This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json) Hash identifier: LRRuPw8lr0w6E+4blmtsFQ48Z1np85kfDC6kZPoplJE= Subject key identifier: 81:3F:58:7A:42:38:B7:05:80:B8:8F:65:EF:7E:D9:9A:B4:32:50:8D Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8 Certificate serial: 019B2E1DA781463BDF59DDB5A9F4FD2BE35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft Manifest number: 1713 Signing time: Wed 17 Dec 2025 21:00:53 +0000 Manifest this update: Wed 17 Dec 2025 21:00:53 +0000 Manifest next update: Thu 18 Dec 2025 21:00:53 +0000 Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: /kFNl3AkYr4pa/YDr4oAhcVK7EfKLMD7nZUQmeGjtb0=) 2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:a7:81:46:3b:df:59:dd:b5:a9:f4:fd:2b:e3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8 Validity Not Before: Dec 17 21:00:53 2025 GMT Not After : Dec 18 21:00:53 2025 GMT Subject: CN=813f587a4238b70580b88f65ef7ed99ab432508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:0f:43:6a:6f:d8:92:ec:9a:64:5e:c3:d2: 49:12:06:4e:b4:65:d4:56:e1:74:a1:bc:04:79:98: 54:78:90:ec:47:b0:ad:e9:35:31:87:5b:4a:c0:c8: b5:62:da:b2:53:a2:3b:74:fc:20:03:e2:8a:16:91: 30:b1:d8:31:4f:fe:37:d8:83:fb:3f:84:83:00:37: 77:40:17:47:19:96:b1:55:27:fb:35:3f:23:47:24: 79:a2:12:bf:02:8e:a2:47:0b:bf:58:b3:21:27:a1: f1:98:29:00:3a:d8:5f:08:d4:97:48:9b:d9:e4:77: 8a:3c:e7:2c:1b:a4:9b:bc:db:6c:4a:ba:42:2a:cf: 82:f6:37:39:37:36:67:e7:fb:42:22:56:a9:9d:cd: d0:c3:b3:31:35:2d:ed:de:f1:79:33:f1:10:3d:06: 3c:4f:b6:1c:5d:d0:47:e4:a5:3c:b7:09:79:bf:81: 81:87:0a:ea:04:64:c7:d9:ac:dd:11:9f:16:71:d7: b9:3f:5e:81:71:63:ea:20:5c:f8:b2:b4:b8:88:3a: c2:5c:97:54:04:d0:6d:77:71:b3:c8:4e:0a:be:65: af:5a:45:0b:67:5f:10:3f:31:8b:f2:dc:16:37:40: 9a:ac:94:70:2c:a3:a6:98:6d:e1:26:7c:e4:c2:67: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3F:58:7A:42:38:B7:05:80:B8:8F:65:EF:7E:D9:9A:B4:32:50:8D X509v3 Authority Key Identifier: keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ea:87:fd:bf:21:f9:51:1a:4a:91:80:7a:7f:a1:8c:7d:67: 8a:05:ac:af:da:61:a3:9b:20:2d:22:94:b3:37:13:fc:78:cd: ea:f8:2a:fa:c6:0b:a7:02:55:53:a4:de:b7:5a:5a:b7:50:22: d5:9a:7f:b2:2c:3e:5a:54:5f:d6:00:d2:6d:99:00:14:35:2b: e5:4b:49:8a:e8:5c:f2:ed:8f:1d:80:f0:20:cf:06:0e:aa:09: 69:4a:57:01:5f:3b:19:ba:95:1b:77:da:31:31:93:fe:cc:07: 96:b5:c0:4a:8b:49:16:44:12:41:4c:64:fd:2a:fb:81:0b:53: 02:d2:dd:7d:71:59:40:94:e9:f2:47:31:f5:89:8b:15:84:f7: d6:34:9f:9c:6b:4e:9f:b6:16:a3:4b:e6:07:ae:ae:75:74:83: 4b:f9:3b:23:97:b1:37:8c:64:db:6e:0f:87:bf:7f:5c:2c:47: 8d:b7:f7:2e:89:f9:f5:cc:ec:b5:c4:38:93:af:f1:e1:3a:3c: c0:53:93:0d:bc:93:b4:5b:85:17:af:42:ca:ec:ad:7f:ae:bb: af:51:5f:75:3a:38:86:20:06:0f:ee:7e:6a:ad:47:c2:38:ad: 83:c5:f3:2b:0e:78:7a:49:cf:38:0b:6d:76:ff:4f:a9:0c:49: d8:41:8b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHaeBRjvfWd21qfT9K+NeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj NDg1ZDgwHhcNMjUxMjE3MjEwMDUzWhcNMjUxMjE4MjEwMDUzWjAzMTEwLwYDVQQD Eyg4MTNmNTg3YTQyMzhiNzA1ODBiODhmNjVlZjdlZDk5YWI0MzI1MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz48PQ2pv2JLsmmRew9JJEgZOtGXU VuF0obwEeZhUeJDsR7Ct6TUxh1tKwMi1YtqyU6I7dPwgA+KKFpEwsdgxT/432IP7 P4SDADd3QBdHGZaxVSf7NT8jRyR5ohK/Ao6iRwu/WLMhJ6HxmCkAOthfCNSXSJvZ 5HeKPOcsG6SbvNtsSrpCKs+C9jc5NzZn5/tCIlapnc3Qw7MxNS3t3vF5M/EQPQY8 T7YcXdBH5KU8twl5v4GBhwrqBGTH2azdEZ8Wcde5P16BcWPqIFz4srS4iDrCXJdU BNBtd3GzyE4KvmWvWkULZ18QPzGL8twWN0CarJRwLKOmmG3hJnzkwmdbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE/WHpCOLcFgLiPZe9+2Zq0MlCNMB8GA1UdIwQY MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5 LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOqH/b8h +VEaSpGAen+hjH1nigWsr9pho5sgLSKUszcT/HjN6vgq+sYLpwJVU6Tet1pat1Ai 1Zp/siw+WlRf1gDSbZkAFDUr5UtJiuhc8u2PHYDwIM8GDqoJaUpXAV87GbqVG3fa MTGT/swHlrXASotJFkQSQUxk/Sr7gQtTAtLdfXFZQJTp8kcx9YmLFYT31jSfnGtO n7YWo0vmB66udXSDS/k7I5exN4xk224Ph79/XCxHjbf3Lon59czstcQ4k6/x4To8 wFOTDbyTtFuFF69Cyuytf667r1FfdTo4hiAGD+5+aq1Hwjitg8XzKw54eknPOAtt dv9PqQxJ2EGLFg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:58:39 2025 by rpki-client