This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json) Hash identifier: iVNHnzzw8JVetYDk0CdDJulqsqEVj+m2AsAu7JCvTPc= Subject key identifier: 40:AE:65:D7:A6:A3:C6:FC:C1:5A:7D:76:D0:47:0A:A9:7F:73:75:0C Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Certificate serial: 019B39B3FD2BE253F3A7475D27545483FA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft Manifest number: 06D5 Signing time: Sat 20 Dec 2025 03:00:55 +0000 Manifest this update: Sat 20 Dec 2025 03:00:55 +0000 Manifest next update: Sun 21 Dec 2025 03:00:55 +0000 Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: iMZgoaStjOUEAMCmn8uwKK3b4WUNNZs4JEdFpDtjh3g=) 2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:fd:2b:e2:53:f3:a7:47:5d:27:54:54:83:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Validity Not Before: Dec 20 03:00:55 2025 GMT Not After : Dec 21 03:00:55 2025 GMT Subject: CN=40ae65d7a6a3c6fcc15a7d76d0470aa97f73750c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:12:66:a0:b9:1a:bc:7a:c1:76:67:85:c1: 33:88:8e:78:42:d3:fb:90:07:31:cc:7e:43:33:cb: 2e:f9:51:89:5e:e1:c8:0a:0d:27:1a:08:b7:8f:11: 4d:61:f8:f1:44:66:25:69:53:3b:59:64:38:77:be: 79:5b:61:73:ef:f4:46:59:f7:54:bf:a2:54:50:05: e9:b4:de:77:a1:2f:81:d6:79:c8:d4:fe:fb:1c:97: 29:b5:8d:c4:a5:f7:00:46:ec:c1:0a:bd:6a:f8:6d: 0e:c5:61:08:14:bc:63:fb:4f:2a:f5:5a:c7:46:60: b0:c3:bc:1f:dc:57:bd:f2:27:fc:08:e7:f0:f4:1c: b1:a0:dd:56:00:1e:b5:af:b6:b4:98:8c:68:1a:53: 3e:6c:9b:4b:34:a9:39:0a:89:f6:5a:03:d5:d7:63: d7:38:7f:91:e2:5f:ff:ad:dc:1d:a9:5c:83:e8:f7: 06:ad:50:15:e1:f4:d2:6b:54:26:ee:46:10:c9:aa: ab:24:b4:03:09:a8:d1:c5:85:93:d7:98:9c:88:17: fa:13:34:5f:da:89:7d:93:50:5d:f4:d2:ff:b6:3b: 45:2d:e0:34:90:3d:30:8b:ab:79:2e:8f:7b:11:a4: bf:9a:7e:1b:90:d1:a7:ee:f2:6c:e8:3f:5b:28:3a: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:65:D7:A6:A3:C6:FC:C1:5A:7D:76:D0:47:0A:A9:7F:73:75:0C X509v3 Authority Key Identifier: keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:47:87:13:4c:a7:a1:d0:e8:92:ee:8b:ab:df:03:62:db:20: 51:23:69:33:cc:fa:f0:7d:d0:46:e7:73:4f:47:cf:c1:e5:f7: 7f:33:c8:a6:2e:1b:79:bf:72:0c:6d:4f:68:01:c0:2a:8d:52: 34:5d:d9:bf:52:65:72:c2:42:c3:39:28:f8:f2:aa:35:10:18: 66:1d:d4:97:55:85:40:58:24:4f:ae:83:16:ae:27:92:5c:f4: 89:ff:ab:03:9f:9c:90:a1:05:12:ab:30:1e:89:0c:8e:80:47: 65:2a:8b:1f:42:eb:db:00:63:93:f1:69:f0:83:19:1a:9b:7f: 41:eb:fb:51:c6:df:6a:68:8d:f5:be:ec:48:71:c8:26:60:89: a8:3b:43:bc:db:2c:f2:66:49:f4:49:f6:46:c7:e8:41:e9:f9: be:58:fd:d5:bb:00:07:1d:32:92:ea:08:93:1a:18:f8:24:1a: 33:98:4c:34:52:f0:3a:15:2d:bd:29:42:20:fc:42:2e:a5:33: 8d:00:1a:bf:19:4b:3d:44:f7:e5:2f:2c:7a:7c:63:6e:dc:c4: 83:91:15:45:95:fa:8d:24:05:7c:d0:7c:f7:12:c0:9a:ed:b1: 03:e3:2e:79:c6:19:16:48:06:84:34:87:58:02:36:2e:6b:6c: 80:b7:35:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s/0r4lPzp0ddJ1RUg/pQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2 MTkyMDQwHhcNMjUxMjIwMDMwMDU1WhcNMjUxMjIxMDMwMDU1WjAzMTEwLwYDVQQD Eyg0MGFlNjVkN2E2YTNjNmZjYzE1YTdkNzZkMDQ3MGFhOTdmNzM3NTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJoSZqC5Grx6wXZnhcEziI54QtP7 kAcxzH5DM8su+VGJXuHICg0nGgi3jxFNYfjxRGYlaVM7WWQ4d755W2Fz7/RGWfdU v6JUUAXptN53oS+B1nnI1P77HJcptY3EpfcARuzBCr1q+G0OxWEIFLxj+08q9VrH RmCww7wf3Fe98if8COfw9ByxoN1WAB61r7a0mIxoGlM+bJtLNKk5Con2WgPV12PX OH+R4l//rdwdqVyD6PcGrVAV4fTSa1Qm7kYQyaqrJLQDCajRxYWT15iciBf6EzRf 2ol9k1Bd9NL/tjtFLeA0kD0wi6t5Lo97EaS/mn4bkNGn7vJs6D9bKDo3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECuZdemo8b8wVp9dtBHCql/c3UMMB8GA1UdIwQY MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct ZjcyMjMzMTc5Y2NmLzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0eHE0yn odDoku6Lq98DYtsgUSNpM8z68H3QRudzT0fPweX3fzPIpi4beb9yDG1PaAHAKo1S NF3Zv1JlcsJCwzko+PKqNRAYZh3Ul1WFQFgkT66DFq4nklz0if+rA5+ckKEFEqsw HokMjoBHZSqLH0Lr2wBjk/Fp8IMZGpt/Qev7UcbfamiN9b7sSHHIJmCJqDtDvNss 8mZJ9En2RsfoQen5vlj91bsABx0ykuoIkxoY+CQaM5hMNFLwOhUtvSlCIPxCLqUz jQAavxlLPUT35S8senxjbtzEg5EVRZX6jSQFfNB89xLAmu2xA+MuecYZFkgGhDSH WAI2LmtsgLc1Ew== -----END CERTIFICATE-----Generated at Sat Dec 20 05:03:30 2025 by rpki-client