This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json) Hash identifier: SiMlqDZFOhrPe5xAXpEm398qKVW008L8loVkGr/qt+Y= Subject key identifier: 18:D0:44:8D:4C:A8:1F:20:F9:14:E7:56:69:8B:88:B3:5E:D4:D0:25 Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a Certificate serial: 019B43C983137DE003E9F8105210E598CF67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:00:38 +0000 Manifest this update: Mon 22 Dec 2025 02:00:38 +0000 Manifest next update: Tue 23 Dec 2025 02:00:38 +0000 Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: v2cdyVeMVbH6H8Fk3+LvkANrhJ23zdsp0RvLRX9sfiQ=) 2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:83:13:7d:e0:03:e9:f8:10:52:10:e5:98:cf:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a Validity Not Before: Dec 22 02:00:38 2025 GMT Not After : Dec 23 02:00:38 2025 GMT Subject: CN=18d0448d4ca81f20f914e756698b88b35ed4d025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bf:17:ab:c7:8d:31:cd:72:f5:0b:44:98:89: 24:32:83:d5:12:3d:a0:59:42:97:79:c7:34:39:73: 1d:55:c9:29:7b:22:36:ec:ab:b8:71:46:c2:68:ec: 1a:0b:fb:ee:52:94:24:31:aa:0c:17:f6:0b:45:28: de:65:f1:24:5c:9c:e2:5f:27:2f:d1:48:3e:3d:ae: 41:48:5b:45:7f:a2:08:ee:33:42:0e:15:19:f2:38: 6f:f6:e2:83:90:7c:dd:9f:97:69:9a:b4:ca:21:55: 95:0f:bc:e0:c3:96:31:71:a8:73:77:11:01:83:46: af:f3:6a:08:62:4f:20:c2:39:57:3c:e1:d7:e4:55: a3:0f:a1:5a:1d:c7:be:7c:ad:55:eb:6a:93:7f:cd: 98:9e:dd:f6:83:8b:b0:4c:04:d4:1d:0c:7e:9a:a5: e5:cb:88:31:2c:f8:e8:b5:35:53:67:4f:b3:62:23: 30:e1:a7:7e:26:39:36:d9:0b:27:2a:bc:50:14:56: 63:e3:7c:76:fd:48:43:de:df:71:b2:59:8a:bd:03: 55:7c:15:77:65:30:29:e4:7c:49:9d:6b:06:38:3b: 82:63:0c:b7:bb:10:67:55:f4:a0:bd:d1:73:b6:fd: 9a:3a:46:f4:7d:47:96:4d:72:81:7f:61:55:de:67: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:44:8D:4C:A8:1F:20:F9:14:E7:56:69:8B:88:B3:5E:D4:D0:25 X509v3 Authority Key Identifier: keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8b:08:01:0d:d7:52:47:a4:44:d6:00:b9:61:63:cd:8d:59: 80:a4:d2:b9:31:ef:7a:a6:c4:05:78:19:00:97:57:50:9e:fc: 45:62:73:62:ba:3e:72:ed:6f:f0:e9:85:f4:e6:1b:b8:5b:c4: c4:63:22:a2:b2:7f:1b:5e:55:86:0f:3c:0b:1c:95:b2:a0:b3: d7:a0:1c:36:ae:ea:55:fa:d0:aa:a9:25:8a:ee:54:21:0d:5f: 77:52:0a:7b:3f:8a:31:b9:32:88:d3:52:86:cc:6b:72:8d:04: b3:32:aa:d7:db:4d:7a:eb:be:eb:a3:dd:bb:08:ce:72:9e:12: 1e:fa:69:de:92:2c:a4:82:b2:f1:1e:1d:42:57:75:21:80:60: 4f:80:08:a8:db:8f:36:c1:a2:cf:15:1f:73:2f:96:13:f6:01: a0:a2:26:93:7e:19:73:2c:fc:a3:f8:75:dd:2b:2e:1a:8a:22: 83:aa:d5:28:0e:4e:b3:cb:e1:3a:a9:93:a6:c0:de:cb:18:42: 5c:b5:5d:28:e1:a0:43:6b:ad:5c:18:c6:58:77:16:3c:08:73: d8:d9:1f:8e:4a:81:3c:6e:aa:35:7f:bd:30:1a:40:4a:36:e9: 67:21:38:5c:2f:7c:b7:fa:c7:da:36:96:17:bc:02:8e:0a:41: 33:07:b4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyYMTfeAD6fgQUhDlmM9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjMyMGJlODk3MjY4MzFmM2ZkOTAwNzQwZjFmOTA2Zjli MTljNmEwHhcNMjUxMjIyMDIwMDM4WhcNMjUxMjIzMDIwMDM4WjAzMTEwLwYDVQQD EygxOGQwNDQ4ZDRjYTgxZjIwZjkxNGU3NTY2OThiODhiMzVlZDRkMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L8Xq8eNMc1y9QtEmIkkMoPVEj2g WUKXecc0OXMdVckpeyI27Ku4cUbCaOwaC/vuUpQkMaoMF/YLRSjeZfEkXJziXycv 0Ug+Pa5BSFtFf6II7jNCDhUZ8jhv9uKDkHzdn5dpmrTKIVWVD7zgw5YxcahzdxEB g0av82oIYk8gwjlXPOHX5FWjD6FaHce+fK1V62qTf82Ynt32g4uwTATUHQx+mqXl y4gxLPjotTVTZ0+zYiMw4ad+Jjk22QsnKrxQFFZj43x2/UhD3t9xslmKvQNVfBV3 ZTAp5HxJnWsGODuCYwy3uxBnVfSgvdFztv2aOkb0fUeWTXKBf2FV3mdAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjQRI1MqB8g+RTnVmmLiLNe1NAlMB8GA1UdIwQY MBaAFO6zIL6Jcmgx8/2QB0Dx+Qb5sZxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDkt MDIxMDQwYWEzYzhhLzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDktMDIxMDQwYWEzYzhh LzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIsIAQ3X UkekRNYAuWFjzY1ZgKTSuTHveqbEBXgZAJdXUJ78RWJzYro+cu1v8OmF9OYbuFvE xGMiorJ/G15Vhg88CxyVsqCz16AcNq7qVfrQqqkliu5UIQ1fd1IKez+KMbkyiNNS hsxrco0EszKq19tNeuu+66PduwjOcp4SHvpp3pIspIKy8R4dQld1IYBgT4AIqNuP NsGizxUfcy+WE/YBoKImk34Zcyz8o/h13SsuGooig6rVKA5Os8vhOqmTpsDeyxhC XLVdKOGgQ2utXBjGWHcWPAhz2NkfjkqBPG6qNX+9MBpASjbpZyE4XC98t/rH2jaW F7wCjgpBMwe0Yw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:33 2025 by rpki-client