This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json) Hash identifier: BH/tnPfNOQMXlToW43ldbL9S7iREK1s0AltLy02Tc8U= Subject key identifier: EF:37:AF:CF:B1:86:2F:EC:B7:7E:4E:89:28:6C:98:5C:18:7F:02:0E Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0 Certificate serial: 019B42B7568E315E4A36098D9D6B72AC98D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:01:10 +0000 Manifest this update: Sun 21 Dec 2025 21:01:10 +0000 Manifest next update: Mon 22 Dec 2025 21:01:10 +0000 Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: l2QFZNEKoouSc3lAEBWKS8Dd/vA5Q47+7TRu2pL+mDo=) 2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:56:8e:31:5e:4a:36:09:8d:9d:6b:72:ac:98:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0 Validity Not Before: Dec 21 21:01:10 2025 GMT Not After : Dec 22 21:01:10 2025 GMT Subject: CN=ef37afcfb1862fecb77e4e89286c985c187f020e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:d3:f7:4f:c2:1a:52:63:3a:0e:13:16:55: 43:e4:26:ef:ee:08:9c:8c:de:e4:ae:6f:f5:63:db: 2f:9f:98:17:69:58:0e:d3:50:5b:0f:ac:38:b8:fb: ca:b7:5e:60:9f:9b:fc:41:8d:2f:75:e1:04:36:a6: 97:bc:ce:94:52:d0:75:ce:b6:67:b5:d4:ce:0e:94: 48:8e:07:76:d2:40:60:cc:97:52:72:80:1b:35:88: 04:2b:6b:df:70:59:82:04:ef:bf:26:8d:85:ab:8c: dc:d8:67:f2:90:5a:58:1b:a2:ba:a0:d1:52:fb:ef: 6a:0f:a8:7e:cc:06:b1:fe:01:ef:1a:ff:da:39:e3: 21:8a:0e:2a:38:48:3f:6b:b9:71:fd:95:a9:35:1f: 82:df:6c:e3:b3:96:4b:39:c1:24:4b:7e:77:f7:ed: de:4a:7c:3f:30:21:99:0f:2a:fb:22:77:b6:2c:1b: 1e:0a:79:f4:23:52:18:5f:c3:9c:b5:2b:98:b5:42: 62:3e:e2:4b:b3:72:15:2d:0c:78:43:07:82:96:35: d7:5e:4b:ad:fc:6b:c7:65:6e:5f:c7:e3:ae:82:d9: 02:ac:9e:19:15:00:ea:7a:27:90:a2:e0:c9:f7:ad: d2:a4:a5:b0:5b:b4:f9:16:c0:f5:2e:88:63:dd:56: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:37:AF:CF:B1:86:2F:EC:B7:7E:4E:89:28:6C:98:5C:18:7F:02:0E X509v3 Authority Key Identifier: keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6c:a4:02:8c:eb:06:ea:d3:39:d2:54:1a:85:98:72:73:69: bf:46:19:e3:59:90:50:0f:97:c5:0c:ed:88:69:8c:d1:80:e9: 1d:e7:e5:de:c9:f8:86:5a:f4:38:d4:70:1e:30:56:c2:37:5a: c5:07:e7:88:1f:b7:1c:3b:e2:c7:c5:3f:01:5a:7e:17:07:3a: 29:92:82:27:b5:af:80:e5:2f:4f:77:74:08:c7:4c:95:bc:d0: 44:18:22:6e:9f:c5:3d:f0:b9:f7:3a:49:5a:b2:1d:da:05:c2: a6:b7:8a:72:92:d9:04:ee:c3:c9:72:b6:27:61:13:7d:fc:f2: 60:bd:4c:f3:07:0d:80:c2:90:77:d7:3c:78:0c:09:3c:34:12: d6:ce:52:65:81:f8:d4:54:92:10:c3:d2:8e:71:d0:5c:dd:a7: 30:5a:e8:fc:18:0f:a3:cf:f0:cc:96:60:51:39:bf:0a:4d:a9: e0:6b:38:b8:35:8e:18:30:87:f6:32:e7:0d:af:43:32:98:f7: af:04:93:c5:b8:3f:dd:25:57:94:61:8a:b2:9d:d5:5a:3e:17: 0e:87:3d:fe:5d:87:78:1f:be:00:eb:9f:10:63:a0:cc:c6:26: 71:ad:2e:d5:95:1c:75:5b:6b:ac:87:ee:83:15:37:0b:5d:5f: b2:2c:08:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1aOMV5KNgmNnWtyrJjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz NzU4YzAwHhcNMjUxMjIxMjEwMTEwWhcNMjUxMjIyMjEwMTEwWjAzMTEwLwYDVQQD EyhlZjM3YWZjZmIxODYyZmVjYjc3ZTRlODkyODZjOTg1YzE4N2YwMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHzT90/CGlJjOg4TFlVD5Cbv7gic jN7krm/1Y9svn5gXaVgO01BbD6w4uPvKt15gn5v8QY0vdeEENqaXvM6UUtB1zrZn tdTODpRIjgd20kBgzJdScoAbNYgEK2vfcFmCBO+/Jo2Fq4zc2GfykFpYG6K6oNFS ++9qD6h+zAax/gHvGv/aOeMhig4qOEg/a7lx/ZWpNR+C32zjs5ZLOcEkS3539+3e Snw/MCGZDyr7Ine2LBseCnn0I1IYX8OctSuYtUJiPuJLs3IVLQx4QweCljXXXkut /GvHZW5fx+OugtkCrJ4ZFQDqeieQouDJ963SpKWwW7T5FsD1Lohj3VZ/+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO83r8+xhi/st35OiShsmFwYfwIOMB8GA1UdIwQY MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmykAozr BurTOdJUGoWYcnNpv0YZ41mQUA+XxQztiGmM0YDpHefl3sn4hlr0ONRwHjBWwjda xQfniB+3HDvix8U/AVp+Fwc6KZKCJ7WvgOUvT3d0CMdMlbzQRBgibp/FPfC59zpJ WrId2gXCpreKcpLZBO7DyXK2J2ETffzyYL1M8wcNgMKQd9c8eAwJPDQS1s5SZYH4 1FSSEMPSjnHQXN2nMFro/BgPo8/wzJZgUTm/Ck2p4Gs4uDWOGDCH9jLnDa9DMpj3 rwSTxbg/3SVXlGGKsp3VWj4XDoc9/l2HeB++AOufEGOgzMYmca0u1ZUcdVtrrIfu gxU3C11fsiwILg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:47 2025 by rpki-client