This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json) Hash identifier: 5OpWEebHZqRT89AtwgEMW85k1x+phS4L44nKmUnshEA= Subject key identifier: A1:37:48:E1:AB:27:65:47:68:1A:BC:66:6F:46:94:39:65:12:EB:DD Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f Certificate serial: 019B4C5F2E2B8D36A45ADAFED5F0B2898AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft Manifest number: 0C08 Signing time: Tue 23 Dec 2025 18:01:04 +0000 Manifest this update: Tue 23 Dec 2025 18:01:04 +0000 Manifest next update: Wed 24 Dec 2025 18:01:04 +0000 Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: QgdSrOICzdJcfJXr/KryqOZScA7dSSV5nHMyvMpZOXg=) 2: JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa (hash: K8bXo6vEOSPG5pKmJ8Ir19tJNgI9+I5+FHzJIbxUZek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:2e:2b:8d:36:a4:5a:da:fe:d5:f0:b2:89:8a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f Validity Not Before: Dec 23 18:01:04 2025 GMT Not After : Dec 24 18:01:04 2025 GMT Subject: CN=a13748e1ab276547681abc666f4694396512ebdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:a7:8d:6a:3c:ff:2d:94:4b:9c:06:82:b5: c9:42:25:f5:26:f1:2e:b3:27:7b:a7:78:3f:ca:ba: d9:57:05:53:26:35:e5:38:c3:7d:27:04:09:a4:e8: ad:42:25:ea:14:2f:1a:29:51:bf:bf:02:24:ec:09: 4d:5e:93:0a:bc:9f:28:a7:68:5b:8f:d1:1b:0e:db: 3b:cf:c1:dc:11:a3:be:d1:6d:59:8c:1a:60:35:e0: ca:6f:eb:2d:e5:f6:ae:fd:c7:0d:7e:24:ec:67:47: 37:39:c7:17:50:27:89:f8:11:f4:8c:de:74:ae:e8: 0d:12:94:5c:58:2d:0e:31:28:9e:4c:1c:68:57:93: 69:57:7a:8c:c1:e4:70:3b:ca:f2:a4:e1:a3:da:8e: ca:51:37:f9:40:ff:17:30:b9:29:7d:4e:7d:c3:8d: a4:45:d1:c3:c4:db:49:ad:ad:a7:af:4d:29:84:07: 4b:fd:09:f6:24:3e:4d:e4:50:bb:1d:d1:92:34:f0: 25:d4:12:87:b0:11:a7:a2:0f:15:f8:e6:6b:2b:97: ab:5a:71:81:be:54:27:21:16:ac:7e:1d:9c:26:ee: 6c:7b:a4:8d:0a:29:d1:6c:ab:a8:3c:d2:71:ce:51: 2e:9c:3f:ce:db:90:32:07:5f:50:b4:61:0d:db:89: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:48:E1:AB:27:65:47:68:1A:BC:66:6F:46:94:39:65:12:EB:DD X509v3 Authority Key Identifier: keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:89:1d:b1:c1:c9:90:c1:cb:8b:e5:47:e6:75:68:a8:bd:5b: d4:c1:b7:c9:8c:86:c4:f5:45:32:43:a4:31:66:1e:54:37:af: bf:4c:2e:83:89:94:6d:3e:46:26:f8:f7:38:ff:6e:20:09:9f: 14:f5:ac:8f:23:bf:b3:41:d6:23:3d:2c:b4:e4:06:73:d7:c5: a3:9a:3a:02:08:40:a7:01:02:e2:fa:d6:87:cc:33:39:4b:66: 1e:1e:b8:24:ed:fa:8f:61:89:36:27:39:1a:b7:78:76:59:5d: 32:26:f7:e9:76:ac:c9:46:e3:12:85:f0:e0:c2:e6:dc:8f:79: 30:f8:da:36:22:ef:eb:91:05:ae:e8:e7:82:4f:62:c0:2b:61: 52:1e:be:0a:11:a0:f5:fe:3c:a3:74:a4:92:30:15:1d:3a:43: 69:8f:45:60:db:d1:84:c9:0e:df:cb:e4:c5:37:2d:02:94:67: 5c:98:44:81:c0:54:11:a2:d6:a8:3d:20:54:a3:29:4b:b9:e3: 4f:3e:0f:f0:cd:6b:27:ad:d6:d1:b6:07:4f:69:eb:85:54:11: 85:43:fb:6a:6a:c1:fc:dd:48:ec:59:f2:72:86:65:d6:f7:ed: ff:a7:6c:1b:82:d9:84:cc:9b:56:4e:b2:01:4b:22:0c:6f:7b: 0a:81:0c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXy4rjTakWtr+1fCyiYr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYTI2YzQwOGZjNjdiNzUyNzM0Y2M5OTdmMzYzMGRiYWY2 ZjYwNmYwHhcNMjUxMjIzMTgwMTA0WhcNMjUxMjI0MTgwMTA0WjAzMTEwLwYDVQQD EyhhMTM3NDhlMWFiMjc2NTQ3NjgxYWJjNjY2ZjQ2OTQzOTY1MTJlYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuynjWo8/y2US5wGgrXJQiX1JvEu syd7p3g/yrrZVwVTJjXlOMN9JwQJpOitQiXqFC8aKVG/vwIk7AlNXpMKvJ8op2hb j9EbDts7z8HcEaO+0W1ZjBpgNeDKb+st5fau/ccNfiTsZ0c3OccXUCeJ+BH0jN50 rugNEpRcWC0OMSieTBxoV5NpV3qMweRwO8rypOGj2o7KUTf5QP8XMLkpfU59w42k RdHDxNtJra2nr00phAdL/Qn2JD5N5FC7HdGSNPAl1BKHsBGnog8V+OZrK5erWnGB vlQnIRasfh2cJu5se6SNCinRbKuoPNJxzlEunD/O25AyB19QtGEN24koQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE3SOGrJ2VHaBq8Zm9GlDllEuvdMB8GA1UdIwQY MBaAFO2ibECPxnt1JzTMmX82MNuvb2BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTIt OWQ0YTY2YWIzZmYyLzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTItOWQ0YTY2YWIzZmYy LzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2YkdscHJ kMHLi+VH5nVoqL1b1MG3yYyGxPVFMkOkMWYeVDevv0wug4mUbT5GJvj3OP9uIAmf FPWsjyO/s0HWIz0stOQGc9fFo5o6AghApwEC4vrWh8wzOUtmHh64JO36j2GJNic5 Grd4dlldMib36XasyUbjEoXw4MLm3I95MPjaNiLv65EFrujngk9iwCthUh6+ChGg 9f48o3SkkjAVHTpDaY9FYNvRhMkO38vkxTctApRnXJhEgcBUEaLWqD0gVKMpS7nj Tz4P8M1rJ63W0bYHT2nrhVQRhUP7amrB/N1I7FnycoZl1vft/6dsG4LZhMybVk6y AUsiDG97CoEMtQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:56:35 2025 by rpki-client