This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft File: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json) Hash identifier: irn1kDWBQC5DDQBFQ8RgFuHg6Wv8ovFBlNSx5gm46Tc= Subject key identifier: 1E:C3:4E:D1:BD:5C:B8:F3:6D:EE:7F:D2:24:42:82:27:BE:C5:0F:87 Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22 Certificate issuer: /CN=ed82f323359382d801ed0b93ec1bfa030de63622 Certificate serial: 019B3F7F66E5C45E4FCE2BBEE601611FC20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft Manifest number: 0C Signing time: Sun 21 Dec 2025 06:01:12 +0000 Manifest this update: Sun 21 Dec 2025 06:01:12 +0000 Manifest next update: Mon 22 Dec 2025 06:01:12 +0000 Files and hashes: 1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: /6HVkzwSxwQB9ng2r8bvyyI4CsiYTItboTkTVsO8YQQ=) 2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:66:e5:c4:5e:4f:ce:2b:be:e6:01:61:1f:c2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622 Validity Not Before: Dec 21 06:01:12 2025 GMT Not After : Dec 22 06:01:12 2025 GMT Subject: CN=1ec34ed1bd5cb8f36dee7fd224428227bec50f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:da:c3:43:9e:6f:3c:f6:ca:de:b3:79:11: 56:d4:74:c4:ff:2a:d2:ea:06:95:d1:f2:18:c4:3c: c3:7f:94:5e:5a:b7:8e:99:3f:00:02:43:48:12:fc: 1f:30:7d:c2:a3:03:a0:64:80:9a:09:10:8b:3e:da: a5:f6:75:74:24:4a:58:a5:e2:a3:d7:1b:e7:55:f9: ba:c4:e6:02:2f:cb:94:52:fd:be:55:93:12:b5:f0: 11:d0:b4:69:86:02:5a:79:ba:ce:41:2e:e2:f0:db: 7b:34:05:05:5e:c5:99:67:70:15:b4:1b:dd:2d:f6: f9:e1:09:f1:c4:0b:bc:5a:bf:1f:c5:b6:f0:e2:f1: 75:83:75:2f:b3:be:cf:52:d2:ba:f7:59:b0:a4:f6: 27:0a:35:c0:7a:b8:88:33:46:de:41:cd:ff:0c:59: 7c:67:c6:bb:a8:e8:68:69:f8:bb:8a:51:92:bb:c0: 2b:03:01:74:2a:55:4f:b4:4b:b7:cf:f9:c7:03:e1: ae:b6:38:a7:da:8a:e0:3b:2f:64:ac:06:03:54:59: 83:cc:7d:84:ad:fd:ba:9f:8b:6c:4d:6c:09:7d:23: 07:83:9a:b8:61:a5:7e:87:ec:fd:d3:9f:0a:02:7e: 8d:e2:34:20:bc:1f:6b:a9:f5:05:a2:a8:96:6b:ab: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C3:4E:D1:BD:5C:B8:F3:6D:EE:7F:D2:24:42:82:27:BE:C5:0F:87 X509v3 Authority Key Identifier: keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f7:02:e0:33:49:11:0c:a8:fc:4b:a4:83:33:58:f7:c5:5d: 1e:5f:28:85:7c:e9:6a:49:82:9f:5e:d1:01:0a:d1:54:bc:39: 88:47:1e:9a:0a:a8:f2:fa:a5:50:81:15:0d:5b:7f:25:22:96: 60:da:1c:c6:cc:00:a2:f3:46:ea:10:d8:34:a9:38:98:9c:fc: 8c:aa:7c:98:90:71:9c:b9:a9:47:a0:0b:cf:dc:15:ac:0e:85: 8b:b5:b1:07:b3:50:9c:fd:8a:bc:26:bb:a9:8d:3f:b6:d2:5a: fe:d0:23:8c:11:d8:aa:71:e8:3a:6d:3d:a9:80:e7:0f:b0:4e: 95:83:bb:d8:ee:c7:9c:b7:e6:e3:e0:94:1f:4a:23:27:4f:49: a1:79:03:07:b0:62:07:97:63:80:e8:84:bf:11:67:22:03:89: 0f:68:f9:55:93:4c:b5:37:64:9c:58:fb:39:ab:a1:26:43:ef: 9d:70:2e:ca:16:e3:6e:dd:02:06:a8:51:a1:2d:a7:e5:65:55: 73:7c:bd:0f:7e:0e:b6:77:cc:ee:be:e0:85:ef:21:37:b1:4f: 23:8b:39:01:ef:30:ab:45:b3:a0:87:55:c5:a1:41:d2:fd:35: 6b:2f:f3:bb:c8:8d:f6:a4:c6:41:e4:a7:79:00:92:3b:6d:b9: eb:2b:2b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f2blxF5Pziu+5gFhH8IOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODJmMzIzMzU5MzgyZDgwMWVkMGI5M2VjMWJmYTAzMGRl NjM2MjIwHhcNMjUxMjIxMDYwMTEyWhcNMjUxMjIyMDYwMTEyWjAzMTEwLwYDVQQD EygxZWMzNGVkMWJkNWNiOGYzNmRlZTdmZDIyNDQyODIyN2JlYzUwZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuPaw0Oebzz2yt6zeRFW1HTE/yrS 6gaV0fIYxDzDf5ReWreOmT8AAkNIEvwfMH3CowOgZICaCRCLPtql9nV0JEpYpeKj 1xvnVfm6xOYCL8uUUv2+VZMStfAR0LRphgJaebrOQS7i8Nt7NAUFXsWZZ3AVtBvd Lfb54QnxxAu8Wr8fxbbw4vF1g3Uvs77PUtK691mwpPYnCjXAeriIM0beQc3/DFl8 Z8a7qOhoafi7ilGSu8ArAwF0KlVPtEu3z/nHA+Gutjin2orgOy9krAYDVFmDzH2E rf26n4tsTWwJfSMHg5q4YaV+h+z9058KAn6N4jQgvB9rqfUFoqiWa6vsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7DTtG9XLjzbe5/0iRCgie+xQ+HMB8GA1UdIwQY MBaAFO2C8yM1k4LYAe0Lk+wb+gMN5jYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUt MTY3ZGQxNWRjYjU5LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUtMTY3ZGQxNWRjYjU5 LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvcC4DNJ EQyo/EukgzNY98VdHl8ohXzpakmCn17RAQrRVLw5iEcemgqo8vqlUIEVDVt/JSKW YNocxswAovNG6hDYNKk4mJz8jKp8mJBxnLmpR6ALz9wVrA6Fi7WxB7NQnP2KvCa7 qY0/ttJa/tAjjBHYqnHoOm09qYDnD7BOlYO72O7HnLfm4+CUH0ojJ09JoXkDB7Bi B5djgOiEvxFnIgOJD2j5VZNMtTdknFj7OauhJkPvnXAuyhbjbt0CBqhRoS2n5WVV c3y9D34OtnfM7r7ghe8hN7FPI4s5Ae8wq0WzoIdVxaFB0v01ay/zu8iN9qTGQeSn eQCSO2256ysrVA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:31 2025 by rpki-client