This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json) Hash identifier: rtjwJ6vhJTegEBM33x79o1CYoB4QZaGWkclaV44HQ9w= Subject key identifier: 47:53:5F:CC:1A:70:48:9B:BE:8A:64:DE:0E:7C:76:67:FC:C4:A0:B1 Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456 Certificate serial: 019B3DFEC8F3EA356E4F41C14D0F2047AC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft Manifest number: 028E Signing time: Sat 20 Dec 2025 23:01:06 +0000 Manifest this update: Sat 20 Dec 2025 23:01:06 +0000 Manifest next update: Sun 21 Dec 2025 23:01:06 +0000 Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: eNBJbiVED7K6fUUeWPgtEzd/kWqGNswo+AMTdgJq8Nk=) 2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c8:f3:ea:35:6e:4f:41:c1:4d:0f:20:47:ac:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456 Validity Not Before: Dec 20 23:01:06 2025 GMT Not After : Dec 21 23:01:06 2025 GMT Subject: CN=47535fcc1a70489bbe8a64de0e7c7667fcc4a0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:31:bd:3d:85:56:bc:db:9c:77:9a:80:43: f7:6d:d8:99:36:76:1a:82:04:c0:c1:7e:43:92:5d: 65:69:41:23:4c:e5:c1:60:93:4e:cc:24:ed:6d:50: 50:e2:11:d9:c9:9f:ce:2b:8c:a9:53:cd:0f:50:2c: b6:81:18:42:f1:60:43:50:ab:d8:71:c4:03:ee:d5: 10:c3:b1:10:03:0f:42:4e:3c:96:64:47:f4:60:71: 75:98:01:9f:51:ef:ae:e4:95:ca:54:7d:f9:2c:76: a5:b3:80:06:d8:82:7d:af:55:33:d3:23:9e:fe:6a: 16:d3:1f:fb:15:a7:4e:96:38:e6:16:1c:ec:6b:20: f7:b9:c9:8c:54:af:d6:37:0e:be:ea:ce:13:dd:32: 21:c5:33:96:78:7d:2c:b6:b9:f6:53:df:a6:ee:2b: 5f:a6:4b:f3:db:75:17:ab:d7:a3:50:d7:31:99:14: 49:6b:3b:4a:a7:63:e1:09:68:24:a6:9f:7a:46:8e: c9:f7:a5:57:9a:07:f9:fe:8e:ea:91:6f:30:b1:89: 7e:d7:ce:0c:0d:5d:59:da:51:d1:ff:b1:38:15:71: 9a:88:69:1c:2c:42:41:fd:e7:86:c7:6b:12:34:e2: 86:e0:c2:5e:69:b5:81:1f:48:cf:08:39:ca:f9:be: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:53:5F:CC:1A:70:48:9B:BE:8A:64:DE:0E:7C:76:67:FC:C4:A0:B1 X509v3 Authority Key Identifier: keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:65:b6:fd:27:87:c8:ed:61:c5:3f:ac:e9:7d:c1:08:73:19: de:33:fe:57:75:28:c8:64:3d:48:34:7c:8f:35:4b:03:16:ce: 7a:c2:74:4b:47:3d:97:d6:28:8a:93:ca:c4:c4:a3:ff:c8:96: 50:ba:32:e1:89:2d:36:16:8d:de:c9:50:bb:5c:49:69:1d:1a: c7:05:66:bc:98:ad:9a:b9:1b:32:1e:7d:54:94:ac:4f:93:5a: c1:33:25:b8:91:45:c1:3c:b1:c4:3e:38:86:5e:6d:59:33:67: db:78:a6:af:f6:f2:0c:ce:af:2f:c6:10:b0:09:c6:cc:4a:5e: 71:d8:a3:5d:1c:ed:ad:4d:de:43:46:27:51:c6:af:e1:cc:a6: 24:73:d0:c4:a1:2d:f6:b8:d6:25:14:c0:ac:f0:52:ce:f5:80: f4:f1:14:1c:4c:46:3c:bd:4f:07:34:c2:55:e2:2e:26:c7:ad: b9:7a:e1:29:2f:30:05:ac:2e:71:a7:1a:24:0e:7d:33:d2:d2: 89:10:9e:9a:fb:c6:b8:4a:83:aa:21:6b:cd:a1:54:f0:af:ab: ad:d1:2f:77:55:0d:cf:1d:da:29:7d:b6:77:63:15:79:7f:39: a1:ef:0b:10:bf:4a:cf:60:15:12:0f:01:e7:01:88:ba:b5:0b: bb:5f:b4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/sjz6jVuT0HBTQ8gR6yCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5 MDc0NTYwHhcNMjUxMjIwMjMwMTA2WhcNMjUxMjIxMjMwMTA2WjAzMTEwLwYDVQQD Eyg0NzUzNWZjYzFhNzA0ODliYmU4YTY0ZGUwZTdjNzY2N2ZjYzRhMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS8xvT2FVrzbnHeagEP3bdiZNnYa ggTAwX5Dkl1laUEjTOXBYJNOzCTtbVBQ4hHZyZ/OK4ypU80PUCy2gRhC8WBDUKvY ccQD7tUQw7EQAw9CTjyWZEf0YHF1mAGfUe+u5JXKVH35LHals4AG2IJ9r1Uz0yOe /moW0x/7FadOljjmFhzsayD3ucmMVK/WNw6+6s4T3TIhxTOWeH0strn2U9+m7itf pkvz23UXq9ejUNcxmRRJaztKp2PhCWgkpp96Ro7J96VXmgf5/o7qkW8wsYl+184M DV1Z2lHR/7E4FXGaiGkcLEJB/eeGx2sSNOKG4MJeabWBH0jPCDnK+b4jmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdTX8wacEibvopk3g58dmf8xKCxMB8GA1UdIwQY MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGW2/SeH yO1hxT+s6X3BCHMZ3jP+V3UoyGQ9SDR8jzVLAxbOesJ0S0c9l9YoipPKxMSj/8iW ULoy4YktNhaN3slQu1xJaR0axwVmvJitmrkbMh59VJSsT5NawTMluJFFwTyxxD44 hl5tWTNn23imr/byDM6vL8YQsAnGzEpecdijXRztrU3eQ0YnUcav4cymJHPQxKEt 9rjWJRTArPBSzvWA9PEUHExGPL1PBzTCVeIuJsetuXrhKS8wBawucacaJA59M9LS iRCemvvGuEqDqiFrzaFU8K+rrdEvd1UNzx3aKX22d2MVeX85oe8LEL9Kz2AVEg8B 5wGIurULu1+0Cw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:56:52 2025 by rpki-client