This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json) Hash identifier: lSJhMGBj6flGV7lczCs1+F1NIEHQZTAPgntDGlP3B+g= Subject key identifier: 95:D0:87:AF:BF:02:FF:64:C7:55:51:80:0E:08:2D:03:74:FF:00:C2 Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d Certificate serial: 019B717E419C8AB69B3EFA204988724712CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft Manifest number: 0C09 Signing time: Tue 30 Dec 2025 23:00:58 +0000 Manifest this update: Tue 30 Dec 2025 23:00:58 +0000 Manifest next update: Wed 31 Dec 2025 23:00:58 +0000 Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: ln9ZTQwuwUNJi3H4qV7R1tHECFQxP3ZCDu53nmRNJVI=) 2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:41:9c:8a:b6:9b:3e:fa:20:49:88:72:47:12:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d Validity Not Before: Dec 30 23:00:58 2025 GMT Not After : Dec 31 23:00:58 2025 GMT Subject: CN=95d087afbf02ff64c75551800e082d0374ff00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:0c:50:2a:a5:5d:d2:3f:71:f3:9b:e8:35: 26:2c:22:65:5c:49:f9:7a:9e:ae:02:2f:87:83:bf: 8c:41:f3:68:f2:14:df:ec:fc:4d:4e:c9:0f:31:74: 34:02:14:12:34:df:d8:1d:86:ac:64:c8:f3:f0:9e: 17:76:f1:82:2f:80:7f:a6:b6:c7:60:bd:9f:3e:e5: 45:f9:c1:b1:2a:a2:20:57:5a:f3:98:be:1d:fa:f3: 04:9a:66:32:3d:03:04:7c:ac:ff:e8:6a:73:3b:a4: d2:d6:a9:2c:f2:9a:d1:5d:b4:f9:bc:c5:08:fa:d5: 84:54:5b:a5:c4:ce:2e:ac:c3:b0:e8:fe:e2:fa:c0: 08:53:78:38:54:34:bd:dd:8b:30:91:d8:df:28:7e: e7:67:9b:c3:0a:5c:ef:7f:85:bc:a9:64:8f:bf:bd: b4:ef:95:17:6b:f9:82:99:cf:1f:99:ff:77:24:3e: 85:fe:38:19:ae:c2:f0:85:79:d1:cb:47:f2:9e:5b: b3:bf:39:f8:5e:20:5f:47:f7:bc:5d:32:95:7c:74: 7f:67:91:ab:e2:01:94:1a:93:30:12:e6:28:8b:bd: e7:9e:c3:46:43:01:d3:69:a4:86:1c:c5:36:de:ad: 7f:74:3a:27:0f:55:d7:1c:2f:f5:11:e4:fe:6e:f3: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D0:87:AF:BF:02:FF:64:C7:55:51:80:0E:08:2D:03:74:FF:00:C2 X509v3 Authority Key Identifier: keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a7:60:f9:5c:c2:07:96:9f:b0:89:0b:14:2a:e9:8d:07:ca: 70:4e:4b:7b:22:cf:1e:ba:93:97:ef:56:6b:66:61:99:02:3d: ff:db:ea:d7:0b:4d:d1:2c:51:9d:93:fb:81:cf:5a:9c:e1:79: cc:c6:b1:22:b0:15:2c:99:b3:d2:85:eb:36:51:a9:d8:0c:31: b2:58:be:83:ee:f5:dd:36:6c:0a:1e:85:1e:6e:bd:a3:7e:f9: 73:0a:be:12:1c:9d:49:34:bb:90:7c:1b:d8:58:a6:c4:3b:3a: a8:1c:53:b4:e8:e4:c9:85:91:6a:21:c9:41:e0:04:57:0b:02: 27:0a:f1:26:77:6e:53:fd:7a:c4:b4:39:a7:39:2e:78:42:49: 76:4b:21:12:9e:b1:ad:5c:f2:07:64:49:ab:ba:24:c4:9a:94: fe:ce:84:2f:44:cc:96:6d:7e:e8:12:8e:9a:c0:cd:f7:9b:8e: fd:a3:93:c0:65:d7:8d:06:f8:ac:e8:32:4e:d2:b3:7b:b3:8f: 16:6b:dd:7b:fb:1a:28:4d:1b:62:3b:5c:bf:f3:db:4a:06:ad: 3a:2b:0d:fd:bd:a2:c6:b1:4a:ff:09:59:75:45:5d:74:15:a5: e2:4e:62:fd:9f:22:30:9c:1d:be:43:f2:4e:7c:e2:4d:7a:cc: cd:5d:5c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfkGcirabPvogSYhyRxLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1 YzI1MGQwHhcNMjUxMjMwMjMwMDU4WhcNMjUxMjMxMjMwMDU4WjAzMTEwLwYDVQQD Eyg5NWQwODdhZmJmMDJmZjY0Yzc1NTUxODAwZTA4MmQwMzc0ZmYwMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrAMUCqlXdI/cfOb6DUmLCJlXEn5 ep6uAi+Hg7+MQfNo8hTf7PxNTskPMXQ0AhQSNN/YHYasZMjz8J4XdvGCL4B/prbH YL2fPuVF+cGxKqIgV1rzmL4d+vMEmmYyPQMEfKz/6GpzO6TS1qks8prRXbT5vMUI +tWEVFulxM4urMOw6P7i+sAIU3g4VDS93YswkdjfKH7nZ5vDClzvf4W8qWSPv720 75UXa/mCmc8fmf93JD6F/jgZrsLwhXnRy0fynluzvzn4XiBfR/e8XTKVfHR/Z5Gr 4gGUGpMwEuYoi73nnsNGQwHTaaSGHMU23q1/dDonD1XXHC/1EeT+bvPQHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXQh6+/Av9kx1VRgA4ILQN0/wDCMB8GA1UdIwQY MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt MjE0MmMwYzQzODVmLzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARadg+VzC B5afsIkLFCrpjQfKcE5LeyLPHrqTl+9Wa2ZhmQI9/9vq1wtN0SxRnZP7gc9anOF5 zMaxIrAVLJmz0oXrNlGp2Awxsli+g+713TZsCh6FHm69o375cwq+EhydSTS7kHwb 2FimxDs6qBxTtOjkyYWRaiHJQeAEVwsCJwrxJnduU/16xLQ5pzkueEJJdkshEp6x rVzyB2RJq7okxJqU/s6EL0TMlm1+6BKOmsDN95uO/aOTwGXXjQb4rOgyTtKze7OP Fmvde/saKE0bYjtcv/PbSgatOisN/b2ixrFK/wlZdUVddBWl4k5i/Z8iMJwdvkPy TnziTXrMzV1cdw== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:49 2025 by rpki-client