This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json) Hash identifier: 6Q9lWOHFQLOcFjz46LCenHpYJ6tMwOJYmYh7clvbmUE= Subject key identifier: 56:13:A2:55:69:2B:10:F2:49:46:84:E9:52:FE:48:C5:52:20:FD:F3 Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae Certificate serial: 019B3EDAF52DA3E0E6ACAA8A39BE920D8DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft Manifest number: 030A Signing time: Sun 21 Dec 2025 03:01:35 +0000 Manifest this update: Sun 21 Dec 2025 03:01:35 +0000 Manifest next update: Mon 22 Dec 2025 03:01:35 +0000 Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: /UipbpSHDxY9XaOFhKfm+6RutCXnBm4UTmIB9su9CxQ=) 2: Br2XYkCHvC72aVRHi890y0oAZCY.roa (hash: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:f5:2d:a3:e0:e6:ac:aa:8a:39:be:92:0d:8d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae Validity Not Before: Dec 21 03:01:35 2025 GMT Not After : Dec 22 03:01:35 2025 GMT Subject: CN=5613a255692b10f2494684e952fe48c55220fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:4a:5b:e4:af:90:60:3d:63:96:3d:ba:b2: 9c:e7:c5:36:71:34:5f:31:59:7f:5e:49:eb:9c:6c: 75:a7:54:45:f3:75:d8:bc:76:3b:4a:3d:12:8a:e3: f0:35:de:4d:bc:5d:8d:8e:e5:4c:ba:30:6b:e3:ad: b1:b4:1e:b8:e9:d7:e3:68:75:69:e3:a6:48:60:29: 0d:0b:15:b2:05:61:3b:d0:8a:ba:1c:fc:36:12:fe: 83:98:da:1b:45:48:08:61:14:3a:bd:05:54:38:5a: 0d:ad:6a:09:4d:50:65:57:c2:74:43:02:b9:a0:d9: 70:d5:6c:a0:1c:9b:e9:a4:45:33:f8:53:00:15:be: 38:cf:4f:b2:a4:9d:b0:e9:38:bd:ab:b6:bf:83:d1: c7:8e:b6:30:7e:4a:2e:a3:08:71:48:34:83:bf:a2: 4d:fc:8b:2b:25:93:e8:80:45:4c:65:93:5a:ac:bc: 35:e3:e6:32:15:f5:4d:b3:34:68:09:61:41:10:d8: e6:18:33:d5:eb:74:22:7b:d2:4f:77:96:d0:02:10: 29:9f:e1:db:3d:55:f1:bc:ec:d3:bb:b8:f5:f4:37: cd:3e:2f:a2:d0:b4:d0:e0:c9:95:5c:37:f7:79:e3: fe:fc:aa:a9:47:d2:4b:02:08:27:46:4e:79:9b:96: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:13:A2:55:69:2B:10:F2:49:46:84:E9:52:FE:48:C5:52:20:FD:F3 X509v3 Authority Key Identifier: keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:45:b7:88:95:ce:23:12:f5:4e:ea:56:fb:97:e7:03:82:8d: a4:59:90:51:a6:cd:8c:bf:73:4d:99:7a:91:d2:56:ff:17:ec: 8d:c6:15:bc:a8:ef:d9:a4:26:23:bf:06:1b:b0:cc:56:8c:e5: a2:51:04:aa:c7:32:7c:ec:cf:b3:82:b2:0d:dd:e5:bd:a5:19: f5:0a:e7:c0:fc:0f:98:f1:08:cd:9b:7d:2d:aa:24:f3:71:88: 4f:5e:6b:67:f3:c7:a7:fd:9a:80:f9:ee:be:2d:f1:2d:9e:de: 02:94:b7:23:4a:03:8f:d5:48:a5:e2:5a:9c:8e:52:86:eb:91: d4:d6:20:61:74:6e:1f:cc:73:5c:bb:f6:2e:60:e3:28:09:b9: 79:9d:87:fc:35:c3:c4:01:16:e0:a9:82:f0:b7:e1:f7:cd:1a: fd:e7:9c:cf:55:66:ff:e7:1d:fd:6c:74:aa:bd:8a:3e:a4:4a: b3:4a:a5:d9:df:0a:8f:60:99:be:30:db:c1:72:2e:a7:1d:fb: a7:e9:44:b2:0b:80:c2:c7:c6:8a:96:f6:11:63:6a:6c:19:81: a7:16:2f:c2:c4:d0:78:2f:ac:21:02:f0:1d:ec:c3:24:c6:d9: c0:ba:c7:6b:87:cb:d9:62:6e:a0:62:a6:8a:4b:3c:37:9e:f0: fc:b2:b0:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2vUto+DmrKqKOb6SDY3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx NjdkYWUwHhcNMjUxMjIxMDMwMTM1WhcNMjUxMjIyMDMwMTM1WjAzMTEwLwYDVQQD Eyg1NjEzYTI1NTY5MmIxMGYyNDk0Njg0ZTk1MmZlNDhjNTUyMjBmZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBlKW+SvkGA9Y5Y9urKc58U2cTRf MVl/XknrnGx1p1RF83XYvHY7Sj0SiuPwNd5NvF2NjuVMujBr462xtB646dfjaHVp 46ZIYCkNCxWyBWE70Iq6HPw2Ev6DmNobRUgIYRQ6vQVUOFoNrWoJTVBlV8J0QwK5 oNlw1WygHJvppEUz+FMAFb44z0+ypJ2w6Ti9q7a/g9HHjrYwfkouowhxSDSDv6JN /IsrJZPogEVMZZNarLw14+YyFfVNszRoCWFBENjmGDPV63Qie9JPd5bQAhApn+Hb PVXxvOzTu7j19DfNPi+i0LTQ4MmVXDf3eeP+/KqpR9JLAggnRk55m5ZOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYTolVpKxDySUaE6VL+SMVSIP3zMB8GA1UdIwQY MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4 LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUW3iJXO IxL1TupW+5fnA4KNpFmQUabNjL9zTZl6kdJW/xfsjcYVvKjv2aQmI78GG7DMVozl olEEqscyfOzPs4KyDd3lvaUZ9QrnwPwPmPEIzZt9Laok83GIT15rZ/PHp/2agPnu vi3xLZ7eApS3I0oDj9VIpeJanI5ShuuR1NYgYXRuH8xzXLv2LmDjKAm5eZ2H/DXD xAEW4KmC8Lfh980a/eecz1Vm/+cd/Wx0qr2KPqRKs0ql2d8Kj2CZvjDbwXIupx37 p+lEsguAwsfGipb2EWNqbBmBpxYvwsTQeC+sIQLwHezDJMbZwLrHa4fL2WJuoGKm iks8N57w/LKwnw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:11 2025 by rpki-client