This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json) Hash identifier: BVA1FmlTKOxcbu1tS9jT3m2Y4YjYQM1rcC8X1OZfC1Q= Subject key identifier: 61:94:D7:D0:73:F6:9C:4B:D2:97:F7:F7:DF:9E:94:7B:54:08:97:37 Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456 Certificate serial: 019B533CEE98D9CECBA6C498C496BCC013EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft Manifest number: 0299 Signing time: Thu 25 Dec 2025 02:01:00 +0000 Manifest this update: Thu 25 Dec 2025 02:01:00 +0000 Manifest next update: Fri 26 Dec 2025 02:01:00 +0000 Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: X24YGE+7NxKxNT205NZHtGfgS04QKuxGu4I7XE14Qe0=) 2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:ee:98:d9:ce:cb:a6:c4:98:c4:96:bc:c0:13:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456 Validity Not Before: Dec 25 02:01:00 2025 GMT Not After : Dec 26 02:01:00 2025 GMT Subject: CN=6194d7d073f69c4bd297f7f7df9e947b54089737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:d4:06:e5:c5:a1:a2:24:56:5a:41:e4:9c: 69:4d:0d:11:5f:8a:04:6c:c8:fd:75:72:0d:2c:7c: 83:70:3b:56:7d:58:d7:53:8e:b3:dc:bc:2e:8e:4a: 5c:d4:32:3d:8d:ee:5b:79:33:d1:aa:a3:0c:61:b1: d6:f9:51:47:83:aa:7d:24:70:3f:a5:b2:bb:97:47: c7:0a:f5:88:e2:1e:3a:8b:eb:e2:c7:b8:4b:0a:52: 79:a1:5b:ff:88:22:cb:e7:2d:2d:1f:48:ca:87:2a: 09:a4:14:a1:5f:0c:74:d2:39:95:f8:ec:72:07:17: 6f:6c:b0:fc:a6:48:f1:c2:c6:bf:b1:a3:dd:23:7e: e6:b3:c2:87:40:13:ad:7b:f9:57:ea:c4:25:83:b9: c8:2d:e5:32:ea:3c:11:44:2d:00:e2:4f:91:3a:ac: 51:c3:05:25:6c:98:eb:4e:60:92:56:f0:4e:b5:14: 32:14:b2:5d:ad:89:3c:54:63:b1:dc:fd:5f:9a:7f: 56:a6:27:44:fc:7b:1f:c7:e4:78:37:9f:25:fd:cf: 3a:7b:f8:55:5b:0f:2d:69:b7:25:c8:a4:fd:af:6e: 2e:27:cd:0d:b4:81:0d:bf:e0:8e:b5:4b:23:a1:75: 9a:24:03:6d:1f:a2:9b:d8:f6:f9:1c:bb:7c:80:b4: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:94:D7:D0:73:F6:9C:4B:D2:97:F7:F7:DF:9E:94:7B:54:08:97:37 X509v3 Authority Key Identifier: keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:41:4b:0d:34:c0:ce:1b:95:29:14:31:f1:80:10:62:c9: 8f:14:87:ec:4e:05:f7:d1:95:a3:39:ad:a6:03:29:b3:d6:f5: 8d:40:e6:e8:34:26:6c:20:8b:27:6d:b7:c4:9c:a9:fb:1a:15: 6d:03:17:d2:c0:35:97:4d:36:47:d3:44:fe:4e:be:a3:2e:72: 86:cc:cb:b7:21:7a:41:41:82:98:7e:89:55:11:9c:2d:3f:60: e5:f2:6c:36:74:d0:51:18:43:36:6e:27:ee:b6:79:76:e0:ac: 1a:e1:ac:f7:24:be:cf:a1:62:72:4c:e2:6f:b4:07:87:70:77: 20:ee:48:db:49:fe:d8:f6:5f:3d:15:51:11:d4:b6:61:61:4f: cd:ad:a1:7e:9f:b2:b1:54:82:33:3e:a6:c2:c8:51:2a:2c:1b: d9:56:b3:c5:92:da:81:78:61:4e:29:ac:22:0d:d9:ab:42:15: c6:1e:6b:12:12:d8:74:95:35:45:83:4e:8d:a8:6a:a1:a0:91: 83:86:f1:20:f7:a6:04:40:78:63:2f:cf:bc:90:6c:36:d0:73: c8:45:31:12:09:0f:d7:7b:68:ff:d9:17:f3:51:51:3b:5a:26: 30:89:08:ae:1b:32:0c:5b:57:e4:a6:5e:23:94:c7:09:f5:b2: c2:9c:ff:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPO6Y2c7LpsSYxJa8wBPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5 MDc0NTYwHhcNMjUxMjI1MDIwMTAwWhcNMjUxMjI2MDIwMTAwWjAzMTEwLwYDVQQD Eyg2MTk0ZDdkMDczZjY5YzRiZDI5N2Y3ZjdkZjllOTQ3YjU0MDg5NzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbLUBuXFoaIkVlpB5JxpTQ0RX4oE bMj9dXINLHyDcDtWfVjXU46z3Lwujkpc1DI9je5beTPRqqMMYbHW+VFHg6p9JHA/ pbK7l0fHCvWI4h46i+vix7hLClJ5oVv/iCLL5y0tH0jKhyoJpBShXwx00jmV+Oxy BxdvbLD8pkjxwsa/saPdI37ms8KHQBOte/lX6sQlg7nILeUy6jwRRC0A4k+ROqxR wwUlbJjrTmCSVvBOtRQyFLJdrYk8VGOx3P1fmn9WpidE/Hsfx+R4N58l/c86e/hV Ww8tabclyKT9r24uJ80NtIENv+COtUsjoXWaJANtH6Kb2Pb5HLt8gLSZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGU19Bz9pxL0pf399+elHtUCJc3MB8GA1UdIwQY MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2VBSw00 wM4blSkUMfGAEGLJjxSH7E4F99GVozmtpgMps9b1jUDm6DQmbCCLJ223xJyp+xoV bQMX0sA1l002R9NE/k6+oy5yhszLtyF6QUGCmH6JVRGcLT9g5fJsNnTQURhDNm4n 7rZ5duCsGuGs9yS+z6Fickzib7QHh3B3IO5I20n+2PZfPRVREdS2YWFPza2hfp+y sVSCMz6mwshRKiwb2VazxZLagXhhTimsIg3Zq0IVxh5rEhLYdJU1RYNOjahqoaCR g4bxIPemBEB4Yy/PvJBsNtBzyEUxEgkP13to/9kX81FRO1omMIkIrhsyDFtX5KZe I5THCfWywpz/hg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:28:50 2025 by rpki-client