This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json) Hash identifier: 6LFP8P8SrXxggwHhQWDRfQ0e4zosrfpUeubN8b9xp34= Subject key identifier: 1E:F4:ED:BD:0B:90:BA:5D:63:C7:6A:B3:3C:E9:59:21:8E:63:1A:AF Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef Certificate serial: 019B4A0481D48143364A2A9FBCFB389C63D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 07:02:47 +0000 Manifest this update: Tue 23 Dec 2025 07:02:47 +0000 Manifest next update: Wed 24 Dec 2025 07:02:47 +0000 Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: BTu0wfmmC0dSBh+sjF37ovFdXVCZx1xvFGU54zUSWns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:81:d4:81:43:36:4a:2a:9f:bc:fb:38:9c:63:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef Validity Not Before: Dec 23 07:02:47 2025 GMT Not After : Dec 24 07:02:47 2025 GMT Subject: CN=1ef4edbd0b90ba5d63c76ab33ce959218e631aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:0a:7c:de:f9:19:cf:2c:d0:6a:31:2d:05: 45:10:3d:10:77:bb:15:f7:fc:da:87:b6:1b:7a:eb: 58:2d:ad:4b:93:ef:e4:c4:73:73:a7:a1:db:4a:8f: 57:53:e7:58:1a:a3:26:4b:f5:68:9d:cf:06:a7:90: 35:aa:2b:67:0a:29:9d:3b:a4:1e:13:d1:95:8c:c8: 9e:dc:20:d5:a1:33:1b:32:1f:98:33:b1:64:55:0d: 15:b3:8e:45:74:b2:a3:46:25:ad:df:db:2d:fb:6e: 3f:13:24:6c:bc:9a:54:e4:72:23:50:41:25:6c:da: d4:99:15:d8:ba:73:a8:9b:aa:c6:ca:17:5e:6f:c2: 8b:b6:78:db:53:b5:1f:fa:c4:de:35:8a:d3:c3:26: 39:ba:3e:5d:89:b7:8a:3b:87:5a:87:74:b3:8a:e9: 1d:56:9a:4a:3c:7e:54:f3:5d:3d:b1:bc:15:af:b2: 21:56:2d:08:de:7a:67:62:ef:10:6c:83:96:50:f1: ee:22:27:d6:3f:82:cb:ba:6f:c4:86:1a:21:2c:9a: ca:12:8b:31:e4:91:91:87:af:f7:72:92:59:0d:b1: 27:b5:ff:5e:82:69:da:19:cb:cc:41:48:84:42:ad: 6f:61:08:6c:d6:90:eb:75:72:86:f6:b9:64:67:0e: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:ED:BD:0B:90:BA:5D:63:C7:6A:B3:3C:E9:59:21:8E:63:1A:AF X509v3 Authority Key Identifier: keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c8:1a:f7:14:53:7f:a4:80:f3:c1:6c:34:17:c6:ef:a6:14: 77:ec:4e:f9:17:90:a5:f6:80:8b:fb:9d:f7:dc:3b:16:69:dc: bc:02:21:f6:5b:df:56:aa:d6:b2:50:e7:f4:5e:2d:a7:3e:bb: 61:ed:18:54:0c:5e:77:dc:0c:98:b5:dc:77:c8:98:7c:39:83: 9b:c9:4d:e3:a5:3e:5d:0e:03:e0:80:b5:bc:bf:2a:75:75:4a: ac:fc:8f:85:dc:73:a2:9e:72:c6:8f:6d:ed:f8:9a:7d:3c:3c: 24:c0:f6:dc:02:1f:4b:11:88:26:97:74:31:b1:b7:ae:e5:7f: 9c:ea:62:14:25:c0:24:3f:00:eb:cd:91:4c:8b:ef:9a:b8:46: 43:ae:4c:59:2d:57:fa:8f:95:f0:24:0d:0e:05:6e:80:2a:0b: 69:4b:c8:6c:54:c4:c7:70:9f:62:0e:47:48:3e:c1:a5:c5:ba: 57:9d:37:a9:21:53:cf:2a:e9:86:a9:75:c1:4d:04:2c:04:cd: c1:84:07:aa:26:cc:3d:45:99:77:d4:95:b7:4c:80:ee:95:2e: da:14:5d:77:d2:9f:06:2b:03:9d:5b:3a:1f:49:1e:11:65:28: 4a:04:d3:f9:7d:14:c5:e5:63:0f:42:4e:02:d0:9f:84:80:2d: bf:2d:60:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBIHUgUM2SiqfvPs4nGPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDUxYmYxZTJhNTMwMDBiYzIzMDYwNTYwZjJjYzBiMzlk NDk2ZWYwHhcNMjUxMjIzMDcwMjQ3WhcNMjUxMjI0MDcwMjQ3WjAzMTEwLwYDVQQD EygxZWY0ZWRiZDBiOTBiYTVkNjNjNzZhYjMzY2U5NTkyMThlNjMxYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNwKfN75Gc8s0GoxLQVFED0Qd7sV 9/zah7YbeutYLa1Lk+/kxHNzp6HbSo9XU+dYGqMmS/Vonc8Gp5A1qitnCimdO6Qe E9GVjMie3CDVoTMbMh+YM7FkVQ0Vs45FdLKjRiWt39st+24/EyRsvJpU5HIjUEEl bNrUmRXYunOom6rGyhdeb8KLtnjbU7Uf+sTeNYrTwyY5uj5dibeKO4dah3Sziukd VppKPH5U8109sbwVr7IhVi0I3npnYu8QbIOWUPHuIifWP4LLum/EhhohLJrKEosx 5JGRh6/3cpJZDbEntf9egmnaGcvMQUiEQq1vYQhs1pDrdXKG9rlkZw6WjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB707b0LkLpdY8dqszzpWSGOYxqvMB8GA1UdIwQY MBaAFO3VG/HipTAAvCMGBWDyzAs51JbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEt Yzc1N2IxNWYxY2NmLzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEtYzc1N2IxNWYxY2Nm LzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsga9xRT f6SA88FsNBfG76YUd+xO+ReQpfaAi/ud99w7FmncvAIh9lvfVqrWslDn9F4tpz67 Ye0YVAxed9wMmLXcd8iYfDmDm8lN46U+XQ4D4IC1vL8qdXVKrPyPhdxzop5yxo9t 7fiafTw8JMD23AIfSxGIJpd0MbG3ruV/nOpiFCXAJD8A682RTIvvmrhGQ65MWS1X +o+V8CQNDgVugCoLaUvIbFTEx3CfYg5HSD7BpcW6V503qSFTzyrphql1wU0ELATN wYQHqibMPUWZd9SVt0yA7pUu2hRdd9KfBisDnVs6H0keEWUoSgTT+X0UxeVjD0JO AtCfhIAtvy1gUw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:53:34 2025 by rpki-client