This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json) Hash identifier: dswF+AG17Ft/iZAVWOi/njzR1W9Xo3yZx6MqIr1EJ7M= Subject key identifier: 60:B2:18:77:D0:3C:04:3D:C6:E4:3F:F8:EC:59:A5:A8:DB:E8:8B:C6 Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5 Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5 Certificate serial: 019B54194987D20FEE668D34E5B0DA9A926C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft Manifest number: 0C73 Signing time: Thu 25 Dec 2025 06:01:41 +0000 Manifest this update: Thu 25 Dec 2025 06:01:41 +0000 Manifest next update: Fri 26 Dec 2025 06:01:41 +0000 Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: ZkVkIsvyvq7gHRhMixOD3H8P/yx7OsiwemCp3O1Jfqc=) 2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:49:87:d2:0f:ee:66:8d:34:e5:b0:da:9a:92:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5 Validity Not Before: Dec 25 06:01:41 2025 GMT Not After : Dec 26 06:01:41 2025 GMT Subject: CN=60b21877d03c043dc6e43ff8ec59a5a8dbe88bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:34:00:81:e1:a6:fd:71:fe:e5:10:00:80: ee:ce:54:4d:c3:2d:0d:e6:95:03:06:87:d7:f4:55: d6:69:57:04:c6:d8:c8:67:63:84:4a:35:69:fe:96: c5:5c:dc:5b:7c:b7:13:aa:a2:07:34:23:1a:68:11: 59:29:bb:45:b8:ab:15:aa:3e:db:74:99:cc:d0:48: 42:5f:0b:11:58:39:ce:5f:08:07:35:7a:83:95:d8: 61:03:0f:98:d2:41:62:76:ab:83:93:84:3b:80:ba: 83:7f:6c:b3:3c:6f:74:c4:a5:a7:2c:80:b4:49:70: de:78:29:8c:ef:24:6d:7a:03:ab:96:8c:88:fd:c6: 15:f9:cc:46:d6:79:82:9d:8b:f7:57:f9:83:3d:e7: 06:64:35:96:ab:43:a7:39:99:91:fb:8f:19:b4:ff: cf:e3:85:17:1a:ff:e4:91:b9:dd:fe:2e:14:bc:c2: c7:61:a3:8c:0f:1d:71:9a:98:bd:9e:34:14:a5:0a: c5:9a:e9:06:66:29:ed:cc:fd:2b:fa:b5:6a:5a:e2: 19:67:4d:6d:50:23:41:7d:2f:b6:4b:96:75:28:67: 58:3b:ac:e2:6c:f6:4a:0c:09:41:66:99:4a:a6:dd: b0:cc:39:2c:95:d2:b3:9f:4e:84:8e:94:55:84:a1: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B2:18:77:D0:3C:04:3D:C6:E4:3F:F8:EC:59:A5:A8:DB:E8:8B:C6 X509v3 Authority Key Identifier: keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d8:e8:d0:21:65:15:6a:eb:73:b6:d3:cf:e4:2b:54:8a:5b: 6f:ba:15:e1:c4:45:dc:56:e3:fd:91:a5:e3:b6:95:e9:1a:11: ac:2b:1a:27:07:62:b7:52:6e:c0:9d:ed:3e:5a:31:57:f3:be: 84:93:41:7f:7e:28:72:46:cf:59:ad:68:2c:b2:1e:40:85:fe: 14:a4:6d:b1:3d:ca:26:ed:79:82:d9:55:31:57:70:f6:2a:17: b2:de:df:9f:f7:24:e4:e7:7c:85:b5:bb:4e:8e:09:e2:54:d7: f3:86:60:c2:b5:7f:93:85:7a:65:72:31:b9:25:d9:c0:63:70: 6e:57:24:c9:32:ef:73:fd:41:60:f1:e6:a8:99:d8:74:3b:a7: d4:5f:8a:ef:f2:13:20:46:9f:8e:12:66:8e:b0:f7:0e:16:b1: a1:bd:fb:cc:df:02:b2:d6:16:2b:83:33:f6:c0:26:6c:f8:63: a4:ea:20:b3:93:b3:1e:9f:9f:f4:bb:b2:31:d5:bc:b4:2c:35: 71:3a:58:9e:d5:e6:ac:95:06:54:16:7e:55:69:ee:ed:4e:a6: 30:08:a3:32:1b:01:a4:da:bd:e8:7b:c8:f6:fd:b9:4a:b9:d7: 4a:f4:1c:4d:c3:b3:da:a7:ef:4d:cb:ae:00:ca:f4:8a:68:f8: 28:92:0b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGUmH0g/uZo005bDampJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTJhMTIyZGNmZmMyMjJmYTk5ODRiZjE2YjZmOWYxM2Y3 OGE1YTUwHhcNMjUxMjI1MDYwMTQxWhcNMjUxMjI2MDYwMTQxWjAzMTEwLwYDVQQD Eyg2MGIyMTg3N2QwM2MwNDNkYzZlNDNmZjhlYzU5YTVhOGRiZTg4YmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XI0AIHhpv1x/uUQAIDuzlRNwy0N 5pUDBofX9FXWaVcExtjIZ2OESjVp/pbFXNxbfLcTqqIHNCMaaBFZKbtFuKsVqj7b dJnM0EhCXwsRWDnOXwgHNXqDldhhAw+Y0kFidquDk4Q7gLqDf2yzPG90xKWnLIC0 SXDeeCmM7yRtegOrloyI/cYV+cxG1nmCnYv3V/mDPecGZDWWq0OnOZmR+48ZtP/P 44UXGv/kkbnd/i4UvMLHYaOMDx1xmpi9njQUpQrFmukGZintzP0r+rVqWuIZZ01t UCNBfS+2S5Z1KGdYO6zibPZKDAlBZplKpt2wzDksldKzn06EjpRVhKGOXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCyGHfQPAQ9xuQ/+OxZpajb6IvGMB8GA1UdIwQY MBaAFO3ioSLc/8Ii+pmEvxa2+fE/eKWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgt MjM1OWNiNjBhNTc0LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgtMjM1OWNiNjBhNTc0 LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtjo0CFl FWrrc7bTz+QrVIpbb7oV4cRF3Fbj/ZGl47aV6RoRrCsaJwdit1JuwJ3tPloxV/O+ hJNBf34ockbPWa1oLLIeQIX+FKRtsT3KJu15gtlVMVdw9ioXst7fn/ck5Od8hbW7 To4J4lTX84ZgwrV/k4V6ZXIxuSXZwGNwblckyTLvc/1BYPHmqJnYdDun1F+K7/IT IEafjhJmjrD3Dhaxob37zN8CstYWK4Mz9sAmbPhjpOogs5OzHp+f9LuyMdW8tCw1 cTpYntXmrJUGVBZ+VWnu7U6mMAijMhsBpNq96HvI9v25SrnXSvQcTcOz2qfvTcuu AMr0imj4KJILTQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:12 2025 by rpki-client