This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json) Hash identifier: FvIKZ+mQOPoRrBApfW4DaLlE7EqBOAqgd7T0eBwz2fw= Subject key identifier: 1D:BC:E5:08:C2:E4:2C:D5:18:07:1A:31:CF:4B:60:BE:30:9D:F4:6B Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34 Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34 Certificate serial: 019B503C7C6FF5F07EBD3573A6A56B367828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft Manifest number: 08D0 Signing time: Wed 24 Dec 2025 12:01:39 +0000 Manifest this update: Wed 24 Dec 2025 12:01:39 +0000 Manifest next update: Thu 25 Dec 2025 12:01:39 +0000 Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: I4p0yM79BNSiNLEGAHukhkMQXdmE8z0ziswJXNpTDv8=) 2: ULNxJvM-wJGOuJON7ivPOpKjWvM.roa (hash: 4PAm04+UjI196vMzGXZVMv+MQU5u1QViV4G3soVxN0g=) 3: qk0RdqiwIc4Pk8WjRSXETbEeD3w.roa (hash: CT5EukhWBYETi8Vaj273DWcEqR9wWanbCPEBswUNZM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:7c:6f:f5:f0:7e:bd:35:73:a6:a5:6b:36:78:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34 Validity Not Before: Dec 24 12:01:39 2025 GMT Not After : Dec 25 12:01:39 2025 GMT Subject: CN=1dbce508c2e42cd518071a31cf4b60be309df46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:e2:b1:a7:f8:84:78:64:6c:e7:9c:ae:39: e9:0f:cc:9f:cf:78:13:9f:5c:22:ea:4c:a0:93:61: 4c:21:2f:ac:03:89:03:d3:61:94:20:40:ac:90:88: bf:d0:57:97:3c:fa:76:f9:2e:35:b5:e8:f0:ad:f2: 9a:20:2f:56:6b:26:98:93:7c:9b:13:64:1c:07:1a: d6:07:1b:bc:14:c9:b2:c2:fd:24:08:5f:86:78:10: 70:6c:6b:7d:54:50:67:bc:63:1e:47:d7:28:ae:f2: db:2d:f4:59:15:9e:f1:9e:53:88:25:30:74:f4:63: de:7f:f6:a4:6c:11:75:3e:69:97:20:ec:b3:6a:f3: 18:97:40:14:22:38:6d:f5:54:cf:ef:30:d0:28:57: bf:24:75:02:ae:48:c5:cb:3d:e8:35:06:50:1d:57: e1:3f:71:1a:e2:b2:61:1c:32:36:28:de:ec:b4:db: 53:56:4e:3b:21:2e:75:d2:a5:88:df:51:23:66:94: 2f:4b:b7:bf:bd:77:46:3b:06:f5:e3:9e:7e:0c:4b: b5:96:4e:12:fc:ef:c7:85:17:12:c7:e1:91:32:78: 14:eb:12:31:1f:42:44:14:fb:bc:cb:cc:e8:17:93: b8:ec:ee:80:05:65:51:c7:2a:f0:8a:69:c4:04:26: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:E5:08:C2:E4:2C:D5:18:07:1A:31:CF:4B:60:BE:30:9D:F4:6B X509v3 Authority Key Identifier: keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4f:d1:8c:b1:32:39:ec:b7:67:d1:36:64:7b:95:18:2c:46: f7:1a:c6:1b:4c:aa:09:90:29:66:24:7b:1b:06:8d:6d:ee:9c: e3:ad:11:f5:7a:1b:8d:d5:a6:58:c5:c5:97:1c:0a:c1:a9:46: 2d:9a:09:e1:80:97:c6:1e:54:74:75:fe:36:51:2b:68:88:4d: 3e:aa:b8:9f:b4:56:24:1c:73:fb:26:b3:f9:91:80:71:bb:50: d4:36:57:7f:ce:a3:d5:ab:a9:b3:86:93:39:24:cf:c2:19:3e: 53:59:8d:f1:eb:35:4f:90:f1:d5:a1:b1:eb:0d:74:d1:a7:cd: db:f3:28:e3:13:86:32:e3:4c:f4:dd:be:b6:75:06:f4:86:1e: 8a:b4:be:75:86:9f:51:46:0a:be:73:d0:f5:57:e8:88:00:c3: bf:e3:cf:8a:aa:0f:87:64:c5:7d:68:3e:45:bd:68:67:6a:69: d3:c4:d9:88:71:51:2f:4d:b7:b0:f4:0f:0f:c0:53:19:56:d0: 85:33:bd:59:26:15:b4:43:4d:cb:42:40:cf:b7:75:61:fd:38: 65:c6:94:10:34:ab:e9:75:17:04:22:8b:a3:89:11:73:3d:c2: d7:2f:5d:68:1c:27:a7:50:c3:c7:ec:9c:ee:b3:ed:d2:f0:9a: 25:05:32:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPHxv9fB+vTVzpqVrNngoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx YzhkMzQwHhcNMjUxMjI0MTIwMTM5WhcNMjUxMjI1MTIwMTM5WjAzMTEwLwYDVQQD EygxZGJjZTUwOGMyZTQyY2Q1MTgwNzFhMzFjZjRiNjBiZTMwOWRmNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY7isaf4hHhkbOecrjnpD8yfz3gT n1wi6kygk2FMIS+sA4kD02GUIECskIi/0FeXPPp2+S41tejwrfKaIC9WayaYk3yb E2QcBxrWBxu8FMmywv0kCF+GeBBwbGt9VFBnvGMeR9corvLbLfRZFZ7xnlOIJTB0 9GPef/akbBF1PmmXIOyzavMYl0AUIjht9VTP7zDQKFe/JHUCrkjFyz3oNQZQHVfh P3Ea4rJhHDI2KN7stNtTVk47IS510qWI31EjZpQvS7e/vXdGOwb1455+DEu1lk4S /O/HhRcSx+GRMngU6xIxH0JEFPu8y8zoF5O47O6ABWVRxyrwimnEBCb/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB285QjC5CzVGAcaMc9LYL4wnfRrMB8GA1UdIwQY MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt YTdlYjM4ZDQ4Yzc4LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4 LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE/RjLEy Oey3Z9E2ZHuVGCxG9xrGG0yqCZApZiR7GwaNbe6c460R9XobjdWmWMXFlxwKwalG LZoJ4YCXxh5UdHX+NlEraIhNPqq4n7RWJBxz+yaz+ZGAcbtQ1DZXf86j1aups4aT OSTPwhk+U1mN8es1T5Dx1aGx6w100afN2/Mo4xOGMuNM9N2+tnUG9IYeirS+dYaf UUYKvnPQ9VfoiADDv+PPiqoPh2TFfWg+Rb1oZ2pp08TZiHFRL023sPQPD8BTGVbQ hTO9WSYVtENNy0JAz7d1Yf04ZcaUEDSr6XUXBCKLo4kRcz3C1y9daBwnp1DDx+yc 7rPt0vCaJQUy5A== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:03 2025 by rpki-client