This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json) Hash identifier: k/yvlJswYn25xJTJU1GmcdjwUgzrcuoDdzqzYZYNo3E= Subject key identifier: 01:B8:61:0E:9A:1A:1C:E3:F8:7E:76:DC:46:25:EA:2D:E6:AD:A6:D3 Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Certificate serial: 019B50A9A70B0652B48F917C91DC5C21FF80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft Manifest number: 0F67 Signing time: Wed 24 Dec 2025 14:00:54 +0000 Manifest this update: Wed 24 Dec 2025 14:00:54 +0000 Manifest next update: Thu 25 Dec 2025 14:00:54 +0000 Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: RwFAEQmL+pK0YhcNPmd2oFWgfkcb+wixv6HQlTFq2j0=) 2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:a7:0b:06:52:b4:8f:91:7c:91:dc:5c:21:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Validity Not Before: Dec 24 14:00:54 2025 GMT Not After : Dec 25 14:00:54 2025 GMT Subject: CN=01b8610e9a1a1ce3f87e76dc4625ea2de6ada6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:35:2b:de:3e:02:b1:53:79:83:72:58:1f: 8e:10:e8:69:e0:90:08:9f:fd:aa:89:f4:19:0c:9b: bc:59:15:fa:99:08:25:ba:42:7b:ab:45:83:d6:04: 64:92:43:29:1e:f9:9e:37:96:33:4b:7f:09:5b:e2: b9:64:b2:5d:21:e6:88:84:de:e5:4e:26:65:f1:98: 3b:5b:e3:3d:81:0e:33:26:17:79:92:22:7e:76:c4: 7a:dc:79:84:20:88:2c:18:cf:e7:39:14:03:06:f5: dc:77:c2:4e:92:68:f7:a4:69:84:e1:5d:ba:9a:d0: 80:f4:79:e2:c2:97:b1:23:21:cb:57:ed:f7:fe:25: 4d:c7:e8:50:f3:7f:bf:86:41:c8:c8:b2:94:16:7b: e2:e8:11:b5:75:17:98:d6:1e:21:f0:bc:fe:93:5a: f8:64:ca:30:74:15:d6:15:ba:db:43:b0:1a:af:a6: fa:f0:2d:c1:b3:1f:09:30:01:94:8c:ff:e8:44:dc: 8a:5e:51:de:c8:21:52:de:94:d7:df:0f:ee:ef:4f: 30:f2:2f:3e:c4:9a:5e:00:0c:23:56:26:13:e7:74: 3a:ad:5c:f7:9b:5c:47:65:4d:d7:60:5c:b8:4f:a3: 9b:db:e2:11:03:4d:2d:9e:46:eb:09:6b:df:a4:0b: ab:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:61:0E:9A:1A:1C:E3:F8:7E:76:DC:46:25:EA:2D:E6:AD:A6:D3 X509v3 Authority Key Identifier: keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ab:79:5a:8d:ed:19:3d:f0:4d:44:48:50:2f:76:35:b2:83: fe:f8:b6:64:95:68:1c:31:ea:5f:c0:8f:43:3d:43:75:2c:58: 27:92:28:c3:48:49:c2:45:ba:fc:4d:ea:71:21:06:53:09:6a: 37:ea:e5:3a:8d:ae:4d:2b:b5:c2:e4:2d:4e:bc:53:93:96:9c: b7:d5:51:e7:b6:c8:a3:3e:b6:3c:74:e6:60:d8:07:92:02:00: 47:3a:45:9d:01:2e:c0:ba:8e:ff:8a:27:40:de:af:f9:5d:f7: 97:9e:46:44:b4:23:27:50:32:24:fc:a5:04:f3:4e:1d:ca:cd: a0:77:9a:e2:53:d4:47:4b:ae:8c:5f:dd:ec:96:49:31:d1:89: 87:80:be:1f:57:b8:01:b4:9c:34:57:88:31:82:ad:7b:6c:9f: f6:e1:a7:a2:f8:19:29:08:5f:cc:c2:b2:6e:87:73:4c:04:20: 17:31:16:b7:93:5e:3b:c1:22:70:b0:8b:ee:53:85:97:43:4e: 2b:46:c6:bf:cf:7b:c2:7d:45:88:1e:d3:83:6a:3e:45:3d:1a: 24:db:4f:38:f9:e6:45:0b:3c:c5:a2:88:12:2b:e4:cf:38:29: 2e:c4:a6:52:e7:25:62:d6:82:b6:92:10:ec:3e:34:7b:e0:7b: 5e:34:5b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqacLBlK0j5F8kdxcIf+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx ODFhNGMwHhcNMjUxMjI0MTQwMDU0WhcNMjUxMjI1MTQwMDU0WjAzMTEwLwYDVQQD EygwMWI4NjEwZTlhMWExY2UzZjg3ZTc2ZGM0NjI1ZWEyZGU2YWRhNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqms1K94+ArFTeYNyWB+OEOhp4JAI n/2qifQZDJu8WRX6mQglukJ7q0WD1gRkkkMpHvmeN5YzS38JW+K5ZLJdIeaIhN7l TiZl8Zg7W+M9gQ4zJhd5kiJ+dsR63HmEIIgsGM/nORQDBvXcd8JOkmj3pGmE4V26 mtCA9HniwpexIyHLV+33/iVNx+hQ83+/hkHIyLKUFnvi6BG1dReY1h4h8Lz+k1r4 ZMowdBXWFbrbQ7Aar6b68C3Bsx8JMAGUjP/oRNyKXlHeyCFS3pTX3w/u708w8i8+ xJpeAAwjViYT53Q6rVz3m1xHZU3XYFy4T6Ob2+IRA00tnkbrCWvfpAurqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG4YQ6aGhzj+H523EYl6i3mrabTMB8GA1UdIwQY MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKt5Wo3t GT3wTURIUC92NbKD/vi2ZJVoHDHqX8CPQz1DdSxYJ5Iow0hJwkW6/E3qcSEGUwlq N+rlOo2uTSu1wuQtTrxTk5act9VR57bIoz62PHTmYNgHkgIARzpFnQEuwLqO/4on QN6v+V33l55GRLQjJ1AyJPylBPNOHcrNoHea4lPUR0uujF/d7JZJMdGJh4C+H1e4 AbScNFeIMYKte2yf9uGnovgZKQhfzMKybodzTAQgFzEWt5NeO8EicLCL7lOFl0NO K0bGv897wn1FiB7Tg2o+RT0aJNtPOPnmRQs8xaKIEivkzzgpLsSmUuclYtaCtpIQ 7D40e+B7XjRbow== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:41 2025 by rpki-client