This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft File: 7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json) Hash identifier: OmuF6T7qVJ/gWvOapSR3i/WIuzUGpqLMeQvz2CjzIdg= Subject key identifier: E1:79:69:DB:FD:EF:A0:1E:8C:B0:97:C3:63:5F:38:1D:DF:F8:4F:DF Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5 Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5 Certificate serial: 019B378F0EE727295CE9C1EF2A87821C1DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft Manifest number: 65 Signing time: Fri 19 Dec 2025 17:01:20 +0000 Manifest this update: Fri 19 Dec 2025 17:01:20 +0000 Manifest next update: Sat 20 Dec 2025 17:01:20 +0000 Files and hashes: 1: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: 5vtOVgBczG85z6ofwPhUnGS8u+KeSxeh1tJbYdbjD9A=) 2: yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa (hash: 0urLdAxAXMiQAjxSg9VTaO6Zv/VpbeFMPkfaHibD4No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:0e:e7:27:29:5c:e9:c1:ef:2a:87:82:1c:1d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5 Validity Not Before: Dec 19 17:01:20 2025 GMT Not After : Dec 20 17:01:20 2025 GMT Subject: CN=e17969dbfdefa01e8cb097c3635f381ddff84fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:86:50:6d:f3:67:f5:2f:87:5d:63:ff:8e: 6d:a6:0f:37:66:dc:b5:83:3a:91:95:04:8a:a4:91: 12:5b:c0:a5:45:1d:a2:33:79:0d:d7:d6:97:4f:a8: 08:c2:d5:53:88:f1:16:dd:ec:78:b7:37:5a:99:ce: 05:61:14:b4:3a:8a:0c:5b:69:42:17:c0:c8:d0:d0: 32:bb:d7:dc:64:e0:5d:1b:20:43:f7:73:b0:f7:b5: f5:2d:5e:b3:ab:8d:d2:0f:06:d1:65:55:72:a0:17: c8:64:97:d2:de:ff:51:b8:3c:7c:61:98:1b:59:62: 98:58:f7:68:1c:68:ec:4b:4b:dd:a7:4b:56:12:5e: e8:9e:0e:e3:9c:bc:4b:ad:c2:11:6a:31:38:8a:62: 28:30:95:a9:3d:30:23:a3:76:82:fe:45:57:51:d3: 12:43:ae:fb:0d:d5:a8:9a:5c:a4:15:f6:21:e1:4f: 4e:e4:e1:ed:9d:3b:15:39:1e:35:bf:4e:42:11:3d: c1:a4:6f:3c:fb:09:2d:b1:fe:f9:59:69:1b:59:a8: 4b:24:c9:17:37:cb:fc:39:e7:d3:44:4b:53:37:63: d7:f1:29:ba:07:1b:00:fd:82:ca:d3:6e:c2:56:30: fd:a2:0a:c8:0f:af:df:00:18:56:96:5c:0f:72:79: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:79:69:DB:FD:EF:A0:1E:8C:B0:97:C3:63:5F:38:1D:DF:F8:4F:DF X509v3 Authority Key Identifier: keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:72:08:99:4d:ba:23:48:77:92:cb:75:78:1b:bc:c5:72:5e: 40:62:fd:0b:ca:3f:c0:88:58:27:e3:cb:31:42:2e:51:4b:ce: b8:bc:2a:f7:a1:27:e6:fd:28:46:92:82:86:83:1a:83:10:80: 72:ef:f0:24:36:8d:19:4d:63:08:20:da:cc:cc:54:8c:bf:81: 9e:91:e9:ef:51:8d:5a:4d:07:63:ac:fa:98:95:01:c7:62:fd: 71:39:be:c8:24:66:bb:49:7e:1f:90:6b:12:1b:6d:bd:be:07: 44:3d:2b:24:e4:b7:eb:2e:22:d2:d2:71:2f:74:b8:0b:8e:8f: 74:d7:2f:29:15:17:b4:a6:ac:d2:84:40:41:09:33:18:b3:f0: c8:cd:01:e9:44:ad:e9:e9:5b:23:99:5c:a0:8c:12:f1:c0:fe: 75:f0:e3:f0:34:8c:b4:78:e1:22:f4:f7:90:f0:7f:d1:5f:69: 75:70:76:9a:a8:23:24:bc:0c:00:8e:af:c4:a1:92:95:ce:e4: 0e:53:44:48:72:b9:63:45:3f:51:2b:b3:bd:5c:54:43:b6:d9: 1d:88:03:43:cd:1b:c9:87:d5:ca:0f:c9:b1:93:cf:75:f8:73: e9:8d:0a:48:9b:6f:d7:f0:03:38:fd:32:73:41:a9:11:4d:c5: 34:5f:91:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jw7nJylc6cHvKoeCHB3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZmZmNDBkOGJiNGEyNDg3MmUwMWJhN2Y0MmUzYWU2M2Vl MDg1ZjUwHhcNMjUxMjE5MTcwMTIwWhcNMjUxMjIwMTcwMTIwWjAzMTEwLwYDVQQD EyhlMTc5NjlkYmZkZWZhMDFlOGNiMDk3YzM2MzVmMzgxZGRmZjg0ZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6SGUG3zZ/Uvh11j/45tpg83Zty1 gzqRlQSKpJESW8ClRR2iM3kN19aXT6gIwtVTiPEW3ex4tzdamc4FYRS0OooMW2lC F8DI0NAyu9fcZOBdGyBD93Ow97X1LV6zq43SDwbRZVVyoBfIZJfS3v9RuDx8YZgb WWKYWPdoHGjsS0vdp0tWEl7ong7jnLxLrcIRajE4imIoMJWpPTAjo3aC/kVXUdMS Q677DdWomlykFfYh4U9O5OHtnTsVOR41v05CET3BpG88+wktsf75WWkbWahLJMkX N8v8OefTREtTN2PX8Sm6BxsA/YLK027CVjD9ogrID6/fABhWllwPcnkMwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF5adv976AejLCXw2NfOB3f+E/fMB8GA1UdIwQY MBaAFO7/9A2LtKJIcuAbp/QuOuY+4IX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQt MTQxZDMzYzc0M2RmLzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQtMTQxZDMzYzc0M2Rm LzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3IImU26 I0h3kst1eBu8xXJeQGL9C8o/wIhYJ+PLMUIuUUvOuLwq96En5v0oRpKChoMagxCA cu/wJDaNGU1jCCDazMxUjL+BnpHp71GNWk0HY6z6mJUBx2L9cTm+yCRmu0l+H5Br Ehttvb4HRD0rJOS36y4i0tJxL3S4C46PdNcvKRUXtKas0oRAQQkzGLPwyM0B6USt 6elbI5lcoIwS8cD+dfDj8DSMtHjhIvT3kPB/0V9pdXB2mqgjJLwMAI6vxKGSlc7k DlNESHK5Y0U/USuzvVxUQ7bZHYgDQ80byYfVyg/JsZPPdfhz6Y0KSJtv1/ADOP0y c0GpEU3FNF+Rkg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:50:38 2025 by rpki-client