This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json) Hash identifier: JGFpKB+5TA4HTone36fXt/LKqplYr0zQmg3IJ3w6+64= Subject key identifier: DD:BC:34:D7:6B:CF:6C:F4:F9:96:8F:6E:C5:2F:CE:A2:5D:4B:F6:4C Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96 Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96 Certificate serial: 019B70A386080CD7ACFAFD55B63399779CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft Manifest number: 035F Signing time: Tue 30 Dec 2025 19:02:03 +0000 Manifest this update: Tue 30 Dec 2025 19:02:03 +0000 Manifest next update: Wed 31 Dec 2025 19:02:03 +0000 Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: 0VZpLqT/fpNhLobxBBcBLF72gT6XCRZ6OzA23xtgDWQ=) 2: zUvaZsb6AAcGs5bszD-Bq4oB3BE.roa (hash: 2T5+Ho1mw99m4EQU26GsTeUM3Ju0dbCS0haz/aa2sBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:86:08:0c:d7:ac:fa:fd:55:b6:33:99:77:9c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96 Validity Not Before: Dec 30 19:02:03 2025 GMT Not After : Dec 31 19:02:03 2025 GMT Subject: CN=ddbc34d76bcf6cf4f9968f6ec52fcea25d4bf64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:3a:8b:0d:d9:e2:5e:a1:79:c6:4c:23:9e: 4f:24:b6:2d:7f:fa:b6:5e:62:3d:0b:ab:e9:12:cd: 6b:e6:6d:f6:d4:43:89:d7:32:39:ee:a8:6e:03:b2: 6b:e7:db:51:a8:5c:05:6e:8a:f2:ac:f4:11:68:e5: 74:44:3f:68:37:c0:70:b0:32:2e:d5:2a:88:c1:d2: ba:b5:13:ce:be:65:54:c1:ce:5a:25:53:db:15:76: 41:b7:24:84:27:e4:09:0f:42:76:d7:98:19:14:90: 07:1e:52:52:af:80:b5:cc:cc:40:70:22:10:76:28: 27:d0:8d:ef:8a:36:4a:e6:44:b6:d0:83:10:d6:68: 7d:6d:63:4e:70:b3:b2:c3:78:9d:75:c7:62:d1:ea: 81:bc:30:2a:84:c3:e6:07:a2:6b:95:12:56:1b:6a: 2a:6f:52:60:80:98:f5:d7:8a:fa:66:21:49:34:7b: 96:a2:29:0c:8e:79:e3:11:6b:0e:c6:94:29:27:62: 5a:e0:5d:3d:9b:96:a2:20:b2:f8:ed:ae:98:12:b5: 34:0a:0c:c2:0d:42:a3:d4:17:86:20:8b:1a:aa:f0: 87:49:06:a6:58:83:d3:1e:85:70:d8:9d:1e:91:4f: f4:92:58:c6:be:04:5a:cd:c6:d0:a9:3d:4c:bf:de: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BC:34:D7:6B:CF:6C:F4:F9:96:8F:6E:C5:2F:CE:A2:5D:4B:F6:4C X509v3 Authority Key Identifier: keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6e:07:1b:ce:17:6f:02:c6:8c:ce:52:5e:8e:ec:dd:60:47: 68:bd:51:0d:1d:fe:80:0a:8b:30:a8:56:dd:05:76:b4:ac:fa: 0c:39:7b:71:28:98:9d:d0:95:bf:9d:0a:dd:38:85:62:cc:48: be:85:3f:a1:a0:42:91:32:1a:b9:e2:c6:68:8b:56:36:e7:e2: db:67:e8:c3:84:10:31:c2:e7:f1:0a:5a:b7:0a:4d:51:22:e0: 26:ef:d8:76:34:4f:29:f8:20:c8:d1:67:6d:b4:31:8d:50:1b: be:61:2b:6e:7d:27:67:a9:26:e7:fe:64:5a:62:a9:72:da:7b: 27:23:70:0a:5b:b1:e0:c1:f9:38:ed:e5:45:99:d6:16:42:71: 43:00:c7:33:6a:45:4f:9e:12:25:72:9e:5e:b5:93:50:ff:3d: cd:8a:0d:b4:9e:25:ad:13:57:bb:12:2c:39:7f:d9:f2:92:b0: 24:65:24:9d:7f:cf:be:d2:8a:f2:5f:c1:2f:02:6c:66:de:ad: 3b:36:7e:48:ee:b3:7a:01:4c:23:8d:5d:6d:2a:ea:91:dd:5d: 10:95:2b:97:d9:f5:b1:6c:f1:f4:30:e1:d2:ad:cd:c3:17:db: b6:39:86:b9:1d:19:b5:43:59:26:ee:c0:f9:64:70:b4:4d:74: d0:a0:d9:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo4YIDNes+v1VtjOZd5ynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOWNjZDM4YTVkNjQ5Njg4MGJjMDk0NzA2ZTY4ZmEwNGZh MmNkOTYwHhcNMjUxMjMwMTkwMjAzWhcNMjUxMjMxMTkwMjAzWjAzMTEwLwYDVQQD EyhkZGJjMzRkNzZiY2Y2Y2Y0Zjk5NjhmNmVjNTJmY2VhMjVkNGJmNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu706iw3Z4l6hecZMI55PJLYtf/q2 XmI9C6vpEs1r5m321EOJ1zI57qhuA7Jr59tRqFwFboryrPQRaOV0RD9oN8BwsDIu 1SqIwdK6tRPOvmVUwc5aJVPbFXZBtySEJ+QJD0J215gZFJAHHlJSr4C1zMxAcCIQ dign0I3vijZK5kS20IMQ1mh9bWNOcLOyw3iddcdi0eqBvDAqhMPmB6JrlRJWG2oq b1JggJj114r6ZiFJNHuWoikMjnnjEWsOxpQpJ2Ja4F09m5aiILL47a6YErU0CgzC DUKj1BeGIIsaqvCHSQamWIPTHoVw2J0ekU/0kljGvgRazcbQqT1Mv96tcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN28NNdrz2z0+ZaPbsUvzqJdS/ZMMB8GA1UdIwQY MBaAFO6czTil1klogLwJRwbmj6BPos2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNWY5NWMtYjBiNi00NTIyLThlYTAt NTViZWFmYTRiYjI5LzEvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xNWY5NWMtYjBiNi00NTIyLThlYTAtNTViZWFmYTRiYjI5 LzEvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG4HG84X bwLGjM5SXo7s3WBHaL1RDR3+gAqLMKhW3QV2tKz6DDl7cSiYndCVv50K3TiFYsxI voU/oaBCkTIaueLGaItWNufi22fow4QQMcLn8QpatwpNUSLgJu/YdjRPKfggyNFn bbQxjVAbvmErbn0nZ6km5/5kWmKpctp7JyNwClux4MH5OO3lRZnWFkJxQwDHM2pF T54SJXKeXrWTUP89zYoNtJ4lrRNXuxIsOX/Z8pKwJGUknX/PvtKK8l/BLwJsZt6t OzZ+SO6zegFMI41dbSrqkd1dEJUrl9n1sWzx9DDh0q3NwxfbtjmGuR0ZtUNZJu7A +WRwtE100KDZlQ== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:53 2025 by rpki-client