This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json) Hash identifier: pjzieyLgO9x5uf41us2Rv0Na8dxaGB7E/IXQhJqBwjY= Subject key identifier: CE:EA:7B:D9:E4:7D:B7:85:3C:8D:44:70:D5:1E:3E:57:72:CA:CB:9C Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Certificate serial: 019B66562A3A7EBC1277F72AF2DFBC8D0170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft Manifest number: 0E85 Signing time: Sun 28 Dec 2025 19:01:21 +0000 Manifest this update: Sun 28 Dec 2025 19:01:21 +0000 Manifest next update: Mon 29 Dec 2025 19:01:21 +0000 Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: 1PoCGRmk2xJtLDi+pmPiqhZEycFgnD5xycT6JURDnC4=) 2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:2a:3a:7e:bc:12:77:f7:2a:f2:df:bc:8d:01:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Validity Not Before: Dec 28 19:01:21 2025 GMT Not After : Dec 29 19:01:21 2025 GMT Subject: CN=ceea7bd9e47db7853c8d4470d51e3e5772cacb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:64:d4:28:dd:da:f9:64:c2:40:ee:3b:05:af: 22:2c:7a:4e:6c:28:3f:2e:6b:9c:bd:50:10:2a:2e: 1e:c9:f2:f3:21:f6:0e:0a:91:81:67:3f:c9:e5:0c: 1d:f8:1d:9f:1d:b1:63:4b:3c:4f:45:58:25:7b:0a: 64:fd:42:e8:c1:87:31:ca:07:bc:40:76:6f:0b:8b: 04:b0:b8:98:4e:63:02:d7:85:e2:b7:e7:27:1e:8a: 71:ab:85:c4:44:55:c5:a9:16:6b:4f:bb:49:fd:6b: c4:2c:fc:76:e5:a4:11:33:b5:29:11:fe:e6:e7:a3: c9:84:e3:76:6c:4b:df:7f:0e:b5:3c:93:e4:2f:ca: b7:58:3e:3c:54:07:70:57:22:9a:8d:67:29:78:c3: bf:bf:99:3d:e9:e4:f9:82:b6:0a:5d:3c:b5:8d:f3: 22:f7:47:9a:35:f7:78:f6:fe:9d:b2:d3:46:a9:ce: 1f:bc:ad:1a:08:93:4a:6d:2d:b3:54:0e:20:14:99: f4:ef:58:8c:57:6b:4c:f3:e3:2d:8e:de:4c:21:04: bc:19:98:17:d2:14:77:6c:83:76:c0:14:37:80:78: 3d:2a:79:aa:09:d4:70:b0:ff:32:a8:0d:6c:06:c0: 01:fc:84:b7:14:9b:2c:b9:d8:80:08:d8:87:61:78: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:7B:D9:E4:7D:B7:85:3C:8D:44:70:D5:1E:3E:57:72:CA:CB:9C X509v3 Authority Key Identifier: keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5e:23:c6:50:87:f0:3d:a5:b9:d6:e3:06:11:5b:ce:a0:9d: d4:d6:59:36:b0:3f:ce:da:60:22:2e:c3:ac:67:ef:45:3c:52: c2:b6:fc:f8:bc:e8:f6:6c:71:d8:c8:6d:ac:46:50:be:6a:47: 7c:d8:71:67:8c:ce:82:b2:82:db:26:03:93:18:92:8d:fc:a5: 4c:b1:b8:7c:cf:95:4c:0c:07:b2:43:be:56:3a:54:04:37:5c: bf:7c:41:42:75:db:93:b9:8d:ed:c2:ca:f0:06:d6:23:65:8d: fc:94:b2:a2:b7:20:6f:e1:01:05:ca:d9:5b:f9:fe:52:0e:33: ee:b2:bb:ce:c6:62:2e:2b:50:f1:bd:70:2d:10:e7:9d:dd:c6: c7:33:04:54:e3:f9:b7:72:db:a7:ae:5e:e6:1d:13:33:2f:8c: 47:1b:10:07:56:12:00:2d:14:1b:01:0d:86:b9:4e:b7:80:41: 9c:66:48:90:05:78:c1:f2:9e:8c:77:ea:09:a0:0f:47:e4:c6: a2:b8:cc:95:46:70:ce:1f:65:28:05:0e:a2:1a:0e:fb:2a:0f: 16:5d:cb:62:76:ac:88:45:98:58:eb:c2:0b:ff:fc:bc:b2:d3: 83:af:61:24:8b:1e:31:ae:67:4a:77:59:1c:69:ab:67:80:14: a7:fa:94:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVio6frwSd/cq8t+8jQFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmY1YjUxOTk5NjM3YzgwYmY5M2M4YTkwM2QxNmMzYWVj MjUzNDEwHhcNMjUxMjI4MTkwMTIxWhcNMjUxMjI5MTkwMTIxWjAzMTEwLwYDVQQD EyhjZWVhN2JkOWU0N2RiNzg1M2M4ZDQ0NzBkNTFlM2U1NzcyY2FjYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WTUKN3a+WTCQO47Ba8iLHpObCg/ LmucvVAQKi4eyfLzIfYOCpGBZz/J5Qwd+B2fHbFjSzxPRVglewpk/ULowYcxyge8 QHZvC4sEsLiYTmMC14Xit+cnHopxq4XERFXFqRZrT7tJ/WvELPx25aQRM7UpEf7m 56PJhON2bEvffw61PJPkL8q3WD48VAdwVyKajWcpeMO/v5k96eT5grYKXTy1jfMi 90eaNfd49v6dstNGqc4fvK0aCJNKbS2zVA4gFJn071iMV2tM8+Mtjt5MIQS8GZgX 0hR3bIN2wBQ3gHg9KnmqCdRwsP8yqA1sBsAB/IS3FJssudiACNiHYXgczwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7qe9nkfbeFPI1EcNUePldyysucMB8GA1UdIwQY MBaAFO6/W1GZljfIC/k8ipA9FsOuwlNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAt NTQyNGRjNjNlMmFjLzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAtNTQyNGRjNjNlMmFj LzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV4jxlCH 8D2ludbjBhFbzqCd1NZZNrA/ztpgIi7DrGfvRTxSwrb8+Lzo9mxx2MhtrEZQvmpH fNhxZ4zOgrKC2yYDkxiSjfylTLG4fM+VTAwHskO+VjpUBDdcv3xBQnXbk7mN7cLK 8AbWI2WN/JSyorcgb+EBBcrZW/n+Ug4z7rK7zsZiLitQ8b1wLRDnnd3GxzMEVOP5 t3Lbp65e5h0TMy+MRxsQB1YSAC0UGwENhrlOt4BBnGZIkAV4wfKejHfqCaAPR+TG orjMlUZwzh9lKAUOohoO+yoPFl3LYnasiEWYWOvCC//8vLLTg69hJIseMa5nSndZ HGmrZ4AUp/qU+Q== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:09 2025 by rpki-client