This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json) Hash identifier: Y7BPNS/6SP9Ukcy2bFpc1BWKGUQxX3R2GffqVb4eCOk= Subject key identifier: 5F:60:8C:76:2A:55:69:5C:B9:5D:2F:4D:6B:9C:78:16:30:75:89:FA Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Certificate serial: 019B71B512AA45C9257F934177217B3E1B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft Manifest number: 06F2 Signing time: Wed 31 Dec 2025 00:00:50 +0000 Manifest this update: Wed 31 Dec 2025 00:00:50 +0000 Manifest next update: Thu 01 Jan 2026 00:00:50 +0000 Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: raS4qvYLPQpSh3bvAJAPhh07L0146VoIo447MwxH4IY=) 2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:12:aa:45:c9:25:7f:93:41:77:21:7b:3e:1b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Validity Not Before: Dec 31 00:00:50 2025 GMT Not After : Jan 1 00:00:50 2026 GMT Subject: CN=5f608c762a55695cb95d2f4d6b9c7816307589fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:c6:71:7f:75:09:9e:13:5e:54:2c:53:dd: 68:cd:1c:c3:c6:ae:e1:58:9e:36:ce:93:56:a8:63: 15:a2:5f:1b:d5:2e:3e:ae:e8:f8:91:5f:3f:c3:b3: 54:2e:d4:37:dc:7d:d7:0a:22:94:7c:da:83:c0:2d: 73:e2:56:ac:55:78:6e:83:4f:95:40:1f:66:ca:e4: 54:63:fd:15:fe:13:68:ac:53:fe:0a:48:70:bf:22: dd:1c:02:c9:31:43:51:04:d6:75:76:64:70:39:be: 4e:bd:ef:e7:70:52:c3:a0:c6:bb:e2:7a:67:95:26: bb:1d:85:71:c4:86:de:b9:99:cf:67:b3:57:6a:f8: a6:60:25:33:c9:93:16:08:ff:23:8c:31:27:5a:ac: 6e:70:d9:4d:31:59:bd:dd:05:17:77:e6:43:77:84: ec:42:a3:b8:99:33:73:c5:ca:c1:4b:11:9d:b3:89: 6b:5f:33:56:68:e9:92:5e:bc:28:d9:20:c5:04:9e: 12:98:f7:29:10:70:f5:3c:91:c3:2f:e7:5e:8a:03: 3d:2f:05:1a:dd:e5:6c:a3:0e:7d:a2:72:8b:fe:89: cf:3d:81:f2:e3:f3:7a:f1:7c:00:54:12:38:e3:e2: 33:a5:06:4f:6f:20:98:de:f2:d4:32:01:a4:51:8f: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:8C:76:2A:55:69:5C:B9:5D:2F:4D:6B:9C:78:16:30:75:89:FA X509v3 Authority Key Identifier: keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:79:5d:82:f6:5d:8c:0d:33:58:cf:27:c1:99:d1:17:79:4d: 01:92:8d:83:6f:e3:19:1e:9d:88:4d:4b:f9:e4:d7:06:be:c1: e6:b0:79:95:3b:1a:f0:a3:09:dd:80:8a:55:4f:44:60:97:13: 4a:db:41:0b:c0:8d:13:42:4a:20:90:9a:6b:e4:b8:9a:3a:43: a1:12:15:a1:a8:5f:3f:35:bd:55:f9:92:1b:a7:37:0c:cd:d7: 72:09:18:53:91:a2:4f:c8:fb:f9:70:ab:ad:9f:bb:3a:29:42: c8:66:c4:eb:2b:14:e4:b6:80:47:08:b6:21:aa:78:d7:fa:e9: 28:89:2a:b0:f8:ea:46:63:65:70:59:87:ab:33:b5:93:01:13: 2f:72:91:4d:2c:9b:58:92:bc:86:52:ba:57:75:4a:fc:db:7e: 60:14:8c:8c:6c:d9:80:de:98:87:91:43:58:a2:fa:be:bb:c9: b4:d3:68:24:8a:ef:ed:1a:c7:16:32:ad:b2:ff:1e:43:5f:21: 0d:d3:f5:0b:72:51:82:ce:12:7d:98:13:8d:33:8b:24:46:a2: 3d:40:ee:70:3b:04:45:12:3d:7e:f8:34:56:bd:43:c7:05:e7: 63:d9:1c:3f:26:01:f0:e7:19:1a:e9:e9:63:a4:30:b3:96:19: 36:0e:72:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtRKqRcklf5NBdyF7PhuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2 MTkyMDQwHhcNMjUxMjMxMDAwMDUwWhcNMjYwMTAxMDAwMDUwWjAzMTEwLwYDVQQD Eyg1ZjYwOGM3NjJhNTU2OTVjYjk1ZDJmNGQ2YjljNzgxNjMwNzU4OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA027GcX91CZ4TXlQsU91ozRzDxq7h WJ42zpNWqGMVol8b1S4+ruj4kV8/w7NULtQ33H3XCiKUfNqDwC1z4lasVXhug0+V QB9myuRUY/0V/hNorFP+CkhwvyLdHALJMUNRBNZ1dmRwOb5Ove/ncFLDoMa74npn lSa7HYVxxIbeuZnPZ7NXavimYCUzyZMWCP8jjDEnWqxucNlNMVm93QUXd+ZDd4Ts QqO4mTNzxcrBSxGds4lrXzNWaOmSXrwo2SDFBJ4SmPcpEHD1PJHDL+deigM9LwUa 3eVsow59onKL/onPPYHy4/N68XwAVBI44+IzpQZPbyCY3vLUMgGkUY82DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9gjHYqVWlcuV0vTWuceBYwdYn6MB8GA1UdIwQY MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct ZjcyMjMzMTc5Y2NmLzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHldgvZd jA0zWM8nwZnRF3lNAZKNg2/jGR6diE1L+eTXBr7B5rB5lTsa8KMJ3YCKVU9EYJcT SttBC8CNE0JKIJCaa+S4mjpDoRIVoahfPzW9VfmSG6c3DM3XcgkYU5GiT8j7+XCr rZ+7OilCyGbE6ysU5LaARwi2Iap41/rpKIkqsPjqRmNlcFmHqzO1kwETL3KRTSyb WJK8hlK6V3VK/Nt+YBSMjGzZgN6Yh5FDWKL6vrvJtNNoJIrv7RrHFjKtsv8eQ18h DdP1C3JRgs4SfZgTjTOLJEaiPUDucDsERRI9fvg0Vr1DxwXnY9kcPyYB8OcZGunp Y6Qws5YZNg5y2A== -----END CERTIFICATE-----Generated at Wed Dec 31 08:02:03 2025 by rpki-client