This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json) Hash identifier: nXeupZR1C7lh1fbjJnUg9Waf6zWM03f8srrmG810zl0= Subject key identifier: 59:AF:60:13:B9:C5:49:A7:DC:C5:B7:B5:BC:7E:7B:B0:B9:A9:AE:30 Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1 Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1 Certificate serial: 019B476F9F3197B20F6BB91D28DE11EAB9AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft Manifest number: 10F8 Signing time: Mon 22 Dec 2025 19:00:56 +0000 Manifest this update: Mon 22 Dec 2025 19:00:56 +0000 Manifest next update: Tue 23 Dec 2025 19:00:56 +0000 Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: U0h/gBFtmgykuG1W+wCjrUpHecvBvPcwDAwz8CFJA3M=) 2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:9f:31:97:b2:0f:6b:b9:1d:28:de:11:ea:b9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1 Validity Not Before: Dec 22 19:00:56 2025 GMT Not After : Dec 23 19:00:56 2025 GMT Subject: CN=59af6013b9c549a7dcc5b7b5bc7e7bb0b9a9ae30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ab:36:33:1d:de:24:5d:b2:db:a4:8b:fb:80: e2:ee:9b:70:42:92:50:bb:79:d6:fd:65:ae:48:ee: 01:e4:e6:d3:ba:e3:28:a6:c4:b4:33:ce:90:b9:32: 76:10:51:8b:e4:c0:ca:fc:ee:86:c6:82:70:fa:33: d1:d6:06:39:2a:69:7c:4b:f2:03:6f:da:28:e8:22: 83:9e:95:13:22:b9:b4:ba:a5:84:8f:a3:a8:a8:0a: ef:30:cf:8b:d9:e1:8d:4d:8b:5a:99:b7:58:79:da: b3:09:32:b8:d6:7a:24:db:76:6c:1e:c5:d2:5c:5c: 42:71:09:23:39:fb:a1:1a:0d:58:3e:d7:8e:40:9f: af:eb:a9:cd:03:e0:16:69:35:24:07:a5:58:7d:30: 40:57:74:c7:9d:ac:5f:e8:c5:3e:9e:3a:6b:88:15: 90:aa:f8:da:61:c1:de:13:c1:68:52:ac:67:26:0a: 88:0d:b2:a0:4b:0b:36:45:2e:a6:4b:b1:ef:db:e1: 40:b4:2d:c5:c3:f2:8d:bf:db:51:b0:01:a4:12:3a: 04:74:8d:f3:df:aa:57:48:25:ef:2f:c2:7e:93:e7: 8f:b8:f1:23:46:44:21:cd:c8:3f:21:8e:e7:21:4b: b3:8a:22:d9:4a:ad:3f:d2:81:55:37:01:9c:1f:63: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:60:13:B9:C5:49:A7:DC:C5:B7:B5:BC:7E:7B:B0:B9:A9:AE:30 X509v3 Authority Key Identifier: keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:52:f1:ff:31:de:16:d2:9f:24:23:24:8c:f8:07:c6:e4:92: 21:3f:7d:7f:ae:09:7b:21:76:57:7e:b0:cb:95:67:18:94:31: 4c:ae:03:08:9d:ac:f6:90:68:48:6a:79:41:61:12:4d:e6:ff: 61:23:1f:b7:a8:53:60:a2:b8:9c:b6:d7:ad:8a:7d:06:96:cc: 45:82:20:76:27:4f:d4:43:58:e2:d6:27:2c:e2:9d:5f:8c:84: 9f:9a:1a:ce:d4:ab:5d:7a:82:3c:ae:52:0b:7f:53:c6:40:34: 33:2a:af:78:ae:68:9e:bb:ec:fd:fa:e2:3f:23:25:16:f8:ea: e2:eb:52:52:d1:11:31:13:6b:e8:97:09:2c:6f:bb:4c:a0:81: ec:cf:a4:ac:cf:76:e5:45:47:92:33:af:05:7f:5a:cc:44:ff: 34:fe:25:ac:e7:48:bd:7a:78:ab:95:bc:13:75:03:02:3a:88: 76:f9:5b:50:2c:78:93:98:4b:18:ac:77:46:da:68:f8:b7:74: 93:54:e1:4b:d9:d7:eb:5c:36:57:5b:cc:06:8a:da:71:ac:93: f8:69:69:60:d7:fe:14:e1:73:33:07:9d:a3:df:72:46:73:11: 90:38:e7:b9:84:3c:b8:30:c2:7b:71:30:e2:69:3d:f1:ed:ea: b2:0c:85:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb58xl7IPa7kdKN4R6rmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2 ODI0ZjEwHhcNMjUxMjIyMTkwMDU2WhcNMjUxMjIzMTkwMDU2WjAzMTEwLwYDVQQD Eyg1OWFmNjAxM2I5YzU0OWE3ZGNjNWI3YjViYzdlN2JiMGI5YTlhZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qs2Mx3eJF2y26SL+4Di7ptwQpJQ u3nW/WWuSO4B5ObTuuMopsS0M86QuTJ2EFGL5MDK/O6GxoJw+jPR1gY5Kml8S/ID b9oo6CKDnpUTIrm0uqWEj6OoqArvMM+L2eGNTYtambdYedqzCTK41nok23ZsHsXS XFxCcQkjOfuhGg1YPteOQJ+v66nNA+AWaTUkB6VYfTBAV3THnaxf6MU+njpriBWQ qvjaYcHeE8FoUqxnJgqIDbKgSws2RS6mS7Hv2+FAtC3Fw/KNv9tRsAGkEjoEdI3z 36pXSCXvL8J+k+ePuPEjRkQhzcg/IY7nIUuziiLZSq0/0oFVNwGcH2PGtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmvYBO5xUmn3MW3tbx+e7C5qa4wMB8GA1UdIwQY MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlLx/zHe FtKfJCMkjPgHxuSSIT99f64JeyF2V36wy5VnGJQxTK4DCJ2s9pBoSGp5QWESTeb/ YSMft6hTYKK4nLbXrYp9BpbMRYIgdidP1ENY4tYnLOKdX4yEn5oaztSrXXqCPK5S C39TxkA0MyqveK5onrvs/friPyMlFvjq4utSUtERMRNr6JcJLG+7TKCB7M+krM92 5UVHkjOvBX9azET/NP4lrOdIvXp4q5W8E3UDAjqIdvlbUCx4k5hLGKx3Rtpo+Ld0 k1ThS9nX61w2V1vMBoracayT+GlpYNf+FOFzMwedo99yRnMRkDjnuYQ8uDDCe3Ew 4mk98e3qsgyF9w== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:25 2025 by rpki-client