This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json) Hash identifier: 2tUE1B/eqCi9aEq2Wl4iGU4PikWQgDzPvdaE+GLBP6c= Subject key identifier: F0:D7:55:5E:44:83:15:5A:38:1B:A6:EC:20:04:A8:E8:D2:3D:6D:E3 Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Certificate serial: 019B6DA1A1F3E176907B861CC8D2E0E1B786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft Manifest number: 1735 Signing time: Tue 30 Dec 2025 05:01:07 +0000 Manifest this update: Tue 30 Dec 2025 05:01:07 +0000 Manifest next update: Wed 31 Dec 2025 05:01:07 +0000 Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: WJwLNRLvKiLSouSOvsI2OnETgbOr7kq/GXc3/0nuukI=) 2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:a1:f3:e1:76:90:7b:86:1c:c8:d2:e0:e1:b7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Validity Not Before: Dec 30 05:01:07 2025 GMT Not After : Dec 31 05:01:07 2025 GMT Subject: CN=f0d7555e4483155a381ba6ec2004a8e8d23d6de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:bb:08:cf:ca:e6:ca:be:56:3c:9d:52:28: c3:a1:44:06:e1:a6:37:9d:9b:e3:5d:a1:3c:90:15: d6:e9:2d:58:31:76:01:cf:c9:e2:99:09:97:c4:79: 1c:f8:79:cb:98:9e:db:85:bd:2b:63:26:a8:f3:25: 1f:3e:9e:fa:8d:ee:19:60:2c:cb:dd:04:c8:da:21: b9:aa:8c:f9:5c:03:9c:52:31:5a:65:cf:58:e5:77: a8:75:dd:4e:7c:a2:14:79:da:b3:6e:71:c8:0d:27: b5:31:8b:26:a6:6c:d9:96:a0:25:0e:24:72:4e:f9: 99:49:9a:72:b5:79:b7:a3:72:83:3e:a5:07:6f:8e: f7:16:47:2c:f9:cd:4d:6b:dd:d4:ae:bb:a0:b2:76: d9:5c:74:76:39:23:08:2e:2a:a3:1d:d2:a2:e2:0b: a9:34:a1:38:ec:90:93:52:64:0c:95:6f:49:8f:60: af:35:d9:74:51:2c:90:c6:ce:6a:31:b8:65:8f:24: 82:91:0d:0f:5c:9e:d2:24:06:98:b0:28:79:5b:23: 11:66:d6:58:ae:2f:ff:1e:f1:23:94:f9:9f:79:a1: bf:d5:4b:85:08:a6:86:01:fa:42:6a:a8:09:e9:56: 57:87:63:7c:e6:c6:04:a5:e6:5b:39:f8:f5:fc:f3: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D7:55:5E:44:83:15:5A:38:1B:A6:EC:20:04:A8:E8:D2:3D:6D:E3 X509v3 Authority Key Identifier: keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8a:ed:dd:c0:b6:b0:8a:4d:45:04:e0:5b:2c:28:4c:42:60: 90:80:b4:21:60:51:3b:77:2c:43:c3:aa:2f:f8:da:07:66:8a: 6e:43:18:9e:b0:fb:16:29:c9:5f:7a:90:b1:d7:58:71:88:d3: b5:89:2b:51:a1:9e:31:e8:fa:1c:8d:d0:16:52:4a:44:de:7f: 25:69:16:2e:cf:29:66:96:a1:27:93:62:4a:06:3e:fa:c2:42: a1:e5:50:d6:a2:51:c2:76:6a:1b:4c:a7:ea:e8:a2:b6:14:8d: 18:5d:3d:da:1f:e1:4d:3c:2f:35:d6:86:6d:fc:53:3c:8e:67: 9e:c3:88:04:83:15:82:b6:71:93:92:35:c1:81:94:77:b9:ca: c9:e9:8c:1e:4b:31:a2:10:80:2b:71:3a:10:c9:27:07:93:c4: e4:3e:41:88:5d:2b:1d:5b:fa:e5:c3:3f:eb:b2:12:3a:f7:98: 23:c2:e9:b1:de:34:6a:da:1e:bb:af:04:2c:0c:fe:ab:d7:71: 08:8e:2c:52:91:15:b2:e4:81:3c:89:92:bf:61:24:38:e7:8d: 60:7f:13:d3:1b:63:4e:63:9a:60:23:b9:b6:34:5c:f8:b6:dc: 08:c7:f7:ec:87:03:97:c4:b5:3e:b5:23:4a:42:46:6c:90:f7: ae:cb:fc:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoaHz4XaQe4YcyNLg4beGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmI0YzBiNGFmNjE1Yzg1YTNjZGNkZWQ0YjdlYmI2NjYz MTFiNDgwHhcNMjUxMjMwMDUwMTA3WhcNMjUxMjMxMDUwMTA3WjAzMTEwLwYDVQQD EyhmMGQ3NTU1ZTQ0ODMxNTVhMzgxYmE2ZWMyMDA0YThlOGQyM2Q2ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh27CM/K5sq+VjydUijDoUQG4aY3 nZvjXaE8kBXW6S1YMXYBz8nimQmXxHkc+HnLmJ7bhb0rYyao8yUfPp76je4ZYCzL 3QTI2iG5qoz5XAOcUjFaZc9Y5Xeodd1OfKIUedqzbnHIDSe1MYsmpmzZlqAlDiRy TvmZSZpytXm3o3KDPqUHb473Fkcs+c1Na93UrrugsnbZXHR2OSMILiqjHdKi4gup NKE47JCTUmQMlW9Jj2CvNdl0USyQxs5qMbhljySCkQ0PXJ7SJAaYsCh5WyMRZtZY ri//HvEjlPmfeaG/1UuFCKaGAfpCaqgJ6VZXh2N85sYEpeZbOfj1/PN0qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDXVV5EgxVaOBum7CAEqOjSPW3jMB8GA1UdIwQY MBaAFO67TAtK9hXIWjzc3tS367ZmMRtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQt MThlODRlNzQ3ZDIyLzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQtMThlODRlNzQ3ZDIy LzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEort3cC2 sIpNRQTgWywoTEJgkIC0IWBRO3csQ8OqL/jaB2aKbkMYnrD7FinJX3qQsddYcYjT tYkrUaGeMej6HI3QFlJKRN5/JWkWLs8pZpahJ5NiSgY++sJCoeVQ1qJRwnZqG0yn 6uiithSNGF092h/hTTwvNdaGbfxTPI5nnsOIBIMVgrZxk5I1wYGUd7nKyemMHksx ohCAK3E6EMknB5PE5D5BiF0rHVv65cM/67ISOveYI8Lpsd40atoeu68ELAz+q9dx CI4sUpEVsuSBPImSv2EkOOeNYH8T0xtjTmOaYCO5tjRc+LbcCMf37IcDl8S1PrUj SkJGbJD3rsv83Q== -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:45 2025 by rpki-client