This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json) Hash identifier: uOsjcRnyy4Y5CoNqw27MsooVbsHrWISxxSFY7Y0u7jk= Subject key identifier: B1:20:10:4F:D1:40:C5:B5:38:3E:B7:9A:24:82:92:45:DC:2B:CE:E2 Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63 Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63 Certificate serial: 019B969D90D0F3E234DB3FDA55C5C7F19574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft Manifest number: 145E Signing time: Wed 07 Jan 2026 04:01:07 +0000 Manifest this update: Wed 07 Jan 2026 04:01:07 +0000 Manifest next update: Thu 08 Jan 2026 04:01:07 +0000 Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: uKosZPZIfpUh4ewn5d/BhofT9B6bGPcSUbNZnNy6DzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:9d:90:d0:f3:e2:34:db:3f:da:55:c5:c7:f1:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63 Validity Not Before: Jan 7 04:01:07 2026 GMT Not After : Jan 8 04:01:07 2026 GMT Subject: CN=b120104fd140c5b5383eb79a24829245dc2bcee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:56:2c:ca:f9:87:c8:d4:03:83:bf:50:7f: e7:8d:93:e0:79:1d:14:6a:5d:ab:2b:76:b3:56:6a: 1a:c7:7a:67:8a:5c:8e:29:2d:0c:dd:5c:34:a6:41: ea:3d:79:15:45:27:f6:01:e4:96:10:7d:f4:c0:bb: a1:1c:06:bc:24:7a:92:29:23:57:f4:55:fb:6e:9d: fa:7e:21:9a:b5:29:72:2e:03:02:08:28:3b:6a:02: 43:36:3c:03:51:a3:ee:a4:16:32:5b:4d:84:f5:8f: e8:d5:2c:da:02:88:1c:ac:a6:27:f6:f9:cb:81:38: 24:36:71:b5:0a:03:c7:c5:fe:50:59:f8:8e:af:8a: ea:d1:51:26:20:3f:83:02:b6:fd:3a:86:5d:50:cc: fe:ae:08:06:bd:70:01:7c:7a:4e:86:c5:c2:16:89: 59:81:c4:9a:0a:cd:a6:bb:e1:d1:5c:17:f8:23:58: 12:7a:fe:90:7d:a2:fb:4c:b1:91:be:df:41:22:2c: d3:79:49:f2:b7:92:7a:d5:ce:da:eb:40:4c:8a:cd: 0f:7d:a5:7b:b1:3a:e7:c4:82:7c:69:c6:5a:2b:94: 2c:05:7d:4b:97:5f:97:2b:07:26:e9:99:6b:74:ae: 56:5f:e4:78:ae:23:09:00:dc:26:80:49:21:32:94: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:20:10:4F:D1:40:C5:B5:38:3E:B7:9A:24:82:92:45:DC:2B:CE:E2 X509v3 Authority Key Identifier: keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:eb:a0:c5:1e:13:ae:61:03:55:f1:0d:99:c5:75:d1:b5:c8: 7d:82:7e:fe:9f:ab:0a:d2:d1:2d:04:da:9d:69:e9:7e:5f:72: 00:26:ef:51:a9:5f:94:28:c3:fd:12:fe:d2:9b:95:21:bc:1f: 54:10:20:95:8a:8b:90:41:f9:7b:90:cd:98:3d:a7:88:61:c3: 15:8b:06:b1:a3:84:85:48:6b:b2:13:0e:35:7f:7a:46:0d:ca: 5a:3b:94:7e:38:ef:5d:82:28:7d:aa:c5:f8:ce:66:91:f7:03: d4:db:24:03:a7:32:66:b4:0c:0c:98:64:02:7d:a2:bb:c1:75: 96:42:a9:81:bb:5b:44:07:7b:4f:6c:00:b5:2f:a5:bf:b0:08: 34:6f:aa:41:6e:ea:09:54:4d:d6:a4:b6:f9:6d:49:d0:b1:a8: f5:7b:06:3e:7e:11:01:94:b1:db:ba:89:66:84:70:22:3e:64: eb:cf:ab:c4:66:ad:39:39:bc:8f:24:c2:21:80:2c:6c:41:ec: 6a:53:fa:05:4f:dc:a4:c2:d4:ae:39:32:4f:78:ee:8c:7b:c8: 9d:49:40:4b:df:9c:ae:15:6a:83:8d:aa:16:ce:c2:de:d5:19: 8e:ef:f9:e7:92:23:30:d8:84:06:f2:a7:f6:47:f6:92:14:b2: 9a:64:d9:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWnZDQ8+I02z/aVcXH8ZV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4 NzRmNjMwHhcNMjYwMTA3MDQwMTA3WhcNMjYwMTA4MDQwMTA3WjAzMTEwLwYDVQQD EyhiMTIwMTA0ZmQxNDBjNWI1MzgzZWI3OWEyNDgyOTI0NWRjMmJjZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA079WLMr5h8jUA4O/UH/njZPgeR0U al2rK3azVmoax3pnilyOKS0M3Vw0pkHqPXkVRSf2AeSWEH30wLuhHAa8JHqSKSNX 9FX7bp36fiGatSlyLgMCCCg7agJDNjwDUaPupBYyW02E9Y/o1SzaAogcrKYn9vnL gTgkNnG1CgPHxf5QWfiOr4rq0VEmID+DArb9OoZdUMz+rggGvXABfHpOhsXCFolZ gcSaCs2mu+HRXBf4I1gSev6QfaL7TLGRvt9BIizTeUnyt5J61c7a60BMis0PfaV7 sTrnxIJ8acZaK5QsBX1Ll1+XKwcm6ZlrdK5WX+R4riMJANwmgEkhMpSx4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEgEE/RQMW1OD63miSCkkXcK87iMB8GA1UdIwQY MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+ugxR4T rmEDVfENmcV10bXIfYJ+/p+rCtLRLQTanWnpfl9yACbvUalflCjD/RL+0puVIbwf VBAglYqLkEH5e5DNmD2niGHDFYsGsaOEhUhrshMONX96Rg3KWjuUfjjvXYIofarF +M5mkfcD1NskA6cyZrQMDJhkAn2iu8F1lkKpgbtbRAd7T2wAtS+lv7AING+qQW7q CVRN1qS2+W1J0LGo9XsGPn4RAZSx27qJZoRwIj5k68+rxGatOTm8jyTCIYAsbEHs alP6BU/cpMLUrjkyT3jujHvInUlAS9+crhVqg42qFs7C3tUZju/555IjMNiEBvKn 9kf2khSymmTZgw== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:44 2026 by rpki-client