This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json) Hash identifier: n0KqUFxfRiFlIEIDXDXzOoihhlpJVWpmZ/VW/ME74ws= Subject key identifier: A4:62:9F:16:7E:E7:AF:6C:6B:E7:C1:63:03:53:DD:DC:6A:77:7A:E4 Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29 Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729 Certificate serial: 019B4814765C2C889A4BC9275482184B9F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft Manifest number: 03EF Signing time: Mon 22 Dec 2025 22:00:59 +0000 Manifest this update: Mon 22 Dec 2025 22:00:59 +0000 Manifest next update: Tue 23 Dec 2025 22:00:59 +0000 Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: jPTT69J7pL6fp7SSunZog1DPOJNc6+d2Oq8xle/1Xxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:76:5c:2c:88:9a:4b:c9:27:54:82:18:4b:9f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729 Validity Not Before: Dec 22 22:00:59 2025 GMT Not After : Dec 23 22:00:59 2025 GMT Subject: CN=a4629f167ee7af6c6be7c1630353dddc6a777ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:e4:85:50:2b:6c:62:c9:59:34:68:3e:d6: 66:6c:56:d3:62:c0:a4:ec:3f:98:a5:ec:da:ad:b6: e6:93:8e:c2:86:1e:b1:11:04:71:3a:7b:57:a5:72: 19:b8:ea:98:60:fb:fb:92:0e:70:c3:98:31:21:86: 49:56:8c:59:92:5b:07:ab:d7:fa:5b:8b:ed:85:73: bd:c7:4c:21:35:db:29:5f:e3:6a:88:6a:c6:58:fe: b9:c0:e5:32:42:48:ac:a0:2f:4a:25:b3:8c:cd:44: 56:03:47:18:b2:83:a2:39:0b:68:6b:bb:8b:a1:90: 74:c2:1c:ac:4d:0e:85:63:0e:2b:e1:2b:1a:db:42: dd:a1:b2:98:33:04:50:f2:38:a1:55:88:c1:e3:85: bf:c9:63:a0:9b:6b:cf:44:1f:6c:95:19:28:20:5f: 5c:f5:be:45:f9:fe:60:6b:fb:05:0a:fd:dd:95:15: 11:42:22:b7:3e:2d:44:f2:75:1c:30:e3:72:60:ad: 13:fc:1b:a9:6d:6b:13:b7:a4:3f:36:eb:03:94:f7: 1e:c7:1e:47:7c:99:4c:a6:90:a5:97:16:af:e5:c4: d9:23:ea:35:84:84:9f:32:82:48:35:51:eb:1a:23: a3:73:01:8f:0d:a0:ae:55:52:86:1b:3b:0d:88:e4: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:62:9F:16:7E:E7:AF:6C:6B:E7:C1:63:03:53:DD:DC:6A:77:7A:E4 X509v3 Authority Key Identifier: keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:14:fb:1b:90:b2:eb:f5:5f:c3:73:09:3b:63:93:4a:f9:cc: d3:1b:6e:29:8a:33:5e:af:91:ca:12:62:2a:ad:f9:3e:fc:cb: ea:6b:dd:53:3f:ed:cc:59:d4:d5:dd:6f:b2:c3:c6:0f:ed:99: bd:1a:f8:87:e3:c8:ca:02:62:6f:57:ee:ea:d1:7a:17:b6:e5: 41:8f:ec:1b:16:d9:e2:0a:93:8a:d3:be:ab:c6:10:b5:98:ca: 33:b4:89:0f:18:b0:c5:0e:66:19:08:57:fa:c4:8a:a0:f0:6f: 6e:c3:f6:1a:53:95:ca:e9:76:e1:2f:14:15:c9:b9:02:5e:ce: dd:66:1d:d2:f0:0e:76:6c:27:d9:5c:c4:93:58:c4:a9:17:40: 23:fd:29:e1:1c:35:35:39:f0:58:53:4b:09:5a:f8:68:9e:5d: ea:16:42:de:9e:10:c8:12:42:49:69:7b:13:f1:0a:9d:f0:3a: 30:98:a5:91:26:31:3f:b3:d5:35:9b:ed:4a:5d:7f:2c:85:11: 7e:ff:f1:95:14:4e:b1:c9:c8:73:f2:e5:1a:1c:fa:ff:5d:d7: a3:88:cc:49:4b:8f:f2:c2:5a:dc:46:e8:9a:d0:41:c2:20:02: 3c:79:c3:9e:e3:80:58:fa:56:44:89:fa:79:44:1f:0d:a9:d1: 5e:9e:87:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFHZcLIiaS8knVIIYS5+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzQ5MDg1NDU2M2QzMjIyMmU5YWNlNWFkOGE2NDllOWI0 YTE3MjkwHhcNMjUxMjIyMjIwMDU5WhcNMjUxMjIzMjIwMDU5WjAzMTEwLwYDVQQD EyhhNDYyOWYxNjdlZTdhZjZjNmJlN2MxNjMwMzUzZGRkYzZhNzc3YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIDkhVArbGLJWTRoPtZmbFbTYsCk 7D+Ypezarbbmk47Chh6xEQRxOntXpXIZuOqYYPv7kg5ww5gxIYZJVoxZklsHq9f6 W4vthXO9x0whNdspX+NqiGrGWP65wOUyQkisoC9KJbOMzURWA0cYsoOiOQtoa7uL oZB0whysTQ6FYw4r4Ssa20LdobKYMwRQ8jihVYjB44W/yWOgm2vPRB9slRkoIF9c 9b5F+f5ga/sFCv3dlRURQiK3Pi1E8nUcMONyYK0T/BupbWsTt6Q/NusDlPcexx5H fJlMppCllxav5cTZI+o1hISfMoJINVHrGiOjcwGPDaCuVVKGGzsNiOQJLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRinxZ+569sa+fBYwNT3dxqd3rkMB8GA1UdIwQY MBaAFO40kIVFY9MiIums5a2KZJ6bShcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMt NDVjNTNiN2VmOWZhLzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMtNDVjNTNiN2VmOWZh LzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRT7G5Cy 6/Vfw3MJO2OTSvnM0xtuKYozXq+RyhJiKq35PvzL6mvdUz/tzFnU1d1vssPGD+2Z vRr4h+PIygJib1fu6tF6F7blQY/sGxbZ4gqTitO+q8YQtZjKM7SJDxiwxQ5mGQhX +sSKoPBvbsP2GlOVyul24S8UFcm5Al7O3WYd0vAOdmwn2VzEk1jEqRdAI/0p4Rw1 NTnwWFNLCVr4aJ5d6hZC3p4QyBJCSWl7E/EKnfA6MJilkSYxP7PVNZvtSl1/LIUR fv/xlRROscnIc/LlGhz6/13Xo4jMSUuP8sJa3EbomtBBwiACPHnDnuOAWPpWRIn6 eUQfDanRXp6HnA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:56 2025 by rpki-client