This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json) Hash identifier: jYHdFeUlMvHmSpP9r/9og9TGCPvSFuurkdthDN+WZ0I= Subject key identifier: F2:71:D0:D4:4F:74:65:5E:36:C1:B5:10:5A:6F:61:57:7D:13:C0:A4 Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac Certificate serial: 019B3EA39E512DE5188F73EB98F1A5D5DBDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft Manifest number: 15F3 Signing time: Sun 21 Dec 2025 02:01:08 +0000 Manifest this update: Sun 21 Dec 2025 02:01:08 +0000 Manifest next update: Mon 22 Dec 2025 02:01:08 +0000 Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: D4spYPeJJRY6L73PlvE1EwB1vV1Im4vopKqEyWj1xwU=) 2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:9e:51:2d:e5:18:8f:73:eb:98:f1:a5:d5:db:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac Validity Not Before: Dec 21 02:01:08 2025 GMT Not After : Dec 22 02:01:08 2025 GMT Subject: CN=f271d0d44f74655e36c1b5105a6f61577d13c0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:6b:bd:d0:c0:6a:71:19:c1:be:21:df:e6: 8b:be:34:79:9b:07:13:c8:af:c3:b6:5a:61:ca:bf: ec:93:01:cf:95:65:54:bc:9e:89:78:5f:44:7c:01: 45:50:aa:da:dc:c6:2c:8b:70:85:6a:2f:10:2d:2b: 0d:9d:e5:86:c5:51:28:cc:ce:c3:8d:05:da:d9:c4: 05:79:36:b5:0d:4f:b8:b5:b1:03:5b:b6:4f:7c:b5: be:d9:6c:9f:c9:3d:5f:8b:71:62:6b:2d:c2:f4:6e: 5f:d2:bb:ed:4b:85:03:f2:c7:ba:a9:43:b1:22:c9: 5c:7d:85:99:4a:35:97:08:e5:a3:83:aa:97:14:17: e5:b7:91:bf:5b:6b:e8:ba:22:ba:f1:38:b7:94:55: 85:e2:2c:b2:d1:03:c8:6d:db:2e:eb:3c:52:04:69: be:1d:b3:bd:df:6a:ec:d9:c3:ca:29:8d:fb:1e:fe: 88:d6:4a:08:fa:1b:69:ad:78:d1:00:b6:0d:be:54: 6e:85:b6:6a:78:3a:ae:a0:29:9e:da:48:a1:d1:40: 80:6f:15:bf:48:4f:c9:b9:aa:4e:64:e7:cc:1d:b0: 41:99:f6:05:a1:25:7a:ec:b9:00:2c:82:b0:27:a9: d4:cf:b8:b3:3a:63:0a:e6:34:77:4e:9c:68:94:86: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:71:D0:D4:4F:74:65:5E:36:C1:B5:10:5A:6F:61:57:7D:13:C0:A4 X509v3 Authority Key Identifier: keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:37:7f:f7:f2:b3:7d:c7:d0:86:68:03:d4:23:8d:18:d3:b3: ad:02:f8:b9:ac:1b:73:35:8e:1a:1d:26:f5:05:95:8c:86:10: 8e:dc:9b:eb:52:58:59:f6:74:4d:47:ed:49:f1:68:c3:df:5c: 2c:42:c9:a6:d2:88:00:b9:30:62:ce:31:3f:9b:95:4c:0d:b7: 86:4e:82:7e:e5:75:cd:39:ec:d1:66:c0:b8:03:ce:03:6a:8c: 78:b1:68:36:68:42:e2:f1:09:bc:42:28:c6:1a:3e:83:94:64: 41:07:2d:8c:5a:64:0c:16:37:07:6e:cd:f5:07:54:97:50:64: f7:20:c9:ff:f3:2c:6d:29:74:e2:4a:10:b0:12:7e:ac:a4:cd: ff:57:be:b4:55:33:85:02:7c:1a:9e:6b:05:3e:9c:e9:a7:f3: 2b:91:cc:e9:d5:ce:c3:d5:1f:f4:2f:32:0d:f8:52:82:67:3f: 3b:eb:b6:91:52:f3:dd:ec:33:7c:3d:4b:28:8a:b3:41:6c:2e: 2b:30:41:c2:f7:d6:1a:84:ca:6d:c3:8c:f5:5e:30:54:17:09: 24:a7:09:af:57:98:e6:ab:6d:0f:e9:14:73:dc:45:7d:ac:47: 77:9e:8c:d4:db:59:ab:a9:12:e6:b0:40:68:be:50:db:90:13: 30:4f:c2:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o55RLeUYj3PrmPGl1dvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmE5OGIyMjFhYmU0ZGQ5NTk5OWVlZjI5MmZmMGJlYTQx MjE4YWMwHhcNMjUxMjIxMDIwMTA4WhcNMjUxMjIyMDIwMTA4WjAzMTEwLwYDVQQD EyhmMjcxZDBkNDRmNzQ2NTVlMzZjMWI1MTA1YTZmNjE1NzdkMTNjMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8prvdDAanEZwb4h3+aLvjR5mwcT yK/Dtlphyr/skwHPlWVUvJ6JeF9EfAFFUKra3MYsi3CFai8QLSsNneWGxVEozM7D jQXa2cQFeTa1DU+4tbEDW7ZPfLW+2WyfyT1fi3Fiay3C9G5f0rvtS4UD8se6qUOx IslcfYWZSjWXCOWjg6qXFBflt5G/W2vouiK68Ti3lFWF4iyy0QPIbdsu6zxSBGm+ HbO932rs2cPKKY37Hv6I1koI+htprXjRALYNvlRuhbZqeDquoCme2kih0UCAbxW/ SE/JuapOZOfMHbBBmfYFoSV67LkALIKwJ6nUz7izOmMK5jR3TpxolIY//wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJx0NRPdGVeNsG1EFpvYVd9E8CkMB8GA1UdIwQY MBaAFO8qmLIhq+TdlZme7ykv8L6kEhisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQt NTZiNjViOTFhNzNjLzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQtNTZiNjViOTFhNzNj LzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzd/9/Kz fcfQhmgD1CONGNOzrQL4uawbczWOGh0m9QWVjIYQjtyb61JYWfZ0TUftSfFow99c LELJptKIALkwYs4xP5uVTA23hk6CfuV1zTns0WbAuAPOA2qMeLFoNmhC4vEJvEIo xho+g5RkQQctjFpkDBY3B27N9QdUl1Bk9yDJ//MsbSl04koQsBJ+rKTN/1e+tFUz hQJ8Gp5rBT6c6afzK5HM6dXOw9Uf9C8yDfhSgmc/O+u2kVLz3ewzfD1LKIqzQWwu KzBBwvfWGoTKbcOM9V4wVBcJJKcJr1eY5qttD+kUc9xFfaxHd56M1NtZq6kS5rBA aL5Q25ATME/COw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:16 2025 by rpki-client