This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json) Hash identifier: UEGMhAHg7HTQC+zdbja/sXOBbtY3cy2+ZdcPPpakiN0= Subject key identifier: 69:E8:AD:0C:E7:F8:02:59:4C:74:83:A8:EB:87:AD:9E:BE:E2:00:08 Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46 Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46 Certificate serial: 019B3EDA0A4C00712C833D358001A692EB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft Manifest number: B7 Signing time: Sun 21 Dec 2025 03:00:35 +0000 Manifest this update: Sun 21 Dec 2025 03:00:35 +0000 Manifest next update: Mon 22 Dec 2025 03:00:35 +0000 Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: ok3t+euZamKWA2iZMHoTph27TmIU4r9AwpwSdeq+1G0=) 2: g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa (hash: BhX3ai6MXXM39hpgWifIF0fPiVBPvolxXocXWL46aJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:0a:4c:00:71:2c:83:3d:35:80:01:a6:92:eb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46 Validity Not Before: Dec 21 03:00:35 2025 GMT Not After : Dec 22 03:00:35 2025 GMT Subject: CN=69e8ad0ce7f802594c7483a8eb87ad9ebee20008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:03:1c:1a:ac:35:76:80:42:60:cd:8c:1c: 0e:7a:13:98:fe:12:17:63:80:8e:c1:be:7d:07:6d: fc:6d:5c:87:03:e3:43:80:28:e8:9e:82:0d:1c:c1: 8c:f2:d3:58:a2:ef:d8:44:e4:b5:33:da:e4:bb:15: 9c:15:05:be:05:18:86:f0:c9:44:08:46:93:17:6b: 7f:7d:ef:f7:01:55:44:65:2a:51:d3:24:fb:24:b3: 23:a1:3b:d4:ba:36:e5:9c:35:d7:e9:29:53:66:38: 02:eb:14:08:3e:8b:7b:4e:5e:61:ca:d6:86:ba:7b: 1d:2c:a4:19:d6:17:c2:9d:7c:fc:36:93:33:68:c5: 3e:85:32:db:2a:4b:d8:5e:17:54:f3:0f:6a:cc:75: 9f:39:34:bb:4a:61:0d:69:48:fd:e9:c5:74:68:65: be:e5:f3:8c:92:01:f9:67:5f:73:60:f7:06:83:89: ea:43:70:4b:24:3e:68:41:94:34:e6:95:b6:95:54: e6:50:e5:4e:a7:63:23:67:95:fa:f6:30:eb:82:be: 73:75:b4:91:61:93:69:dd:a1:e5:91:54:47:7e:f1: 3b:5f:7c:bb:ed:f0:b3:33:62:a9:58:6d:b0:a9:b4: 71:ba:2e:1f:c6:e7:b3:cb:fb:0d:7f:7d:88:7a:0b: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E8:AD:0C:E7:F8:02:59:4C:74:83:A8:EB:87:AD:9E:BE:E2:00:08 X509v3 Authority Key Identifier: keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:79:8e:0f:ca:4f:5e:da:34:f8:f0:d2:d9:1f:cc:fb:1c:09: 43:37:27:2d:ed:86:61:70:64:f9:51:86:52:05:35:70:11:b4: f7:53:a9:26:54:7a:78:6d:9b:db:14:e5:55:66:b9:6e:1a:25: 8a:a8:79:4c:3a:05:f1:97:38:b2:f3:e3:94:ea:b3:7a:0e:81: 91:26:e5:3c:ee:83:51:0e:fd:d2:f6:49:7e:ad:37:ab:1d:15: b4:50:ab:14:95:c1:f5:ef:a5:fc:3b:3d:30:e1:1f:15:8a:22: 0e:ad:ef:ae:ad:49:d3:48:5d:8d:99:bd:93:f6:a4:19:c3:f4: 05:81:2e:97:e7:78:42:96:f6:8b:e8:70:4f:08:e3:4d:a7:1d: 83:99:da:ff:8f:95:e2:40:39:b7:4e:f6:1a:76:78:8e:fc:ad: ad:fb:00:99:50:9e:ca:7f:9a:28:79:d7:43:a2:c7:98:04:79: d3:4e:1d:13:13:67:25:1d:55:65:ae:a3:ee:86:2a:c0:d0:29: fc:bd:5d:af:92:bd:35:cf:b7:8f:01:a5:0b:d4:47:42:f7:e4: 7d:75:f4:02:30:ff:54:c5:0a:aa:46:42:96:f2:2e:eb:59:c4: dd:32:65:30:ef:ea:d3:5e:f4:c7:8a:29:48:9b:33:b0:16:02: e6:e2:23:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gpMAHEsgz01gAGmkus2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNTYwN2E0OTQyMDBmZjFmM2Q1OTllMjVmYzAxM2YzODY0 MGNkNDYwHhcNMjUxMjIxMDMwMDM1WhcNMjUxMjIyMDMwMDM1WjAzMTEwLwYDVQQD Eyg2OWU4YWQwY2U3ZjgwMjU5NGM3NDgzYThlYjg3YWQ5ZWJlZTIwMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsasDHBqsNXaAQmDNjBwOehOY/hIX Y4COwb59B238bVyHA+NDgCjonoINHMGM8tNYou/YROS1M9rkuxWcFQW+BRiG8MlE CEaTF2t/fe/3AVVEZSpR0yT7JLMjoTvUujblnDXX6SlTZjgC6xQIPot7Tl5hytaG unsdLKQZ1hfCnXz8NpMzaMU+hTLbKkvYXhdU8w9qzHWfOTS7SmENaUj96cV0aGW+ 5fOMkgH5Z19zYPcGg4nqQ3BLJD5oQZQ05pW2lVTmUOVOp2MjZ5X69jDrgr5zdbSR YZNp3aHlkVRHfvE7X3y77fCzM2KpWG2wqbRxui4fxuezy/sNf32IegtkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnorQzn+AJZTHSDqOuHrZ6+4gAIMB8GA1UdIwQY MBaAFONWB6SUIA/x89WZ4l/AE/OGQM1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYt NTA0N2NiMzI3ZDllLzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYtNTA0N2NiMzI3ZDll LzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3mOD8pP Xto0+PDS2R/M+xwJQzcnLe2GYXBk+VGGUgU1cBG091OpJlR6eG2b2xTlVWa5bhol iqh5TDoF8Zc4svPjlOqzeg6BkSblPO6DUQ790vZJfq03qx0VtFCrFJXB9e+l/Ds9 MOEfFYoiDq3vrq1J00hdjZm9k/akGcP0BYEul+d4Qpb2i+hwTwjjTacdg5na/4+V 4kA5t072GnZ4jvytrfsAmVCeyn+aKHnXQ6LHmAR5004dExNnJR1VZa6j7oYqwNAp /L1dr5K9Nc+3jwGlC9RHQvfkfXX0AjD/VMUKqkZClvIu61nE3TJlMO/q0170x4op SJszsBYC5uIjMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:11 2025 by rpki-client