This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json) Hash identifier: 7GEu64qR3zuTiTPazj/6LGck9zua015MHmS2TiMH+zk= Subject key identifier: 85:DC:AC:DE:A6:94:CC:23:8F:9A:F4:49:7D:B1:27:42:E8:64:5F:9D Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Certificate serial: 019B3C46E0145012CAB7BEC283C974DE1B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 15:00:36 +0000 Manifest this update: Sat 20 Dec 2025 15:00:36 +0000 Manifest next update: Sun 21 Dec 2025 15:00:36 +0000 Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: vRhXRs/HEmL7glZyNGwgUdMDAGi8m0eyM2FH0Fle3as=) 2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e0:14:50:12:ca:b7:be:c2:83:c9:74:de:1b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Validity Not Before: Dec 20 15:00:36 2025 GMT Not After : Dec 21 15:00:36 2025 GMT Subject: CN=85dcacdea694cc238f9af4497db12742e8645f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:57:98:5d:af:30:c5:e2:d6:96:2a:dc:67: e7:5e:46:7f:03:29:78:e5:c1:f1:56:3a:df:a3:2c: 33:58:e8:61:fa:d3:63:ea:06:da:e4:cd:9f:78:d0: 84:39:a7:11:a1:2f:b4:b9:10:da:9d:78:d6:34:15: c7:60:04:9c:87:db:a7:ea:6d:2e:28:da:53:1a:24: d6:7b:8f:b5:02:65:83:8f:08:60:e7:d2:e1:a8:f2: f2:da:e3:38:8d:84:50:8e:19:41:f5:90:fa:a8:7a: 66:69:3f:c7:d6:5d:c4:6a:3f:f2:25:f3:a5:2a:73: 1c:a4:bf:02:21:d3:e7:a1:69:88:f0:7d:d6:84:9d: 77:18:4c:53:6f:4b:d3:1e:f3:1a:2b:93:fa:cc:54: 7d:1f:44:f7:eb:84:bc:a5:1a:c2:9f:44:d4:e0:35: 4f:c9:83:a7:fe:08:cd:a1:31:ee:b7:66:a3:22:fe: 09:c8:30:86:cd:5e:dc:56:2d:4f:3c:5e:b7:4d:36: 7e:88:c4:c4:68:0a:7e:a4:d7:51:3d:07:33:cc:4f: 28:f1:43:5b:d4:10:ab:e3:46:5a:a3:3d:8b:0f:08: 5b:45:16:51:2a:47:0e:bc:26:c1:9c:4f:ff:02:53: 20:b4:1c:f0:d9:39:a4:b4:77:17:c6:70:ee:1b:10: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DC:AC:DE:A6:94:CC:23:8F:9A:F4:49:7D:B1:27:42:E8:64:5F:9D X509v3 Authority Key Identifier: keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fb:5b:55:18:bc:87:21:4f:b3:7a:96:99:36:27:98:c0:46: e0:26:e7:7f:cd:fc:aa:69:15:4e:8b:bc:0a:35:1b:db:21:5e: eb:e7:96:dd:18:88:2c:f3:3a:1b:c4:ff:c2:a8:5a:bb:b5:44: 65:08:5c:3c:47:29:da:c9:7e:6a:ee:af:67:e5:75:35:86:04: d2:26:16:0e:91:4d:0e:8f:e8:27:33:23:8a:1c:f4:6c:16:aa: 3e:7d:e5:c0:10:5a:35:b5:c4:37:1c:e3:51:62:33:f1:11:58: 85:1f:bc:18:54:9c:51:76:bf:f5:80:69:db:a9:3e:4b:a0:1d: 80:f4:29:e7:3d:26:c9:e6:3a:d3:a7:78:03:51:14:3a:24:d0: 6c:b3:65:a4:5d:a8:67:93:e3:88:7f:8d:f0:e2:ca:0d:6f:74: e8:28:4c:fd:5f:8d:e0:5b:48:f7:cc:3a:94:54:9a:9b:8c:78: ac:1c:76:c7:3c:45:23:de:79:ae:69:b2:eb:18:70:1e:2e:1d: 8c:37:2e:d6:c8:c9:9d:2e:13:77:d1:45:3a:e9:ef:32:0f:9e: ba:8f:a1:2c:ec:a1:21:f4:ed:c0:57:14:21:ab:29:21:17:c5: 16:ea:59:44:6b:6c:83:0f:8c:19:70:13:c6:c3:78:7c:c7:51: 76:0c:83:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RuAUUBLKt77Cg8l03htmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5 YWFlNTEwHhcNMjUxMjIwMTUwMDM2WhcNMjUxMjIxMTUwMDM2WjAzMTEwLwYDVQQD Eyg4NWRjYWNkZWE2OTRjYzIzOGY5YWY0NDk3ZGIxMjc0MmU4NjQ1ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC9XmF2vMMXi1pYq3GfnXkZ/Ayl4 5cHxVjrfoywzWOhh+tNj6gba5M2feNCEOacRoS+0uRDanXjWNBXHYASch9un6m0u KNpTGiTWe4+1AmWDjwhg59LhqPLy2uM4jYRQjhlB9ZD6qHpmaT/H1l3Eaj/yJfOl KnMcpL8CIdPnoWmI8H3WhJ13GExTb0vTHvMaK5P6zFR9H0T364S8pRrCn0TU4DVP yYOn/gjNoTHut2ajIv4JyDCGzV7cVi1PPF63TTZ+iMTEaAp+pNdRPQczzE8o8UNb 1BCr40Zaoz2LDwhbRRZRKkcOvCbBnE//AlMgtBzw2TmktHcXxnDuGxBMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXcrN6mlMwjj5r0SX2xJ0LoZF+dMB8GA1UdIwQY MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4 LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPtbVRi8 hyFPs3qWmTYnmMBG4Cbnf838qmkVTou8CjUb2yFe6+eW3RiILPM6G8T/wqhau7VE ZQhcPEcp2sl+au6vZ+V1NYYE0iYWDpFNDo/oJzMjihz0bBaqPn3lwBBaNbXENxzj UWIz8RFYhR+8GFScUXa/9YBp26k+S6AdgPQp5z0myeY606d4A1EUOiTQbLNlpF2o Z5PjiH+N8OLKDW906ChM/V+N4FtI98w6lFSam4x4rBx2xzxFI955rmmy6xhwHi4d jDcu1sjJnS4Td9FFOunvMg+euo+hLOyhIfTtwFcUIaspIRfFFupZRGtsgw+MGXAT xsN4fMdRdgyDRw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:48:18 2025 by rpki-client