This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json) Hash identifier: kR3ucU3FsaC63Aoza4Gt0bxUJASU6Ha3vAVZfjTTqB8= Subject key identifier: A0:BC:1D:8E:57:41:00:5B:BB:1E:61:13:6B:C0:9C:2E:D4:6F:DD:92 Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90 Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190 Certificate serial: 019B3532E1727827337023780CBB31216F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 06:01:25 +0000 Manifest this update: Fri 19 Dec 2025 06:01:25 +0000 Manifest next update: Sat 20 Dec 2025 06:01:25 +0000 Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: kgN685jIFNGmfbinjKeBLh0qT5phJeJzrzwA+0I4hP0=) 2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e1:72:78:27:33:70:23:78:0c:bb:31:21:6f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190 Validity Not Before: Dec 19 06:01:25 2025 GMT Not After : Dec 20 06:01:25 2025 GMT Subject: CN=a0bc1d8e5741005bbb1e61136bc09c2ed46fdd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:55:ec:5a:fc:c0:30:98:96:4a:16:5d:87: 26:59:1e:b3:24:f6:ff:78:a4:2f:9f:77:88:b9:9f: b2:64:18:42:29:4b:9e:f8:05:0e:cb:58:17:9a:81: 73:3d:53:46:6b:98:32:6b:65:5a:cb:1d:45:60:11: 60:73:f4:3a:3c:0c:8b:1a:48:cb:d9:ff:00:bf:49: 03:34:f8:38:02:6c:e0:85:7d:7c:76:dc:6e:64:92: 8c:24:a1:d2:dc:f3:d8:72:74:d3:58:04:bb:2e:ff: 10:b3:b4:d2:12:dc:bf:8a:40:11:ec:99:1d:26:a8: 73:ce:b3:84:04:60:84:da:11:2c:1e:2d:fb:9b:7e: 55:4b:ee:6d:e8:7c:08:bf:dc:5f:35:84:3e:58:b0: 28:53:a5:4f:d2:7f:c4:2b:5c:51:e8:ad:6c:e5:fb: 63:ac:8c:86:fd:77:5a:36:12:00:c1:b3:96:80:b5: c9:93:f2:5a:fc:27:61:db:03:e3:88:91:8f:28:9a: f0:bc:8a:88:25:f1:51:da:57:36:ed:26:e2:30:9b: 16:80:45:4d:69:0f:77:fb:fb:d9:8e:29:2e:8e:35: 69:0e:67:da:15:db:45:65:bc:05:94:d0:26:6a:ea: ba:fa:25:63:ff:38:52:78:63:14:38:04:18:ed:d0: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BC:1D:8E:57:41:00:5B:BB:1E:61:13:6B:C0:9C:2E:D4:6F:DD:92 X509v3 Authority Key Identifier: keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:11:88:b8:8e:c2:46:37:4e:7e:5c:f1:ae:1d:bd:34:44:33: 9c:42:22:cc:c9:22:34:3d:62:cf:4a:ba:1b:07:a8:a5:ac:a6: c3:5b:af:4f:04:7b:3e:bb:b1:36:98:35:28:b0:0e:41:5f:54: 17:82:b2:d0:1c:60:4b:a0:7b:29:1c:d9:a5:a2:ef:a6:e6:2e: 1d:41:c2:13:42:f5:da:9b:60:ee:2f:d4:11:40:28:73:6d:4c: 36:94:73:14:e4:85:4e:f4:a2:ae:e8:06:77:77:c6:2b:99:45: 46:e4:c1:0c:e7:5a:e0:31:29:03:5c:6f:d9:df:5f:d3:70:17: 9d:6c:65:bf:17:c1:f2:b7:b0:4d:94:80:0c:1e:33:c2:94:79: a3:f3:ec:a9:64:10:4c:a2:06:98:46:01:46:0d:75:cd:e0:7a: c4:3e:ae:a3:ca:27:92:50:21:ab:89:29:9a:8e:5e:07:a8:15: 75:31:93:65:31:cb:34:c9:45:94:bc:ad:ef:96:75:68:0d:ed: 11:91:30:b8:42:ec:f6:b2:14:d6:62:8a:16:74:65:4f:ba:5f: fd:04:02:d9:ee:06:0b:c6:08:ed:39:00:c5:21:99:2c:b0:66: 64:23:0e:a6:f4:72:19:26:28:b5:5c:ad:5c:3f:df:fb:4b:a9: 24:9c:7b:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuFyeCczcCN4DLsxIW9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm ZmYxOTAwHhcNMjUxMjE5MDYwMTI1WhcNMjUxMjIwMDYwMTI1WjAzMTEwLwYDVQQD EyhhMGJjMWQ4ZTU3NDEwMDViYmIxZTYxMTM2YmMwOWMyZWQ0NmZkZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjpV7Fr8wDCYlkoWXYcmWR6zJPb/ eKQvn3eIuZ+yZBhCKUue+AUOy1gXmoFzPVNGa5gya2Vayx1FYBFgc/Q6PAyLGkjL 2f8Av0kDNPg4AmzghX18dtxuZJKMJKHS3PPYcnTTWAS7Lv8Qs7TSEty/ikAR7Jkd JqhzzrOEBGCE2hEsHi37m35VS+5t6HwIv9xfNYQ+WLAoU6VP0n/EK1xR6K1s5ftj rIyG/XdaNhIAwbOWgLXJk/Ja/Cdh2wPjiJGPKJrwvIqIJfFR2lc27SbiMJsWgEVN aQ93+/vZjikujjVpDmfaFdtFZbwFlNAmauq6+iVj/zhSeGMUOAQY7dDC1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC8HY5XQQBbux5hE2vAnC7Ub92SMB8GA1UdIwQY MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1 LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhGIuI7C RjdOflzxrh29NEQznEIizMkiND1iz0q6Gweopaymw1uvTwR7PruxNpg1KLAOQV9U F4Ky0BxgS6B7KRzZpaLvpuYuHUHCE0L12ptg7i/UEUAoc21MNpRzFOSFTvSirugG d3fGK5lFRuTBDOda4DEpA1xv2d9f03AXnWxlvxfB8rewTZSADB4zwpR5o/PsqWQQ TKIGmEYBRg11zeB6xD6uo8onklAhq4kpmo5eB6gVdTGTZTHLNMlFlLyt75Z1aA3t EZEwuELs9rIU1mKKFnRlT7pf/QQC2e4GC8YI7TkAxSGZLLBmZCMOpvRyGSYotVyt XD/f+0upJJx7Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:43:31 2025 by rpki-client