This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft File: 7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json) Hash identifier: 8jb0pDJR9mpX/8fd0sf0vgiv3ndK63EnUW2e+9dOwNw= Subject key identifier: 9A:3F:70:CC:1E:2C:8E:5A:76:47:8A:21:F3:D4:F3:E1:6F:4C:44:43 Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b Certificate serial: 019B2B1E3F303B4A00CB25EEBFC3CCD80479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft Manifest number: 0BD2 Signing time: Wed 17 Dec 2025 07:02:41 +0000 Manifest this update: Wed 17 Dec 2025 07:02:41 +0000 Manifest next update: Thu 18 Dec 2025 07:02:41 +0000 Files and hashes: 1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: cIDD4UgUBiHOxDEfuyZFTyDWoRid8Uv8guvJ+pRzT94=) 2: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (hash: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:3f:30:3b:4a:00:cb:25:ee:bf:c3:cc:d8:04:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b Validity Not Before: Dec 17 07:02:41 2025 GMT Not After : Dec 18 07:02:41 2025 GMT Subject: CN=9a3f70cc1e2c8e5a76478a21f3d4f3e16f4c4443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:b2:a3:58:a3:a9:4d:21:86:d9:e1:02:8b: 91:ef:7f:66:94:1d:a7:fb:b3:40:03:4c:58:51:95: 82:6c:88:f6:e0:b2:4b:c4:f4:7a:f1:4e:6c:18:1c: fa:69:dd:f0:8d:fe:f4:a4:be:c9:bd:12:0c:65:66: c9:c5:0b:1e:42:2e:f9:66:10:f4:d0:0c:da:3a:fb: cb:71:85:6d:8f:db:03:fa:5d:b5:ff:ea:ad:fe:2d: a6:36:a2:31:84:fb:3e:8f:38:57:86:ca:f8:f5:0e: f3:30:ee:70:51:49:99:a8:78:0e:d6:ca:0f:32:97: 6d:ce:84:c7:dd:87:36:23:82:46:a7:aa:04:e9:00: 27:d4:5b:64:2f:1e:ae:ec:24:eb:cc:fb:f7:97:cc: 38:70:d5:ea:22:02:18:fe:32:22:35:0d:8c:82:97: cb:ad:2d:d5:2b:e6:9c:bc:b0:d2:e7:7e:0b:2b:9f: c7:1c:9b:bd:e7:14:6e:a3:18:b2:98:6b:3d:ca:13: 48:89:81:69:27:24:9e:c3:8e:e0:88:3e:16:b4:c1: 1b:e4:8d:55:1c:43:31:38:92:e7:3e:6a:95:86:aa: 5a:20:6b:30:53:95:c9:44:22:5f:d1:1e:9e:a0:62: 2f:97:70:8e:8d:36:20:57:24:bb:cc:6b:a4:39:93: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3F:70:CC:1E:2C:8E:5A:76:47:8A:21:F3:D4:F3:E1:6F:4C:44:43 X509v3 Authority Key Identifier: keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:45:a3:72:7c:46:79:c2:07:5e:bb:45:39:44:a4:2a:89:73: 3b:1f:b1:1a:fe:b3:a4:b6:af:7e:d0:12:ba:29:1b:ce:42:b0: 47:f7:dd:4f:ef:ab:0e:ad:03:eb:ee:94:0d:1e:3e:83:5a:12: 1a:93:81:9a:9e:c6:11:50:cd:65:b3:79:1c:c5:91:b4:7c:f4: b4:c7:d0:65:ee:c2:5f:28:fa:2d:ad:f0:90:0f:b0:c5:ef:62: 17:b0:41:8d:aa:dc:fe:ef:92:4f:fb:bd:f8:d1:74:91:4a:e4: 9c:27:e7:9b:d5:0f:ba:ce:a5:d0:0c:ed:14:16:77:32:dc:7c: 57:d5:b2:4a:56:b0:42:4f:1f:ff:8b:d7:65:62:76:23:6e:08: ef:64:f4:96:57:e5:ee:7a:28:20:7a:ef:2d:01:08:1d:9c:de: 4b:bb:e1:59:65:29:24:32:2c:a8:b7:ba:1f:81:9d:15:02:94: f8:2b:11:9f:b2:b1:7b:89:3b:64:bc:bc:5a:d1:b5:f9:bd:01: 68:77:9d:96:fa:99:9f:5a:2d:db:bc:41:ab:e7:bc:29:b7:92: 84:cb:3e:c7:af:18:5b:e6:27:a4:05:d2:b6:61:53:6c:35:c6: 1e:79:c6:38:45:1d:39:6e:ee:2e:8d:1d:00:f2:ca:54:4e:79: f4:a2:6f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHj8wO0oAyyXuv8PM2AR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjUxOGM0MjZjZmM0MDgyZmI5MmVjNzQwZDdjM2M3ODgy NTU2M2IwHhcNMjUxMjE3MDcwMjQxWhcNMjUxMjE4MDcwMjQxWjAzMTEwLwYDVQQD Eyg5YTNmNzBjYzFlMmM4ZTVhNzY0NzhhMjFmM2Q0ZjNlMTZmNGM0NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFayo1ijqU0hhtnhAouR739mlB2n +7NAA0xYUZWCbIj24LJLxPR68U5sGBz6ad3wjf70pL7JvRIMZWbJxQseQi75ZhD0 0AzaOvvLcYVtj9sD+l21/+qt/i2mNqIxhPs+jzhXhsr49Q7zMO5wUUmZqHgO1soP MpdtzoTH3Yc2I4JGp6oE6QAn1FtkLx6u7CTrzPv3l8w4cNXqIgIY/jIiNQ2MgpfL rS3VK+acvLDS534LK5/HHJu95xRuoxiymGs9yhNIiYFpJySew47giD4WtMEb5I1V HEMxOJLnPmqVhqpaIGswU5XJRCJf0R6eoGIvl3COjTYgVyS7zGukOZMaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo/cMweLI5adkeKIfPU8+FvTERDMB8GA1UdIwQY MBaAFO1lGMQmz8QIL7kux0DXw8eIJVY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYt MDViM2I5NzA5ZjA5LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYtMDViM2I5NzA5ZjA5 LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkWjcnxG ecIHXrtFOUSkKolzOx+xGv6zpLavftASuikbzkKwR/fdT++rDq0D6+6UDR4+g1oS GpOBmp7GEVDNZbN5HMWRtHz0tMfQZe7CXyj6La3wkA+wxe9iF7BBjarc/u+ST/u9 +NF0kUrknCfnm9UPus6l0AztFBZ3Mtx8V9WySlawQk8f/4vXZWJ2I24I72T0llfl 7nooIHrvLQEIHZzeS7vhWWUpJDIsqLe6H4GdFQKU+CsRn7Kxe4k7ZLy8WtG1+b0B aHedlvqZn1ot27xBq+e8KbeShMs+x68YW+YnpAXStmFTbDXGHnnGOEUdOW7uLo0d APLKVE559KJvXw== -----END CERTIFICATE-----Generated at Wed Dec 17 11:19:06 2025 by rpki-client