This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json) Hash identifier: twFsswHa/EWdNjfuyIB2i5Xv/PDVjwMU39KAp52Xmt0= Subject key identifier: 93:B8:6E:0C:71:68:82:3E:67:91:41:87:2F:82:FB:85:B4:8F:33:DA Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c Certificate serial: 019B529832D8271B790A0681E6DAD762ECE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft Manifest number: 1438 Signing time: Wed 24 Dec 2025 23:01:04 +0000 Manifest this update: Wed 24 Dec 2025 23:01:04 +0000 Manifest next update: Thu 25 Dec 2025 23:01:04 +0000 Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: VpWNmknbplJ805n/v+OTW45aCpjqqb9j0Hfm3q87U/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:32:d8:27:1b:79:0a:06:81:e6:da:d7:62:ec:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c Validity Not Before: Dec 24 23:01:04 2025 GMT Not After : Dec 25 23:01:04 2025 GMT Subject: CN=93b86e0c7168823e679141872f82fb85b48f33da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f1:1e:4d:65:88:31:92:e2:1a:f7:1e:a5:0d: 4c:d8:ac:42:5c:2f:25:8e:96:6b:01:8d:a9:0b:96: 5b:0a:a6:f2:a0:47:56:6b:4e:25:c1:75:9c:a1:ce: e7:cc:44:45:14:90:f9:fa:c3:dd:81:9e:92:06:11: 42:b1:8f:76:de:91:32:7b:3b:fd:12:ef:a7:2c:3c: 9e:0b:f5:91:59:5c:ee:8d:60:1e:3a:8a:8e:32:9c: ff:f5:89:d4:44:54:06:fc:24:8d:3a:21:50:cb:2e: 32:fc:2b:62:ac:a5:a1:01:86:11:5c:a2:9b:39:26: 97:56:51:7d:07:70:09:29:c3:78:2a:73:03:d9:02: 6b:5e:d2:5d:31:fc:bb:35:15:88:7d:1d:6b:d1:19: 2c:a8:ab:d5:97:c3:9b:8e:7d:ba:97:86:ef:7b:78: 1f:37:65:3e:09:ef:cf:65:fa:ef:98:e3:05:ce:88: e6:73:bc:82:ad:b9:f3:fc:70:58:9a:39:3c:92:70: 0a:55:85:89:7a:31:20:02:14:28:37:66:c7:b5:ce: be:08:a8:a7:4e:be:0f:fe:85:b5:58:1a:14:78:a5: bf:90:62:b5:4f:cc:8d:bf:d3:69:f1:09:47:f9:ef: dd:1b:d1:be:31:30:bf:7e:17:92:cc:24:c0:1b:d4: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B8:6E:0C:71:68:82:3E:67:91:41:87:2F:82:FB:85:B4:8F:33:DA X509v3 Authority Key Identifier: keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:65:13:4d:f2:25:97:12:e6:3b:cc:a4:0f:a0:5b:1f:fb:27: 21:33:27:1f:fc:a5:eb:2d:a6:eb:a7:b0:e4:2d:49:09:22:dc: af:e2:c6:30:58:c5:18:04:18:bf:16:58:42:22:b4:41:be:3f: 0a:40:92:ab:1e:ac:65:ea:b8:db:1e:07:0b:e7:39:df:09:c9: 45:5f:65:7c:97:e0:27:a4:6d:e6:f4:d1:14:a3:75:39:8e:35: 38:51:ed:e4:f7:f9:b1:0c:30:a2:78:af:48:1c:f8:cd:32:cd: 73:cb:1b:b2:f4:d6:78:a1:76:57:f3:51:86:aa:39:53:4b:9c: 8c:66:c9:42:ad:73:5a:9c:6b:2a:71:0d:a7:d4:47:0a:98:55: 7c:29:5e:ea:ce:dc:d4:19:20:b0:46:f0:11:a1:72:ef:7f:c1: 32:8b:b7:59:f1:6d:1c:e8:1a:27:49:69:85:a6:67:ea:40:45: fe:cd:83:85:21:69:37:fc:55:da:c3:3b:42:49:66:7d:bd:91: 6e:f0:cb:05:70:e9:e7:50:76:34:84:bd:e7:07:f3:f8:5a:92: 88:f6:94:5c:0d:68:98:2b:fd:19:6d:2c:ed:82:fd:0b:f1:b8: c4:20:af:4b:7c:4b:e2:77:9a:f3:0a:0d:5e:70:fa:c8:84:fe: e1:0b:86:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmDLYJxt5CgaB5trXYuziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmI1MTQ2YjUwYjViYzgxYTM1NzQ3YTJiYmU2NTJhYTBi NzE2N2MwHhcNMjUxMjI0MjMwMTA0WhcNMjUxMjI1MjMwMTA0WjAzMTEwLwYDVQQD Eyg5M2I4NmUwYzcxNjg4MjNlNjc5MTQxODcyZjgyZmI4NWI0OGYzM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PEeTWWIMZLiGvcepQ1M2KxCXC8l jpZrAY2pC5ZbCqbyoEdWa04lwXWcoc7nzERFFJD5+sPdgZ6SBhFCsY923pEyezv9 Eu+nLDyeC/WRWVzujWAeOoqOMpz/9YnURFQG/CSNOiFQyy4y/CtirKWhAYYRXKKb OSaXVlF9B3AJKcN4KnMD2QJrXtJdMfy7NRWIfR1r0RksqKvVl8Objn26l4bve3gf N2U+Ce/PZfrvmOMFzojmc7yCrbnz/HBYmjk8knAKVYWJejEgAhQoN2bHtc6+CKin Tr4P/oW1WBoUeKW/kGK1T8yNv9Np8QlH+e/dG9G+MTC/fheSzCTAG9SF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO4bgxxaII+Z5FBhy+C+4W0jzPaMB8GA1UdIwQY MBaAFHe7UUa1C1vIGjV0eiu+ZSqgtxZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDd0UlJyVUxXOGdhTlhSNks3NWxLcUMzRm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82MTk5ZDQtMzI2MS00ZTBhLWFiNDYt ZjA4N2U0Zjg1ZTUwLzEvZDd0UlJyVUxXOGdhTlhSNks3NWxLcUMzRm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82MTk5ZDQtMzI2MS00ZTBhLWFiNDYtZjA4N2U0Zjg1ZTUw LzEvZDd0UlJyVUxXOGdhTlhSNks3NWxLcUMzRm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGUTTfIl lxLmO8ykD6BbH/snITMnH/yl6y2m66ew5C1JCSLcr+LGMFjFGAQYvxZYQiK0Qb4/ CkCSqx6sZeq42x4HC+c53wnJRV9lfJfgJ6Rt5vTRFKN1OY41OFHt5Pf5sQwwoniv SBz4zTLNc8sbsvTWeKF2V/NRhqo5U0ucjGbJQq1zWpxrKnENp9RHCphVfCle6s7c 1BkgsEbwEaFy73/BMou3WfFtHOgaJ0lphaZn6kBF/s2DhSFpN/xV2sM7Qklmfb2R bvDLBXDp51B2NIS95wfz+FqSiPaUXA1omCv9GW0s7YL9C/G4xCCvS3xL4nea8woN XnD6yIT+4QuGoQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:44:26 2025 by rpki-client