This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json) Hash identifier: HfbZTbncFJEF6Ixa+wnK2dB/MQRdE+5S4PSWeFlpDTw= Subject key identifier: E7:76:8E:80:C1:61:D4:53:7C:BF:A7:2D:90:8F:E5:6A:55:92:02:5D Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Certificate serial: 019B37C59DA4A6B349209E0D33913310CEB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft Manifest number: 06D4 Signing time: Fri 19 Dec 2025 18:00:56 +0000 Manifest this update: Fri 19 Dec 2025 18:00:56 +0000 Manifest next update: Sat 20 Dec 2025 18:00:56 +0000 Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: 73eZJrq4NeIjC5sCGO7Ymqz/rL1Pgu/cZLbmTkIgC9E=) 2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:9d:a4:a6:b3:49:20:9e:0d:33:91:33:10:ce:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Validity Not Before: Dec 19 18:00:56 2025 GMT Not After : Dec 20 18:00:56 2025 GMT Subject: CN=e7768e80c161d4537cbfa72d908fe56a5592025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:f9:0f:57:8a:37:b1:40:07:0c:a1:9d:23: 7a:4a:03:94:71:bc:c5:e3:a4:db:c2:a2:c6:e8:90: da:37:18:6b:a5:40:5d:e8:60:c0:36:c6:f7:e1:8a: 47:9b:96:52:9d:0e:4c:68:73:5f:ee:3a:b0:9b:56: a1:71:d5:2b:59:07:22:87:17:d2:3d:09:fc:72:c0: 0a:b8:3f:98:4f:77:20:58:61:e9:2b:81:fe:7e:90: 4f:36:a8:af:08:ea:1a:6b:fd:fd:34:d8:90:3f:04: f6:c1:35:09:e6:96:dc:a5:13:93:3c:7a:93:e4:fa: 3a:47:35:a7:c6:1e:24:e7:a5:e1:0d:56:b1:67:c6: d0:bc:97:30:0a:bc:60:7d:de:54:0b:61:fe:9f:a8: 01:5c:3d:61:36:6c:b7:73:1f:61:29:b4:fa:33:b2: dd:25:7e:6c:c3:fd:98:58:a3:7a:69:e7:f9:af:f5: ba:b2:ac:1e:5d:c1:c5:47:86:c7:1f:c7:1c:50:25: 69:aa:51:a5:8a:67:76:10:c3:9e:a2:aa:b0:bb:66: 2d:7b:eb:c1:dc:f8:07:6b:5e:81:54:9d:3b:e8:84: 6a:9d:d2:2b:65:23:22:0a:ad:f3:ed:d7:83:cc:c4: 07:fc:99:97:a7:2d:67:b6:8a:37:50:d9:0c:b7:14: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:76:8E:80:C1:61:D4:53:7C:BF:A7:2D:90:8F:E5:6A:55:92:02:5D X509v3 Authority Key Identifier: keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:53:6a:37:04:f7:8a:b3:01:31:58:ee:5b:80:d6:88:b9:66: 2e:37:1d:fe:89:d4:b7:86:94:80:21:7b:30:1c:a9:1f:b9:e9: 8f:65:da:77:f4:ca:8d:16:65:4b:ac:50:bd:9f:58:2e:fa:62: 4b:32:06:f9:0c:65:74:f9:04:c8:c2:ae:78:11:e8:64:f8:6e: 1d:a7:aa:8a:dd:36:ad:fa:be:d5:c0:59:30:a5:72:56:d9:03: b6:4d:fe:58:67:2d:9d:f9:d7:21:4d:d0:4c:27:10:69:38:40: d5:05:68:f9:89:a8:20:a9:a9:ca:ff:79:c4:dd:f1:8e:3a:22: 59:60:67:19:c8:20:e3:53:f7:3f:c7:38:21:a0:ca:fd:fe:e9: e6:be:65:42:98:a0:e3:80:16:e1:fc:67:f4:e3:c9:48:5b:17: 14:ad:b9:c3:2a:b3:7f:23:28:e9:63:59:1c:04:a1:96:b3:9c: fa:b0:da:2d:d0:67:75:a4:cc:4c:97:9c:1f:8f:bb:1c:24:f0: f6:f2:f3:af:e4:fe:99:27:8a:1e:4d:d2:1a:8f:a6:66:9d:10: ec:b3:82:4f:e8:18:55:f6:e0:48:99:a9:e4:da:21:8f:83:01: fc:40:9e:70:bb:4b:6f:f8:7e:33:c5:26:bd:91:b0:d3:d8:92: 8a:63:f8:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xZ2kprNJIJ4NM5EzEM60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2 MTkyMDQwHhcNMjUxMjE5MTgwMDU2WhcNMjUxMjIwMTgwMDU2WjAzMTEwLwYDVQQD EyhlNzc2OGU4MGMxNjFkNDUzN2NiZmE3MmQ5MDhmZTU2YTU1OTIwMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+H5D1eKN7FABwyhnSN6SgOUcbzF 46TbwqLG6JDaNxhrpUBd6GDANsb34YpHm5ZSnQ5MaHNf7jqwm1ahcdUrWQcihxfS PQn8csAKuD+YT3cgWGHpK4H+fpBPNqivCOoaa/39NNiQPwT2wTUJ5pbcpROTPHqT 5Po6RzWnxh4k56XhDVaxZ8bQvJcwCrxgfd5UC2H+n6gBXD1hNmy3cx9hKbT6M7Ld JX5sw/2YWKN6aef5r/W6sqweXcHFR4bHH8ccUCVpqlGlimd2EMOeoqqwu2Yte+vB 3PgHa16BVJ076IRqndIrZSMiCq3z7deDzMQH/JmXpy1ntoo3UNkMtxSA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd2joDBYdRTfL+nLZCP5WpVkgJdMB8GA1UdIwQY MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct ZjcyMjMzMTc5Y2NmLzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1lNqNwT3 irMBMVjuW4DWiLlmLjcd/onUt4aUgCF7MBypH7npj2Xad/TKjRZlS6xQvZ9YLvpi SzIG+QxldPkEyMKueBHoZPhuHaeqit02rfq+1cBZMKVyVtkDtk3+WGctnfnXIU3Q TCcQaThA1QVo+YmoIKmpyv95xN3xjjoiWWBnGcgg41P3P8c4IaDK/f7p5r5lQpig 44AW4fxn9OPJSFsXFK25wyqzfyMo6WNZHAShlrOc+rDaLdBndaTMTJecH4+7HCTw 9vLzr+T+mSeKHk3SGo+mZp0Q7LOCT+gYVfbgSJmp5Nohj4MB/ECecLtLb/h+M8Um vZGw09iSimP4+w== -----END CERTIFICATE-----Generated at Sat Dec 20 03:26:53 2025 by rpki-client