This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json) Hash identifier: HgUd5nkzVEcj7ryU6Yv9YIJWa/6yn2TBE8eRogBEjlg= Subject key identifier: 4E:F8:B2:3E:29:F2:52:3A:6E:08:95:40:A2:00:5D:9D:26:69:FD:8D Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69 Certificate serial: 019B427FEFCD759571DD76DF495E1D9E8EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 20:00:39 +0000 Manifest this update: Sun 21 Dec 2025 20:00:39 +0000 Manifest next update: Mon 22 Dec 2025 20:00:39 +0000 Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: 1C1TNgGw+WQTfeMGyM096W+zjCqdsp16hd+2Dn4O9Ak=) 2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:ef:cd:75:95:71:dd:76:df:49:5e:1d:9e:8e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edff0ab25662757afb831675319296f63d989b69 Validity Not Before: Dec 21 20:00:39 2025 GMT Not After : Dec 22 20:00:39 2025 GMT Subject: CN=4ef8b23e29f2523a6e089540a2005d9d2669fd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:f8:47:82:02:78:b0:a6:74:96:8c:16:45: bc:24:d3:f1:4e:ec:67:f6:40:a7:62:83:c1:33:60: 52:29:33:01:97:db:a5:db:2f:02:51:b2:a0:60:e7: d9:0b:90:2b:c3:ca:06:21:e2:99:12:f9:f3:b9:7f: 56:86:dd:47:c2:32:6a:9a:07:72:90:da:85:d8:7e: db:a1:ec:23:7a:09:1c:f2:0c:b4:ab:ed:b1:f9:eb: c3:e8:7b:db:d6:28:c2:12:a5:67:99:8c:48:32:fb: 3c:27:74:18:10:3d:21:74:b6:d8:1b:15:52:54:0b: 80:57:9b:58:bd:ff:7b:29:83:ab:43:80:9c:87:5b: cd:e4:6c:f1:2e:60:a5:26:f7:31:8e:fb:66:b2:13: d0:9a:d4:aa:d4:e9:e0:2f:d6:c1:99:51:50:f8:7e: d7:11:5f:dc:ef:d5:a6:c4:c1:fd:14:aa:6c:1e:b5: aa:72:de:3e:4c:4f:63:74:27:70:79:98:cf:83:db: 90:fd:16:0d:82:12:75:4a:51:9b:c8:2d:a1:cc:be: 47:f3:bf:39:c2:74:78:02:1c:76:1b:ed:40:86:21: 57:16:9c:97:d1:22:3e:d3:fb:1d:2d:4f:c9:66:9d: 12:38:a7:47:ea:7f:8f:7d:74:bd:05:54:ab:c4:57: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F8:B2:3E:29:F2:52:3A:6E:08:95:40:A2:00:5D:9D:26:69:FD:8D X509v3 Authority Key Identifier: keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2c:b5:25:7b:8d:52:f5:b1:30:1d:15:e0:35:0b:ad:63:6e: 7c:48:67:a5:ad:65:37:5c:c5:48:2d:e5:62:90:0a:39:38:25: 79:81:f3:39:38:38:93:07:41:f8:5e:fc:f1:ab:6a:46:d8:8e: 32:d1:9f:33:ba:a3:f4:44:6b:a3:b3:6e:c0:48:71:d6:9b:da: bd:fc:cb:ba:1a:1f:88:69:17:33:d9:e2:77:bc:55:bb:0a:fc: 3f:0d:06:91:55:90:6e:c4:ed:88:0a:f2:e1:55:67:c6:33:4d: 02:c0:59:bc:75:73:12:66:30:11:38:d7:14:fa:5b:fa:fa:95: aa:f0:54:4e:ee:91:0e:7f:07:2a:5a:68:3f:b0:a1:b4:d4:45: d8:00:ec:53:ef:80:ad:11:d1:2e:fe:f7:37:d8:bf:72:e2:10: 04:7b:50:f0:98:97:97:1b:d3:08:f9:d9:81:a9:84:da:aa:5a: a1:b2:73:d2:cc:7f:9b:58:17:09:10:8b:4a:2e:94:25:0b:42: ff:01:21:e1:f6:84:e0:e0:51:27:32:20:71:ba:5c:cb:b8:5c: ed:4b:07:e3:c5:a1:5c:a4:01:22:6d:96:5b:e3:f4:75:ff:f8: af:d4:6f:10:1e:0e:3c:ab:5a:33:e3:14:e6:28:1d:fe:08:d5: ff:92:79:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf+/NdZVx3XbfSV4dno6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5 ODliNjkwHhcNMjUxMjIxMjAwMDM5WhcNMjUxMjIyMjAwMDM5WjAzMTEwLwYDVQQD Eyg0ZWY4YjIzZTI5ZjI1MjNhNmUwODk1NDBhMjAwNWQ5ZDI2NjlmZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrX4R4ICeLCmdJaMFkW8JNPxTuxn 9kCnYoPBM2BSKTMBl9ul2y8CUbKgYOfZC5Arw8oGIeKZEvnzuX9Wht1HwjJqmgdy kNqF2H7boewjegkc8gy0q+2x+evD6Hvb1ijCEqVnmYxIMvs8J3QYED0hdLbYGxVS VAuAV5tYvf97KYOrQ4Cch1vN5GzxLmClJvcxjvtmshPQmtSq1OngL9bBmVFQ+H7X EV/c79WmxMH9FKpsHrWqct4+TE9jdCdweZjPg9uQ/RYNghJ1SlGbyC2hzL5H8785 wnR4Ahx2G+1AhiFXFpyX0SI+0/sdLU/JZp0SOKdH6n+PfXS9BVSrxFcbcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE74sj4p8lI6bgiVQKIAXZ0maf2NMB8GA1UdIwQY MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt NjQ0YmZkY2ViOWY2LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2 LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCy1JXuN UvWxMB0V4DULrWNufEhnpa1lN1zFSC3lYpAKOTgleYHzOTg4kwdB+F788atqRtiO MtGfM7qj9ERro7NuwEhx1pvavfzLuhofiGkXM9nid7xVuwr8Pw0GkVWQbsTtiAry 4VVnxjNNAsBZvHVzEmYwETjXFPpb+vqVqvBUTu6RDn8HKlpoP7ChtNRF2ADsU++A rRHRLv73N9i/cuIQBHtQ8JiXlxvTCPnZgamE2qpaobJz0sx/m1gXCRCLSi6UJQtC /wEh4faE4OBRJzIgcbpcy7hc7UsH48WhXKQBIm2WW+P0df/4r9RvEB4OPKtaM+MU 5igd/gjV/5J5kA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:20 2025 by rpki-client