This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json) Hash identifier: j4gN5VxUBuOZdrIxBxzrqFd7EsRJb8kkVKL3YpOxbdQ= Subject key identifier: A0:12:D2:DD:34:4D:E6:C1:41:E0:30:A9:F2:82:D7:12:C9:41:76:86 Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Certificate serial: 019B3CB4A89861C4516E171BADE0E03F8F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft Manifest number: 0E14 Signing time: Sat 20 Dec 2025 17:00:30 +0000 Manifest this update: Sat 20 Dec 2025 17:00:30 +0000 Manifest next update: Sun 21 Dec 2025 17:00:30 +0000 Files and hashes: 1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=) 2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: BDg4duIPDdfCvgBUHvt/491GLWy1H14fG05GDusCY2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a8:98:61:c4:51:6e:17:1b:ad:e0:e0:3f:8f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Validity Not Before: Dec 20 17:00:30 2025 GMT Not After : Dec 21 17:00:30 2025 GMT Subject: CN=a012d2dd344de6c141e030a9f282d712c9417686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:b0:eb:bd:2d:5c:48:25:e3:97:2a:89:97: 1d:de:13:1f:69:a9:45:6f:d8:47:6c:9b:61:a3:26: 62:c2:ac:68:42:ea:79:5b:7c:75:e6:86:8b:1d:de: 73:11:0b:a5:d3:ad:c6:d9:18:64:16:81:ae:6e:4a: 74:a7:f5:69:56:98:e0:0e:68:bf:b5:5c:40:18:10: 96:9c:a4:ef:2a:bb:70:2b:b6:63:29:7c:f8:35:63: 89:36:bf:eb:57:5e:c7:73:64:b0:35:8e:af:24:79: 92:cb:a6:13:63:b2:da:45:e4:8c:26:7b:41:d7:7b: 17:b5:09:03:43:dc:e4:5d:91:a1:d4:1e:7b:69:9a: 76:c8:45:e7:a5:d4:e8:2d:cb:53:05:b2:1b:fc:9d: 7f:ba:56:91:a9:f1:4f:02:cf:52:be:22:f7:99:a4: ea:11:bd:72:62:72:e0:5c:d8:34:ab:6f:7b:a1:99: d9:97:6b:a0:f1:f4:e5:3c:98:68:04:1f:c7:a2:2c: 8c:d9:f4:5d:23:03:65:9a:e8:2b:f5:c8:30:07:fb: 5e:c6:04:f9:ed:ae:dd:66:39:16:30:bf:e3:27:45: 3a:b4:6b:8e:a8:b5:66:64:ed:c0:ee:76:33:d6:74: c8:b0:55:72:23:72:b0:fe:9b:bd:bb:e6:74:db:80: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:D2:DD:34:4D:E6:C1:41:E0:30:A9:F2:82:D7:12:C9:41:76:86 X509v3 Authority Key Identifier: keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bb:e0:fd:bf:39:ba:50:4e:ff:d9:d0:f6:e1:50:26:46:18: b7:e7:3d:9e:2e:22:77:61:e8:8a:1b:8e:94:4b:7e:88:ff:51: a4:7a:54:2a:a1:fb:a8:68:3c:ad:b0:c3:9d:b5:9e:95:ee:99: 40:65:f0:d6:dd:16:a3:94:f1:ae:03:07:4b:05:e6:1e:8f:3d: cd:45:3f:3a:7f:be:b1:8c:76:e4:dd:a6:6b:21:d8:ea:92:f5: 2c:08:20:e4:e5:da:db:8e:9a:e1:34:fd:6b:86:65:21:84:a4: 5c:85:2a:75:a5:bc:c1:43:43:02:15:fc:92:a3:48:d6:32:16: 48:9f:16:4a:ed:dc:6f:15:1c:35:c3:e0:9a:c0:9d:1a:9c:52: 6c:78:bd:a3:a4:32:4c:84:16:1f:14:d4:74:e6:82:0d:bc:f2: d9:dd:74:29:09:be:27:08:1e:62:e6:3e:3f:3a:f1:46:ca:8d: 48:2d:9d:d9:74:90:5f:13:d8:7f:6c:30:4c:96:a1:ce:1e:f8: bd:8f:e5:68:58:11:b0:ca:43:b5:a3:1a:7b:2d:6c:2d:96:a9: a4:df:15:68:23:87:2c:51:74:02:0b:8f:a7:ee:c1:b7:cc:4c: 8b:6c:fa:3b:67:12:c6:3b:43:4e:ff:6c:c1:68:7d:d7:6a:c2: f9:44:9c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKiYYcRRbhcbreDgP49XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1 NmRjMzYwHhcNMjUxMjIwMTcwMDMwWhcNMjUxMjIxMTcwMDMwWjAzMTEwLwYDVQQD EyhhMDEyZDJkZDM0NGRlNmMxNDFlMDMwYTlmMjgyZDcxMmM5NDE3Njg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ+w670tXEgl45cqiZcd3hMfaalF b9hHbJthoyZiwqxoQup5W3x15oaLHd5zEQul063G2RhkFoGubkp0p/VpVpjgDmi/ tVxAGBCWnKTvKrtwK7ZjKXz4NWOJNr/rV17Hc2SwNY6vJHmSy6YTY7LaReSMJntB 13sXtQkDQ9zkXZGh1B57aZp2yEXnpdToLctTBbIb/J1/ulaRqfFPAs9SviL3maTq Eb1yYnLgXNg0q297oZnZl2ug8fTlPJhoBB/HoiyM2fRdIwNlmugr9cgwB/texgT5 7a7dZjkWML/jJ0U6tGuOqLVmZO3A7nYz1nTIsFVyI3Kw/pu9u+Z024CtUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAS0t00TebBQeAwqfKC1xLJQXaGMB8GA1UdIwQY MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5 LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrvg/b85 ulBO/9nQ9uFQJkYYt+c9ni4id2HoihuOlEt+iP9RpHpUKqH7qGg8rbDDnbWele6Z QGXw1t0Wo5TxrgMHSwXmHo89zUU/On++sYx25N2mayHY6pL1LAgg5OXa246a4TT9 a4ZlIYSkXIUqdaW8wUNDAhX8kqNI1jIWSJ8WSu3cbxUcNcPgmsCdGpxSbHi9o6Qy TIQWHxTUdOaCDbzy2d10KQm+JwgeYuY+PzrxRsqNSC2d2XSQXxPYf2wwTJahzh74 vY/laFgRsMpDtaMaey1sLZappN8VaCOHLFF0AguPp+7Bt8xMi2z6O2cSxjtDTv9s wWh912rC+UScxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:02 2025 by rpki-client