This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json) Hash identifier: 7ya6N3YZc2yTme3+sakbEY5rj+6+4oJbqw3pKuKhyaA= Subject key identifier: 22:2A:32:2B:C2:42:77:A1:E9:BE:B8:6E:AA:84:71:AD:74:6F:F1:6C Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Certificate serial: 019B3C10525EAF7A7B07A9A4B501EBF805E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft Manifest number: 158E Signing time: Sat 20 Dec 2025 14:01:01 +0000 Manifest this update: Sat 20 Dec 2025 14:01:01 +0000 Manifest next update: Sun 21 Dec 2025 14:01:01 +0000 Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=) 2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: s0XhlFo4KB4cyiPL27rWgwMqsdxpP8bbXi97tjKBOmI=) 3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=) 4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:52:5e:af:7a:7b:07:a9:a4:b5:01:eb:f8:05:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Validity Not Before: Dec 20 14:01:01 2025 GMT Not After : Dec 21 14:01:01 2025 GMT Subject: CN=222a322bc24277a1e9beb86eaa8471ad746ff16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:ce:e7:a6:50:ec:15:37:63:b6:58:50:7c: 97:a5:f2:48:16:49:62:3c:f6:18:8f:02:04:22:8b: e1:a3:bf:16:15:1c:2f:b5:2d:2c:ee:74:c4:12:07: d1:32:07:d0:10:2b:2e:bc:94:db:0d:9d:98:ac:10: 8c:6f:86:70:11:c8:bf:ed:82:b9:14:8c:9b:97:2a: 3b:7f:cb:2e:fa:f2:80:a9:a8:9d:99:0c:53:8c:01: 5f:1c:6d:4b:12:5e:90:77:f5:02:c5:2c:8b:7c:17: 94:eb:2e:47:76:54:86:e0:66:cf:45:27:3c:a9:31: 6c:0d:7a:19:ec:ab:29:bc:9f:68:4b:6c:a0:40:2e: be:eb:bd:21:17:d0:3f:03:4e:37:5c:6a:8c:39:d8: 7b:cf:e1:d9:43:f5:40:f9:79:01:b3:d2:8a:bb:d3: 8e:2a:56:6a:9f:ce:3c:b3:a7:e9:4c:ad:ca:44:35: 8b:98:a1:68:ed:76:50:8c:2a:07:e0:a6:db:e9:0f: 37:19:9c:03:32:20:59:b2:b5:07:f8:1a:b1:55:68: fe:ee:8a:e5:83:61:37:fa:4f:89:c4:20:e5:c0:c5: f3:c5:64:b6:53:83:fc:df:36:c8:bd:61:dc:64:f7: e7:b7:fe:a6:8f:23:2e:f4:6c:a5:c0:78:01:dd:7e: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:32:2B:C2:42:77:A1:E9:BE:B8:6E:AA:84:71:AD:74:6F:F1:6C X509v3 Authority Key Identifier: keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fe:ef:6c:61:a7:8e:ef:a7:e1:b5:2b:a6:38:39:7a:7f:f0: d8:7d:8f:75:53:72:d8:bb:e8:35:a2:e6:39:78:5b:ed:3c:f9: f2:4e:ea:95:56:70:66:b8:78:8c:e1:a9:60:d2:2d:52:4d:2b: 3e:33:1d:d2:08:ba:e6:f1:4d:8b:2c:78:33:5e:10:6c:f7:4c: 41:37:35:80:82:6c:97:60:10:26:bd:8d:50:b5:0e:28:c4:f6: 1e:d2:e1:96:34:ab:29:d4:bd:ef:9d:db:5a:70:e5:d2:98:bd: e1:65:a1:8f:3a:dd:7d:a9:e6:19:43:f7:c4:9d:69:bd:1f:20: 3f:5c:cb:42:7f:10:df:26:84:5f:c2:35:a6:49:33:43:c2:74: 7a:ec:da:0d:b6:2e:e6:af:5d:97:30:d6:5d:76:8d:62:ca:58: b3:e5:df:10:fb:33:e8:6a:22:9c:51:ab:54:7c:fd:3b:77:05: b9:ce:89:a1:1d:ac:41:42:6b:1e:4a:49:83:dc:06:83:a1:51: 28:3d:55:73:25:ff:e3:56:98:bf:37:69:c8:be:7e:96:7e:f4: 29:e4:60:29:26:ca:d6:f1:72:8d:2b:34:58:00:fc:61:d4:2f: ab:2e:ed:b9:0c:e0:70:73:ab:f9:6e:e2:46:48:b8:81:40:c2: bd:c3:99:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EFJer3p7B6mktQHr+AXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3 OWFkNzcwHhcNMjUxMjIwMTQwMTAxWhcNMjUxMjIxMTQwMTAxWjAzMTEwLwYDVQQD EygyMjJhMzIyYmMyNDI3N2ExZTliZWI4NmVhYTg0NzFhZDc0NmZmMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8nO56ZQ7BU3Y7ZYUHyXpfJIFkli PPYYjwIEIovho78WFRwvtS0s7nTEEgfRMgfQECsuvJTbDZ2YrBCMb4ZwEci/7YK5 FIyblyo7f8su+vKAqaidmQxTjAFfHG1LEl6Qd/UCxSyLfBeU6y5HdlSG4GbPRSc8 qTFsDXoZ7KspvJ9oS2ygQC6+670hF9A/A043XGqMOdh7z+HZQ/VA+XkBs9KKu9OO KlZqn848s6fpTK3KRDWLmKFo7XZQjCoH4Kbb6Q83GZwDMiBZsrUH+BqxVWj+7orl g2E3+k+JxCDlwMXzxWS2U4P83zbIvWHcZPfnt/6mjyMu9GylwHgB3X4hlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIqMivCQneh6b64bqqEca10b/FsMB8GA1UdIwQY MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4 LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP7vbGGn ju+n4bUrpjg5en/w2H2PdVNy2LvoNaLmOXhb7Tz58k7qlVZwZrh4jOGpYNItUk0r PjMd0gi65vFNiyx4M14QbPdMQTc1gIJsl2AQJr2NULUOKMT2HtLhljSrKdS9753b WnDl0pi94WWhjzrdfanmGUP3xJ1pvR8gP1zLQn8Q3yaEX8I1pkkzQ8J0euzaDbYu 5q9dlzDWXXaNYspYs+XfEPsz6GoinFGrVHz9O3cFuc6JoR2sQUJrHkpJg9wGg6FR KD1VcyX/41aYvzdpyL5+ln70KeRgKSbK1vFyjSs0WAD8YdQvqy7tuQzgcHOr+W7i Rki4gUDCvcOZlw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:45 2025 by rpki-client