This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json) Hash identifier: GJdeDV4LFr1Y1eU/SwLvvrwgf3jAM+clEPMIRMRQcjE= Subject key identifier: 24:79:39:E1:D0:9E:F8:C2:F2:3F:90:95:03:5F:4A:D8:60:39:F5:BF Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Certificate serial: 019B44DC6F0BBE9EBF06414098CBCB106913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 07:00:55 +0000 Manifest this update: Mon 22 Dec 2025 07:00:55 +0000 Manifest next update: Tue 23 Dec 2025 07:00:55 +0000 Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: vpyJX3I0qGGK6FHrt49n3C+qqsnRcaCjA8Rs+X4JTnM=) 2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:6f:0b:be:9e:bf:06:41:40:98:cb:cb:10:69:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Validity Not Before: Dec 22 07:00:55 2025 GMT Not After : Dec 23 07:00:55 2025 GMT Subject: CN=247939e1d09ef8c2f23f9095035f4ad86039f5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:0a:43:55:24:21:49:cc:09:f2:64:7d:f2: b3:c3:05:81:c8:19:0d:d6:dc:92:d3:9c:1c:40:81: d9:fe:3e:2a:7f:3f:17:75:26:f5:f5:fb:81:94:60: be:fb:da:a9:df:31:e8:74:95:50:53:d4:1c:4f:ce: 75:0e:b5:b0:4b:b6:6c:6e:4a:8d:b9:7b:7b:7e:9e: 95:cf:dd:bd:79:ba:10:0d:21:f6:de:d2:fb:4a:b2: 82:a7:5c:59:de:77:21:d6:06:8d:d4:ef:b1:b9:69: 70:ba:95:ee:ec:27:c8:58:7f:14:b4:7b:fc:27:f0: e4:d8:cc:57:be:e6:23:98:4c:0a:d1:ba:17:f6:b3: 86:54:cd:df:51:b1:d7:3b:49:01:27:2d:a5:db:ec: 26:37:1d:e3:72:de:11:d2:6c:12:1a:33:ae:6d:3f: 5c:52:b4:a4:ef:6d:3b:00:e4:0d:da:fd:05:e6:aa: fa:b8:73:90:47:42:71:f3:8b:3d:3c:a6:ed:7f:e6: 44:a9:17:a4:98:9d:a8:2c:0e:ec:6a:4d:40:2c:83: e6:91:18:92:60:31:4c:2c:2f:2d:72:58:e8:ba:4f: 4a:93:80:9e:5d:76:f6:a2:a0:f6:f2:d1:7b:bb:64: fe:8b:6d:96:df:01:3c:a5:61:5d:d0:a5:6f:1b:f8: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:79:39:E1:D0:9E:F8:C2:F2:3F:90:95:03:5F:4A:D8:60:39:F5:BF X509v3 Authority Key Identifier: keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:18:16:d6:3a:f4:cb:07:b6:5e:2a:91:37:7d:f0:e7:af:62: bf:69:53:12:d5:f3:72:72:92:24:78:ef:fd:8f:5a:69:d5:af: d1:3c:6f:fe:c7:57:8b:d9:4b:ff:ab:ae:da:dd:20:5f:02:41: 73:73:be:64:e0:cc:73:da:b1:aa:89:29:2d:b1:af:4e:9b:e7: 72:79:39:fe:d5:85:50:7d:26:d0:3c:27:a8:46:45:8f:ac:46: 6d:d5:cd:84:a7:c7:03:32:12:23:22:9f:68:b3:c8:2e:84:5d: c2:c8:52:65:4b:03:6a:8f:a5:f2:0b:8a:06:44:6a:b3:6c:e5: 0a:de:d0:d2:06:b7:d1:97:84:c2:28:73:57:17:e5:4c:69:ac: 43:1e:a3:be:80:f9:5d:0e:5b:e9:cb:60:db:da:38:34:98:e2: 2e:58:24:a5:a8:96:71:c4:23:63:d0:86:07:cc:b6:5a:cc:0e: 0e:eb:a7:e5:ff:b7:0b:55:97:6e:f1:66:4e:ff:e6:14:a7:39: 8f:88:36:5b:6b:51:ea:cd:9d:69:bd:6c:23:94:57:86:eb:f6: 27:4c:d5:72:5d:56:f4:09:64:06:6a:0d:b9:e9:a8:86:f7:0f: 8d:ba:67:0a:d6:13:af:c5:77:e0:ff:c5:5f:70:f5:32:a9:68: 32:ab:88:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3G8Lvp6/BkFAmMvLEGkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2ZkYWVlMWU5ZWFiZDgwMjM3NjAyOTYxYmFhMjVhYmM2 OWNkNjQwHhcNMjUxMjIyMDcwMDU1WhcNMjUxMjIzMDcwMDU1WjAzMTEwLwYDVQQD EygyNDc5MzllMWQwOWVmOGMyZjIzZjkwOTUwMzVmNGFkODYwMzlmNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5EKQ1UkIUnMCfJkffKzwwWByBkN 1tyS05wcQIHZ/j4qfz8XdSb19fuBlGC++9qp3zHodJVQU9QcT851DrWwS7ZsbkqN uXt7fp6Vz929eboQDSH23tL7SrKCp1xZ3nch1gaN1O+xuWlwupXu7CfIWH8UtHv8 J/Dk2MxXvuYjmEwK0boX9rOGVM3fUbHXO0kBJy2l2+wmNx3jct4R0mwSGjOubT9c UrSk7207AOQN2v0F5qr6uHOQR0Jx84s9PKbtf+ZEqRekmJ2oLA7sak1ALIPmkRiS YDFMLC8tcljouk9Kk4CeXXb2oqD28tF7u2T+i22W3wE8pWFd0KVvG/hJBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR5OeHQnvjC8j+QlQNfSthgOfW/MB8GA1UdIwQY MBaAFOzP2u4enqvYAjdgKWG6olq8ac1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt M2YxYzE1MjNhMTIzLzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz LzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRgW1jr0 ywe2XiqRN33w569iv2lTEtXzcnKSJHjv/Y9aadWv0Txv/sdXi9lL/6uu2t0gXwJB c3O+ZODMc9qxqokpLbGvTpvncnk5/tWFUH0m0DwnqEZFj6xGbdXNhKfHAzISIyKf aLPILoRdwshSZUsDao+l8guKBkRqs2zlCt7Q0ga30ZeEwihzVxflTGmsQx6jvoD5 XQ5b6ctg29o4NJjiLlgkpaiWccQjY9CGB8y2WswODuun5f+3C1WXbvFmTv/mFKc5 j4g2W2tR6s2dab1sI5RXhuv2J0zVcl1W9AlkBmoNuemohvcPjbpnCtYTr8V34P/F X3D1MqloMquIIg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:40:18 2025 by rpki-client