This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json) Hash identifier: zHXnjfkUjzbbnjElLRXMLqWjyOJLzYiITGCbGKvBCYE= Subject key identifier: 48:8F:B1:3B:F2:01:D1:56:D4:AC:D4:57:40:F0:CC:9F:A7:B3:E8:F2 Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Certificate serial: 019B5D53B7F3F660F25A35C6C3309AAF665B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft Manifest number: 050E Signing time: Sat 27 Dec 2025 01:02:06 +0000 Manifest this update: Sat 27 Dec 2025 01:02:06 +0000 Manifest next update: Sun 28 Dec 2025 01:02:06 +0000 Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: dZH2OyUfJVjqgZO0U8IY7mBhv2z5uVp/JBwdNCavWmw=) 2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:b7:f3:f6:60:f2:5a:35:c6:c3:30:9a:af:66:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Validity Not Before: Dec 27 01:02:06 2025 GMT Not After : Dec 28 01:02:06 2025 GMT Subject: CN=488fb13bf201d156d4acd45740f0cc9fa7b3e8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:b7:86:1c:70:8b:e0:b7:c9:9d:a9:e9:76: be:2c:8b:cf:89:3d:7f:f5:71:38:70:f2:7b:9b:ee: 63:6c:0a:bc:b3:eb:f5:db:36:aa:a1:60:00:32:2f: ab:44:69:2e:ce:51:a9:5d:62:36:9b:8e:00:3e:c8: 5d:24:17:c7:2b:ad:da:c4:17:60:59:00:c1:58:96: ec:80:fd:07:ad:4e:8a:8f:4d:2d:a2:88:09:b3:c0: 38:28:65:76:3e:7e:a6:fc:c2:26:ce:40:00:47:4a: 3a:96:e0:35:ed:40:c2:67:29:42:63:c5:d6:26:28: b6:74:84:11:09:e7:71:a2:25:34:ab:eb:95:38:fb: 8d:4f:99:6d:95:39:69:72:7b:87:ad:d0:f5:95:1a: c9:80:01:96:d4:6d:e2:ab:f2:08:d2:49:4b:94:9d: 48:dc:df:e8:4a:b4:24:25:de:fb:0f:83:41:e5:65: 4c:ad:b5:77:28:1f:04:aa:4b:37:e3:6f:e7:a0:e2: b4:77:80:3a:55:ee:b8:ff:01:16:db:2d:c3:74:ec: a8:d9:76:07:a2:57:3a:99:a8:76:38:d1:90:8c:74: 54:80:30:b8:c1:1f:23:a0:45:e4:a4:42:55:1d:b7: c0:f9:c9:5e:a2:4b:69:9f:da:ac:1c:e3:1a:eb:5b: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:B1:3B:F2:01:D1:56:D4:AC:D4:57:40:F0:CC:9F:A7:B3:E8:F2 X509v3 Authority Key Identifier: keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4d:e2:fa:cf:4d:59:90:5a:c7:ee:cd:0d:59:a3:89:1a:f4: f0:16:33:c1:a0:e0:0a:e5:70:46:17:27:95:04:c2:9f:98:89: 42:c8:1e:52:4d:ec:ca:c7:bc:35:b6:b2:8d:8c:52:17:c7:46: 80:b9:38:9e:02:d2:b3:c5:5e:9c:73:f8:77:3f:95:60:33:43: da:d3:15:de:ca:52:9a:77:56:99:71:88:2c:ff:24:fe:5d:ba: af:21:d1:29:12:4a:77:17:ad:de:27:d8:e3:96:3c:c4:72:6e: 93:fa:a8:dc:6b:02:dd:6a:cf:67:e1:fe:6a:35:46:54:2c:45: d8:9d:60:36:87:e5:79:40:5c:de:16:88:0d:6f:63:3c:67:4d: e9:6d:9a:25:a5:28:eb:7e:97:05:1f:38:f5:f1:74:cd:29:3f: 6f:d3:34:01:46:40:c1:e2:0f:7c:d9:04:6b:12:c0:22:ab:d7: 6f:3f:dc:ac:3f:b2:59:42:1f:a0:19:64:f4:79:62:9c:b8:fa: fe:ff:c9:5c:27:58:0b:5c:57:12:b1:b1:84:38:90:e6:82:1b: f2:79:47:0d:66:9c:1f:4b:d9:51:4e:e8:9a:c0:1b:f9:0b:95: c9:fb:f2:45:fc:29:9a:c9:3a:73:2d:8a:58:7a:93:fa:4d:9c: 6f:44:22:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU7fz9mDyWjXGwzCar2ZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDE1NGY5NmFkY2ViOWJjZWUwYmRjMGI4MzVhZmJlMDUw OTc1MWEwHhcNMjUxMjI3MDEwMjA2WhcNMjUxMjI4MDEwMjA2WjAzMTEwLwYDVQQD Eyg0ODhmYjEzYmYyMDFkMTU2ZDRhY2Q0NTc0MGYwY2M5ZmE3YjNlOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA23hhxwi+C3yZ2p6Xa+LIvPiT1/ 9XE4cPJ7m+5jbAq8s+v12zaqoWAAMi+rRGkuzlGpXWI2m44APshdJBfHK63axBdg WQDBWJbsgP0HrU6Kj00toogJs8A4KGV2Pn6m/MImzkAAR0o6luA17UDCZylCY8XW Jii2dIQRCedxoiU0q+uVOPuNT5ltlTlpcnuHrdD1lRrJgAGW1G3iq/II0klLlJ1I 3N/oSrQkJd77D4NB5WVMrbV3KB8Eqks342/noOK0d4A6Ve64/wEW2y3DdOyo2XYH olc6mah2ONGQjHRUgDC4wR8joEXkpEJVHbfA+cleoktpn9qsHOMa61sW9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiPsTvyAdFW1KzUV0DwzJ+ns+jyMB8GA1UdIwQY MBaAFO7RVPlq3OubzuC9wLg1r74FCXUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYt NzZiN2VlZDUxZTRhLzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYtNzZiN2VlZDUxZTRh LzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek3i+s9N WZBax+7NDVmjiRr08BYzwaDgCuVwRhcnlQTCn5iJQsgeUk3syse8NbayjYxSF8dG gLk4ngLSs8VenHP4dz+VYDND2tMV3spSmndWmXGILP8k/l26ryHRKRJKdxet3ifY 45Y8xHJuk/qo3GsC3WrPZ+H+ajVGVCxF2J1gNofleUBc3haIDW9jPGdN6W2aJaUo 636XBR849fF0zSk/b9M0AUZAweIPfNkEaxLAIqvXbz/crD+yWUIfoBlk9HlinLj6 /v/JXCdYC1xXErGxhDiQ5oIb8nlHDWacH0vZUU7omsAb+QuVyfvyRfwpmsk6cy2K WHqT+k2cb0QiFg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:16:53 2025 by rpki-client