This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json) Hash identifier: JopZFWng+SXw3/2vy9u89aFFChaaJvtRkbecGaDkms4= Subject key identifier: E2:37:64:FF:05:03:1D:6B:8C:E4:0E:D0:1F:CD:3C:DC:35:33:11:ED Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430 Certificate serial: 019B4ADF1E33A756CF4402F329BF49D9F9EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft Manifest number: 1720 Signing time: Tue 23 Dec 2025 11:01:34 +0000 Manifest this update: Tue 23 Dec 2025 11:01:34 +0000 Manifest next update: Wed 24 Dec 2025 11:01:34 +0000 Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: mTQBY5i8wh2wYHKQrIKNikEP7bXPe1Im42APcZJPHk0=) 2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:1e:33:a7:56:cf:44:02:f3:29:bf:49:d9:f9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430 Validity Not Before: Dec 23 11:01:34 2025 GMT Not After : Dec 24 11:01:34 2025 GMT Subject: CN=e23764ff05031d6b8ce40ed01fcd3cdc353311ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:e1:86:f3:63:d3:be:9b:ed:a0:03:69:58: 15:68:43:f7:34:50:58:7d:88:32:7e:04:70:76:d1: 19:a1:ee:b6:4b:62:2f:99:78:ce:62:9e:de:d2:80: 8f:fd:98:e0:60:69:f4:04:6a:6a:02:e8:7b:be:b2: 5f:e9:46:24:19:a9:f0:0d:98:bc:aa:1c:6b:77:96: 05:a5:ba:01:36:31:1f:57:a9:a2:40:65:d1:0a:37: b6:83:b5:e4:06:9c:25:56:79:7f:c6:19:f1:56:55: ee:0c:62:bb:98:fd:39:35:70:71:d2:0a:a5:4c:8a: 8f:5b:52:7b:15:ab:c4:8a:1b:cb:69:fa:c8:7e:19: aa:20:77:72:fb:60:04:bc:d0:67:98:13:84:3e:df: 5b:b8:d3:40:cb:f6:d4:53:4d:cc:c2:ac:e1:fc:54: d9:7a:ad:e0:f5:7d:ac:2a:94:88:92:ed:72:fe:52: 6a:3a:79:44:6e:a4:2b:ef:cc:74:11:18:74:3b:27: f2:38:9e:b0:2e:16:14:e2:d2:6c:53:74:6c:6b:eb: 2a:59:a1:9d:fe:32:e5:78:1b:6f:c1:0e:c9:aa:17: 67:ab:f9:78:bf:bf:89:52:27:9b:c3:bf:79:d2:04: 7e:56:31:b1:af:f7:87:37:0a:8d:37:cf:3b:89:bd: a0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:64:FF:05:03:1D:6B:8C:E4:0E:D0:1F:CD:3C:DC:35:33:11:ED X509v3 Authority Key Identifier: keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:73:50:b5:51:bb:73:e9:34:88:3a:1a:a4:05:c2:f4:21:00: 4a:da:10:17:40:a6:52:02:f7:19:3d:74:42:e1:cb:e4:1c:78: 0b:b9:f7:f4:b9:df:86:66:a5:f7:c7:d5:ef:5a:15:c7:e1:5b: 40:0b:43:02:dd:0a:ac:d5:e4:83:7d:70:66:0e:75:b2:de:58: 98:54:aa:e6:ef:7a:8c:51:b2:e0:90:df:0b:b2:3b:e3:18:9f: 99:61:b7:55:b9:54:84:9d:dd:81:c1:fa:f9:90:3a:f4:ec:fd: 75:55:ad:dc:95:01:30:79:08:39:97:aa:16:09:00:4a:53:9b: a8:08:da:7d:ca:e8:d2:35:d0:36:3f:cf:6b:0e:2b:27:51:bf: d6:9c:72:8d:43:d0:55:b4:67:f4:ac:7b:cb:4c:4c:c9:39:67: 03:6b:85:87:b8:91:03:de:4f:d6:3d:58:32:22:aa:59:56:25: 82:04:4d:59:89:8c:97:11:8b:9a:34:e8:fb:fe:66:7b:ac:40: 48:6e:d9:82:c8:41:21:d7:15:57:52:86:c0:e9:38:9b:13:df: 23:29:de:da:20:19:15:41:33:33:53:66:c5:89:d5:89:8a:e7: 0d:79:c0:1d:e0:7a:47:5b:d8:99:88:8b:40:ec:f8:83:dd:e8: e6:9f:60:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3x4zp1bPRALzKb9J2fnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw NmY0MzAwHhcNMjUxMjIzMTEwMTM0WhcNMjUxMjI0MTEwMTM0WjAzMTEwLwYDVQQD EyhlMjM3NjRmZjA1MDMxZDZiOGNlNDBlZDAxZmNkM2NkYzM1MzMxMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva/hhvNj076b7aADaVgVaEP3NFBY fYgyfgRwdtEZoe62S2IvmXjOYp7e0oCP/ZjgYGn0BGpqAuh7vrJf6UYkGanwDZi8 qhxrd5YFpboBNjEfV6miQGXRCje2g7XkBpwlVnl/xhnxVlXuDGK7mP05NXBx0gql TIqPW1J7FavEihvLafrIfhmqIHdy+2AEvNBnmBOEPt9buNNAy/bUU03Mwqzh/FTZ eq3g9X2sKpSIku1y/lJqOnlEbqQr78x0ERh0OyfyOJ6wLhYU4tJsU3Rsa+sqWaGd /jLleBtvwQ7Jqhdnq/l4v7+JUiebw7950gR+VjGxr/eHNwqNN887ib2gWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI3ZP8FAx1rjOQO0B/NPNw1MxHtMB8GA1UdIwQY MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0 LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHNQtVG7 c+k0iDoapAXC9CEAStoQF0CmUgL3GT10QuHL5Bx4C7n39Lnfhmal98fV71oVx+Fb QAtDAt0KrNXkg31wZg51st5YmFSq5u96jFGy4JDfC7I74xifmWG3VblUhJ3dgcH6 +ZA69Oz9dVWt3JUBMHkIOZeqFgkASlObqAjafcro0jXQNj/Paw4rJ1G/1pxyjUPQ VbRn9Kx7y0xMyTlnA2uFh7iRA95P1j1YMiKqWVYlggRNWYmMlxGLmjTo+/5me6xA SG7ZgshBIdcVV1KGwOk4mxPfIyne2iAZFUEzM1NmxYnViYrnDXnAHeB6R1vYmYiL QOz4g93o5p9gng== -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:25 2025 by rpki-client