This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json) Hash identifier: o8ZokJgGIAtV6+CR7nYEYv6G2qro/PmlPY13OJQbFPs= Subject key identifier: DB:BF:7A:80:64:F7:87:47:4D:5D:70:FC:2D:C6:C6:0A:35:5D:91:3F Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Certificate serial: 019B3B34AAD11B0E56FF3FEAE86D9297949C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft Manifest number: 1508 Signing time: Sat 20 Dec 2025 10:01:05 +0000 Manifest this update: Sat 20 Dec 2025 10:01:05 +0000 Manifest next update: Sun 21 Dec 2025 10:01:05 +0000 Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: m53f3UEyL1WgE4M/XQwl0iOY3QI8DaJ3E6gZh+4Iy8Q=) 2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=) 3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:aa:d1:1b:0e:56:ff:3f:ea:e8:6d:92:97:94:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Validity Not Before: Dec 20 10:01:05 2025 GMT Not After : Dec 21 10:01:05 2025 GMT Subject: CN=dbbf7a8064f787474d5d70fc2dc6c60a355d913f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:ba:e6:85:a0:b9:34:04:5c:e1:e2:d8:d0: c1:ab:a6:55:7a:1a:15:1e:c1:14:15:30:4d:2f:da: 5e:1d:2f:39:8f:9d:60:c4:d9:0d:62:05:57:7f:d4: 92:f5:90:56:78:42:36:39:9b:67:3d:49:c2:11:99: 17:5f:38:a1:17:05:9f:4a:0f:8a:8e:fe:3a:62:06: 5f:a3:c5:57:e0:34:46:20:e7:b3:a7:74:a9:d0:a9: 93:65:52:55:11:b5:d6:c3:1c:38:1a:15:e8:1b:c3: 1d:4c:6d:a7:5d:1c:bf:64:3e:31:f4:fa:b3:69:bc: e1:2a:98:60:f6:50:f2:e6:11:08:55:e0:a5:36:b9: 4b:ad:f9:ae:7e:c8:95:83:cf:2b:b4:2d:ae:72:15: e2:05:34:c3:b1:13:75:69:00:73:45:fe:76:d0:c1: 99:14:57:97:ce:bf:34:5f:d9:16:70:02:d5:19:d7: d4:aa:d0:5e:5f:ec:8a:78:ab:11:4e:c6:b8:b2:8d: dd:bf:b8:7d:bf:05:cd:ea:47:3e:35:2f:00:a5:c7: ab:a7:14:8e:ab:b7:97:f9:f6:70:cc:7b:71:d4:89: 44:01:dc:ee:02:df:53:2b:16:a2:d6:1b:a2:48:6c: a8:88:db:51:3b:82:86:05:04:e5:38:e1:31:34:1c: a4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:7A:80:64:F7:87:47:4D:5D:70:FC:2D:C6:C6:0A:35:5D:91:3F X509v3 Authority Key Identifier: keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:81:7d:46:4e:ef:9f:9b:e9:7d:bf:59:6c:2d:07:85:55:3c: d5:1f:d9:31:25:b7:e2:02:79:f8:0a:ec:28:aa:e4:16:45:23: 02:21:af:54:77:9d:f4:52:da:d5:51:a7:60:b5:5f:3f:42:a4: 48:b0:79:06:28:22:bb:90:ba:4b:eb:50:9f:62:75:62:ba:a0: 0f:cb:a0:0d:55:8f:d1:41:9d:83:1d:5d:90:ae:c9:58:a3:85: ff:e8:65:a0:bd:19:f7:ea:10:2c:bd:83:19:ce:c8:7b:62:d5: dd:fa:bf:99:a5:7c:7b:e0:3e:a4:27:64:9a:bf:ec:76:30:dd: 00:8d:57:01:d8:f3:a5:9f:eb:93:8f:d0:ba:02:31:36:1d:f4: ee:6c:b8:67:e7:7b:33:cf:3e:11:5d:56:9e:e0:6e:3c:f2:2e: a3:7f:44:67:ab:32:a6:18:45:4e:f8:47:29:d9:79:1c:9d:d0: f1:f6:07:92:b3:e0:8e:bc:07:6f:40:d7:65:92:b3:2a:1b:f2: 12:97:36:37:36:b5:06:3b:c9:d7:f6:b0:d3:eb:4b:52:4b:85: e4:2e:c7:c2:8c:b9:ba:43:0f:24:53:99:04:05:51:d7:86:aa: e9:13:e0:14:da:6e:07:ad:c7:6e:a6:fa:34:31:41:fa:7c:aa: 81:ca:a0:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NKrRGw5W/z/q6G2Sl5ScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh YTE0ODcwHhcNMjUxMjIwMTAwMTA1WhcNMjUxMjIxMTAwMTA1WjAzMTEwLwYDVQQD EyhkYmJmN2E4MDY0Zjc4NzQ3NGQ1ZDcwZmMyZGM2YzYwYTM1NWQ5MTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzW65oWguTQEXOHi2NDBq6ZVehoV HsEUFTBNL9peHS85j51gxNkNYgVXf9SS9ZBWeEI2OZtnPUnCEZkXXzihFwWfSg+K jv46YgZfo8VX4DRGIOezp3Sp0KmTZVJVEbXWwxw4GhXoG8MdTG2nXRy/ZD4x9Pqz abzhKphg9lDy5hEIVeClNrlLrfmufsiVg88rtC2uchXiBTTDsRN1aQBzRf520MGZ FFeXzr80X9kWcALVGdfUqtBeX+yKeKsRTsa4so3dv7h9vwXN6kc+NS8ApcerpxSO q7eX+fZwzHtx1IlEAdzuAt9TKxai1huiSGyoiNtRO4KGBQTlOOExNBykBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu/eoBk94dHTV1w/C3Gxgo1XZE/MB8GA1UdIwQY MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3 LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoF9Rk7v n5vpfb9ZbC0HhVU81R/ZMSW34gJ5+ArsKKrkFkUjAiGvVHed9FLa1VGnYLVfP0Kk SLB5Bigiu5C6S+tQn2J1YrqgD8ugDVWP0UGdgx1dkK7JWKOF/+hloL0Z9+oQLL2D Gc7Ie2LV3fq/maV8e+A+pCdkmr/sdjDdAI1XAdjzpZ/rk4/QugIxNh307my4Z+d7 M88+EV1WnuBuPPIuo39EZ6syphhFTvhHKdl5HJ3Q8fYHkrPgjrwHb0DXZZKzKhvy Epc2Nza1BjvJ1/aw0+tLUkuF5C7Hwoy5ukMPJFOZBAVR14aq6RPgFNpuB63Hbqb6 NDFB+nyqgcqgnw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:53:45 2025 by rpki-client