This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json) Hash identifier: VCgsYvtpYr61PEUATkb3qEG3LUxJNwAS4XWZWRgJmfY= Subject key identifier: 2C:61:D6:93:C8:D4:DE:F2:E1:48:DE:B4:3E:F6:94:BF:F6:BA:D7:C9 Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50 Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250 Certificate serial: 019B6BE97B829362285815AA34B309AD0C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft Manifest number: 1138 Signing time: Mon 29 Dec 2025 21:00:22 +0000 Manifest this update: Mon 29 Dec 2025 21:00:22 +0000 Manifest next update: Tue 30 Dec 2025 21:00:22 +0000 Files and hashes: 1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: ofmlSEdwVj0lW6CSmiwVzbLtV3nSvxw36VaMgZtWwQY=) 2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:7b:82:93:62:28:58:15:aa:34:b3:09:ad:0c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250 Validity Not Before: Dec 29 21:00:22 2025 GMT Not After : Dec 30 21:00:22 2025 GMT Subject: CN=2c61d693c8d4def2e148deb43ef694bff6bad7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:88:b9:7d:ea:32:59:65:db:03:8d:94:f4:d7: db:ad:f7:c3:82:38:8d:1a:5e:97:c2:21:83:7b:a4: 7e:0b:b1:35:29:ab:00:01:98:97:10:5b:f0:56:31: b0:82:c5:2e:ee:fa:9f:86:a5:30:36:65:d3:c7:19: 7d:a8:3a:3b:4e:72:3a:19:e5:c1:59:e5:67:1d:23: e0:6a:88:88:ac:96:61:58:26:d0:c9:67:5a:42:cf: 89:70:54:1b:05:7d:3c:be:1c:37:ce:c5:57:bf:7b: bd:9f:07:85:d4:b6:d1:29:b4:53:6d:5b:45:aa:3a: 42:27:31:b8:e6:3f:c3:e9:06:ce:3f:52:1e:69:21: 92:25:64:1e:2a:66:c4:01:7d:7d:99:0b:4d:02:dc: d2:70:7b:5e:bf:b7:c0:49:d2:2e:17:58:2c:47:f1: b6:dc:ce:ea:56:11:b3:2d:4f:a6:2d:eb:31:7e:91: 8b:55:f0:11:26:80:86:04:ba:ca:5b:f6:80:e9:cc: 82:ff:f4:99:e5:c6:ff:cd:13:9e:51:ec:e1:af:c8: 22:00:8a:2d:fa:65:ab:ae:55:e8:81:c4:5f:eb:f8: 19:17:df:4e:b1:35:73:42:5b:a4:b1:4b:96:ba:5f: 8c:76:ab:d1:4c:ba:bf:9d:7e:42:fb:6e:5e:be:00: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:D6:93:C8:D4:DE:F2:E1:48:DE:B4:3E:F6:94:BF:F6:BA:D7:C9 X509v3 Authority Key Identifier: keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:da:b8:07:78:ec:98:42:44:b8:83:2d:e4:f3:6f:f2:2e:02: 7f:3a:4e:a5:bc:6e:2d:a2:9d:53:3c:06:c8:a8:f1:f2:16:23: 69:a2:37:48:0d:c6:9e:89:79:d2:07:f1:93:ed:35:70:59:a3: e5:ff:89:1d:62:ec:3f:ff:13:ba:1b:e6:aa:5e:8c:be:42:dd: a8:57:aa:65:99:e2:33:a3:4d:8a:e1:18:3d:b9:a0:02:c6:dc: a6:46:59:8b:b8:ba:e6:b2:9e:c9:f5:97:75:75:28:f5:94:42: 6a:c3:68:85:2c:0e:26:71:5d:3d:b6:31:56:95:69:64:c0:3b: 51:cf:4f:b8:87:00:3a:dd:91:2d:3d:f6:9c:38:f6:db:99:16: 5a:f5:bb:c4:c4:b1:fe:e6:16:de:52:f8:7f:d4:ed:40:bd:0a: 26:88:3b:74:3f:8c:be:d4:24:09:3d:0f:61:fd:0c:61:da:24: 1c:78:9e:d8:0b:e3:9e:04:ea:d5:d9:9e:95:d1:49:a5:d7:cc: fe:2c:99:0b:58:7a:23:76:7c:de:2a:65:8b:c2:35:22:ef:1d: 97:a8:2a:95:af:8f:a4:e9:2a:81:61:2c:a2:f4:f3:48:18:72: d2:a9:a0:2b:cf:da:d5:54:2b:9c:2a:56:76:ba:f4:ba:a9:71: 6c:6c:48:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6XuCk2IoWBWqNLMJrQw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTVlZDQ1N2Y3NDM4MmE4ZWQwYjdhZjY4NmUxYWRiMjkz NTIyNTAwHhcNMjUxMjI5MjEwMDIyWhcNMjUxMjMwMjEwMDIyWjAzMTEwLwYDVQQD EygyYzYxZDY5M2M4ZDRkZWYyZTE0OGRlYjQzZWY2OTRiZmY2YmFkN2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oi5feoyWWXbA42U9NfbrffDgjiN Gl6XwiGDe6R+C7E1KasAAZiXEFvwVjGwgsUu7vqfhqUwNmXTxxl9qDo7TnI6GeXB WeVnHSPgaoiIrJZhWCbQyWdaQs+JcFQbBX08vhw3zsVXv3u9nweF1LbRKbRTbVtF qjpCJzG45j/D6QbOP1IeaSGSJWQeKmbEAX19mQtNAtzScHtev7fASdIuF1gsR/G2 3M7qVhGzLU+mLesxfpGLVfARJoCGBLrKW/aA6cyC//SZ5cb/zROeUezhr8giAIot +mWrrlXogcRf6/gZF99OsTVzQluksUuWul+MdqvRTLq/nX5C+25evgCXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxh1pPI1N7y4UjetD72lL/2utfJMB8GA1UdIwQY MBaAFO3l7UV/dDgqjtC3r2huGtspNSJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMt NWE1ODM4ODAwMjhhLzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMtNWE1ODM4ODAwMjhh LzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdq4B3js mEJEuIMt5PNv8i4CfzpOpbxuLaKdUzwGyKjx8hYjaaI3SA3Gnol50gfxk+01cFmj 5f+JHWLsP/8Tuhvmql6MvkLdqFeqZZniM6NNiuEYPbmgAsbcpkZZi7i65rKeyfWX dXUo9ZRCasNohSwOJnFdPbYxVpVpZMA7Uc9PuIcAOt2RLT32nDj225kWWvW7xMSx /uYW3lL4f9TtQL0KJog7dD+MvtQkCT0PYf0MYdokHHie2AvjngTq1dmeldFJpdfM /iyZC1h6I3Z83ipli8I1Iu8dl6gqla+PpOkqgWEsovTzSBhy0qmgK8/a1VQrnCpW drr0uqlxbGxIyQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:53:45 2025 by rpki-client