This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json) Hash identifier: kf5rv+4803p9ytqVBh6YJSKPg7wO+s4Ll5ozuyGxKgc= Subject key identifier: B3:1C:E2:55:0B:77:7F:F4:AB:A9:23:A2:F6:53:C8:25:C2:45:9D:16 Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03 Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03 Certificate serial: 019B42B716287859E02CD7AE44D8729C1E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft Manifest number: 07CF Signing time: Sun 21 Dec 2025 21:00:53 +0000 Manifest this update: Sun 21 Dec 2025 21:00:53 +0000 Manifest next update: Mon 22 Dec 2025 21:00:53 +0000 Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: XSupg+pV1er8454sx1jwrNrzd5pSDRDHfHm6hXjg2jk=) 2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:16:28:78:59:e0:2c:d7:ae:44:d8:72:9c:1e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef133598bb10542114681ea86a35df169831cf03 Validity Not Before: Dec 21 21:00:53 2025 GMT Not After : Dec 22 21:00:53 2025 GMT Subject: CN=b31ce2550b777ff4aba923a2f653c825c2459d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:53:87:c8:1a:cd:97:fe:b2:d3:af:69:11: 57:4e:21:48:4b:7c:7b:7e:14:96:cb:b6:04:32:6c: 97:ab:ad:c3:b3:98:1d:49:cd:ab:97:32:53:a4:88: d0:8d:56:f3:cf:46:e5:3d:01:fb:f0:0f:9c:8a:87: 0b:b4:90:3b:38:b7:40:e6:17:ee:8f:ac:bd:17:d9: 5f:57:49:1e:1f:ab:6e:ab:10:76:e3:dc:e1:cb:2d: d6:7e:4b:8b:3e:93:1c:1d:b3:df:8f:cf:eb:ff:94: 8e:36:3f:01:43:c4:da:fb:f3:3d:da:cf:e3:bd:a9: 96:29:de:17:ed:bd:09:32:27:60:ed:60:24:dc:ed: b9:45:ed:26:53:0b:87:92:d0:f1:a5:a2:63:e0:a5: 7c:ba:e1:cc:f7:14:eb:38:1f:4b:9f:f9:69:e9:43: d1:d7:5f:43:1d:fc:c3:34:22:67:5b:98:16:a5:d9: 88:2b:15:86:13:77:88:56:46:65:53:52:b2:ed:18: a2:9b:7a:69:c2:bf:79:35:e2:bb:6b:67:2f:98:ce: 44:4a:c4:f0:aa:0c:fa:a8:d4:7d:9e:32:e5:35:78: 8e:50:19:05:ff:41:04:c2:b8:55:3b:cf:be:6e:8e: 51:c7:da:1d:e0:f3:4c:15:28:f1:8f:d4:b0:e7:e1: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:E2:55:0B:77:7F:F4:AB:A9:23:A2:F6:53:C8:25:C2:45:9D:16 X509v3 Authority Key Identifier: keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cf:fe:e1:72:1b:17:2b:60:34:78:06:a3:3f:93:87:07:f5: ab:58:ff:30:4e:e6:cc:c4:e3:2b:b0:7c:30:5e:d5:f6:14:70: 12:3b:42:3f:6e:e1:0a:6e:3a:32:fe:fa:fa:8a:e7:4a:0a:e8: 73:9e:85:9b:bd:03:3d:59:0d:40:38:ee:d5:bc:b5:20:5c:67: 19:87:4a:26:d5:12:2c:13:99:30:e2:a0:57:4c:8f:8e:25:a9: 03:01:78:31:b6:dd:85:18:74:1d:4a:24:fb:e6:a8:7f:bc:a2: ce:42:c5:0d:9b:b8:9e:ce:6f:cb:1c:56:e9:ff:04:8a:f7:44: dd:b3:67:ab:36:03:b7:e0:1f:c3:02:b2:9f:55:61:5e:7c:b9: 1e:ef:95:50:b4:e5:92:52:81:06:b9:5c:6e:7c:9b:ae:1d:6f: df:2f:40:37:81:d5:ae:e2:f8:a8:7a:c3:f7:33:18:c7:77:02: 6c:a3:cd:11:57:d6:76:80:d6:ad:6e:bc:c7:4c:f2:f8:45:30: 14:4c:19:f1:11:92:09:06:da:d2:61:e0:b5:3f:bf:d8:5e:54: c1:78:b1:0d:7f:1f:35:41:4a:66:50:2d:c7:e0:f7:2a:d7:b4: 80:4d:8b:5c:8b:e6:cd:f9:cf:c8:53:49:33:e2:b1:a9:1e:16: 6b:62:36:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxYoeFngLNeuRNhynB40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz MWNmMDMwHhcNMjUxMjIxMjEwMDUzWhcNMjUxMjIyMjEwMDUzWjAzMTEwLwYDVQQD EyhiMzFjZTI1NTBiNzc3ZmY0YWJhOTIzYTJmNjUzYzgyNWMyNDU5ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojpTh8gazZf+stOvaRFXTiFIS3x7 fhSWy7YEMmyXq63Ds5gdSc2rlzJTpIjQjVbzz0blPQH78A+ciocLtJA7OLdA5hfu j6y9F9lfV0keH6tuqxB249zhyy3WfkuLPpMcHbPfj8/r/5SONj8BQ8Ta+/M92s/j vamWKd4X7b0JMidg7WAk3O25Re0mUwuHktDxpaJj4KV8uuHM9xTrOB9Ln/lp6UPR 119DHfzDNCJnW5gWpdmIKxWGE3eIVkZlU1Ky7Riim3ppwr95NeK7a2cvmM5ESsTw qgz6qNR9njLlNXiOUBkF/0EEwrhVO8++bo5Rx9od4PNMFSjxj9Sw5+EAIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMc4lULd3/0q6kjovZTyCXCRZ0WMB8GA1UdIwQY MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1 LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM/+4XIb FytgNHgGoz+Thwf1q1j/ME7mzMTjK7B8MF7V9hRwEjtCP27hCm46Mv76+ornSgro c56Fm70DPVkNQDju1by1IFxnGYdKJtUSLBOZMOKgV0yPjiWpAwF4MbbdhRh0HUok ++aof7yizkLFDZu4ns5vyxxW6f8EivdE3bNnqzYDt+AfwwKyn1VhXny5Hu+VULTl klKBBrlcbnybrh1v3y9AN4HVruL4qHrD9zMYx3cCbKPNEVfWdoDWrW68x0zy+EUw FEwZ8RGSCQba0mHgtT+/2F5UwXixDX8fNUFKZlAtx+D3Kte0gE2LXIvmzfnPyFNJ M+KxqR4Wa2I2uw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:53:20 2025 by rpki-client