This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json) Hash identifier: cR2Jpy0PzbRw1j8QWxF41Xc5iIsBwdC1fBirt021Xbw= Subject key identifier: 01:A5:66:EB:80:2F:97:36:B8:E5:EA:C1:42:23:CC:F5:02:BE:C3:17 Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b Certificate serial: 019B45B81DB4AC3DB7BF6A0F24D2FD0BFC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft Manifest number: 05FA Signing time: Mon 22 Dec 2025 11:00:52 +0000 Manifest this update: Mon 22 Dec 2025 11:00:52 +0000 Manifest next update: Tue 23 Dec 2025 11:00:52 +0000 Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: TjaiA86R+PjYvSpnNN3Xq013pl2TQrm3r852nvY9HrE=) 2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:1d:b4:ac:3d:b7:bf:6a:0f:24:d2:fd:0b:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b Validity Not Before: Dec 22 11:00:52 2025 GMT Not After : Dec 23 11:00:52 2025 GMT Subject: CN=01a566eb802f9736b8e5eac14223ccf502bec317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:45:89:ba:82:0b:a6:1f:c4:19:30:b4:1f: 43:9b:27:17:4b:7f:85:7d:0f:1c:7f:7f:b4:62:b2: 1e:8a:0b:11:c7:7a:01:83:ae:04:ea:35:0f:93:ad: fb:a2:20:73:be:d5:43:44:eb:51:a8:b3:86:1e:c1: 73:d4:74:42:6d:7f:1d:94:66:a1:40:f6:ca:84:f4: 3e:72:72:10:a8:38:c9:bd:d5:67:be:84:0a:cf:a3: 76:49:5a:26:1a:7f:72:59:c1:d2:7b:8f:b8:a1:62: 35:82:bd:74:cd:36:72:79:bf:ed:4a:92:c1:c3:cf: 9d:a9:f6:45:40:f4:8c:fe:6b:32:1d:18:bf:0f:88: d5:2a:57:5b:5e:aa:e2:de:97:89:3d:23:ab:7e:e1: 6b:da:17:da:e3:77:ed:ce:f6:cc:4b:db:74:58:23: 32:ac:fc:92:cb:92:1a:4e:68:cf:89:42:54:86:26: 62:98:46:27:6f:89:78:e3:fa:c3:91:f2:b1:2b:38: 6a:11:8b:9e:84:97:04:b3:fa:db:6d:fa:08:ed:11: e5:ec:2d:72:33:5e:d9:70:45:6d:d7:ce:26:28:1e: 0c:97:2d:61:ab:dc:5f:a7:a9:41:25:80:9f:54:62: 27:aa:f1:38:2b:a2:14:0b:23:a7:79:2b:9c:c6:b2: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:66:EB:80:2F:97:36:B8:E5:EA:C1:42:23:CC:F5:02:BE:C3:17 X509v3 Authority Key Identifier: keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a9:b3:61:6e:2d:c9:38:bb:94:0d:d9:82:f8:fc:3c:e6:68: 2f:74:89:af:cf:5a:77:41:0a:bf:2d:5e:fc:36:9e:12:be:f6: 61:50:78:14:c8:b3:37:73:dc:32:cd:13:71:99:90:29:a2:e9: 4b:4a:25:6b:55:d3:a1:06:4b:25:7e:65:8d:20:f8:c7:66:f5: 5c:aa:b0:01:e4:e9:df:d6:ee:c0:ba:58:11:d3:ce:71:eb:b6: 57:0e:63:cd:79:06:b6:02:38:c1:9a:74:7a:b3:9b:61:11:a2: 69:c3:0b:9e:32:88:fe:94:a9:b2:5b:ee:99:7b:b3:35:7e:78: ed:88:06:0b:3d:76:da:14:c5:c4:4d:d1:47:cd:6b:c7:c7:60: 2d:47:9c:86:16:c4:c8:5f:08:3c:1e:9f:0a:2a:41:bd:8e:07: f6:c6:a2:0b:27:e0:c7:96:85:58:7c:7d:6d:ae:44:28:49:e8: 3b:02:1e:0c:18:3d:3c:88:7c:58:87:f1:b0:f4:a5:66:9a:5f: 1c:b7:ca:4a:51:9e:d5:b5:a9:70:85:04:3d:c5:b9:aa:9b:cd: b4:d2:df:50:bc:3a:a0:dd:f1:c2:74:ae:3a:04:82:05:5b:de: ac:f7:41:40:09:a3:4d:dd:9a:ec:c2:94:93:a6:77:1f:04:36: b9:68:e5:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuB20rD23v2oPJNL9C/wOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjUwMjZlNTk1NWRjZGQxMTE0NzZmOWI2ODQ5ZDcyODE4 NTQ2OWIwHhcNMjUxMjIyMTEwMDUyWhcNMjUxMjIzMTEwMDUyWjAzMTEwLwYDVQQD EygwMWE1NjZlYjgwMmY5NzM2YjhlNWVhYzE0MjIzY2NmNTAyYmVjMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/VFibqCC6YfxBkwtB9DmycXS3+F fQ8cf3+0YrIeigsRx3oBg64E6jUPk637oiBzvtVDROtRqLOGHsFz1HRCbX8dlGah QPbKhPQ+cnIQqDjJvdVnvoQKz6N2SVomGn9yWcHSe4+4oWI1gr10zTZyeb/tSpLB w8+dqfZFQPSM/msyHRi/D4jVKldbXqri3peJPSOrfuFr2hfa43ftzvbMS9t0WCMy rPySy5IaTmjPiUJUhiZimEYnb4l44/rDkfKxKzhqEYuehJcEs/rbbfoI7RHl7C1y M17ZcEVt184mKB4Mly1hq9xfp6lBJYCfVGInqvE4K6IUCyOneSucxrI3BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGlZuuAL5c2uOXqwUIjzPUCvsMXMB8GA1UdIwQY MBaAFO4lAm5ZVdzdERR2+baEnXKBhUabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTct MmE0NmY2ZmFjNGNhLzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTctMmE0NmY2ZmFjNGNh LzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKmzYW4t yTi7lA3Zgvj8POZoL3SJr89ad0EKvy1e/DaeEr72YVB4FMizN3PcMs0TcZmQKaLp S0ola1XToQZLJX5ljSD4x2b1XKqwAeTp39buwLpYEdPOceu2Vw5jzXkGtgI4wZp0 erObYRGiacMLnjKI/pSpslvumXuzNX547YgGCz122hTFxE3RR81rx8dgLUechhbE yF8IPB6fCipBvY4H9saiCyfgx5aFWHx9ba5EKEnoOwIeDBg9PIh8WIfxsPSlZppf HLfKSlGe1bWpcIUEPcW5qpvNtNLfULw6oN3xwnSuOgSCBVverPdBQAmjTd2a7MKU k6Z3HwQ2uWjlBQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:56 2025 by rpki-client