This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json) Hash identifier: 4Afo6TIuOxoVX2Z8Vpk9JsUVP/1zD942z7/7tDxjwuM= Subject key identifier: 24:09:6A:E9:26:4E:50:78:34:EE:A1:99:F5:C9:B5:6F:58:BD:43:4A Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d Certificate serial: 019B43C9A18D043DB5DB3B0CCD3E9ACD58C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft Manifest number: 0E4C Signing time: Mon 22 Dec 2025 02:00:46 +0000 Manifest this update: Mon 22 Dec 2025 02:00:46 +0000 Manifest next update: Tue 23 Dec 2025 02:00:46 +0000 Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: H3fJ7E6Ls5G+CqPIKZmnYp2ImHoT0V4vPS+vR4PsDx8=) 2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:a1:8d:04:3d:b5:db:3b:0c:cd:3e:9a:cd:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d Validity Not Before: Dec 22 02:00:46 2025 GMT Not After : Dec 23 02:00:46 2025 GMT Subject: CN=24096ae9264e507834eea199f5c9b56f58bd434a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:a0:8e:73:de:82:e9:b2:44:20:dc:7d:48: 13:14:20:13:07:5f:33:f2:b5:5e:f7:eb:4c:44:1b: 52:fe:83:83:fb:c2:c4:46:5d:eb:6b:d4:e2:65:8f: 58:c7:2f:f9:60:73:5f:95:a8:a7:e1:0b:1c:ad:65: 23:d3:69:e2:4c:14:1e:d1:a6:42:c8:43:71:44:01: 11:0b:a6:39:c7:b6:64:55:7e:86:c8:53:d9:bb:1a: 10:1d:da:d1:69:8c:68:ba:e2:35:cb:4e:94:7a:d3: bc:14:97:70:c4:5b:7b:82:50:33:65:3f:55:34:7a: 96:0a:c9:7f:ba:4e:34:68:91:82:2c:f9:0e:79:65: f7:3d:5d:54:43:69:1b:f2:67:67:66:4b:b8:65:32: 5e:3c:c1:b1:ae:e4:b0:07:a6:88:fa:a4:ef:90:68: b4:49:3c:c9:4c:74:20:4f:5c:99:fe:42:a8:e3:b4: b2:f3:81:6f:34:dd:4b:80:cb:4c:89:30:64:53:a9: a8:a2:0f:63:71:7d:d0:24:b1:04:9f:05:07:bc:77: e6:4b:1f:bc:9d:c2:8d:6c:af:55:da:8e:dd:4b:04: 9f:fd:62:70:60:32:fb:dd:08:39:ce:21:83:f2:06: bc:89:fa:d1:b6:db:e8:b6:8a:ec:7f:59:03:8a:bb: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:09:6A:E9:26:4E:50:78:34:EE:A1:99:F5:C9:B5:6F:58:BD:43:4A X509v3 Authority Key Identifier: keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0d:30:77:46:6a:c0:cd:3e:94:40:90:f8:76:97:05:27:b5: 48:f5:66:5e:6b:42:ee:3b:d5:ce:34:4a:82:19:69:3d:39:69: a9:c0:e9:6f:cb:02:43:63:d6:34:69:22:c8:ed:ef:a3:c3:76: 07:d8:7e:67:e3:c4:d3:26:46:80:81:47:2e:69:cd:4b:f7:54: d6:b9:b4:7c:ee:13:01:22:36:5b:d3:89:71:30:58:ef:b9:45: 31:b6:04:14:c2:7e:13:4f:19:16:0e:4d:4d:73:10:a4:c0:1d: 72:8c:45:cc:2f:ff:6e:2a:e2:a1:ec:b8:02:21:bb:aa:7b:d1: ac:3c:c0:21:90:b3:d8:96:4a:04:6a:3c:de:96:53:cc:96:30: b0:50:27:79:0a:e1:27:e9:7b:16:ff:97:78:ec:22:fd:42:44: f3:e9:93:1a:da:d8:73:cd:92:25:ec:84:1e:26:34:bb:0b:03: f7:de:27:31:8d:4c:45:5c:c3:80:70:94:56:a1:9d:79:7a:c2: a7:31:75:68:9c:ee:6d:7c:34:63:46:e7:33:a4:45:75:88:fe: 7e:ef:04:29:ff:8f:4c:69:63:4b:72:58:51:28:67:6d:38:9a: 76:2b:5e:75:31:90:e3:45:48:60:44:6a:d8:41:d1:40:30:8f: 3a:f3:ee:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyaGNBD212zsMzT6azVjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5 YTYyNWQwHhcNMjUxMjIyMDIwMDQ2WhcNMjUxMjIzMDIwMDQ2WjAzMTEwLwYDVQQD EygyNDA5NmFlOTI2NGU1MDc4MzRlZWExOTlmNWM5YjU2ZjU4YmQ0MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpWgjnPegumyRCDcfUgTFCATB18z 8rVe9+tMRBtS/oOD+8LERl3ra9TiZY9Yxy/5YHNflain4QscrWUj02niTBQe0aZC yENxRAERC6Y5x7ZkVX6GyFPZuxoQHdrRaYxouuI1y06UetO8FJdwxFt7glAzZT9V NHqWCsl/uk40aJGCLPkOeWX3PV1UQ2kb8mdnZku4ZTJePMGxruSwB6aI+qTvkGi0 STzJTHQgT1yZ/kKo47Sy84FvNN1LgMtMiTBkU6moog9jcX3QJLEEnwUHvHfmSx+8 ncKNbK9V2o7dSwSf/WJwYDL73Qg5ziGD8ga8ifrRttvotorsf1kDirtKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQJaukmTlB4NO6hmfXJtW9YvUNKMB8GA1UdIwQY MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5 LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA0wd0Zq wM0+lECQ+HaXBSe1SPVmXmtC7jvVzjRKghlpPTlpqcDpb8sCQ2PWNGkiyO3vo8N2 B9h+Z+PE0yZGgIFHLmnNS/dU1rm0fO4TASI2W9OJcTBY77lFMbYEFMJ+E08ZFg5N TXMQpMAdcoxFzC//birioey4AiG7qnvRrDzAIZCz2JZKBGo83pZTzJYwsFAneQrh J+l7Fv+XeOwi/UJE8+mTGtrYc82SJeyEHiY0uwsD994nMY1MRVzDgHCUVqGdeXrC pzF1aJzubXw0Y0bnM6RFdYj+fu8EKf+PTGljS3JYUShnbTiaditedTGQ40VIYERq 2EHRQDCPOvPuTA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:32:04 2025 by rpki-client