This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft File: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json) Hash identifier: IJpcwN9w3NOSEpN6xi/xW3v/1hS1VVqQJhnbSx7cLwk= Subject key identifier: 86:B3:E0:56:BD:74:DE:AE:15:0E:B7:32:A3:7E:81:D8:FE:95:B1:A8 Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Certificate serial: 019B4249E3BE5A8635AD93EFB4437F89B712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft Manifest number: 05E6 Signing time: Sun 21 Dec 2025 19:01:37 +0000 Manifest this update: Sun 21 Dec 2025 19:01:37 +0000 Manifest next update: Mon 22 Dec 2025 19:01:37 +0000 Files and hashes: 1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: ZLqRF/mRN2iJmcYtTWxtVCsM9PDBSk96b/c1vpT4TzI=) 2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:e3:be:5a:86:35:ad:93:ef:b4:43:7f:89:b7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Validity Not Before: Dec 21 19:01:37 2025 GMT Not After : Dec 22 19:01:37 2025 GMT Subject: CN=86b3e056bd74deae150eb732a37e81d8fe95b1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:7e:c9:da:c4:6a:a9:72:e6:6c:11:d5:94: 5e:c3:53:0b:c1:12:70:b4:0b:2c:86:a4:61:09:53: d4:0f:bb:10:c8:d2:b6:d4:61:70:28:4c:b6:61:25: ad:85:e1:40:26:2f:37:c7:5f:cf:0c:c5:2d:d3:2f: 03:22:22:3b:44:47:12:7b:eb:89:c3:e7:03:91:01: 30:2d:d5:fd:89:32:d3:b3:72:73:75:06:49:2a:2e: 8f:8d:ed:68:88:7d:05:ff:c5:08:4b:0b:ca:c9:7f: 79:46:aa:9a:eb:fd:95:74:94:54:f5:95:28:e1:34: 6b:d7:85:c7:ca:df:c0:0e:b7:2b:50:31:22:41:a0: 27:d6:f3:46:10:a8:f4:da:09:b4:ac:04:02:cf:2e: a4:62:d4:4e:97:29:b1:63:23:70:91:16:69:03:7d: 49:87:a6:37:cd:d3:c9:3f:21:ff:03:35:08:49:a7: 69:52:38:3c:3a:84:64:7a:17:53:c7:64:f6:d9:6f: cf:c0:90:3b:b0:aa:17:8a:6c:97:0d:c0:d1:81:a2: 1b:a9:69:cc:75:a8:3c:0e:af:c6:60:d9:1d:69:92: 8e:a3:a9:77:95:67:58:8d:6c:bd:23:c6:e4:a1:5f: 4f:6e:3f:aa:94:1f:b7:5d:2d:3c:45:55:b8:46:b0: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B3:E0:56:BD:74:DE:AE:15:0E:B7:32:A3:7E:81:D8:FE:95:B1:A8 X509v3 Authority Key Identifier: keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:de:e8:5a:bc:5d:e6:ff:d9:1b:1c:55:95:ef:6e:d3:df:c6: d8:a1:98:71:01:e9:c9:e7:47:b5:e9:43:5b:74:a5:aa:9a:3e: 28:d3:33:cd:b6:2c:52:09:64:e0:da:da:63:5f:b5:27:3e:64: 2e:83:df:e1:c7:d6:c8:3f:07:e2:48:bb:3e:51:0e:1c:68:e5: 7b:d6:da:56:94:60:37:14:57:ce:62:86:b9:21:d7:f3:8b:16: 2d:94:8d:ab:80:68:43:91:5a:be:e3:16:d1:a6:e3:35:50:97: 93:c0:49:69:ff:c2:f9:35:70:76:d7:1d:a5:49:ea:f6:d6:fe: d5:c9:06:9d:72:9b:d6:0c:1d:09:d0:77:95:69:0f:b4:a5:be: dc:b2:57:91:0c:5c:4c:88:d1:c3:77:fa:95:d4:4e:78:53:30: c8:7a:ae:8b:57:e9:c5:d7:3e:50:1e:bc:01:89:ce:60:7c:5c: a8:23:13:71:10:56:da:4c:d1:b0:65:37:69:99:53:80:42:80: 10:54:58:0a:f2:2e:c1:e1:3c:9b:54:7d:f6:29:73:31:fb:82: b2:90:bc:ae:27:94:00:83:a4:91:0f:71:be:17:7a:13:7c:05: 35:c1:79:6c:62:59:59:35:fc:aa:96:01:b9:07:80:d9:8a:2d: 1f:ff:00:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSeO+WoY1rZPvtEN/ibcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWE1MjQxNjMxM2I3NjQzZWQyOGQ0M2JjM2M0NjYxZjQ2 YWIzNjYwHhcNMjUxMjIxMTkwMTM3WhcNMjUxMjIyMTkwMTM3WjAzMTEwLwYDVQQD Eyg4NmIzZTA1NmJkNzRkZWFlMTUwZWI3MzJhMzdlODFkOGZlOTViMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvox+ydrEaqly5mwR1ZRew1MLwRJw tAsshqRhCVPUD7sQyNK21GFwKEy2YSWtheFAJi83x1/PDMUt0y8DIiI7REcSe+uJ w+cDkQEwLdX9iTLTs3JzdQZJKi6Pje1oiH0F/8UISwvKyX95Rqqa6/2VdJRU9ZUo 4TRr14XHyt/ADrcrUDEiQaAn1vNGEKj02gm0rAQCzy6kYtROlymxYyNwkRZpA31J h6Y3zdPJPyH/AzUISadpUjg8OoRkehdTx2T22W/PwJA7sKoXimyXDcDRgaIbqWnM dag8Dq/GYNkdaZKOo6l3lWdYjWy9I8bkoV9Pbj+qlB+3XS08RVW4RrCvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaz4Fa9dN6uFQ63MqN+gdj+lbGoMB8GA1UdIwQY MBaAFO6qUkFjE7dkPtKNQ7w8RmH0arNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAt ZDMzN2I5MzhkM2NjLzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAtZDMzN2I5MzhkM2Nj LzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt7oWrxd 5v/ZGxxVle9u09/G2KGYcQHpyedHtelDW3Slqpo+KNMzzbYsUglk4NraY1+1Jz5k LoPf4cfWyD8H4ki7PlEOHGjle9baVpRgNxRXzmKGuSHX84sWLZSNq4BoQ5FavuMW 0abjNVCXk8BJaf/C+TVwdtcdpUnq9tb+1ckGnXKb1gwdCdB3lWkPtKW+3LJXkQxc TIjRw3f6ldROeFMwyHqui1fpxdc+UB68AYnOYHxcqCMTcRBW2kzRsGU3aZlTgEKA EFRYCvIuweE8m1R99ilzMfuCspC8rieUAIOkkQ9xvhd6E3wFNcF5bGJZWTX8qpYB uQeA2YotH/8AsQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:59:11 2025 by rpki-client