This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json) Hash identifier: 4Vnb3W6tnpXYb6ZEwjbftLr6p5/jUIZ7BIn5PuWKS+w= Subject key identifier: C2:18:4A:15:12:DB:CF:47:40:25:E5:DF:F0:7A:5A:28:30:5E:E7:1B Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22 Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322 Certificate serial: 019B649E0EDB1AB0D0BC71CCEC3ECD771658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 11:00:38 +0000 Manifest this update: Sun 28 Dec 2025 11:00:38 +0000 Manifest next update: Mon 29 Dec 2025 11:00:38 +0000 Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: su/OTPId+TfE7nThs96mgpGqpWgIce1DYpRrGaroGZA=) 2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:0e:db:1a:b0:d0:bc:71:cc:ec:3e:cd:77:16:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322 Validity Not Before: Dec 28 11:00:38 2025 GMT Not After : Dec 29 11:00:38 2025 GMT Subject: CN=c2184a1512dbcf474025e5dff07a5a28305ee71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:3b:dd:01:cc:1e:99:b1:e0:8b:92:a2:e4: 0e:74:df:67:f5:5d:4b:a2:25:78:56:cd:02:b5:6d: f0:56:27:ba:f2:1e:d9:bc:12:9d:49:c6:19:7a:c7: 15:96:98:bf:eb:fd:be:68:0b:4b:af:76:61:10:c3: 03:ce:d6:1e:7d:c8:bc:f1:c4:db:3f:85:c2:84:5d: 32:5d:72:5b:0b:8b:d0:1a:37:33:4c:de:56:f2:50: 7e:e3:12:69:73:19:d9:5a:eb:da:e9:74:a1:f6:bd: 1c:3c:6b:aa:b2:cf:2c:f8:6c:84:3d:4e:c0:01:fa: d0:42:36:ce:3e:f3:ae:7d:ba:ef:0b:f6:1f:4b:0f: 8e:b0:23:e8:91:fe:fa:50:0d:4c:ca:b4:f2:e1:c1: 87:53:52:65:dd:9c:ce:87:93:cc:ec:0d:38:fa:24: 40:1b:ab:a8:91:63:11:7f:b5:de:1f:c2:6c:b9:ff: 1b:61:8d:d6:97:08:d2:9b:51:bc:be:83:1b:8d:6f: 78:a9:4b:12:e0:d5:d7:f7:72:a6:a2:f5:0f:af:7c: 96:92:84:c6:ba:e3:53:6a:ea:ab:c0:82:cb:40:18: 9e:8a:e0:55:25:66:e1:b5:25:b1:a1:1c:8b:92:ee: 3e:a2:75:49:7b:14:59:77:72:ac:8d:90:24:13:1b: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:4A:15:12:DB:CF:47:40:25:E5:DF:F0:7A:5A:28:30:5E:E7:1B X509v3 Authority Key Identifier: keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:be:de:e2:d8:33:ca:cc:79:d8:8f:ef:55:c7:a5:09:e3:98: 6a:cf:59:f5:99:c8:27:48:3e:87:80:be:95:03:2b:20:7e:d6: 86:d7:40:0f:c6:91:da:54:20:8e:2a:06:d9:22:bf:b7:1c:99: 65:d6:8f:b8:f7:29:d1:9a:74:39:3e:97:86:e9:28:14:19:a4: 5c:4d:21:7a:bf:47:5d:f0:75:6e:ef:2b:5e:ce:46:89:db:45: d7:80:04:15:b9:9e:19:ed:f2:19:9b:4d:f5:53:52:66:89:9e: f8:3d:ce:05:3a:61:77:66:75:79:e3:87:8c:69:e7:b7:a4:a9: 5b:69:6f:e2:d7:22:6a:cd:0e:a8:b0:16:f2:79:e6:f6:4b:40: 4e:f5:05:49:6b:b1:c8:99:da:cb:90:9b:d8:2c:f2:d3:ce:3f: be:a2:4e:cd:82:c9:7d:a8:6a:e7:4b:59:25:34:05:4d:65:50: ba:ef:bf:a4:95:06:5c:30:bd:bc:61:5d:fb:2e:80:44:15:1f: a5:01:42:bb:ad:25:a4:7b:e3:9f:94:a1:b8:78:9d:61:b8:ac: 11:d8:e6:b5:08:72:3f:cd:9d:d9:b2:18:10:59:65:89:c3:20: 3c:99:18:b2:48:3e:93:50:aa:a6:70:38:09:0f:23:46:63:42: 41:a7:99:48 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtkng7bGrDQvHHM7D7NdxZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk OGQzMjIwHhcNMjUxMjI4MTEwMDM4WhcNMjUxMjI5MTEwMDM4WjAzMTEwLwYDVQQD EyhjMjE4NGExNTEyZGJjZjQ3NDAyNWU1ZGZmMDdhNWEyODMwNWVlNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cs73QHMHpmx4IuSouQOdN9n9V1L oiV4Vs0CtW3wVie68h7ZvBKdScYZescVlpi/6/2+aAtLr3ZhEMMDztYefci88cTb P4XChF0yXXJbC4vQGjczTN5W8lB+4xJpcxnZWuva6XSh9r0cPGuqss8s+GyEPU7A AfrQQjbOPvOufbrvC/YfSw+OsCPokf76UA1MyrTy4cGHU1Jl3ZzOh5PM7A04+iRA G6uokWMRf7XeH8Jsuf8bYY3WlwjSm1G8voMbjW94qUsS4NXX93KmovUPr3yWkoTG uuNTauqrwILLQBieiuBVJWbhtSWxoRyLku4+onVJexRZd3KsjZAkExuAKwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMIYShUS289HQCXl3/B6WigwXucbMB8GA1UdIwQY MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb7e 4tgzysx52I/vVcelCeOYas9Z9ZnIJ0g+h4C+lQMrIH7WhtdAD8aR2lQgjioG2SK/ txyZZdaPuPcp0Zp0OT6XhukoFBmkXE0her9HXfB1bu8rXs5GidtF14AEFbmeGe3y GZtN9VNSZome+D3OBTphd2Z1eeOHjGnnt6SpW2lv4tcias0OqLAW8nnm9ktATvUF SWuxyJnay5Cb2Czy084/vqJOzYLJfahq50tZJTQFTWVQuu+/pJUGXDC9vGFd+y6A RBUfpQFCu60lpHvjn5ShuHidYbisEdjmtQhyP82d2bIYEFllicMgPJkYskg+k1Cq pnA4CQ8jRmNCQaeZSA== -----END CERTIFICATE-----Generated at Sun Dec 28 20:28:54 2025 by rpki-client