This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft File: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft (raw, json) Hash identifier: 74uZvmnTCuQw5NWhATf7vaBdEKev0t3o601iGDYJrVA= Subject key identifier: 08:FD:4E:1B:2D:1C:9D:00:C0:74:8F:0A:40:F4:6E:A0:58:D9:73:D0 Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5 Certificate issuer: /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5 Certificate serial: 019B31C34223D567FB0BF221069C615D52C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft Manifest number: 16DD Signing time: Thu 18 Dec 2025 14:00:38 +0000 Manifest this update: Thu 18 Dec 2025 14:00:38 +0000 Manifest next update: Fri 19 Dec 2025 14:00:38 +0000 Files and hashes: 1: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl (hash: w64sOwIJcsZzPGRXMzEcD7HoTcI1gnzZAU59cT+y+2Y=) 2: mVLFfpsCTZXmz1USSK13lw0lI4E.roa (hash: MFOelRyO21tS7ErEnP3ifMi3vY1sgM39x3qUbFKHhSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:42:23:d5:67:fb:0b:f2:21:06:9c:61:5d:52:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5 Validity Not Before: Dec 18 14:00:38 2025 GMT Not After : Dec 19 14:00:38 2025 GMT Subject: CN=08fd4e1b2d1c9d00c0748f0a40f46ea058d973d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:bd:44:c6:06:80:65:14:06:82:33:8b:3a: 82:23:c9:5e:10:a5:55:ea:2c:a0:b0:f6:f5:d8:f4: 10:c0:20:41:19:6b:65:94:a0:0f:1d:27:63:69:d5: 22:66:2a:b1:36:d7:30:0a:ed:e3:9e:41:07:a1:fd: aa:2d:83:d0:3d:76:b9:17:a5:69:45:5c:70:1d:13: 35:23:d6:41:10:9c:a9:67:6a:56:c5:73:7a:d8:59: 53:f1:98:1b:89:1c:a3:cc:fb:b8:95:86:81:d8:45: 4c:1d:bb:89:fc:67:f8:9a:f2:c4:58:36:84:7f:2b: 30:20:bc:09:a8:97:a3:47:5a:e5:45:e2:c1:f8:35: 2f:14:dc:9c:1d:2f:eb:f6:40:2e:70:3c:ee:2c:b8: bc:c0:94:56:03:a9:32:91:6e:70:33:25:73:02:4f: 9d:da:bf:88:ea:e6:80:68:ff:33:9c:b1:59:75:e4: 56:c6:97:ad:2f:13:18:6b:c2:eb:d2:99:6e:c5:ec: 8f:3d:29:91:1d:e8:11:bc:23:f9:60:6b:74:db:e6: ed:d7:3f:7d:ef:15:44:fc:06:86:52:20:87:82:c6: 58:20:e8:b3:b5:92:8e:89:8e:24:b0:ba:1d:b4:0e: 10:a6:f8:35:df:1c:32:12:cb:c7:cb:69:6c:f8:61: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FD:4E:1B:2D:1C:9D:00:C0:74:8F:0A:40:F4:6E:A0:58:D9:73:D0 X509v3 Authority Key Identifier: keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:35:e6:81:90:79:bd:41:8e:32:0a:af:dd:09:eb:66:6e:7d: 79:f4:f8:78:ca:df:91:40:fd:83:2c:e9:76:b6:6d:b4:f1:e0: f7:e6:b9:cd:dc:cd:2e:ad:24:d0:e2:de:b3:6a:38:6f:25:b1: b0:45:17:a1:1f:5c:4f:cc:31:1c:36:7e:8b:a4:98:24:34:6c: f9:54:24:9d:5b:8c:13:2d:44:90:57:9c:58:eb:d4:c2:69:9a: 35:79:25:86:1b:39:b4:a2:22:c7:62:9f:8e:81:8a:3e:80:9e: 6d:0b:a9:e9:57:98:9f:5f:b4:62:14:90:6b:b3:56:55:a3:9c: b5:3e:d1:bc:4f:ac:5a:79:0b:ff:76:c9:94:fc:56:35:1b:28: 95:1b:e8:4c:b7:d1:28:72:d6:e1:ea:12:1f:ba:ed:2f:ae:2e: 00:7f:ba:30:7f:7d:87:54:0b:3c:8e:54:74:e4:f4:d1:5a:43: 4b:d1:62:91:2d:02:ee:83:1e:26:f5:b8:02:d6:33:2a:0c:40: 37:25:39:a9:64:dc:03:6e:a3:ab:73:02:69:a8:fe:55:15:8b: 69:30:77:bc:5a:20:c4:ac:2f:0d:5d:33:b8:a3:9c:08:13:9f: 8c:1d:6c:42:d1:f6:79:7b:f6:34:50:e8:92:39:76:fd:2c:63: 4c:aa:70:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw0Ij1Wf7C/IhBpxhXVLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTAxOTc0NzQzYTNiM2EyOGY3YTY0ZTJkODcxYmYxZTVl NWY2ZTUwHhcNMjUxMjE4MTQwMDM4WhcNMjUxMjE5MTQwMDM4WjAzMTEwLwYDVQQD EygwOGZkNGUxYjJkMWM5ZDAwYzA3NDhmMGE0MGY0NmVhMDU4ZDk3M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRi9RMYGgGUUBoIzizqCI8leEKVV 6iygsPb12PQQwCBBGWtllKAPHSdjadUiZiqxNtcwCu3jnkEHof2qLYPQPXa5F6Vp RVxwHRM1I9ZBEJypZ2pWxXN62FlT8ZgbiRyjzPu4lYaB2EVMHbuJ/Gf4mvLEWDaE fyswILwJqJejR1rlReLB+DUvFNycHS/r9kAucDzuLLi8wJRWA6kykW5wMyVzAk+d 2r+I6uaAaP8znLFZdeRWxpetLxMYa8Lr0pluxeyPPSmRHegRvCP5YGt02+bt1z99 7xVE/AaGUiCHgsZYIOiztZKOiY4ksLodtA4Qpvg13xwyEsvHy2ls+GFAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj9ThstHJ0AwHSPCkD0bqBY2XPQMB8GA1UdIwQY MBaAFO/gGXR0Ojs6KPemTi2HG/Hl5fblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NDM4YjctMzlhMi00Yzk1LWFmMWEt Y2RiMWZkYzlkNTdkLzEvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NDM4YjctMzlhMi00Yzk1LWFmMWEtY2RiMWZkYzlkNTdk LzEvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjXmgZB5 vUGOMgqv3QnrZm59efT4eMrfkUD9gyzpdrZttPHg9+a5zdzNLq0k0OLes2o4byWx sEUXoR9cT8wxHDZ+i6SYJDRs+VQknVuMEy1EkFecWOvUwmmaNXklhhs5tKIix2Kf joGKPoCebQup6VeYn1+0YhSQa7NWVaOctT7RvE+sWnkL/3bJlPxWNRsolRvoTLfR KHLW4eoSH7rtL64uAH+6MH99h1QLPI5UdOT00VpDS9FikS0C7oMeJvW4AtYzKgxA NyU5qWTcA26jq3MCaaj+VRWLaTB3vFogxKwvDV0zuKOcCBOfjB1sQtH2eXv2NFDo kjl2/SxjTKpwiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:23 2025 by rpki-client