This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft File: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json) Hash identifier: au2WyCeq32edbu9hegASTrUjCvmJsohcvBjpb1C/cXM= Subject key identifier: 09:5D:26:44:52:50:89:27:99:12:9A:F0:7D:A4:DE:C5:8C:8C:58:D5 Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41 Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541 Certificate serial: 019B31C42CBB0326D45F01B463DA61C9E345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 14:01:38 +0000 Manifest this update: Thu 18 Dec 2025 14:01:38 +0000 Manifest next update: Fri 19 Dec 2025 14:01:38 +0000 Files and hashes: 1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: G/HmvM4s3rCktpoGkxWfaITVAwEsiSf9exm0JqK7QmM=) 2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:2c:bb:03:26:d4:5f:01:b4:63:da:61:c9:e3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541 Validity Not Before: Dec 18 14:01:38 2025 GMT Not After : Dec 19 14:01:38 2025 GMT Subject: CN=095d26445250892799129af07da4dec58c8c58d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:2c:7b:4a:f7:c1:0b:11:e6:5f:93:04:2c: 68:c0:3d:c6:0b:8e:ef:33:d1:70:48:bf:a5:b2:59: 79:da:04:a4:fd:9e:ef:c9:9c:d9:f2:19:42:ce:f1: 53:87:6d:43:6e:cc:e2:91:66:aa:3f:45:ff:77:7e: b1:85:1d:6e:bf:a2:02:e5:a2:60:7d:02:29:e1:1d: 5e:3d:75:d9:a1:b3:08:3e:54:4e:8d:ef:81:3a:4f: 0c:a3:80:7e:ce:b0:95:67:31:1d:8a:d5:cf:f5:fc: 81:b5:37:02:00:37:71:95:f5:bf:74:e4:f8:5f:39: 3e:f0:14:e1:df:ec:7a:9f:5b:2e:8c:fc:50:17:11: 52:c9:18:d3:68:9e:99:35:1a:c8:d6:db:c8:34:90: 95:fa:ec:81:16:dd:ff:bf:fa:0d:49:23:cc:31:70: 01:8e:1f:df:d8:cb:ca:b3:45:4d:ca:17:22:0c:0f: 15:dc:52:27:70:79:b1:b3:5b:86:0a:01:d1:22:4c: 98:a1:8b:17:d8:27:3c:a0:4e:3f:8d:05:5d:fc:37: b2:ba:5f:a8:40:69:81:2a:e5:80:d7:42:68:79:50: 36:da:90:b7:5e:d0:1f:8a:e1:6f:ca:bf:67:79:e7: 34:50:87:45:b1:ed:0a:52:99:49:18:93:62:84:02: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:26:44:52:50:89:27:99:12:9A:F0:7D:A4:DE:C5:8C:8C:58:D5 X509v3 Authority Key Identifier: keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:32:98:24:ab:63:95:12:f1:23:f7:d7:82:ba:68:1f:a8:29: 43:9b:78:8d:3f:81:3e:06:b6:43:e3:eb:b9:f2:c2:02:4c:17: 01:25:9c:d8:81:bc:fc:24:9a:26:b3:34:45:de:17:99:04:74: ef:88:73:05:a2:8a:2b:13:93:e6:51:47:99:8d:34:5f:41:28: 25:1c:a2:20:71:15:72:a2:c7:9a:35:79:08:ce:ec:0c:60:c1: 1c:c7:00:76:04:e5:e0:b4:56:29:2a:80:49:7f:bd:88:e8:dc: 19:4f:df:df:c5:f6:82:dc:75:5a:09:a5:69:9b:6c:fe:a7:d5: fc:a6:46:1c:b3:42:08:8f:0c:c2:4e:bd:56:63:95:bd:93:d9: d5:37:3b:13:82:10:bd:5c:40:84:94:c3:e3:1b:d4:1b:c0:74: d7:ef:52:c1:0d:3a:cc:92:9a:05:2c:3e:40:fb:79:61:df:c5: f7:38:6b:b7:c9:95:10:9d:59:f0:23:c9:01:ab:44:03:31:df: 9b:a3:6b:3c:81:47:75:7c:25:4a:d9:97:9d:58:60:57:b4:78: 21:6a:6e:39:00:a2:dd:8b:b8:53:55:a6:11:2f:3b:3f:cf:b6: ce:8a:07:c6:5d:c5:36:4b:d7:b9:4b:c8:48:24:1c:7e:89:38: 88:2c:15:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxCy7AybUXwG0Y9phyeNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0 ZTE1NDEwHhcNMjUxMjE4MTQwMTM4WhcNMjUxMjE5MTQwMTM4WjAzMTEwLwYDVQQD EygwOTVkMjY0NDUyNTA4OTI3OTkxMjlhZjA3ZGE0ZGVjNThjOGM1OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMgse0r3wQsR5l+TBCxowD3GC47v M9FwSL+lsll52gSk/Z7vyZzZ8hlCzvFTh21DbszikWaqP0X/d36xhR1uv6IC5aJg fQIp4R1ePXXZobMIPlROje+BOk8Mo4B+zrCVZzEditXP9fyBtTcCADdxlfW/dOT4 Xzk+8BTh3+x6n1sujPxQFxFSyRjTaJ6ZNRrI1tvINJCV+uyBFt3/v/oNSSPMMXAB jh/f2MvKs0VNyhciDA8V3FIncHmxs1uGCgHRIkyYoYsX2Cc8oE4/jQVd/Deyul+o QGmBKuWA10JoeVA22pC3XtAfiuFvyr9neec0UIdFse0KUplJGJNihALNHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAldJkRSUIknmRKa8H2k3sWMjFjVMB8GA1UdIwQY MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt YWUxYjBhY2QyOGE4LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4 LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjKYJKtj lRLxI/fXgrpoH6gpQ5t4jT+BPga2Q+PrufLCAkwXASWc2IG8/CSaJrM0Rd4XmQR0 74hzBaKKKxOT5lFHmY00X0EoJRyiIHEVcqLHmjV5CM7sDGDBHMcAdgTl4LRWKSqA SX+9iOjcGU/f38X2gtx1WgmlaZts/qfV/KZGHLNCCI8Mwk69VmOVvZPZ1Tc7E4IQ vVxAhJTD4xvUG8B01+9SwQ06zJKaBSw+QPt5Yd/F9zhrt8mVEJ1Z8CPJAatEAzHf m6NrPIFHdXwlStmXnVhgV7R4IWpuOQCi3Yu4U1WmES87P8+2zooHxl3FNkvXuUvI SCQcfok4iCwVOw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:52 2025 by rpki-client