ea:b8:cd:b6:2c:5f:57:75:6a: 6e:d3:e4:ca:cf:48:b8:fb:ae:d2:3c:cf:3c:c8:c3: 7e:e8:d9:b3:74:a0:41:c9:6c:9d:41:44:2f:b8:b8: 0a:25:07:ef:2e:dc:09:bf:b6:79:2f:4c:b2:0a:03: 48:ad:10:f6:64:1e:3e:cb:1b:fd:f5:3d:f0:14:2e: 5e:05:6d:5d:8a:a4:91:a6:66:a4:d5:d5:23:e0:9e: 94:cc:11:b6:3c:4d:df:d7:69:96:d6:a1:29:cf:db: 55:f6:77:77:86:70:25:88:13:d0:ce:f3:3f:bc:9e: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:95:14:88:2F:B3:68:04:97:AD:56:87:D4:D4:D4:C5:1A:EC:15 X509v3 Authority Key Identifier: keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9d:55:a1:32:ab:f5:fb:0f:c5:0f:14:44:a9:85:db:cc:ff: 9a:3d:aa:ad:d8:e3:57:dc:77:49:9b:9b:8c:e3:c4:cf:c6:4e: 8e:94:1c:69:03:b5:54:5f:1d:52:37:a2:78:cd:8d:74:f0:8d: 47:cb:c9:2c:1b:04:2a:8c:96:81:5e:aa:5f:20:3f:93:79:ce: 04:2f:f6:75:83:9d:96:53:da:f4:54:45:b3:f9:35:5f:13:90: 00:7a:cd:27:8e:06:c3:13:14:10:d7:d0:56:f1:4b:66:7d:3e: 34:0d:b0:01:03:b2:75:6b:19:56:14:12:3f:67:37:81:44:58: 23:57:5e:f4:f0:7a:01:b8:45:87:5a:24:ff:77:ed:c2:36:94: 71:49:f8:f6:35:e1:0b:9d:0e:36:43:49:31:6d:3d:79:6a:fa: 7c:57:33:4d:ae:47:14:20:b2:b3:34:cc:82:40:32:34:e6:9a: 08:0c:da:2e:de:b2:a0:c8:85:ef:e3:87:5f:21:a4:62:bb:2b: 79:8e:a5:df:d3:6d:24:50:89:11:28:39:59:cb:b9:4e:ad:f3: 48:b8:a6:d0:c7:49:b8:62:83:b8:e3:84:71:7b:1d:e5:d5:d8: dc:f6:2a:14:cd:a9:d0:c8:31:7f:2e:46:71:7c:f8:76:0e:eb: 29:ab:28:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFEm4R1AOE1lK1lm+2VTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm MjgyN2MwHhcNMjUxMjIyMjIwMDQ3WhcNMjUxMjIzMjIwMDQ3WjAzMTEwLwYDVQQD EygwZmY1OTUxNDg4MmZiMzY4MDQ5N2FkNTY4N2Q0ZDRkNGM1MWFlYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RDv8vgFYS1YVMytNzJVrvJ9g5hD wwcMsv1YeMykCGPEZ33wxFL4ft4Ua5khQbvtg2vXZKB/bvZaVr2khPWwDy0+kpbs miDOM6YMSyhOfatOJfS7YIb+gv51MIsG8LUFDEInxnzOQJSXC1rXFQfmNukXp0Nl yEMntgWT3IUGV5IRtfI/PIXR1oB3RoXquM22LF9XdWpu0+TKz0i4+67SPM88yMN+ 6NmzdKBByWydQUQvuLgKJQfvLtwJv7Z5L0yyCgNIrRD2ZB4+yxv99T3wFC5eBW1d iqSRpmak1dUj4J6UzBG2PE3f12mW1qEpz9tV9nd3hnAliBPQzvM/vJ6LdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/1lRSIL7NoBJetVofU1NTFGuwVMB8GA1UdIwQY MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt YmFiNDhkYWI0Y2Q2LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2 LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ1VoTKr 9fsPxQ8URKmF28z/mj2qrdjjV9x3SZubjOPEz8ZOjpQcaQO1VF8dUjeieM2NdPCN R8vJLBsEKoyWgV6qXyA/k3nOBC/2dYOdllPa9FRFs/k1XxOQAHrNJ44GwxMUENfQ VvFLZn0+NA2wAQOydWsZVhQSP2c3gURYI1de9PB6AbhFh1ok/3ftwjaUcUn49jXh C50ONkNJMW09eWr6fFczTa5HFCCyszTMgkAyNOaaCAzaLt6yoMiF7+OHXyGkYrsr eY6l39NtJFCJESg5Wcu5Tq3zSLim0MdJuGKDuOOEcXsd5dXY3PYqFM2p0Mgxfy5G cXz4dg7rKasobg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:49:15 2025 by rpki-client