This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json) Hash identifier: eAfMwE9n3NghxHHDKH0YyZRGNcDq0TmjJkXPu+kq1d8= Subject key identifier: 21:16:72:EA:C9:68:F9:00:29:56:E3:9F:5A:FD:C2:0B:29:8B:8A:EC Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c Certificate serial: 019B3E6C5ACFE56EA3AD12393094BC6E1CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft Manifest number: 08B8 Signing time: Sun 21 Dec 2025 01:00:46 +0000 Manifest this update: Sun 21 Dec 2025 01:00:46 +0000 Manifest next update: Mon 22 Dec 2025 01:00:46 +0000 Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: dz9GCEdac6EOwoZM3GPzKcsc0hVtYuBP0IGc8kmptgE=) 2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=) 3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:5a:cf:e5:6e:a3:ad:12:39:30:94:bc:6e:1c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c Validity Not Before: Dec 21 01:00:46 2025 GMT Not After : Dec 22 01:00:46 2025 GMT Subject: CN=211672eac968f9002956e39f5afdc20b298b8aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:df:be:db:b7:ce:c3:26:37:52:00:10:05: fc:6a:eb:cb:ca:a3:13:c4:ca:b1:fb:67:4f:99:5e: 63:6b:4c:d4:ac:b2:5c:c5:84:a1:7e:9c:5f:ef:98: ad:8c:31:07:e1:38:78:0b:1d:27:68:12:73:6f:75: 15:fc:cf:1b:cc:4a:d9:6f:e3:9f:1b:4a:19:04:a7: 00:81:f2:95:e4:bd:03:72:93:a0:de:ea:e5:ed:04: 59:ce:89:ea:27:b6:71:7f:5f:f6:b3:af:a9:b8:9d: cd:32:4d:b3:af:76:49:57:3a:20:3d:b9:c5:95:4c: 66:bc:fa:47:94:68:e5:e2:cb:f2:ce:3c:66:b0:45: 80:4c:c1:ba:e7:71:4a:4a:0f:7f:76:f5:41:eb:2e: dc:20:67:27:d1:7d:25:47:22:8c:13:3d:18:a0:ef: 49:76:83:b9:8f:ed:9d:be:46:e4:ea:2d:30:df:41: fb:2a:82:e2:fa:18:82:af:bd:25:54:e4:e1:68:5e: fe:1a:57:d6:3a:80:38:11:a0:e5:26:80:7b:a4:88: ee:6f:f0:26:07:d6:59:d7:1e:30:38:99:7e:7b:46: af:c1:20:f3:ba:36:21:19:7e:09:4b:ac:ad:39:32: 50:23:99:e5:db:6e:57:9c:b6:f0:9c:e6:ac:11:49: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:72:EA:C9:68:F9:00:29:56:E3:9F:5A:FD:C2:0B:29:8B:8A:EC X509v3 Authority Key Identifier: keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:27:b5:17:b7:44:66:56:90:0d:3b:72:f2:56:f6:e5:4b: 30:1c:cb:6f:da:ad:d3:6d:f8:fa:c9:a9:2d:74:3e:f1:80:6b: e3:20:a4:df:d6:11:81:2d:60:9d:c0:36:50:c8:a7:94:08:64: 9b:aa:7e:3f:0d:06:d6:12:7a:bf:28:7f:a6:ea:50:81:13:36: dd:e0:6e:ee:14:58:51:38:2a:cb:b8:b0:f0:6a:b3:54:65:f2: df:7c:93:4f:2a:be:56:bb:ca:e6:1c:66:d0:c3:eb:d2:36:05: 62:ad:d7:1b:b9:39:5c:e1:91:57:bf:8c:fa:c7:18:d7:82:f3: d1:ec:ef:2d:da:51:04:1b:5e:8a:6e:85:2c:ad:0b:71:15:44: 76:a2:d6:8c:06:b6:23:3d:a8:92:ac:ba:94:30:12:29:20:0c: 6f:cb:a5:be:65:68:fe:c3:ac:bb:7a:1c:1b:e5:27:ef:65:ef: 00:14:0b:05:80:a1:70:9c:dc:91:fa:65:ce:15:d2:17:8f:2d: 75:25:82:5c:4e:cc:73:79:ca:c9:a6:b9:28:e9:a8:9b:2e:89: 99:3f:e2:e2:15:8b:1d:a3:4c:a0:3b:e7:b9:c4:c2:e7:7c:5d: de:6f:63:0b:25:60:d5:f7:f5:3f:2c:01:48:ed:f1:cb:b2:ff: 1a:17:d1:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bFrP5W6jrRI5MJS8bhziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm MjgyN2MwHhcNMjUxMjIxMDEwMDQ2WhcNMjUxMjIyMDEwMDQ2WjAzMTEwLwYDVQQD EygyMTE2NzJlYWM5NjhmOTAwMjk1NmUzOWY1YWZkYzIwYjI5OGI4YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcnfvtu3zsMmN1IAEAX8auvLyqMT xMqx+2dPmV5ja0zUrLJcxYShfpxf75itjDEH4Th4Cx0naBJzb3UV/M8bzErZb+Of G0oZBKcAgfKV5L0DcpOg3url7QRZzonqJ7Zxf1/2s6+puJ3NMk2zr3ZJVzogPbnF lUxmvPpHlGjl4svyzjxmsEWATMG653FKSg9/dvVB6y7cIGcn0X0lRyKMEz0YoO9J doO5j+2dvkbk6i0w30H7KoLi+hiCr70lVOThaF7+GlfWOoA4EaDlJoB7pIjub/Am B9ZZ1x4wOJl+e0avwSDzujYhGX4JS6ytOTJQI5nl225XnLbwnOasEUl7wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEWcurJaPkAKVbjn1r9wgspi4rsMB8GA1UdIwQY MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt YmFiNDhkYWI0Y2Q2LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2 LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQontRe3 RGZWkA07cvJW9uVLMBzLb9qt0234+smpLXQ+8YBr4yCk39YRgS1gncA2UMinlAhk m6p+Pw0G1hJ6vyh/pupQgRM23eBu7hRYUTgqy7iw8GqzVGXy33yTTyq+VrvK5hxm 0MPr0jYFYq3XG7k5XOGRV7+M+scY14Lz0ezvLdpRBBteim6FLK0LcRVEdqLWjAa2 Iz2okqy6lDASKSAMb8ulvmVo/sOsu3ocG+Un72XvABQLBYChcJzckfplzhXSF48t dSWCXE7Mc3nKyaa5KOmomy6JmT/i4hWLHaNMoDvnucTC53xd3m9jCyVg1ff1PywB SO3xy7L/GhfR5A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:53:08 2025 by rpki-client