This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json) Hash identifier: EZaRYr3jUwpbQPrqcLWMkLLLy019Pq7BKnTPiZzsLZ4= Subject key identifier: 74:71:9B:C9:C0:7F:FF:17:D2:3C:B7:86:33:00:F9:41:47:EE:8B:AD Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0 Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0 Certificate serial: 019B507312C3DB844D1F21C5302C9945253D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft Manifest number: 0771 Signing time: Wed 24 Dec 2025 13:01:17 +0000 Manifest this update: Wed 24 Dec 2025 13:01:17 +0000 Manifest next update: Thu 25 Dec 2025 13:01:17 +0000 Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: i3zFsXLk6hOdLqScyCpEkN+OPfN7LWh8+SAru94LjxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:12:c3:db:84:4d:1f:21:c5:30:2c:99:45:25:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0 Validity Not Before: Dec 24 13:01:17 2025 GMT Not After : Dec 25 13:01:17 2025 GMT Subject: CN=74719bc9c07fff17d23cb7863300f94147ee8bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:70:e7:41:26:bb:69:9b:f8:50:43:65:96: 7a:21:49:7c:19:5e:7b:8f:5f:bd:99:45:ac:30:c0: 57:0d:7e:96:0d:94:b1:f0:fd:99:d9:07:12:db:74: 6d:6e:0a:12:c6:37:82:81:92:d9:38:92:a6:9f:69: f6:0d:77:03:9d:dd:16:7b:21:f6:81:b0:0f:e6:de: d3:c7:1a:ed:de:a5:c4:23:56:80:0a:01:dd:ed:92: 88:3a:2d:44:2c:5f:a1:3f:4e:99:ac:58:d7:86:37: 65:92:df:97:06:63:f9:1a:e3:86:d0:43:9c:a8:e7: 8e:e3:4b:cb:36:b0:58:49:9d:1b:16:2a:ab:06:5f: 5d:6b:af:7a:25:31:c9:ca:96:6c:b1:42:94:da:d4: 4a:d4:41:82:f2:c7:91:dd:90:a7:fc:e5:48:1e:4c: 53:8f:5b:db:5a:6e:ca:4a:3e:b6:19:33:5a:db:f4: fb:36:71:f2:33:92:5f:5f:93:d2:f5:c1:59:47:a6: fc:21:5f:b0:c3:dc:72:bf:ae:62:22:bc:6b:ee:aa: 29:20:ce:4e:15:52:bd:e7:43:96:c1:9e:be:87:18: 75:7a:a6:f0:0d:8a:5e:92:60:25:58:4f:e3:4e:11: 6c:44:fe:9c:3c:06:c0:26:6a:66:b0:5c:82:8a:e0: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:71:9B:C9:C0:7F:FF:17:D2:3C:B7:86:33:00:F9:41:47:EE:8B:AD X509v3 Authority Key Identifier: keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:05:77:d7:b0:c4:65:4d:27:7d:cd:6c:00:90:bd:3e:c5:a4: 56:b7:89:b3:ba:57:dc:eb:22:fe:10:5a:f6:00:f2:4f:71:03: b1:05:a8:ab:8c:6b:92:c7:fa:76:5e:32:8e:e6:b5:6e:1c:8a: f5:7a:d6:f1:63:cd:79:2d:41:e3:94:87:3b:a4:cb:7e:6d:d9: db:2b:73:d0:da:0f:5a:dc:26:29:f5:26:66:cb:eb:1a:ef:ad: 18:ff:4b:d9:87:23:28:1e:3c:3a:4a:e7:ae:27:e8:f3:1d:2f: 4c:fb:fe:3a:13:5e:f2:df:27:71:17:5f:a9:0e:03:0f:18:7b: 33:c5:fc:d3:73:c9:94:60:45:69:13:1f:46:61:ac:dc:e2:9c: 27:43:5b:be:ab:36:76:06:06:18:4e:05:80:c8:d5:d8:3e:79: d5:55:7b:73:3d:db:a3:31:fb:0f:a6:f4:af:29:76:c0:77:18: 11:5e:23:9c:91:40:79:dc:11:a1:5e:d1:71:bf:15:aa:6e:c7: 32:d1:68:8e:73:21:99:73:54:cf:12:53:89:9a:dd:4b:36:52: 8a:2c:88:c1:09:11:09:52:59:fb:71:07:51:36:c4:b4:58:6c: ed:e2:ff:15:2e:d1:24:57:b1:fc:da:4a:36:ab:82:96:b7:e7: ee:22:a4:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcxLD24RNHyHFMCyZRSU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjkyOTM4ZWE4Y2Y3YTNmNjA5OWNhNmQ2ZTNlNWEyN2I4 OTdjZjAwHhcNMjUxMjI0MTMwMTE3WhcNMjUxMjI1MTMwMTE3WjAzMTEwLwYDVQQD Eyg3NDcxOWJjOWMwN2ZmZjE3ZDIzY2I3ODYzMzAwZjk0MTQ3ZWU4YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGFw50Emu2mb+FBDZZZ6IUl8GV57 j1+9mUWsMMBXDX6WDZSx8P2Z2QcS23RtbgoSxjeCgZLZOJKmn2n2DXcDnd0WeyH2 gbAP5t7Txxrt3qXEI1aACgHd7ZKIOi1ELF+hP06ZrFjXhjdlkt+XBmP5GuOG0EOc qOeO40vLNrBYSZ0bFiqrBl9da696JTHJypZssUKU2tRK1EGC8seR3ZCn/OVIHkxT j1vbWm7KSj62GTNa2/T7NnHyM5JfX5PS9cFZR6b8IV+ww9xyv65iIrxr7qopIM5O FVK950OWwZ6+hxh1eqbwDYpekmAlWE/jThFsRP6cPAbAJmpmsFyCiuBRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRxm8nAf/8X0jy3hjMA+UFH7outMB8GA1UdIwQY MBaAFO65KTjqjPej9gmcptbj5aJ7iXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgt MGJmMDI4MmE2ZDY3LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgtMGJmMDI4MmE2ZDY3 LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwV317DE ZU0nfc1sAJC9PsWkVreJs7pX3Osi/hBa9gDyT3EDsQWoq4xrksf6dl4yjua1bhyK 9XrW8WPNeS1B45SHO6TLfm3Z2ytz0NoPWtwmKfUmZsvrGu+tGP9L2YcjKB48Okrn rifo8x0vTPv+OhNe8t8ncRdfqQ4DDxh7M8X803PJlGBFaRMfRmGs3OKcJ0Nbvqs2 dgYGGE4FgMjV2D551VV7cz3bozH7D6b0ryl2wHcYEV4jnJFAedwRoV7Rcb8Vqm7H MtFojnMhmXNUzxJTiZrdSzZSiiyIwQkRCVJZ+3EHUTbEtFhs7eL/FS7RJFex/NpK NquClrfn7iKk7A== -----END CERTIFICATE-----Generated at Wed Dec 24 16:41:45 2025 by rpki-client