This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json) Hash identifier: svErS5EYvCok0pLp0eAaXmLGMxAQ5Gfr8p6RNQ9FyhA= Subject key identifier: 12:68:64:30:91:73:3C:4D:7B:DD:0D:45:1D:3F:75:B1:2C:B8:D1:2D Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Certificate serial: 019B3F7F2FBF52C5A58CA673C590D22C8675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 06:00:58 +0000 Manifest this update: Sun 21 Dec 2025 06:00:58 +0000 Manifest next update: Mon 22 Dec 2025 06:00:58 +0000 Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: RX+oKHI5xRvQSrRVV5WhS5cUoLzquovy92LI2AmE8Ig=) 2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:2f:bf:52:c5:a5:8c:a6:73:c5:90:d2:2c:86:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Validity Not Before: Dec 21 06:00:58 2025 GMT Not After : Dec 22 06:00:58 2025 GMT Subject: CN=1268643091733c4d7bdd0d451d3f75b12cb8d12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:f1:50:ac:53:14:34:ee:72:7a:f6:5c:29: 7f:25:ff:1c:13:ea:7b:e5:ca:61:d7:c7:07:84:c0: 11:5d:92:71:53:f3:44:32:6e:d2:62:f9:9f:21:53: 29:69:19:b4:df:6b:a8:a6:c2:eb:32:48:cb:b7:29: d5:ce:af:a1:e1:ba:21:9a:5c:56:9d:f5:ed:8b:99: c3:0c:8e:15:eb:98:50:05:64:4c:72:59:fc:a0:34: a7:20:cd:64:35:c2:87:79:23:de:09:a8:a0:9c:4b: b6:c3:e7:f8:c3:fb:a1:24:86:9a:1a:25:84:d6:f1: d5:0c:c7:9a:ca:83:44:4b:9f:8e:38:20:dd:d3:a0: c3:76:67:8d:78:5a:75:52:8a:f1:df:49:46:ed:1d: 09:3c:90:9c:85:9d:c2:b9:a8:db:4b:22:19:8f:72: 13:cf:0a:80:4c:2a:93:25:7e:fc:f2:16:1e:00:17: 2d:53:9a:67:1c:ab:17:7a:45:cc:92:c3:c6:bb:bb: 98:29:12:9f:4e:d0:1a:d1:4f:86:9a:32:9a:e6:f2: 70:83:14:ba:d5:72:c0:88:26:48:9c:b4:43:a1:28: ce:62:cd:94:b1:9f:fe:4b:3c:fa:42:10:c4:a4:9d: 92:60:3c:7a:dc:13:e3:d4:07:81:9e:fa:6a:15:af: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:68:64:30:91:73:3C:4D:7B:DD:0D:45:1D:3F:75:B1:2C:B8:D1:2D X509v3 Authority Key Identifier: keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:81:93:aa:0d:6e:38:06:be:d7:1e:33:79:4d:6e:69:de:32: fb:80:62:0f:65:ba:94:09:72:2a:88:b1:f6:31:70:e8:a3:4d: 23:83:11:16:00:9e:98:6a:83:bf:92:8d:df:34:68:63:a8:71: ca:5e:35:9e:17:ef:7d:ca:68:b9:e3:b8:8d:ba:be:64:da:dc: b6:48:f9:5f:bb:b0:15:c4:27:fb:80:7f:9f:5f:c8:e1:97:92: 11:09:ed:3a:e3:df:ca:1c:9b:3c:d1:33:2e:bc:7d:5e:f1:b6: 2b:95:c7:1f:ae:86:93:8b:57:5e:a8:49:f2:49:53:ce:2d:53: 5d:f5:dd:d5:95:a4:cc:f0:89:f2:f0:cb:d7:38:f2:89:4e:88: 85:d8:a8:06:23:36:73:ce:67:11:5c:95:08:4a:ec:08:c1:67: 13:2a:2b:e1:4b:21:d1:b7:04:b2:77:91:e1:7d:b2:6c:73:a8: 63:f5:2d:5f:4f:75:ef:50:d6:88:99:93:cb:9a:9e:03:09:d2: 3d:94:b6:69:9f:7e:d2:8d:ea:03:fe:94:5e:d8:96:29:3a:4c: 62:c5:97:88:f9:3f:2d:96:dc:b5:a7:28:f6:ec:a5:4e:ff:8c: 3b:51:6e:b3:a0:74:f6:d2:b2:0a:5f:a3:3d:d8:b6:d6:e6:88: 51:21:4e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fy+/UsWljKZzxZDSLIZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0 NTVhNTYwHhcNMjUxMjIxMDYwMDU4WhcNMjUxMjIyMDYwMDU4WjAzMTEwLwYDVQQD EygxMjY4NjQzMDkxNzMzYzRkN2JkZDBkNDUxZDNmNzViMTJjYjhkMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD/xUKxTFDTucnr2XCl/Jf8cE+p7 5cph18cHhMARXZJxU/NEMm7SYvmfIVMpaRm032uopsLrMkjLtynVzq+h4bohmlxW nfXti5nDDI4V65hQBWRMcln8oDSnIM1kNcKHeSPeCaignEu2w+f4w/uhJIaaGiWE 1vHVDMeayoNES5+OOCDd06DDdmeNeFp1Uorx30lG7R0JPJCchZ3CuajbSyIZj3IT zwqATCqTJX788hYeABctU5pnHKsXekXMksPGu7uYKRKfTtAa0U+GmjKa5vJwgxS6 1XLAiCZInLRDoSjOYs2UsZ/+Szz6QhDEpJ2SYDx63BPj1AeBnvpqFa+1cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJoZDCRczxNe90NRR0/dbEsuNEtMB8GA1UdIwQY MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1 LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoGTqg1u OAa+1x4zeU1uad4y+4BiD2W6lAlyKoix9jFw6KNNI4MRFgCemGqDv5KN3zRoY6hx yl41nhfvfcpoueO4jbq+ZNrctkj5X7uwFcQn+4B/n1/I4ZeSEQntOuPfyhybPNEz Lrx9XvG2K5XHH66Gk4tXXqhJ8klTzi1TXfXd1ZWkzPCJ8vDL1zjyiU6IhdioBiM2 c85nEVyVCErsCMFnEyor4Ush0bcEsneR4X2ybHOoY/UtX09171DWiJmTy5qeAwnS PZS2aZ9+0o3qA/6UXtiWKTpMYsWXiPk/LZbctaco9uylTv+MO1Fus6B09tKyCl+j Pdi21uaIUSFOjw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:22:52 2025 by rpki-client