This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft File: 7xU1l4vmsK16nLcOsFIvjJUJgqk.mft (raw, json) Hash identifier: oBPkpJh0lp9/LU7Mq5tOC1Q8g/wbSAkThy37eoh5D0g= Subject key identifier: 29:88:8B:C2:6A:BB:65:D0:D3:F7:41:1D:FB:0E:BA:C5:86:1B:6C:1E Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019B44DC66B28C764A243710EF15E827E0FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft Manifest number: 9C Signing time: Mon 22 Dec 2025 07:00:53 +0000 Manifest this update: Mon 22 Dec 2025 07:00:53 +0000 Manifest next update: Tue 23 Dec 2025 07:00:53 +0000 Files and hashes: 1: 7xU1l4vmsK16nLcOsFIvjJUJgqk.crl (hash: Uq/J82aGuA1dp806rGVRsleQLJ5Ok/6h8DfaepjrW0Q=) 2: Q_vlvSETpqh_qzFX24IiMAcSpo4.roa (hash: 58OctwKlJ52YMEAamS+8+qLb551rY2Em9kksAkpx+s4=) 3: bILti74BmcnDi60nnP5YmRW_4YI.roa (hash: SKNKoAevXbwiaBrXZGICe9faIc3F84ucz3yTC1zuIy0=) 4: gyFgceVRnIzlxdp6L53uSdCLKsw.roa (hash: o0of1W8ctWBk8glT+CQIX0wQQ11WM1QlSTPqkuw+1ls=) 5: ncyBejndA1O6Npn4AIKSva2FQys.roa (hash: PYhp4XEiwuMa3ftKl/IMy6aF+MdAGyTyTOoqUY5QIjs=) 6: w_c3ITOoCkFf0DnaSmtgq6Rn678.asa (hash: J6tFhX6N1Hura0xZcR4F7V51t3AR4eoZPi1JRBlD4q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:66:b2:8c:76:4a:24:37:10:ef:15:e8:27:e0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Dec 22 07:00:53 2025 GMT Not After : Dec 23 07:00:53 2025 GMT Subject: CN=29888bc26abb65d0d3f7411dfb0ebac5861b6c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:7f:fc:61:a4:e0:f3:13:17:d7:fe:0e:ca: 8f:54:6d:69:c4:c6:a0:18:6e:4a:55:f3:3a:34:02: 37:93:39:67:2c:57:38:2a:6f:35:d1:8f:89:73:b4: 06:14:5a:5e:ce:f6:48:23:e1:30:19:4d:f7:13:5c: 66:12:62:ee:a5:ef:ed:d9:3f:26:93:22:b9:26:e8: ce:ad:7a:80:05:75:89:a0:98:50:9a:65:cc:33:a3: 07:09:75:97:da:52:f5:71:39:9a:1a:2a:22:45:2a: ce:f8:7d:c6:d8:10:de:28:2e:d0:a7:37:ea:fa:0d: a1:3b:ca:38:cb:8b:0b:31:9c:c0:02:0c:aa:33:60: d3:f7:43:f9:46:3b:ae:4d:9d:b2:40:ec:f0:05:97: af:35:83:48:22:b2:15:d8:c3:21:53:22:16:49:3f: ee:34:4c:b9:fa:fc:99:2f:2a:f1:90:cf:d6:eb:7f: 23:32:4f:09:a3:a5:a0:8a:ba:1f:1f:bb:ff:15:0d: 2c:ab:fc:5d:6c:35:09:cb:17:ec:cb:1d:e6:d7:16: 81:7b:d7:2b:9f:b3:a5:1d:60:1a:0d:0d:0a:50:a0: 1d:98:46:b0:cc:85:0c:50:16:20:18:33:5b:12:11: 