This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json) Hash identifier: PKkTjf9eQV8rWs9nbKrBxPCAtXZ6Sxbi5R+/25HlF0U= Subject key identifier: 32:CB:E9:88:79:92:6D:15:8B:6F:AF:C5:27:45:6F:DA:0D:E3:BD:E3 Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e Certificate serial: 019B552B5A37E525E139629B16BBB279C989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 11:01:03 +0000 Manifest this update: Thu 25 Dec 2025 11:01:03 +0000 Manifest next update: Fri 26 Dec 2025 11:01:03 +0000 Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: LwosbXT5nWNVTj/xbyOChro2EXaRvE7h2LYHFJYf76c=) 2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:5a:37:e5:25:e1:39:62:9b:16:bb:b2:79:c9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e Validity Not Before: Dec 25 11:01:03 2025 GMT Not After : Dec 26 11:01:03 2025 GMT Subject: CN=32cbe98879926d158b6fafc527456fda0de3bde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4f:7a:4f:88:4d:e7:fb:1a:2f:b0:55:76:aa: a5:c1:14:8c:9b:18:e2:8c:46:6d:ca:f3:0e:8b:7b: 20:9a:a8:86:6c:ee:c5:f6:c3:27:03:3f:72:9d:ea: 54:4a:96:00:5e:32:4a:a3:41:cf:32:2a:a6:4f:da: 52:9b:0b:c5:05:08:e8:65:e6:34:e0:6d:5f:04:c9: 02:53:80:ef:8a:35:9c:d6:9c:70:8e:09:06:7a:9f: 66:b4:e8:55:42:15:73:86:25:c8:2b:ec:2c:95:8b: 52:5b:4d:71:2f:ab:bd:89:a6:80:fa:0a:c3:9b:05: 0f:5c:4a:41:85:71:6e:7c:b6:d3:c5:11:e1:1d:e1: 65:3b:06:7a:b7:ed:e1:0f:c1:c7:82:62:a6:f4:b1: a7:5b:6b:03:41:fa:82:7d:a3:be:49:40:d3:b2:a9: 79:82:33:33:f0:86:89:a1:c5:bc:6e:dc:df:a8:27: dd:ff:9f:20:59:0a:cb:c3:64:d3:e3:f0:bb:6a:24: a7:4f:76:c6:db:77:75:9b:d4:7d:ee:13:35:14:1b: 43:49:b1:11:8f:a8:b4:9f:4a:c2:b6:dd:d2:d9:e2: 75:c5:9e:62:21:3f:38:63:d6:b1:5c:19:ad:e2:fe: 98:20:81:b1:dd:42:32:13:bd:78:72:a5:00:dc:5f: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:E9:88:79:92:6D:15:8B:6F:AF:C5:27:45:6F:DA:0D:E3:BD:E3 X509v3 Authority Key Identifier: keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a0:8c:c6:14:c8:52:29:97:5e:51:d3:53:ee:2d:6f:1e:fd: dc:03:7b:09:ef:02:22:3a:87:ef:d7:49:ec:77:c4:71:17:02: f2:6e:6b:8f:5d:33:75:2d:f5:0f:99:28:1f:01:46:9c:98:b2: 00:2f:25:bd:cf:68:6a:67:c4:f3:66:c9:f7:23:60:f7:c6:b5: 2f:b8:76:9f:47:0a:30:ee:d4:e5:7e:ba:3d:04:7d:bc:31:cf: ab:10:71:45:f6:a5:56:65:94:f9:57:6b:9c:ec:7b:36:43:b4: fe:e9:84:a4:12:a5:4b:92:c3:5d:10:9e:19:0c:f3:3d:ea:a9: f9:8d:a9:0e:db:ca:ef:8f:cc:73:4c:29:5d:0a:ce:26:19:13: 6e:86:d6:3f:2e:87:83:04:76:b5:ce:23:41:72:62:c6:f5:dd: fa:b0:5b:41:ce:09:84:38:62:39:cb:a2:83:69:b6:af:ce:46: 2e:47:04:a1:ee:cb:36:b8:59:29:3f:e4:f5:d9:64:01:2e:38: 63:ff:93:4e:d4:6a:9c:ea:ef:28:8f:cb:0d:70:49:58:c3:6d: 89:94:40:74:29:7b:f0:49:05:95:1b:cc:89:98:2b:60:9b:f6: f1:11:40:dc:58:f9:55:a4:3e:e6:8c:8c:97:7e:9b:35:0c:2d: aa:fd:9f:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK1o35SXhOWKbFruyecmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey ODAzN2UwHhcNMjUxMjI1MTEwMTAzWhcNMjUxMjI2MTEwMTAzWjAzMTEwLwYDVQQD EygzMmNiZTk4ODc5OTI2ZDE1OGI2ZmFmYzUyNzQ1NmZkYTBkZTNiZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU96T4hN5/saL7BVdqqlwRSMmxji jEZtyvMOi3sgmqiGbO7F9sMnAz9ynepUSpYAXjJKo0HPMiqmT9pSmwvFBQjoZeY0 4G1fBMkCU4DvijWc1pxwjgkGep9mtOhVQhVzhiXIK+wslYtSW01xL6u9iaaA+grD mwUPXEpBhXFufLbTxRHhHeFlOwZ6t+3hD8HHgmKm9LGnW2sDQfqCfaO+SUDTsql5 gjMz8IaJocW8btzfqCfd/58gWQrLw2TT4/C7aiSnT3bG23d1m9R97hM1FBtDSbER j6i0n0rCtt3S2eJ1xZ5iIT84Y9axXBmt4v6YIIGx3UIyE714cqUA3F9evwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLL6Yh5km0Vi2+vxSdFb9oN473jMB8GA1UdIwQY MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaCMxhTI UimXXlHTU+4tbx793AN7Ce8CIjqH79dJ7HfEcRcC8m5rj10zdS31D5koHwFGnJiy AC8lvc9oamfE82bJ9yNg98a1L7h2n0cKMO7U5X66PQR9vDHPqxBxRfalVmWU+Vdr nOx7NkO0/umEpBKlS5LDXRCeGQzzPeqp+Y2pDtvK74/Mc0wpXQrOJhkTbobWPy6H gwR2tc4jQXJixvXd+rBbQc4JhDhiOcuig2m2r85GLkcEoe7LNrhZKT/k9dlkAS44 Y/+TTtRqnOrvKI/LDXBJWMNtiZRAdCl78EkFlRvMiZgrYJv28RFA3Fj5VaQ+5oyM l36bNQwtqv2fQQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:30:12 2025 by rpki-client