This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json) Hash identifier: 1dMqIc0usiMq/raBWQJL83wPzB1+dElkZ9qRbjJmtN0= Subject key identifier: A3:E5:D8:1A:4F:6E:DD:A7:C3:CB:18:15:F0:CF:0F:66:63:F7:B4:4A Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d Certificate serial: 019B42B79BAB0DD9BCF270E79B184D9D2C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:01:27 +0000 Manifest this update: Sun 21 Dec 2025 21:01:27 +0000 Manifest next update: Mon 22 Dec 2025 21:01:27 +0000 Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=) 2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: lpt83yArikK1yo/KuPQCGZyPjYxhA7vs6RIoqwfDxaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:9b:ab:0d:d9:bc:f2:70:e7:9b:18:4d:9d:2c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d Validity Not Before: Dec 21 21:01:27 2025 GMT Not After : Dec 22 21:01:27 2025 GMT Subject: CN=a3e5d81a4f6edda7c3cb1815f0cf0f6663f7b44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:00:e5:14:a7:cb:e1:bf:66:c4:68:2b:e8: 1e:59:66:30:e3:da:fa:83:4b:9e:16:88:e0:fb:ff: 7c:e6:69:4c:3b:6d:03:d9:c0:9e:e7:ae:cf:08:bb: 0c:67:96:97:46:fd:70:ad:54:38:7d:1c:f6:a6:b3: 11:83:4c:e0:36:07:e4:3c:78:32:29:80:1d:1b:7d: 0f:e7:16:fa:b6:c2:09:e8:3e:06:1c:2c:40:c2:71: a4:ac:71:0c:ec:a7:b3:89:13:b8:9e:7f:67:65:e6: 0f:d2:2a:74:0d:77:ca:4b:c7:ce:82:4e:08:82:45: c3:59:4c:c4:00:a0:b8:85:15:98:53:b1:7f:aa:f8: 7e:55:e5:5a:2e:6e:c8:28:d1:8a:f5:2a:8b:ec:29: 0d:3a:b0:3b:7f:88:51:97:31:6d:ee:fd:98:e3:7b: 48:b3:72:47:a6:f6:bd:03:02:b3:ac:fb:9d:7d:db: 5f:2a:a7:f5:29:f7:fe:00:6f:3d:24:4a:ce:d3:b7: 8a:95:5d:79:e8:39:e6:ec:6f:b0:f8:08:a2:10:a1: 4a:b0:06:1d:21:34:fb:50:3a:1b:ea:03:75:8c:d1: 2d:2d:28:a1:c0:80:7c:7b:62:cd:e9:79:21:6d:1a: c7:15:ad:f4:e3:59:5f:d4:16:90:75:7d:47:1d:80: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:D8:1A:4F:6E:DD:A7:C3:CB:18:15:F0:CF:0F:66:63:F7:B4:4A X509v3 Authority Key Identifier: keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:be:c9:67:eb:a2:4d:a8:d6:58:38:f3:60:60:d7:25:ec:c4: df:1c:1a:16:07:c1:4b:72:b9:2f:59:b8:5d:cd:50:b0:80:d9: be:2e:d9:b3:05:cf:23:cd:3f:2c:79:23:a2:0d:09:e3:3f:a4: 0b:b2:2e:0c:06:35:3b:4b:31:67:44:08:de:f1:1f:63:c8:ca: 63:2a:ca:7a:fe:af:c7:10:cc:db:cc:90:d3:b5:67:e1:d3:db: 9c:b2:68:a4:ae:60:b1:62:1f:58:f7:6b:72:c1:be:4d:1b:08: 4e:86:9a:99:d0:b8:67:2a:e8:ed:2f:cf:16:4d:c2:11:67:43: f2:67:46:61:59:39:28:d8:4c:89:5c:07:f7:79:ca:72:82:f3: 6c:ed:15:2a:18:99:86:4a:42:16:54:99:0a:a6:b7:0b:39:9b: a6:1d:81:8b:61:a0:16:ae:ce:8c:46:30:6b:59:80:24:bf:1b: 29:b7:c5:d5:ef:04:e7:05:8f:f2:24:ad:e1:f2:a4:e6:ce:fd: 81:49:09:25:75:bb:3c:4b:ff:dd:99:3f:df:ac:f1:75:82:87: 01:87:6f:57:b3:b6:0c:ba:45:72:48:7b:17:c1:3b:03:39:87: 33:90:da:a1:d1:c3:c1:b3:d5:d2:17:80:86:d6:be:74:e7:86: 36:40:8c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt5urDdm88nDnmxhNnSxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmJhOWQ3Yjg2NjEyZDRmODdjZjE2MTcxZmY4MmIyYjQ0 MTM2NGQwHhcNMjUxMjIxMjEwMTI3WhcNMjUxMjIyMjEwMTI3WjAzMTEwLwYDVQQD EyhhM2U1ZDgxYTRmNmVkZGE3YzNjYjE4MTVmMGNmMGY2NjYzZjdiNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonsA5RSny+G/ZsRoK+geWWYw49r6 g0ueFojg+/985mlMO20D2cCe567PCLsMZ5aXRv1wrVQ4fRz2prMRg0zgNgfkPHgy KYAdG30P5xb6tsIJ6D4GHCxAwnGkrHEM7KeziRO4nn9nZeYP0ip0DXfKS8fOgk4I gkXDWUzEAKC4hRWYU7F/qvh+VeVaLm7IKNGK9SqL7CkNOrA7f4hRlzFt7v2Y43tI s3JHpva9AwKzrPudfdtfKqf1Kff+AG89JErO07eKlV156Dnm7G+w+AiiEKFKsAYd ITT7UDob6gN1jNEtLSihwIB8e2LN6XkhbRrHFa3041lf1BaQdX1HHYBrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPl2BpPbt2nw8sYFfDPD2Zj97RKMB8GA1UdIwQY MBaAFP+7qde4ZhLU+HzxYXH/grK0QTZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUt NjhlODEzNDIwYWU2LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUtNjhlODEzNDIwYWU2 LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb7JZ+ui TajWWDjzYGDXJezE3xwaFgfBS3K5L1m4Xc1QsIDZvi7ZswXPI80/LHkjog0J4z+k C7IuDAY1O0sxZ0QI3vEfY8jKYyrKev6vxxDM28yQ07Vn4dPbnLJopK5gsWIfWPdr csG+TRsIToaamdC4Zyro7S/PFk3CEWdD8mdGYVk5KNhMiVwH93nKcoLzbO0VKhiZ hkpCFlSZCqa3Czmbph2Bi2GgFq7OjEYwa1mAJL8bKbfF1e8E5wWP8iSt4fKk5s79 gUkJJXW7PEv/3Zk/36zxdYKHAYdvV7O2DLpFckh7F8E7AzmHM5DaodHDwbPV0heA hta+dOeGNkCM0w== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:43 2025 by rpki-client