0f:d0:87:94:41:29:09:0e:e4:84:08:c8:a4:00:ea: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:88:8B:C2:6A:BB:65:D0:D3:F7:41:1D:FB:0E:BA:C5:86:1B:6C:1E X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:40:c8:03:af:13:71:b2:1c:a6:23:7a:ad:7e:c9:3d:81:af: c8:dc:a5:25:e5:a1:fd:45:77:2e:cd:db:12:dd:cb:d0:d1:ed: e7:d7:d6:6b:a2:73:5e:5f:75:46:56:05:6f:d2:1e:51:65:36: 6a:26:c6:45:82:53:c0:b6:c4:e0:cf:44:33:0d:3f:42:18:de: 48:e0:2e:4d:c1:0a:dd:60:d3:5d:e9:0e:74:0f:8d:56:05:61: 9e:5a:d3:8e:f3:97:34:d9:48:84:82:4d:e9:63:a6:a3:38:f7: 67:8c:7a:95:db:30:f7:53:d7:24:bb:56:d2:c2:73:bf:02:ca: 1b:5b:c2:78:39:f9:64:40:5f:fa:1b:4c:e8:f3:0a:a3:d0:22: 00:0f:56:cf:54:38:ec:cd:21:63:0b:52:96:39:2c:6d:23:6a: ab:6f:9f:d9:f8:69:89:5a:5f:9a:33:db:ec:99:5a:d7:73:90: dc:db:40:6a:ad:b4:30:b9:98:c6:ad:82:35:87:5c:3c:ba:d7: 67:c3:0f:97:36:dc:b3:82:9a:04:22:b8:55:e8:69:bf:e6:9a: b6:55:c4:e1:03:15:9b:65:d7:66:e9:73:6a:d4:2e:c5:71:07: 5e:83:23:69:49:c2:65:f2:d0:fa:93:fd:d3:da:25:45:32:22: 44:61:b4:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3GayjHZKJDcQ7xXoJ+D8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjUxMjIyMDcwMDUzWhcNMjUxMjIzMDcwMDUzWjAzMTEwLwYDVQQD EygyOTg4OGJjMjZhYmI2NWQwZDNmNzQxMWRmYjBlYmFjNTg2MWI2YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN5//GGk4PMTF9f+DsqPVG1pxMag GG5KVfM6NAI3kzlnLFc4Km810Y+Jc7QGFFpezvZII+EwGU33E1xmEmLupe/t2T8m kyK5JujOrXqABXWJoJhQmmXMM6MHCXWX2lL1cTmaGioiRSrO+H3G2BDeKC7Qpzfq +g2hO8o4y4sLMZzAAgyqM2DT90P5RjuuTZ2yQOzwBZevNYNIIrIV2MMhUyIWST/u NEy5+vyZLyrxkM/W638jMk8Jo6WgirofH7v/FQ0sq/xdbDUJyxfsyx3m1xaBe9cr n7OlHWAaDQ0KUKAdmEawzIUMUBYgGDNbEhEP0IeUQSkJDuSECMikAOpfGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmIi8Jqu2XQ0/dBHfsOusWGG2weMB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4 LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUDIA68T cbIcpiN6rX7JPYGvyNylJeWh/UV3Ls3bEt3L0NHt59fWa6JzXl91RlYFb9IeUWU2 aibGRYJTwLbE4M9EMw0/QhjeSOAuTcEK3WDTXekOdA+NVgVhnlrTjvOXNNlIhIJN 6WOmozj3Z4x6ldsw91PXJLtW0sJzvwLKG1vCeDn5ZEBf+htM6PMKo9AiAA9Wz1Q4 7M0hYwtSljksbSNqq2+f2fhpiVpfmjPb7Jla13OQ3NtAaq20MLmYxq2CNYdcPLrX Z8MPlzbcs4KaBCK4Vehpv+aatlXE4QMVm2XXZulzatQuxXEHXoMjaUnCZfLQ+pP9 09olRTIiRGG0Sw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:30:33 2025 by rpki-client