This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json) Hash identifier: EGdDsOJEANSEytX4tBqTdphU25d/Ww9PhCUHExicdrQ= Subject key identifier: 07:1C:75:4B:57:4E:92:0E:C2:91:31:DD:82:1E:44:DE:A4:2D:52:D1 Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Certificate serial: 019B3DC77671A8544D6B3B12176F6D6911CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 22:00:40 +0000 Manifest this update: Sat 20 Dec 2025 22:00:40 +0000 Manifest next update: Sun 21 Dec 2025 22:00:40 +0000 Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: NdbybCQKL6e+T8M8rgwmc/JTmni8lc8Cnhn5Snpj2eM=) 2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=) 3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:76:71:a8:54:4d:6b:3b:12:17:6f:6d:69:11:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Validity Not Before: Dec 20 22:00:40 2025 GMT Not After : Dec 21 22:00:40 2025 GMT Subject: CN=071c754b574e920ec29131dd821e44dea42d52d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:cc:e9:54:93:3e:da:da:d9:85:60:18:9a: b5:a7:48:8d:66:2c:a7:4e:2d:75:39:0f:f5:e7:a5: 5c:c3:be:ae:53:72:b9:37:3e:7a:fc:1c:0e:8a:5e: ed:de:cc:bb:48:16:4c:ad:81:f3:ad:8f:8c:71:3f: d8:ba:97:5c:ca:0d:93:44:56:41:e1:5f:ea:1b:93: c1:91:62:77:df:c6:1d:af:cd:00:d9:dc:4d:8b:76: 65:65:cc:81:46:eb:b7:1d:fb:25:0d:e1:8e:dc:89: 21:97:ee:66:69:81:a9:38:99:06:be:8d:f1:6a:06: be:57:d9:5e:af:c5:63:d0:58:67:3a:55:7b:4b:2d: d4:d7:a6:ea:6f:6e:c2:70:40:f2:62:e9:46:04:5f: f8:5a:57:11:11:5e:91:94:78:98:6d:dd:09:e4:d1: f2:0b:fa:fb:8c:e8:1f:86:a4:4b:5a:c1:ce:aa:9f: 5e:7f:b2:7b:b1:c0:f8:b7:bd:3b:0a:e2:3e:3f:97: 22:72:a8:71:15:93:a4:3f:89:7c:93:48:ac:a9:ce: 29:15:8c:1d:dd:73:12:46:99:8d:fe:5b:9b:fe:fe: a8:1a:11:7b:53:77:15:6c:0c:90:b7:a6:81:f6:33: 7a:dd:81:5b:4d:53:6c:e6:59:25:fc:a3:76:08:25: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1C:75:4B:57:4E:92:0E:C2:91:31:DD:82:1E:44:DE:A4:2D:52:D1 X509v3 Authority Key Identifier: keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e9:67:aa:f5:12:ac:cf:a4:35:36:89:7d:a7:93:bf:17:4f: 37:d3:a6:95:05:02:fc:ad:d4:80:28:dc:b7:0c:09:75:4d:d9: 6a:83:a9:b9:6b:ab:09:07:08:88:45:ee:17:d2:72:61:3c:07: 4e:97:db:4e:d0:3d:c3:7b:09:6a:99:45:3e:3c:7e:db:6d:cc: 8a:45:58:bf:e3:03:b9:49:f8:84:c8:cf:db:fa:87:6f:0e:44: 48:bd:4d:37:08:d3:c3:1c:6e:02:14:53:ec:5c:32:a1:c0:dd: 80:1b:1a:8b:f2:17:a2:1f:07:12:be:f8:1e:9e:c0:70:38:1f: c1:53:c2:4a:7f:73:cc:f5:7a:5c:85:99:89:8d:03:a5:00:8f: 0f:3f:79:57:3a:b9:7d:9f:29:8c:79:f3:93:78:0e:b3:62:a7: 32:ca:35:59:04:04:96:84:75:52:45:18:29:73:e9:19:30:80: f4:b6:12:11:e0:84:62:e0:ce:ee:75:42:50:e6:eb:c7:f3:88: 9f:6c:06:4b:9d:6e:6b:06:18:f6:71:23:0d:0e:c4:07:0f:47: fa:d0:7e:6a:44:0e:ba:fe:2d:a2:fe:64:55:9f:95:11:7e:35: 0b:16:39:32:e9:66:49:45:4b:28:c9:97:0c:08:24:22:f8:18: 3c:9d:b4:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3ZxqFRNazsSF29taRHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3 MjEwZTUwHhcNMjUxMjIwMjIwMDQwWhcNMjUxMjIxMjIwMDQwWjAzMTEwLwYDVQQD EygwNzFjNzU0YjU3NGU5MjBlYzI5MTMxZGQ4MjFlNDRkZWE0MmQ1MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdjM6VSTPtra2YVgGJq1p0iNZiyn Ti11OQ/156Vcw76uU3K5Nz56/BwOil7t3sy7SBZMrYHzrY+McT/Yupdcyg2TRFZB 4V/qG5PBkWJ338Ydr80A2dxNi3ZlZcyBRuu3HfslDeGO3Ikhl+5maYGpOJkGvo3x aga+V9ler8Vj0FhnOlV7Sy3U16bqb27CcEDyYulGBF/4WlcREV6RlHiYbd0J5NHy C/r7jOgfhqRLWsHOqp9ef7J7scD4t707CuI+P5cicqhxFZOkP4l8k0isqc4pFYwd 3XMSRpmN/lub/v6oGhF7U3cVbAyQt6aB9jN63YFbTVNs5lkl/KN2CCWyaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAccdUtXTpIOwpEx3YIeRN6kLVLRMB8GA1UdIwQY MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgulnqvUS rM+kNTaJfaeTvxdPN9OmlQUC/K3UgCjctwwJdU3ZaoOpuWurCQcIiEXuF9JyYTwH TpfbTtA9w3sJaplFPjx+223MikVYv+MDuUn4hMjP2/qHbw5ESL1NNwjTwxxuAhRT 7FwyocDdgBsai/IXoh8HEr74Hp7AcDgfwVPCSn9zzPV6XIWZiY0DpQCPDz95Vzq5 fZ8pjHnzk3gOs2KnMso1WQQEloR1UkUYKXPpGTCA9LYSEeCEYuDO7nVCUObrx/OI n2wGS51uawYY9nEjDQ7EBw9H+tB+akQOuv4tov5kVZ+VEX41CxY5MulmSUVLKMmX DAgkIvgYPJ20nw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:04 2025 by rpki-client