This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json) Hash identifier: C8sEEIXUlFJH0tMc04C49Ek7o4S4aTpoYkEOVPV4Dfw= Subject key identifier: DC:30:8A:3D:A1:CD:54:A4:27:FD:AF:18:5C:98:07:9E:72:F7:4C:88 Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Certificate serial: 019B53ABBB7B5E1E58F44F94E8C07D4892E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 04:02:02 +0000 Manifest this update: Thu 25 Dec 2025 04:02:02 +0000 Manifest next update: Fri 26 Dec 2025 04:02:02 +0000 Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: 8U/FftWyPPW/+jBAmuTIEWjbcoFDT3LFuC8OAMIEt7g=) 2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:bb:7b:5e:1e:58:f4:4f:94:e8:c0:7d:48:92:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Validity Not Before: Dec 25 04:02:02 2025 GMT Not After : Dec 26 04:02:02 2025 GMT Subject: CN=dc308a3da1cd54a427fdaf185c98079e72f74c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:5a:31:2a:a0:66:2b:da:c3:f5:be:e5:e3: f6:4b:f3:0d:1c:1e:c4:cf:d9:2d:2b:6f:20:2d:1d: dd:99:c3:6f:e0:fb:88:54:2a:d3:60:9e:69:8c:8a: d2:d0:20:b6:12:a4:ae:8d:8d:49:3e:3f:51:fb:9e: 57:ee:5d:02:09:85:52:ed:88:e7:8b:02:f8:50:13: 43:5a:8d:27:59:90:92:d4:32:29:71:c0:c1:13:b3: f9:f9:2f:b2:b9:dc:25:b7:83:82:b3:7e:21:4f:ff: c3:a4:a4:f0:39:99:28:05:54:96:27:d8:b9:94:bb: c9:35:e5:fa:67:6c:95:97:00:60:31:b2:98:92:ba: cc:2d:52:9f:3a:99:e2:89:61:d8:7e:9c:03:f0:ec: 29:c1:b3:13:dd:32:d4:ce:7b:07:74:13:9e:63:d2: 62:b0:c6:03:df:4d:f2:a8:a7:7e:da:4b:5a:00:95: d1:a9:bf:36:b8:17:2b:d8:a9:3f:35:eb:ff:5b:b0: 70:64:e8:81:13:6d:d2:c3:89:22:fc:f0:3e:02:59: bf:84:1e:93:36:a8:49:47:02:2d:5e:71:fe:b5:2f: d2:61:6c:52:53:e0:53:31:4a:58:71:f0:fb:88:b0: ac:88:71:0f:02:89:c3:06:e2:95:06:8a:43:f9:6e: f2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:8A:3D:A1:CD:54:A4:27:FD:AF:18:5C:98:07:9E:72:F7:4C:88 X509v3 Authority Key Identifier: keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1c:39:9d:4e:9f:d1:58:06:b8:78:c2:50:fe:d0:73:c3:c9: 48:41:d7:d8:91:91:c4:4c:7b:56:6e:ca:e8:13:69:c7:a6:2a: 80:5a:cd:3e:89:61:01:7b:6a:33:84:5f:39:20:a1:b3:6b:1c: 5a:95:97:4d:62:d8:c9:94:60:7e:9d:3a:eb:f1:16:09:54:d2: 09:0d:dd:59:01:93:ab:05:ef:67:42:8f:42:e0:57:07:6e:a0: 7e:b3:eb:0a:e7:0a:7f:12:65:2a:c8:6e:f4:db:1d:52:65:a0: c4:4e:d9:76:58:03:33:da:5c:d2:5a:31:d9:52:ee:4c:f0:79: 6f:fe:e4:3a:27:8c:4d:58:68:5c:fe:d7:24:f8:81:6b:27:b6: 6a:4d:6c:2d:6f:b6:b7:95:ff:b1:13:7e:c4:87:84:78:00:6f: 52:60:3a:18:bf:bf:eb:42:21:a7:b5:ab:f9:40:71:23:83:67: 5e:e2:31:25:4a:b0:32:9e:0f:0c:dc:68:55:91:d4:bd:3d:c5: 7d:8c:59:ea:fd:a8:b5:3e:c9:08:af:da:fa:d0:ba:46:1e:93: 72:a2:5f:94:77:fa:95:94:a6:d6:4d:3f:e4:6b:20:81:76:9b: 1b:65:20:6e:75:73:f8:b0:c0:7e:15:c7:50:fd:5c:74:95:9e: c2:66:5a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq7t7Xh5Y9E+U6MB9SJLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTEzMTRlMDRlYzk2NzZmMmI2MDI0OGUxYjliZDAyZWYw MGUxNjgwHhcNMjUxMjI1MDQwMjAyWhcNMjUxMjI2MDQwMjAyWjAzMTEwLwYDVQQD EyhkYzMwOGEzZGExY2Q1NGE0MjdmZGFmMTg1Yzk4MDc5ZTcyZjc0Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6paMSqgZivaw/W+5eP2S/MNHB7E z9ktK28gLR3dmcNv4PuIVCrTYJ5pjIrS0CC2EqSujY1JPj9R+55X7l0CCYVS7Yjn iwL4UBNDWo0nWZCS1DIpccDBE7P5+S+yudwlt4OCs34hT//DpKTwOZkoBVSWJ9i5 lLvJNeX6Z2yVlwBgMbKYkrrMLVKfOpniiWHYfpwD8OwpwbMT3TLUznsHdBOeY9Ji sMYD303yqKd+2ktaAJXRqb82uBcr2Kk/Nev/W7BwZOiBE23Sw4ki/PA+Alm/hB6T NqhJRwItXnH+tS/SYWxSU+BTMUpYcfD7iLCsiHEPAonDBuKVBopD+W7y6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwwij2hzVSkJ/2vGFyYB55y90yIMB8GA1UdIwQY MBaAFOxRMU4E7JZ28rYCSOG5vQLvAOFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2It M2JiYmNhMzEwZDcxLzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2ItM2JiYmNhMzEwZDcx LzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBw5nU6f 0VgGuHjCUP7Qc8PJSEHX2JGRxEx7Vm7K6BNpx6YqgFrNPolhAXtqM4RfOSChs2sc WpWXTWLYyZRgfp066/EWCVTSCQ3dWQGTqwXvZ0KPQuBXB26gfrPrCucKfxJlKshu 9NsdUmWgxE7ZdlgDM9pc0lox2VLuTPB5b/7kOieMTVhoXP7XJPiBaye2ak1sLW+2 t5X/sRN+xIeEeABvUmA6GL+/60Ihp7Wr+UBxI4NnXuIxJUqwMp4PDNxoVZHUvT3F fYxZ6v2otT7JCK/a+tC6Rh6TcqJflHf6lZSm1k0/5GsggXabG2UgbnVz+LDAfhXH UP1cdJWewmZaaw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:56:06 2025 by rpki-client