This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json) Hash identifier: 8pWybKuCGVEbAwTqPzjhIJrw4vqDhFn2S2SHVMof7mU= Subject key identifier: E5:59:54:8F:8A:2B:BA:BD:5C:0A:CC:CE:97:D7:E1:ED:15:8F:A4:DC Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Certificate serial: 019B3CB4D34433FA5866AF4BA4409705DF51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: Oy+SQbmrrNtGSJj/4R8ZBcRrDpZkXyEHKyYfMbii2a8=) 2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=) 3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d3:44:33:fa:58:66:af:4b:a4:40:97:05:df:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=e559548f8a2bbabd5c0accce97d7e1ed158fa4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:39:99:e2:a2:66:26:a6:d6:e3:a0:1f:e9: d2:91:05:44:37:9f:1c:b6:10:ba:6b:2f:74:26:2e: 4d:3e:bc:7f:9c:f0:a1:db:63:b5:58:81:8c:09:67: 60:31:63:25:bf:8a:15:46:41:c0:39:62:87:5c:0f: ac:3e:de:fe:f7:95:e4:3a:17:a9:eb:0f:ae:76:4f: c4:4a:dc:62:87:6b:8b:ef:a9:6d:d6:83:24:84:f8: fe:c3:dc:9c:fb:19:12:9d:71:da:f5:2c:d2:fa:60: c8:11:51:11:1c:a0:07:48:84:eb:5b:ef:51:76:29: 5b:78:64:d3:33:3e:94:b2:9d:5e:b7:e6:41:da:05: 05:fb:2f:2c:b5:92:b1:64:8c:8a:7f:6c:31:82:16: 46:d2:f7:22:17:e9:df:4b:31:51:3e:e6:35:e5:f2: 7d:19:93:a5:4c:9f:8b:ac:9c:f6:e4:0e:1f:1c:0e: 2a:68:02:fc:f8:1f:b7:50:97:44:6e:02:1f:21:67: a3:e7:d5:48:05:da:c6:2a:5d:45:fe:05:b5:de:68: 70:b3:6b:11:6f:f4:54:52:d6:e4:3a:85:40:d5:c2: bc:1f:11:b9:00:63:b3:c2:c7:da:f8:9f:09:46:7e: 53:b6:30:49:56:0f:ff:18:6b:3f:04:e7:6c:56:18: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:59:54:8F:8A:2B:BA:BD:5C:0A:CC:CE:97:D7:E1:ED:15:8F:A4:DC X509v3 Authority Key Identifier: keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:39:22:f1:3e:a5:f0:5f:5a:d9:6e:af:57:db:9e:69:1e:38: 91:ab:eb:1d:30:52:08:b9:c8:53:86:26:da:52:4e:24:81:3b: 5b:f8:9d:06:1e:cc:d2:f3:a0:6f:f8:57:1e:70:d7:36:46:bf: 1b:d6:55:46:81:9e:11:ac:c7:cc:82:72:75:0e:b2:43:54:95: b0:31:40:de:00:6e:8f:af:11:73:8c:0f:f9:5d:33:0d:f8:22: e5:e6:27:1b:69:20:8d:10:fc:d3:f3:fe:f3:58:8c:2d:f5:cd: 05:20:9b:21:25:d8:6b:05:20:4f:6e:4f:ba:1a:75:22:4c:8f: 18:63:53:ae:05:18:fd:54:15:06:30:fd:6f:90:3a:fd:d7:9b: 82:69:3c:9b:b3:42:d9:b3:0c:ba:c2:1f:08:81:98:da:e6:35: 83:6a:11:27:e4:06:ba:9e:e8:61:ba:63:a0:0a:1e:3c:97:6f: b0:9f:1b:93:eb:25:05:68:31:8e:91:f8:57:0f:b0:67:64:b3: c5:38:db:6e:eb:33:f6:f9:fd:75:d4:75:91:a3:ba:a4:f0:33: 9f:34:ca:19:92:b7:ce:f2:06:b0:bb:0c:f2:b0:e1:c7:bf:55: 3e:fc:17:e3:91:70:d7:c6:79:9f:9e:74:d7:6e:34:94:88:aa: a6:1b:3c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNNEM/pYZq9LpECXBd9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1 NTlkMTQwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD EyhlNTU5NTQ4ZjhhMmJiYWJkNWMwYWNjY2U5N2Q3ZTFlZDE1OGZhNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWk5meKiZiam1uOgH+nSkQVEN58c thC6ay90Ji5NPrx/nPCh22O1WIGMCWdgMWMlv4oVRkHAOWKHXA+sPt7+95XkOhep 6w+udk/EStxih2uL76lt1oMkhPj+w9yc+xkSnXHa9SzS+mDIEVERHKAHSITrW+9R dilbeGTTMz6Usp1et+ZB2gUF+y8stZKxZIyKf2wxghZG0vciF+nfSzFRPuY15fJ9 GZOlTJ+LrJz25A4fHA4qaAL8+B+3UJdEbgIfIWej59VIBdrGKl1F/gW13mhws2sR b/RUUtbkOoVA1cK8HxG5AGOzwsfa+J8JRn5TtjBJVg//GGs/BOdsVhjDUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVZVI+KK7q9XArMzpfX4e0Vj6TcMB8GA1UdIwQY MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt MzQ5N2NlMWI3MWJmLzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTki8T6l 8F9a2W6vV9ueaR44kavrHTBSCLnIU4Ym2lJOJIE7W/idBh7M0vOgb/hXHnDXNka/ G9ZVRoGeEazHzIJydQ6yQ1SVsDFA3gBuj68Rc4wP+V0zDfgi5eYnG2kgjRD80/P+ 81iMLfXNBSCbISXYawUgT25Puhp1IkyPGGNTrgUY/VQVBjD9b5A6/debgmk8m7NC 2bMMusIfCIGY2uY1g2oRJ+QGup7oYbpjoAoePJdvsJ8bk+slBWgxjpH4Vw+wZ2Sz xTjbbusz9vn9ddR1kaO6pPAznzTKGZK3zvIGsLsM8rDhx79VPvwX45Fw18Z5n550 1240lIiqphs8fQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:05:37 2025 by rpki-client