This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft File: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json) Hash identifier: 8fe7D5g70GRW98+0fDMjWe+Jqfzy5aMuVAkx/u7AvjE= Subject key identifier: 11:67:7E:E3:D8:BD:49:16:9B:A0:68:64:CD:BB:1A:DF:26:E2:7D:D4 Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f Certificate serial: 019B50AA335DD799A82F2455975A4678F9A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 14:01:30 +0000 Manifest this update: Wed 24 Dec 2025 14:01:30 +0000 Manifest next update: Thu 25 Dec 2025 14:01:30 +0000 Files and hashes: 1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: AbLp3ksdZLEJ99DeR0t7OONDS1DZV0pKNPMS3L6b85A=) 2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:33:5d:d7:99:a8:2f:24:55:97:5a:46:78:f9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f Validity Not Before: Dec 24 14:01:30 2025 GMT Not After : Dec 25 14:01:30 2025 GMT Subject: CN=11677ee3d8bd49169ba06864cdbb1adf26e27dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:20:c7:cc:7f:99:57:7e:a0:e4:df:95:c3:a5: 28:24:56:e6:af:03:f0:2e:6c:63:ed:a5:ff:5d:a5: 4b:17:cf:e6:d8:7e:8d:fe:f7:a7:c7:27:c8:b5:5c: 3f:53:f1:60:9c:6d:64:5d:5a:16:4a:41:ec:85:89: 25:75:aa:ae:51:cc:c5:b7:6f:8e:23:c4:c4:13:80: 31:a2:de:b5:0a:c8:8b:76:b9:ee:50:9b:c8:81:87: 9c:4d:17:59:25:42:12:25:57:2c:f6:53:bc:9b:ee: 42:58:43:54:19:d7:ff:a1:1c:cb:af:5c:6c:7a:aa: 29:f5:b6:6f:40:32:48:b0:6d:c7:07:4b:63:75:9e: 47:dc:7b:b0:1c:7f:50:56:b6:15:b5:01:87:dd:d0: 71:85:3d:26:89:f3:d7:65:9f:d1:51:ec:0b:45:f2: 0f:1e:aa:57:45:4c:41:9b:69:ff:b2:91:12:d4:29: 53:82:ae:9e:a6:f1:2a:c5:62:4c:ee:ff:81:fc:15: f1:7a:44:80:78:85:b9:a2:24:c4:28:47:1a:f9:6b: 45:d0:22:7e:2a:07:7a:5d:39:ed:44:a2:b7:bb:cd: ba:62:48:f8:93:e6:49:f7:05:11:14:fc:b0:9b:fc: 6f:30:6a:aa:da:c5:a6:3c:e1:25:50:3e:78:b6:7c: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:67:7E:E3:D8:BD:49:16:9B:A0:68:64:CD:BB:1A:DF:26:E2:7D:D4 X509v3 Authority Key Identifier: keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a5:da:3b:98:cb:d0:6e:9e:56:72:d5:de:24:f2:bd:3b:a7: f3:f1:a7:99:33:07:c3:31:52:39:b2:11:d0:05:0a:e8:17:be: 8c:12:0f:a0:d8:de:11:33:44:a8:10:25:5b:ea:f3:64:94:93: 68:ee:85:1d:92:30:dc:f7:36:a2:53:5f:38:2c:bb:8a:15:c7: f1:df:67:6d:b2:d7:c8:d3:bc:96:61:17:98:3f:ed:05:c8:e6: 83:77:73:ea:d8:cf:43:af:29:4b:1c:63:b2:15:be:19:27:fe: 4e:88:b9:08:8a:0a:35:80:23:f8:e6:59:98:ea:d7:18:89:8e: f2:83:c3:4d:ee:49:78:3b:c3:f2:c1:2c:2f:64:7a:be:a5:cd: 39:7f:fc:34:95:0a:4a:7e:c8:0c:26:87:cf:c7:e6:b6:2c:0e: 34:2c:f5:e3:f2:00:4a:22:81:4e:fe:36:18:df:6e:d3:58:aa: c9:6b:4b:8b:70:3e:c8:60:ed:b2:83:0c:92:0c:01:b5:87:6a: a0:c8:e1:d9:8a:e6:4e:4a:14:fc:b9:4a:ae:4a:b6:99:e1:99: de:49:1b:69:c4:72:ec:be:33:10:29:6d:fc:fa:de:81:b4:9c: 9b:1c:fa:63:22:f2:db:c8:3d:2e:88:a4:ac:2f:da:8b:95:8d: 82:0a:25:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqjNd15moLyRVl1pGePmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5 YzNiNGYwHhcNMjUxMjI0MTQwMTMwWhcNMjUxMjI1MTQwMTMwWjAzMTEwLwYDVQQD EygxMTY3N2VlM2Q4YmQ0OTE2OWJhMDY4NjRjZGJiMWFkZjI2ZTI3ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CDHzH+ZV36g5N+Vw6UoJFbmrwPw Lmxj7aX/XaVLF8/m2H6N/venxyfItVw/U/FgnG1kXVoWSkHshYkldaquUczFt2+O I8TEE4Axot61CsiLdrnuUJvIgYecTRdZJUISJVcs9lO8m+5CWENUGdf/oRzLr1xs eqop9bZvQDJIsG3HB0tjdZ5H3HuwHH9QVrYVtQGH3dBxhT0mifPXZZ/RUewLRfIP HqpXRUxBm2n/spES1ClTgq6epvEqxWJM7v+B/BXxekSAeIW5oiTEKEca+WtF0CJ+ Kgd6XTntRKK3u826Ykj4k+ZJ9wURFPywm/xvMGqq2sWmPOElUD54tnzZ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFnfuPYvUkWm6BoZM27Gt8m4n3UMB8GA1UdIwQY MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut ZWM5YjY5YjQ2Y2MwLzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqXaO5jL 0G6eVnLV3iTyvTun8/GnmTMHwzFSObIR0AUK6Be+jBIPoNjeETNEqBAlW+rzZJST aO6FHZIw3Pc2olNfOCy7ihXH8d9nbbLXyNO8lmEXmD/tBcjmg3dz6tjPQ68pSxxj shW+GSf+Toi5CIoKNYAj+OZZmOrXGImO8oPDTe5JeDvD8sEsL2R6vqXNOX/8NJUK Sn7IDCaHz8fmtiwONCz14/IASiKBTv42GN9u01iqyWtLi3A+yGDtsoMMkgwBtYdq oMjh2YrmTkoU/LlKrkq2meGZ3kkbacRy7L4zEClt/PregbScmxz6YyLy28g9Loik rC/ai5WNggolrQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:19 2025 by rpki-client