This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json) Hash identifier: lOCr+A/S6LCW87aOq92KV75GtgAmc+V5p2UQDn2g6NY= Subject key identifier: 29:04:97:72:80:EF:B3:59:38:96:19:0D:C2:1B:FD:7F:DE:72:11:56 Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae Certificate serial: 019B40C95C105D198C4B1E6B7EC4C9E471AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft Manifest number: 030B Signing time: Sun 21 Dec 2025 12:01:36 +0000 Manifest this update: Sun 21 Dec 2025 12:01:36 +0000 Manifest next update: Mon 22 Dec 2025 12:01:36 +0000 Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: RJ4pk/AsvZwu4r8JDgdbWEyAyqFWtinNShn6Nc8UJbU=) 2: Br2XYkCHvC72aVRHi890y0oAZCY.roa (hash: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:5c:10:5d:19:8c:4b:1e:6b:7e:c4:c9:e4:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae Validity Not Before: Dec 21 12:01:36 2025 GMT Not After : Dec 22 12:01:36 2025 GMT Subject: CN=2904977280efb3593896190dc21bfd7fde721156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:56:cb:b7:a1:15:f8:e5:06:22:08:27:63: 90:70:77:65:98:de:e7:a8:ac:2f:1b:b9:33:8f:c0: 7c:bb:ca:f0:72:05:94:22:6f:c1:c0:75:26:39:9b: a2:f2:0a:36:12:4a:c3:df:e5:ad:b9:51:0f:ce:40: fb:f9:ee:74:83:66:9d:af:81:d7:a1:79:33:fd:db: 3f:6f:94:9f:ca:2e:05:71:c0:1d:b9:7f:03:ab:6d: 80:37:6f:ab:16:0d:09:24:24:a8:8f:f5:f2:0e:e6: 50:76:70:03:c6:e9:14:42:62:5a:33:07:e1:11:e1: 2a:84:ba:40:6f:02:2b:e1:54:f1:8d:f3:5c:25:6e: 8e:4b:56:f9:73:17:ef:02:a5:e6:ce:36:ea:09:07: 08:06:d3:64:b1:e3:60:18:9e:f5:a2:a6:94:4c:d5: 98:f9:3b:8d:1f:07:f1:e5:a5:9f:9e:a5:d6:c1:78: 6a:7b:0c:d7:51:74:fb:cd:3a:b8:a9:f3:4a:91:0e: f1:c7:c2:90:5e:00:b1:b4:1e:87:80:f9:ab:11:f5: ea:09:00:7f:70:9a:5f:5e:50:50:d5:18:d6:ba:84: 91:20:b4:42:07:c1:25:63:0a:96:58:77:96:f2:d5: 22:11:41:5b:0d:bb:d1:62:48:c9:61:77:a6:07:c7: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:97:72:80:EF:B3:59:38:96:19:0D:C2:1B:FD:7F:DE:72:11:56 X509v3 Authority Key Identifier: keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:74:a6:cb:78:89:0a:49:ac:af:e7:77:f6:52:a0:3b:29:ee: eb:b7:4f:50:3d:a3:b3:a7:66:49:cc:6a:0d:7d:ce:36:21:2a: 1b:0f:24:25:7d:c2:95:f4:61:7b:4b:2f:7b:62:2e:08:39:c9: 55:45:11:3b:ad:44:08:73:ef:3e:f0:61:c4:a5:03:76:b2:a8: 6f:8f:87:0d:41:76:81:a8:cf:96:ec:15:0e:4e:83:ac:32:16: c0:bf:c2:ce:3a:6a:3d:64:79:21:cd:07:b7:df:f8:57:e4:45: 20:f1:1e:33:f0:74:16:35:be:42:54:3b:43:71:03:21:f7:c1: 88:32:95:a2:20:d8:3c:c7:65:08:9d:2a:32:bc:14:52:7b:01: 42:4a:38:51:d5:ff:f9:af:af:fb:29:4c:f4:ac:a2:06:4e:b3: 00:09:f2:8d:5c:96:49:a4:dc:a0:91:d5:02:d6:8b:97:ef:50: d1:77:26:79:66:2d:f0:b9:70:5f:c2:62:07:12:21:e0:3e:91: f5:9a:82:dd:7d:46:64:af:1e:20:86:87:ce:27:e8:cd:86:e8: 82:84:4e:c9:6c:84:09:74:cd:ff:ee:79:76:b4:d6:ff:ba:99: 04:55:79:1b:6e:47:9e:75:6c:d4:e2:3b:6e:ce:26:83:bb:27: 0f:88:3f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyVwQXRmMSx5rfsTJ5HGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx NjdkYWUwHhcNMjUxMjIxMTIwMTM2WhcNMjUxMjIyMTIwMTM2WjAzMTEwLwYDVQQD EygyOTA0OTc3MjgwZWZiMzU5Mzg5NjE5MGRjMjFiZmQ3ZmRlNzIxMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhpWy7ehFfjlBiIIJ2OQcHdlmN7n qKwvG7kzj8B8u8rwcgWUIm/BwHUmOZui8go2EkrD3+WtuVEPzkD7+e50g2adr4HX oXkz/ds/b5Sfyi4FccAduX8Dq22AN2+rFg0JJCSoj/XyDuZQdnADxukUQmJaMwfh EeEqhLpAbwIr4VTxjfNcJW6OS1b5cxfvAqXmzjbqCQcIBtNkseNgGJ71oqaUTNWY +TuNHwfx5aWfnqXWwXhqewzXUXT7zTq4qfNKkQ7xx8KQXgCxtB6HgPmrEfXqCQB/ cJpfXlBQ1RjWuoSRILRCB8ElYwqWWHeW8tUiEUFbDbvRYkjJYXemB8eMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkEl3KA77NZOJYZDcIb/X/echFWMB8GA1UdIwQY MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4 LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnSmy3iJ Ckmsr+d39lKgOynu67dPUD2js6dmScxqDX3ONiEqGw8kJX3ClfRhe0sve2IuCDnJ VUURO61ECHPvPvBhxKUDdrKob4+HDUF2gajPluwVDk6DrDIWwL/CzjpqPWR5Ic0H t9/4V+RFIPEeM/B0FjW+QlQ7Q3EDIffBiDKVoiDYPMdlCJ0qMrwUUnsBQko4UdX/ +a+v+ylM9KyiBk6zAAnyjVyWSaTcoJHVAtaLl+9Q0XcmeWYt8LlwX8JiBxIh4D6R 9ZqC3X1GZK8eIIaHzifozYbogoROyWyECXTN/+55drTW/7qZBFV5G25HnnVs1OI7 bs4mg7snD4g/rg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:33 2025 by rpki-client