This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json) Hash identifier: uEIR5XCtXVutgSiSH8b2xxlzvNvgidBj8OyzYSUcQNs= Subject key identifier: C1:29:E8:F8:F1:33:FD:16:B6:17:BB:B5:AC:E6:D8:CB:9C:97:E9:6A Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba Certificate serial: 019B28C042652259617287BB2B7DB7DDB95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft Manifest number: 0233 Signing time: Tue 16 Dec 2025 20:00:47 +0000 Manifest this update: Tue 16 Dec 2025 20:00:47 +0000 Manifest next update: Wed 17 Dec 2025 20:00:47 +0000 Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: 8LR0YRA3CbMDin6o3O2r3hDtfyzqCVDLQ10dSHHiOkY=) 2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:42:65:22:59:61:72:87:bb:2b:7d:b7:dd:b9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba Validity Not Before: Dec 16 20:00:47 2025 GMT Not After : Dec 17 20:00:47 2025 GMT Subject: CN=c129e8f8f133fd16b617bbb5ace6d8cb9c97e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:90:d6:ff:a9:ba:17:ce:82:ae:1d:e3:98: 2e:31:7e:7c:b1:7f:41:3f:3b:bb:30:1b:58:ce:0b: cc:cb:f8:dc:1c:8f:c9:25:44:30:2d:6c:b4:61:5c: 44:2b:b3:73:65:5c:9a:38:2c:28:c9:5f:e2:5b:64: db:e1:55:33:d2:ec:3e:a4:31:2a:00:62:91:a1:5b: de:51:05:49:d4:c2:db:30:ca:b7:78:1d:b0:f3:20: cc:1c:ff:ab:9b:ee:fd:aa:7b:c6:79:8e:08:c4:44: 8f:a9:c3:15:38:c3:44:40:3a:33:21:f2:4e:a0:2c: 58:f0:90:31:51:ac:26:d3:18:a7:00:bf:98:59:f0: 15:f2:f4:e5:13:8c:c5:f7:18:62:77:d7:3a:2f:b1: bd:d8:ff:76:a7:3a:b3:15:c9:25:61:82:fa:df:09: 40:91:65:a8:2e:23:4e:33:7e:b0:dc:4b:55:f4:06: ec:2b:ca:ea:39:d3:7c:14:17:9d:47:71:7e:98:78: 4b:80:e4:f1:09:38:dd:cd:db:68:41:42:e6:87:c1: 1f:01:d0:87:70:21:5a:d1:e9:bc:37:e7:48:a1:48: 6e:25:01:16:2e:00:51:5c:fc:c3:d8:90:6c:de:03: 9b:20:5c:65:ab:12:e4:bb:9d:2b:ab:e9:aa:40:bd: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:29:E8:F8:F1:33:FD:16:B6:17:BB:B5:AC:E6:D8:CB:9C:97:E9:6A X509v3 Authority Key Identifier: keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:a3:c6:93:a7:ee:6d:e9:61:86:a1:67:a0:b0:ab:42:53: ad:4e:4e:39:6f:ab:d5:46:a2:f4:87:17:4c:43:c1:a0:47:e5: 2d:e2:d9:b0:8c:26:ed:49:76:b8:79:f5:d0:3d:90:7e:eb:b6: 22:7b:35:01:1f:8f:40:08:a5:a9:17:6f:27:0d:4b:f0:35:44: be:72:dd:a3:67:14:18:63:dc:ef:73:ec:79:8c:27:57:59:ef: 4d:4f:b8:48:fa:63:c9:4d:50:77:7f:d1:1b:4c:81:dc:3d:14: fa:1c:41:b0:3f:d1:e5:9a:df:6b:88:d8:65:59:92:37:87:65: c9:ff:9e:0c:59:c6:3a:c7:06:81:10:10:9e:9e:73:53:41:e9: bd:df:32:e9:71:bb:34:f1:bc:8c:e8:c6:77:d5:d9:8a:38:fa: 94:7b:3f:46:15:db:dc:35:3f:f9:c8:bf:00:3e:42:a6:50:a6: ce:ce:80:ef:c5:ff:4e:7d:58:8f:0a:48:cb:14:03:c6:eb:25: 20:8f:a2:a0:a1:72:29:5f:68:f1:bf:64:a5:ee:2e:2f:f9:69: 8c:de:3c:0b:06:b7:8b:ee:68:38:3f:10:b0:a7:0f:b1:14:b9: 31:c7:83:fb:d1:68:fd:8b:b7:d7:6b:0c:f3:4c:d8:4f:37:e0: 88:89:04:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowEJlIllhcoe7K3233blaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzJlZjBjYWYwYTA1NzUyOWZiOTI4Zjc2OTYyYTc0MjUz OTBkYmEwHhcNMjUxMjE2MjAwMDQ3WhcNMjUxMjE3MjAwMDQ3WjAzMTEwLwYDVQQD EyhjMTI5ZThmOGYxMzNmZDE2YjYxN2JiYjVhY2U2ZDhjYjljOTdlOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9OQ1v+puhfOgq4d45guMX58sX9B Pzu7MBtYzgvMy/jcHI/JJUQwLWy0YVxEK7NzZVyaOCwoyV/iW2Tb4VUz0uw+pDEq AGKRoVveUQVJ1MLbMMq3eB2w8yDMHP+rm+79qnvGeY4IxESPqcMVOMNEQDozIfJO oCxY8JAxUawm0xinAL+YWfAV8vTlE4zF9xhid9c6L7G92P92pzqzFcklYYL63wlA kWWoLiNOM36w3EtV9AbsK8rqOdN8FBedR3F+mHhLgOTxCTjdzdtoQULmh8EfAdCH cCFa0em8N+dIoUhuJQEWLgBRXPzD2JBs3gObIFxlqxLku50rq+mqQL1ktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEp6PjxM/0Wthe7tazm2Mucl+lqMB8GA1UdIwQY MBaAFO0y7wyvCgV1KfuSj3aWKnQlOQ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEt MWRiNTMxYzlkMmQ4LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEtMWRiNTMxYzlkMmQ4 LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASU2jxpOn 7m3pYYahZ6Cwq0JTrU5OOW+r1Uai9IcXTEPBoEflLeLZsIwm7Ul2uHn10D2Qfuu2 Ins1AR+PQAilqRdvJw1L8DVEvnLdo2cUGGPc73PseYwnV1nvTU+4SPpjyU1Qd3/R G0yB3D0U+hxBsD/R5Zrfa4jYZVmSN4dlyf+eDFnGOscGgRAQnp5zU0Hpvd8y6XG7 NPG8jOjGd9XZijj6lHs/RhXb3DU/+ci/AD5CplCmzs6A78X/Tn1YjwpIyxQDxusl II+ioKFyKV9o8b9kpe4uL/lpjN48Cwa3i+5oOD8QsKcPsRS5MceD+9Fo/Yu312sM 80zYTzfgiIkEjg== -----END CERTIFICATE-----Generated at Wed Dec 17 01:15:53 2025 by rpki-client