This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft File: 7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json) Hash identifier: lJIAfvIR1FGWtx9cNc+4dTAqhjzSduzwEs9iJh663sQ= Subject key identifier: FE:15:05:E1:29:F9:74:D4:B6:41:E9:00:E0:77:4D:99:E9:10:E8:BF Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b Certificate serial: 019B499515E79765F8163B69BA60F678D521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 05:01:05 +0000 Manifest this update: Tue 23 Dec 2025 05:01:05 +0000 Manifest next update: Wed 24 Dec 2025 05:01:05 +0000 Files and hashes: 1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: 4ogGK+JHcLT+c/PvfTpp67E5cTODlUPoC76EFPcolSM=) 2: CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa (hash: SmeUvVuEhfInXhWNJ0VU7sOK6/ghCJAsk+fSAJsrYgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:15:e7:97:65:f8:16:3b:69:ba:60:f6:78:d5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b Validity Not Before: Dec 23 05:01:05 2025 GMT Not After : Dec 24 05:01:05 2025 GMT Subject: CN=fe1505e129f974d4b641e900e0774d99e910e8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:64:63:f9:79:22:de:d4:b8:d5:1f:7f:77: 12:ed:59:e3:1f:14:49:94:15:69:82:b2:de:7d:6c: 8e:11:45:c7:77:7c:38:f4:b9:ce:bd:54:86:8b:6f: 3c:d9:5f:7e:bc:43:8b:75:be:33:57:ee:20:ae:80: 38:16:bd:74:0a:6a:e5:21:19:e0:78:c2:e8:e9:ea: 82:75:0f:a9:fa:ba:41:cf:b1:78:c5:c8:fd:62:aa: 6d:f4:49:a9:21:a7:ac:4f:bb:ba:f7:2f:a8:35:be: 29:35:55:8f:0a:6c:ab:c7:3e:bb:36:63:10:14:b1: 70:a1:a8:23:ea:ee:28:2a:39:b2:2b:42:43:02:13: 32:7f:63:a2:4d:6e:90:6b:21:d6:81:79:6d:5e:27: 9f:9e:c0:b5:5f:db:01:1f:30:cc:b5:9f:ae:a6:18: 15:40:29:6e:e2:b1:84:d6:59:aa:cf:4c:a0:2b:9c: 0a:a8:cb:6e:ce:ea:fc:c0:6d:29:62:a6:b0:b6:4d: cd:fd:13:5c:75:4e:1f:a2:03:e6:1f:a3:db:21:c9: 58:42:98:54:88:44:12:f6:c5:18:eb:c1:b3:cd:8d: ee:48:cc:ce:32:0c:6d:29:14:e4:88:f3:5b:11:c5: 60:0d:72:5b:71:4e:d3:c6:5c:82:d4:a6:11:8c:14: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:15:05:E1:29:F9:74:D4:B6:41:E9:00:E0:77:4D:99:E9:10:E8:BF X509v3 Authority Key Identifier: keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c5:fb:f3:af:61:80:01:b6:75:dc:79:2e:21:30:a5:af:f4: 58:79:76:b6:a1:77:5d:ba:d4:a5:d2:e6:d3:ee:0f:e1:ce:ea: 7d:31:3e:91:ca:94:9b:a5:b2:ba:b5:81:b9:63:e0:cf:37:f0: ce:88:04:94:5e:77:cf:f3:f0:6c:20:88:0d:4f:e4:5c:2c:45: b0:d1:47:6b:5e:08:20:c3:76:c6:7e:56:83:90:1f:e3:1e:a7: 5b:8b:1d:50:54:35:4a:0f:3a:70:87:e9:4a:65:6e:c9:60:7b: 2c:32:8a:1e:08:75:26:db:2b:ab:65:26:67:65:85:ef:4d:48: 5f:5f:1c:08:16:4a:3e:46:7a:b0:62:bf:6f:6d:0e:ea:8c:62: a7:fe:66:54:04:42:76:09:fa:66:e7:a4:95:27:5c:69:56:20: 1b:25:16:6f:d1:c0:90:be:a1:f0:6b:bf:e5:d4:bd:d8:77:ee: c4:fb:c1:45:5e:73:2d:fb:ce:77:2c:a0:81:37:0b:2b:b6:03: 2b:55:74:66:2b:bb:a5:72:ef:25:bd:f5:44:15:42:61:f6:bc: 0e:ef:16:f7:99:e6:dc:fd:08:46:72:05:10:d0:f9:b4:ce:83: d4:2f:5c:24:d5:03:31:0e:b2:aa:09:08:55:68:7b:e1:c2:5d: c2:b3:e0:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlRXnl2X4FjtpumD2eNUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNWU4MzgzMTJlMDRhZWY5Zjk1MzZlMjBjZDQxMjgzYTdi OGI3N2IwHhcNMjUxMjIzMDUwMTA1WhcNMjUxMjI0MDUwMTA1WjAzMTEwLwYDVQQD EyhmZTE1MDVlMTI5Zjk3NGQ0YjY0MWU5MDBlMDc3NGQ5OWU5MTBlOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC5kY/l5It7UuNUff3cS7VnjHxRJ lBVpgrLefWyOEUXHd3w49LnOvVSGi2882V9+vEOLdb4zV+4groA4Fr10CmrlIRng eMLo6eqCdQ+p+rpBz7F4xcj9Yqpt9EmpIaesT7u69y+oNb4pNVWPCmyrxz67NmMQ FLFwoagj6u4oKjmyK0JDAhMyf2OiTW6QayHWgXltXiefnsC1X9sBHzDMtZ+uphgV QClu4rGE1lmqz0ygK5wKqMtuzur8wG0pYqawtk3N/RNcdU4fogPmH6PbIclYQphU iEQS9sUY68GzzY3uSMzOMgxtKRTkiPNbEcVgDXJbcU7TxlyC1KYRjBSZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4VBeEp+XTUtkHpAOB3TZnpEOi/MB8GA1UdIwQY MBaAFO1eg4MS4Ervn5U24gzUEoOnuLd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYt ZWRhY2E5ZDEzNjFhLzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYtZWRhY2E5ZDEzNjFh LzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8X7869h gAG2ddx5LiEwpa/0WHl2tqF3XbrUpdLm0+4P4c7qfTE+kcqUm6WyurWBuWPgzzfw zogElF53z/PwbCCIDU/kXCxFsNFHa14IIMN2xn5Wg5Af4x6nW4sdUFQ1Sg86cIfp SmVuyWB7LDKKHgh1Jtsrq2UmZ2WF701IX18cCBZKPkZ6sGK/b20O6oxip/5mVARC dgn6ZueklSdcaVYgGyUWb9HAkL6h8Gu/5dS92HfuxPvBRV5zLfvOdyyggTcLK7YD K1V0Ziu7pXLvJb31RBVCYfa8Du8W95nm3P0IRnIFEND5tM6D1C9cJNUDMQ6yqgkI VWh74cJdwrPgGg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:31:13 2025 by rpki-client