This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft File: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json) Hash identifier: xd/h2f/L7LDeV7MR75lkNeENQDdMtqnOR/yEZKvPwQg= Subject key identifier: C7:A7:8D:51:4B:64:D8:CF:CD:3A:EE:8F:67:95:24:CF:A9:6E:3E:8C Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97 Certificate issuer: /CN=edd482c2bee8460048d82902cec9867205222997 Certificate serial: 019B462609AB3D2082404531B5743C665492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 13:00:56 +0000 Manifest this update: Mon 22 Dec 2025 13:00:56 +0000 Manifest next update: Tue 23 Dec 2025 13:00:56 +0000 Files and hashes: 1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: 1KnKeiBPonU+77cU1FjZvbndK2lV4bwv8I1NtMjviEE=) 2: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (hash: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:09:ab:3d:20:82:40:45:31:b5:74:3c:66:54:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd482c2bee8460048d82902cec9867205222997 Validity Not Before: Dec 22 13:00:56 2025 GMT Not After : Dec 23 13:00:56 2025 GMT Subject: CN=c7a78d514b64d8cfcd3aee8f679524cfa96e3e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:d8:8f:d0:93:d4:48:e9:22:c7:46:29:73: 77:37:2c:d8:1a:a3:ff:91:3c:97:06:a8:4c:7c:54: 4c:9f:0f:ba:73:69:cb:0c:51:97:a5:8f:fa:ee:52: 24:99:d7:9d:40:8d:c7:e6:8c:59:d8:70:3b:ad:05: 86:05:eb:39:6b:08:68:d9:b4:7c:1e:5f:06:de:d0: 03:7c:00:58:3e:c9:36:19:f0:00:c0:8c:ef:0b:2c: 2d:eb:92:4a:2f:99:a2:13:43:21:bd:1b:cc:68:0a: 6a:e2:77:1d:12:ef:17:de:93:c1:0c:53:1a:d0:b6: 2f:30:57:e4:ef:85:dc:2b:b0:76:19:88:86:24:cb: ca:1b:92:1d:10:4d:4d:cb:05:e1:41:a4:2e:a4:79: 72:b0:b1:a0:62:32:e6:68:20:8e:16:f9:dc:98:9b: 01:e5:1f:41:d8:04:c9:12:12:cb:79:85:f0:db:af: 54:d3:4a:b1:46:3c:1a:45:55:64:1d:a7:20:45:8e: 2b:51:98:a4:bf:4b:58:57:f9:09:29:32:c0:32:63: de:42:52:52:1a:93:aa:d8:b0:a9:05:4b:38:e1:29: 19:01:2e:54:e7:1d:92:9e:9e:6b:16:3d:f9:26:69: 40:11:cd:ce:72:cb:31:4b:e3:b3:fa:d1:28:2c:d1: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A7:8D:51:4B:64:D8:CF:CD:3A:EE:8F:67:95:24:CF:A9:6E:3E:8C X509v3 Authority Key Identifier: keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:32:00:8b:91:79:ba:87:ca:0a:0d:b3:1d:2d:01:4a:ac:2f: ac:a1:db:c9:50:b5:23:bb:a3:5b:4c:ce:e2:2d:7d:da:08:8c: eb:20:79:0d:a7:95:d2:4a:5c:2d:14:04:5c:a8:db:3e:23:e6: 86:4e:f3:6b:d0:89:9d:bc:80:d7:41:18:f5:4e:e8:ce:49:b8: c5:87:bd:97:4b:ba:94:05:78:91:02:28:00:1d:23:ff:1c:3c: c7:3d:4d:4d:07:73:72:de:0c:99:19:7a:c8:fe:3f:dc:be:5a: 3a:0e:f9:0a:7e:a3:91:8c:f4:05:94:7c:df:73:0f:cd:bf:e4: bc:fc:b6:ad:61:dd:9d:24:83:94:38:df:4a:ca:25:30:d2:be: 03:06:ce:01:5e:5a:6b:a3:93:2b:74:3c:1e:75:59:84:a2:dc: 47:d6:e3:63:de:b7:bc:30:11:45:e4:46:c1:45:ac:46:27:b0: 88:a0:51:b6:8c:8a:ea:1b:cc:49:99:56:46:59:28:c7:41:cb: 38:e2:be:da:05:82:cb:76:1d:c8:50:7a:41:3b:22:5a:72:fa: ec:71:f7:7d:8d:dc:95:69:37:30:56:8f:cf:bd:c7:1c:36:53: 03:d5:2f:b9:60:54:75:8c:3c:2d:47:8d:b7:f2:42:7b:ea:81: 72:4c:80:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJgmrPSCCQEUxtXQ8ZlSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDQ4MmMyYmVlODQ2MDA0OGQ4MjkwMmNlYzk4NjcyMDUy MjI5OTcwHhcNMjUxMjIyMTMwMDU2WhcNMjUxMjIzMTMwMDU2WjAzMTEwLwYDVQQD EyhjN2E3OGQ1MTRiNjRkOGNmY2QzYWVlOGY2Nzk1MjRjZmE5NmUzZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpXYj9CT1EjpIsdGKXN3NyzYGqP/ kTyXBqhMfFRMnw+6c2nLDFGXpY/67lIkmdedQI3H5oxZ2HA7rQWGBes5awho2bR8 Hl8G3tADfABYPsk2GfAAwIzvCywt65JKL5miE0MhvRvMaApq4ncdEu8X3pPBDFMa 0LYvMFfk74XcK7B2GYiGJMvKG5IdEE1NywXhQaQupHlysLGgYjLmaCCOFvncmJsB 5R9B2ATJEhLLeYXw269U00qxRjwaRVVkHacgRY4rUZikv0tYV/kJKTLAMmPeQlJS GpOq2LCpBUs44SkZAS5U5x2Snp5rFj35JmlAEc3OcssxS+Oz+tEoLNH1cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMenjVFLZNjPzTruj2eVJM+pbj6MMB8GA1UdIwQY MBaAFO3UgsK+6EYASNgpAs7JhnIFIimXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2Ut OWQ5MDkxYmVkOGQ3LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2UtOWQ5MDkxYmVkOGQ3 LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjIAi5F5 uofKCg2zHS0BSqwvrKHbyVC1I7ujW0zO4i192giM6yB5DaeV0kpcLRQEXKjbPiPm hk7za9CJnbyA10EY9U7ozkm4xYe9l0u6lAV4kQIoAB0j/xw8xz1NTQdzct4MmRl6 yP4/3L5aOg75Cn6jkYz0BZR833MPzb/kvPy2rWHdnSSDlDjfSsolMNK+AwbOAV5a a6OTK3Q8HnVZhKLcR9bjY963vDARReRGwUWsRiewiKBRtoyK6hvMSZlWRlkox0HL OOK+2gWCy3YdyFB6QTsiWnL67HH3fY3clWk3MFaPz73HHDZTA9UvuWBUdYw8LUeN t/JCe+qBckyAPw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:12 2025 by rpki-client