This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json) Hash identifier: Cl8GWMcr+3l+5ElTAisJafXUbX4o/A3nsM88sQvLSVI= Subject key identifier: 51:CB:32:05:0E:34:EF:86:CD:83:66:31:2E:1C:C5:FC:85:20:34:2D Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11 Certificate serial: 019B75920DEC25365D064E2233E2BB867E77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft Manifest number: 0729 Signing time: Wed 31 Dec 2025 18:01:04 +0000 Manifest this update: Wed 31 Dec 2025 18:01:04 +0000 Manifest next update: Thu 01 Jan 2026 18:01:04 +0000 Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: zwXL6HpfJ46SQCb+W5UmELRcfAAKiaO6EUBaaycoJMI=) 2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:92:0d:ec:25:36:5d:06:4e:22:33:e2:bb:86:7e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11 Validity Not Before: Dec 31 18:01:04 2025 GMT Not After : Jan 1 18:01:04 2026 GMT Subject: CN=51cb32050e34ef86cd8366312e1cc5fc8520342d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:7a:ad:e4:1f:04:8c:33:ac:54:dd:62:bd: fa:7c:db:4e:ed:02:28:02:97:a8:9a:95:90:c0:a1: 91:d8:f8:f0:86:e8:bb:46:06:cb:18:22:b2:3a:64: fe:3a:fc:7c:8a:79:a8:f0:89:e8:ba:37:b8:27:a9: 5d:a8:05:99:8f:76:1c:2b:de:30:14:e6:7f:34:e9: 9c:02:93:3a:12:f6:05:93:4f:ba:c0:d5:72:af:9e: 79:00:19:5c:95:76:66:ec:53:ca:b4:6c:3d:bf:69: 85:3a:36:20:8c:6f:86:6f:47:87:66:18:78:52:93: e6:b6:01:b6:28:9b:6b:2e:29:b0:23:89:01:21:6b: db:74:3b:d0:6a:f0:c7:f1:56:03:f8:7f:1e:24:22: d8:ef:23:76:90:fe:64:9f:53:57:e1:94:a2:77:72: 68:39:67:13:8a:ec:50:4c:65:8e:22:21:e0:45:15: 03:11:d1:7d:d9:c1:a1:fe:f4:0b:ff:cd:e8:dc:90: e6:34:1a:bc:01:24:50:d8:21:ce:86:59:14:52:1e: 5b:0e:bf:1e:79:59:31:fa:5c:bf:b4:0e:12:a3:04: 9c:5a:9a:cb:47:69:00:d6:a4:87:be:83:33:f3:5f: 84:fc:c1:72:a0:ba:89:28:90:9b:b7:32:d7:58:09: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CB:32:05:0E:34:EF:86:CD:83:66:31:2E:1C:C5:FC:85:20:34:2D X509v3 Authority Key Identifier: keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4c:e1:7a:24:09:15:bc:02:74:83:a6:9f:d7:29:00:b7:99: 47:3a:e5:b7:2e:24:54:c2:5f:c4:53:1f:88:69:b2:f5:a4:e6: 21:d8:16:e6:4d:2e:10:d3:be:84:b6:db:05:ee:3a:f5:af:95: 93:1b:57:47:b6:a2:ce:84:37:9f:3a:dd:83:4e:0f:6e:3d:c4: 1b:32:c0:5a:0c:1a:4a:eb:a4:bb:6a:d6:8b:d8:eb:70:9d:9f: 5f:79:e6:2d:8d:67:c4:fc:d2:17:33:6d:77:00:ad:7f:49:cd: 3a:5b:03:e2:de:86:29:53:4b:c4:ca:45:62:e8:57:83:bb:52: 12:6f:a8:ba:01:83:60:75:cc:8c:63:03:cf:6a:b4:21:86:24: 4e:8a:12:7a:54:65:41:64:44:e1:7a:17:1a:e8:0d:24:c8:e6: ca:51:b3:fd:93:c0:17:14:44:b0:fa:00:43:5f:92:4b:f7:f3: 59:2d:ae:c4:b5:61:1a:fb:9b:69:2f:35:d0:97:33:f5:d0:ee: ab:c1:db:68:92:42:55:07:94:0f:b1:a7:4c:1b:89:67:bc:c2: 9e:20:ca:94:46:ae:55:2b:b8:bd:33:47:8c:2f:40:b9:30:3d: 23:6c:a6:99:99:b3:c1:61:e7:ba:1d:3b:c1:44:c7:a7:7f:c8: af:97:7a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kg3sJTZdBk4iM+K7hn53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4 OWNlMTEwHhcNMjUxMjMxMTgwMTA0WhcNMjYwMTAxMTgwMTA0WjAzMTEwLwYDVQQD Eyg1MWNiMzIwNTBlMzRlZjg2Y2Q4MzY2MzEyZTFjYzVmYzg1MjAzNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvB6reQfBIwzrFTdYr36fNtO7QIo ApeompWQwKGR2Pjwhui7RgbLGCKyOmT+Ovx8inmo8Inouje4J6ldqAWZj3YcK94w FOZ/NOmcApM6EvYFk0+6wNVyr555ABlclXZm7FPKtGw9v2mFOjYgjG+Gb0eHZhh4 UpPmtgG2KJtrLimwI4kBIWvbdDvQavDH8VYD+H8eJCLY7yN2kP5kn1NX4ZSid3Jo OWcTiuxQTGWOIiHgRRUDEdF92cGh/vQL/83o3JDmNBq8ASRQ2CHOhlkUUh5bDr8e eVkx+ly/tA4SowScWprLR2kA1qSHvoMz81+E/MFyoLqJKJCbtzLXWAmFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHLMgUONO+GzYNmMS4cxfyFIDQtMB8GA1UdIwQY MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0zheiQJ FbwCdIOmn9cpALeZRzrlty4kVMJfxFMfiGmy9aTmIdgW5k0uENO+hLbbBe469a+V kxtXR7aizoQ3nzrdg04Pbj3EGzLAWgwaSuuku2rWi9jrcJ2fX3nmLY1nxPzSFzNt dwCtf0nNOlsD4t6GKVNLxMpFYuhXg7tSEm+ougGDYHXMjGMDz2q0IYYkTooSelRl QWRE4XoXGugNJMjmylGz/ZPAFxREsPoAQ1+SS/fzWS2uxLVhGvubaS810Jcz9dDu q8HbaJJCVQeUD7GnTBuJZ7zCniDKlEauVSu4vTNHjC9AuTA9I2ymmZmzwWHnuh07 wUTHp3/Ir5d6Yg== -----END CERTIFICATE-----Generated at Wed Dec 31 23:31:19 2025 by rpki-client