This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json) Hash identifier: N5xc5zBDrbw5jqe4bT0XbPMUAdYj8DISa8z8cAJWJDE= Subject key identifier: FA:9A:EC:EA:23:FB:6C:5E:06:AE:BD:60:B4:AE:CE:AF:6C:F9:69:0E Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Certificate serial: 019B360EB9CB670776356F735664EDDA922F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft Manifest number: 0E6C Signing time: Fri 19 Dec 2025 10:01:33 +0000 Manifest this update: Fri 19 Dec 2025 10:01:33 +0000 Manifest next update: Sat 20 Dec 2025 10:01:33 +0000 Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: fknnOpjH6iJZwypQoTgeiJR0hz1l+0EwmRrmusfZBuU=) 2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:b9:cb:67:07:76:35:6f:73:56:64:ed:da:92:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Validity Not Before: Dec 19 10:01:33 2025 GMT Not After : Dec 20 10:01:33 2025 GMT Subject: CN=fa9aecea23fb6c5e06aebd60b4aeceaf6cf9690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:e4:61:73:09:dc:06:bd:10:72:8e:ae:eb: 81:a7:b4:05:08:32:dc:4d:9b:80:2e:3d:22:07:f0: 8f:ce:11:f2:d4:85:08:55:3c:de:e1:a7:01:a9:f7: 5d:35:79:5f:a1:20:2d:94:b2:a7:1d:12:cf:68:48: 76:98:96:5d:df:07:8d:91:87:6e:da:2d:b0:c8:b2: 3c:00:7b:b6:17:5e:62:fa:54:69:f0:d6:a1:c5:64: 4b:05:2e:ee:e9:81:97:f0:ba:ab:6f:80:4f:b9:c9: 92:2a:1f:25:e8:d4:6b:b9:ba:51:0c:0f:36:41:ae: a4:91:1b:a3:6f:39:1c:0d:09:59:ce:5e:41:be:58: 9f:51:c5:00:ea:5e:b6:6e:a7:ae:28:93:3f:a6:ac: 40:07:98:b9:28:27:b4:7c:2c:70:46:81:42:b4:04: 63:5d:61:67:a9:ae:85:04:41:54:0b:69:ee:46:18: be:17:1c:2f:fe:3e:4a:f1:c3:01:31:97:8d:c7:bb: fe:50:50:b6:a1:3b:3a:d1:88:ca:40:b5:76:ad:73: 4a:a8:fc:41:f1:53:20:c0:f6:ac:6f:7d:98:5f:b7: 86:da:40:b7:9f:5f:cf:30:b4:e1:70:e0:da:d2:f1: fc:2f:b4:35:f1:30:9b:fd:e8:6a:9b:35:66:0a:37: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:EC:EA:23:FB:6C:5E:06:AE:BD:60:B4:AE:CE:AF:6C:F9:69:0E X509v3 Authority Key Identifier: keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b6:52:a0:ef:24:79:2f:e9:b8:bd:04:77:b0:88:fd:d2:81: bd:1e:4f:79:48:2d:c1:b9:6d:b0:e6:2f:b5:7e:e9:d1:7d:7e: 1b:94:82:49:2d:05:ab:06:b4:11:08:f1:e5:f3:2c:5e:44:32: df:4e:a7:4e:f0:4e:48:5b:47:48:54:be:8a:83:b5:51:22:d2: da:b1:3c:67:07:bb:1d:6b:9a:81:cc:c0:08:40:1b:cb:b3:2f: c7:12:0b:9b:d3:8a:7f:79:c6:44:c3:19:2a:87:25:57:8c:07: 0e:f3:ca:87:66:22:bf:18:98:8e:3b:3a:a6:b2:3f:86:f7:67: 90:0d:af:e0:fa:c2:f5:c3:7c:0b:eb:48:8b:d7:39:39:9e:5c: 2f:f1:fa:3b:cf:aa:34:d5:6d:75:11:f2:ac:a1:c6:f3:5b:f8: aa:98:26:1c:95:17:19:87:57:ad:db:4a:45:94:ff:56:e4:aa: 10:34:1a:19:80:23:11:57:f3:57:71:62:e2:5c:bf:05:85:cf: c2:56:e0:44:f8:0a:61:5b:f5:d0:71:99:30:b6:3f:bc:81:2b: d6:66:7c:a5:92:fb:a8:f6:80:61:6f:5c:7e:47:df:ef:f4:6e: 8f:cc:9f:7a:d9:57:a9:14:a6:7f:ed:1a:b6:8b:fe:01:21:60: 23:c0:1c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DrnLZwd2NW9zVmTt2pIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmY1YjUxOTk5NjM3YzgwYmY5M2M4YTkwM2QxNmMzYWVj MjUzNDEwHhcNMjUxMjE5MTAwMTMzWhcNMjUxMjIwMTAwMTMzWjAzMTEwLwYDVQQD EyhmYTlhZWNlYTIzZmI2YzVlMDZhZWJkNjBiNGFlY2VhZjZjZjk2OTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvirkYXMJ3Aa9EHKOruuBp7QFCDLc TZuALj0iB/CPzhHy1IUIVTze4acBqfddNXlfoSAtlLKnHRLPaEh2mJZd3weNkYdu 2i2wyLI8AHu2F15i+lRp8NahxWRLBS7u6YGX8Lqrb4BPucmSKh8l6NRrubpRDA82 Qa6kkRujbzkcDQlZzl5BvlifUcUA6l62bqeuKJM/pqxAB5i5KCe0fCxwRoFCtARj XWFnqa6FBEFUC2nuRhi+Fxwv/j5K8cMBMZeNx7v+UFC2oTs60YjKQLV2rXNKqPxB 8VMgwPasb32YX7eG2kC3n1/PMLThcODa0vH8L7Q18TCb/ehqmzVmCjdRgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqa7Ooj+2xeBq69YLSuzq9s+WkOMB8GA1UdIwQY MBaAFO6/W1GZljfIC/k8ipA9FsOuwlNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAt NTQyNGRjNjNlMmFjLzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAtNTQyNGRjNjNlMmFj LzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbZSoO8k eS/puL0Ed7CI/dKBvR5PeUgtwbltsOYvtX7p0X1+G5SCSS0Fqwa0EQjx5fMsXkQy 306nTvBOSFtHSFS+ioO1USLS2rE8Zwe7HWuagczACEAby7MvxxILm9OKf3nGRMMZ KoclV4wHDvPKh2YivxiYjjs6prI/hvdnkA2v4PrC9cN8C+tIi9c5OZ5cL/H6O8+q NNVtdRHyrKHG81v4qpgmHJUXGYdXrdtKRZT/VuSqEDQaGYAjEVfzV3Fi4ly/BYXP wlbgRPgKYVv10HGZMLY/vIEr1mZ8pZL7qPaAYW9cfkff7/Ruj8yfetlXqRSmf+0a tov+ASFgI8AcUA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:08:25 2025 by rpki-client