This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json) Hash identifier: bzGr740q8AkBB0Y5d48p3cDAw3/4amhnsQx4jIN69GY= Subject key identifier: 4B:BD:09:03:C2:84:F3:98:63:EB:31:6B:50:5C:6C:29:52:D6:24:95 Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69 Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69 Certificate serial: 019B529845A85DAC7434825D88695BCEEDD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft Manifest number: 06F0 Signing time: Wed 24 Dec 2025 23:01:09 +0000 Manifest this update: Wed 24 Dec 2025 23:01:09 +0000 Manifest next update: Thu 25 Dec 2025 23:01:09 +0000 Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: uRiCZiM9uz3OX7apqJu9aVkIfS0hTyi/41o5NH30Ygc=) 2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:45:a8:5d:ac:74:34:82:5d:88:69:5b:ce:ed:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69 Validity Not Before: Dec 24 23:01:09 2025 GMT Not After : Dec 25 23:01:09 2025 GMT Subject: CN=4bbd0903c284f39863eb316b505c6c2952d62495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:f0:85:a1:5b:ff:be:c2:10:0a:a7:68:d8: b9:5e:8c:82:4d:0e:b5:6a:a8:6c:57:19:26:da:4c: e9:a9:0a:87:0d:02:3a:b5:da:93:95:64:05:76:fd: 26:50:1d:46:0f:4d:7d:c0:23:be:59:66:74:56:c9: 98:61:26:03:53:82:97:c7:b2:38:e4:d9:79:6e:52: 65:2b:a3:b1:80:2e:91:45:c7:0d:d6:f5:3a:6f:26: 2d:19:68:08:e7:80:4c:94:aa:f2:29:32:84:e1:07: af:a0:f0:85:49:00:9d:a5:27:97:f1:3a:57:80:6d: 7c:66:11:68:31:dc:b8:4c:eb:e9:be:7c:50:15:31: 99:c3:18:62:4b:6b:43:0e:1e:c3:b8:e8:09:0f:3e: 9d:6e:62:1c:43:56:88:98:72:7b:70:20:80:91:5d: b9:ba:7e:39:2e:d2:fc:00:a4:9a:41:d4:1c:b0:98: 70:71:bd:fa:7a:1d:93:f7:e3:c3:ce:d6:15:58:11: 7f:d6:10:7e:54:ea:38:8b:e1:3b:77:29:04:a7:4e: d9:b2:36:0e:fa:1a:c3:f6:5a:cd:bb:48:fb:71:c1: 39:7e:35:70:9b:87:9c:24:dc:59:92:f3:c6:c0:b1: 27:b5:4c:75:63:44:22:db:41:8a:13:45:e5:eb:3d: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:09:03:C2:84:F3:98:63:EB:31:6B:50:5C:6C:29:52:D6:24:95 X509v3 Authority Key Identifier: keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:dc:a0:e7:74:1c:c7:9d:f0:b0:b4:01:bb:18:0d:50:96:1f: 85:87:12:71:75:6c:d1:56:70:d2:3a:3c:8b:7b:f1:81:3c:ef: 5a:66:52:27:ee:c9:0b:50:5f:b7:00:db:c6:33:30:6a:bf:4c: 53:e3:b3:eb:b2:66:b1:fc:98:f7:ae:9e:29:17:02:b2:dc:d8: 76:4f:ef:a6:07:8c:8c:a1:8b:8f:79:fd:61:33:14:87:49:54: 40:a0:c1:e3:7a:57:f3:86:f3:64:8c:ed:70:4f:bf:2f:65:16: 0f:42:1f:b8:0c:9f:24:8b:a5:db:d7:8e:8a:13:7d:86:fd:96: 49:92:b8:43:70:a5:be:ed:50:50:26:3c:7a:55:23:b1:0d:12: 63:56:ba:4c:7a:ca:09:e6:61:c0:07:f0:3b:24:96:0f:c2:b5: dc:cd:91:a4:a5:8a:6a:20:f4:a8:87:c7:56:10:c4:11:7c:9c: 52:58:cd:14:22:2b:66:19:0d:81:60:3a:4e:24:6e:d3:e3:2c: d1:09:0b:a8:0f:59:06:8e:f9:d9:e6:c1:67:55:15:89:4a:cc: f8:5f:28:90:6b:45:86:39:d7:57:28:50:52:90:30:2b:a2:3f: 56:e1:38:3a:de:22:27:ec:35:fb:9a:aa:80:2d:98:2a:c2:65: 42:57:7e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEWoXax0NIJdiGlbzu3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy MzRlNjkwHhcNMjUxMjI0MjMwMTA5WhcNMjUxMjI1MjMwMTA5WjAzMTEwLwYDVQQD Eyg0YmJkMDkwM2MyODRmMzk4NjNlYjMxNmI1MDVjNmMyOTUyZDYyNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvnwhaFb/77CEAqnaNi5XoyCTQ61 aqhsVxkm2kzpqQqHDQI6tdqTlWQFdv0mUB1GD019wCO+WWZ0VsmYYSYDU4KXx7I4 5Nl5blJlK6OxgC6RRccN1vU6byYtGWgI54BMlKryKTKE4QevoPCFSQCdpSeX8TpX gG18ZhFoMdy4TOvpvnxQFTGZwxhiS2tDDh7DuOgJDz6dbmIcQ1aImHJ7cCCAkV25 un45LtL8AKSaQdQcsJhwcb36eh2T9+PDztYVWBF/1hB+VOo4i+E7dykEp07ZsjYO +hrD9lrNu0j7ccE5fjVwm4ecJNxZkvPGwLEntUx1Y0Qi20GKE0Xl6z0VoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu9CQPChPOYY+sxa1BcbClS1iSVMB8GA1UdIwQY MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt MDVjMDY3OTZlOTM4LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4 LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9yg53Qc x53wsLQBuxgNUJYfhYcScXVs0VZw0jo8i3vxgTzvWmZSJ+7JC1BftwDbxjMwar9M U+Oz67JmsfyY966eKRcCstzYdk/vpgeMjKGLj3n9YTMUh0lUQKDB43pX84bzZIzt cE+/L2UWD0IfuAyfJIul29eOihN9hv2WSZK4Q3Clvu1QUCY8elUjsQ0SY1a6THrK CeZhwAfwOySWD8K13M2RpKWKaiD0qIfHVhDEEXycUljNFCIrZhkNgWA6TiRu0+Ms 0QkLqA9ZBo752ebBZ1UViUrM+F8okGtFhjnXVyhQUpAwK6I/VuE4Ot4iJ+w1+5qq gC2YKsJlQld+KA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:16 2025 by rpki-client