This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json) Hash identifier: XVfglQH3943daljaU4RVZolUWBiW8MJH1UORlwDhm0A= Subject key identifier: 7F:14:27:0B:42:C5:97:09:9D:A2:AF:79:A9:49:7E:A7:F2:0F:DD:01 Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Certificate serial: 019B4ADEB4B60BDFC9A2C89D7E2418BC3B38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft Manifest number: 0F64 Signing time: Tue 23 Dec 2025 11:01:07 +0000 Manifest this update: Tue 23 Dec 2025 11:01:07 +0000 Manifest next update: Wed 24 Dec 2025 11:01:07 +0000 Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: iDNOfp52d/fF0DV01cwIs5Iw44oK15VpwQjJtXdqgR0=) 2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:b4:b6:0b:df:c9:a2:c8:9d:7e:24:18:bc:3b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Validity Not Before: Dec 23 11:01:07 2025 GMT Not After : Dec 24 11:01:07 2025 GMT Subject: CN=7f14270b42c597099da2af79a9497ea7f20fdd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:50:4d:eb:59:f2:23:14:d2:ce:36:b0:42: a2:c4:d1:fa:dc:9c:5d:a9:ad:0f:63:1c:65:0e:1e: 01:3f:88:57:ca:4e:30:f6:ee:de:f9:be:a3:04:17: 7d:e1:1a:e4:0c:fb:4c:42:58:d7:6e:ea:b3:94:55: 0e:eb:39:5c:a3:d7:bc:0a:52:e8:0c:42:16:bc:64: 93:b5:a7:3f:f8:8a:eb:f2:30:48:c0:a2:d0:35:32: df:cb:0f:92:a4:c0:50:7b:25:04:c7:4e:92:aa:ba: 3d:e5:0c:44:16:6e:91:ef:26:a9:32:06:b6:45:61: 2e:4d:96:c2:23:61:b2:f6:57:fb:dd:f0:fc:d8:e0: 0b:75:17:3e:b4:a5:5b:65:fa:4d:0c:57:aa:4d:75: 90:19:6d:29:1f:30:9b:e4:8b:f4:ff:a0:5e:cd:e4: cc:2d:e4:0e:54:36:8a:56:19:19:2e:2b:12:99:38: 6d:81:bf:29:86:ab:4e:1e:41:46:32:98:be:7f:72: 19:9d:ba:15:aa:fa:8b:0c:1e:fe:0a:26:4d:e3:1c: c2:ff:cd:2b:ac:ca:ca:6f:73:55:c3:ee:3c:19:a1: d4:b5:9f:20:69:18:a7:b7:4b:ff:38:da:a5:1a:c8: 68:59:e8:e3:8b:38:6a:68:a3:90:e3:6a:01:41:8b: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:14:27:0B:42:C5:97:09:9D:A2:AF:79:A9:49:7E:A7:F2:0F:DD:01 X509v3 Authority Key Identifier: keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:91:61:6a:8a:45:71:cf:27:67:18:d0:f1:e4:35:8a:94:91: 89:49:a8:01:ea:21:5e:b2:90:1e:42:60:65:f2:03:b3:13:b0: ee:9c:ea:4c:04:c3:3d:e9:33:63:af:ad:63:86:43:62:7d:c4: c3:60:8c:94:31:67:fe:ad:db:b8:ff:91:d3:5f:ee:08:81:b8: 65:7d:4e:f3:d9:68:4b:13:1e:5a:2d:f5:de:76:65:1b:3c:5a: ec:15:3c:26:4c:cc:b6:28:cc:98:96:d1:f7:b7:c8:38:b0:71: 3e:84:7f:fc:27:e7:fc:11:14:a8:d8:b3:fa:06:cc:18:9a:79: 31:8e:ed:e4:58:5d:7b:88:fd:82:bf:a4:94:1f:e2:79:e1:67: a0:bb:ed:ce:59:48:e0:f4:8e:f3:84:25:7c:aa:17:93:a6:d2: 22:20:4d:b2:80:93:a6:17:23:b7:81:0e:25:e4:02:a9:1a:02: d0:58:8f:e4:36:76:f8:87:52:26:d5:23:b3:67:d0:05:37:d5: 47:aa:54:d0:67:5a:14:44:37:0c:f1:28:6b:d0:87:ce:83:c1: c2:84:35:77:0d:39:a0:e9:94:b9:04:8d:f5:a4:84:cc:c2:47: ee:af:26:e0:e3:e4:40:f7:ab:f9:20:d9:8e:dd:a3:d9:d6:91: af:02:40:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3rS2C9/JosidfiQYvDs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx ODFhNGMwHhcNMjUxMjIzMTEwMTA3WhcNMjUxMjI0MTEwMTA3WjAzMTEwLwYDVQQD Eyg3ZjE0MjcwYjQyYzU5NzA5OWRhMmFmNzlhOTQ5N2VhN2YyMGZkZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApstQTetZ8iMU0s42sEKixNH63Jxd qa0PYxxlDh4BP4hXyk4w9u7e+b6jBBd94RrkDPtMQljXbuqzlFUO6zlco9e8ClLo DEIWvGSTtac/+Irr8jBIwKLQNTLfyw+SpMBQeyUEx06Sqro95QxEFm6R7yapMga2 RWEuTZbCI2Gy9lf73fD82OALdRc+tKVbZfpNDFeqTXWQGW0pHzCb5Iv0/6BezeTM LeQOVDaKVhkZLisSmThtgb8phqtOHkFGMpi+f3IZnboVqvqLDB7+CiZN4xzC/80r rMrKb3NVw+48GaHUtZ8gaRint0v/ONqlGshoWejjizhqaKOQ42oBQYsaqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8UJwtCxZcJnaKvealJfqfyD90BMB8GA1UdIwQY MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5FhaopF cc8nZxjQ8eQ1ipSRiUmoAeohXrKQHkJgZfIDsxOw7pzqTATDPekzY6+tY4ZDYn3E w2CMlDFn/q3buP+R01/uCIG4ZX1O89loSxMeWi313nZlGzxa7BU8JkzMtijMmJbR 97fIOLBxPoR//Cfn/BEUqNiz+gbMGJp5MY7t5Fhde4j9gr+klB/ieeFnoLvtzllI 4PSO84QlfKoXk6bSIiBNsoCTphcjt4EOJeQCqRoC0FiP5DZ2+IdSJtUjs2fQBTfV R6pU0GdaFEQ3DPEoa9CHzoPBwoQ1dw05oOmUuQSN9aSEzMJH7q8m4OPkQPer+SDZ jt2j2daRrwJA6A== -----END CERTIFICATE-----Generated at Tue Dec 23 20:52:55 2025 by rpki-client