This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json) Hash identifier: PPI9YNihnm1Wy9v4fmSjS2c1Ix5e1fI2G2mTitd+F0w= Subject key identifier: 49:D4:8A:7B:54:33:25:87:AB:4D:3D:33:93:D8:C1:C0:2B:3D:88:A1 Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d Certificate serial: 019B41DBC9C8D915F15D9E5941E0703BB87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft Manifest number: 0E4B Signing time: Sun 21 Dec 2025 17:01:21 +0000 Manifest this update: Sun 21 Dec 2025 17:01:21 +0000 Manifest next update: Mon 22 Dec 2025 17:01:21 +0000 Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: +LBUBFbEWewdZDXF9cU2X4sDdy4aoawZ3KfpBQz04R0=) 2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:c9:c8:d9:15:f1:5d:9e:59:41:e0:70:3b:b8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d Validity Not Before: Dec 21 17:01:21 2025 GMT Not After : Dec 22 17:01:21 2025 GMT Subject: CN=49d48a7b54332587ab4d3d3393d8c1c02b3d88a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:c6:1d:22:67:88:34:2b:d9:b9:96:6b:f9: 3d:91:c5:2a:1c:65:af:ba:2f:93:fe:f4:42:10:47: cd:31:68:28:f9:b2:01:a0:f3:da:19:33:f4:da:3b: cb:99:c0:09:fa:de:ef:5b:4a:ad:f7:f5:55:48:d2: 0c:d6:c6:97:7a:4f:30:2d:a8:9e:06:20:c2:e9:ff: b5:e8:cd:38:8f:5b:a2:41:8e:6e:d2:cb:e8:d5:41: 5b:9e:fd:3c:f9:b8:aa:22:7b:62:eb:22:e0:af:06: 60:0a:5c:ec:d4:3c:98:92:81:44:8e:25:e4:9a:a9: 9e:2f:41:01:37:cf:cc:77:70:56:32:56:02:af:60: 8b:01:77:ae:2a:4f:7b:69:b1:81:ab:fd:27:04:1d: f6:35:40:a8:16:1b:b4:02:73:0c:f4:2f:d5:bc:ce: f6:e7:cf:dd:34:a7:82:6a:89:ed:e4:5b:c0:1d:d0: 7c:1f:1f:3e:03:d1:d3:4f:28:cd:4f:2a:d9:9f:91: 2b:5b:b7:a7:e7:a0:f9:85:6c:a1:41:34:5b:06:ce: 1b:00:49:d5:6a:b8:5a:8b:a6:4b:7c:6e:63:e1:e0: 8c:9d:b7:b0:04:24:08:0a:5e:ab:f5:71:11:14:86: e6:21:57:b5:90:28:a0:52:24:88:7a:f9:bf:91:aa: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D4:8A:7B:54:33:25:87:AB:4D:3D:33:93:D8:C1:C0:2B:3D:88:A1 X509v3 Authority Key Identifier: keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2e:ac:30:4d:13:90:db:7f:3d:5a:a5:20:fb:79:35:3c:a5: 73:06:e0:46:98:ac:bf:ec:f0:b4:27:53:af:14:61:c9:16:8b: a0:26:bc:ee:e9:95:c8:e5:79:7e:5d:da:1c:b1:dd:48:32:28: 10:fc:8a:12:5c:a2:97:ed:9a:ea:af:61:c8:b5:c7:f2:5d:95: 6d:31:39:1c:8a:80:67:1c:36:ee:ac:18:57:8f:63:15:d4:9c: 0f:e3:eb:3d:fb:10:26:df:09:7d:d3:62:5a:1c:e9:5c:fc:0f: 0e:99:1a:2c:a5:d5:81:8c:4b:c0:f7:4a:63:a8:e5:76:e2:07: 0f:62:a6:e4:5d:5d:af:a0:bd:74:9b:8b:3c:6e:bc:77:ff:69: 9d:ca:39:1d:69:2f:aa:de:a3:f7:03:37:50:3a:76:a3:d6:d0: 10:61:4b:2c:df:c4:5a:6b:13:c1:a6:ea:46:48:41:62:e2:1b: cb:3b:50:38:52:d8:36:f4:56:f6:84:bc:b4:73:01:c5:bb:ad: 49:ec:60:0c:4b:d3:9a:66:08:5b:5e:f7:57:9f:51:c2:9a:5f: f1:0d:aa:04:dd:33:fd:d1:58:c2:5e:cd:ac:ed:93:8f:83:a7: d9:32:3d:86:df:1c:d4:9f:c0:39:c7:27:e1:8e:52:a3:8b:ef: 30:c4:a2:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB28nI2RXxXZ5ZQeBwO7h6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5 YTYyNWQwHhcNMjUxMjIxMTcwMTIxWhcNMjUxMjIyMTcwMTIxWjAzMTEwLwYDVQQD Eyg0OWQ0OGE3YjU0MzMyNTg3YWI0ZDNkMzM5M2Q4YzFjMDJiM2Q4OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv3GHSJniDQr2bmWa/k9kcUqHGWv ui+T/vRCEEfNMWgo+bIBoPPaGTP02jvLmcAJ+t7vW0qt9/VVSNIM1saXek8wLaie BiDC6f+16M04j1uiQY5u0svo1UFbnv08+biqInti6yLgrwZgClzs1DyYkoFEjiXk mqmeL0EBN8/Md3BWMlYCr2CLAXeuKk97abGBq/0nBB32NUCoFhu0AnMM9C/VvM72 58/dNKeCaont5FvAHdB8Hx8+A9HTTyjNTyrZn5ErW7en56D5hWyhQTRbBs4bAEnV arhai6ZLfG5j4eCMnbewBCQICl6r9XERFIbmIVe1kCigUiSIevm/kapLvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnUintUMyWHq009M5PYwcArPYihMB8GA1UdIwQY MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5 LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC6sME0T kNt/PVqlIPt5NTylcwbgRpisv+zwtCdTrxRhyRaLoCa87umVyOV5fl3aHLHdSDIo EPyKElyil+2a6q9hyLXH8l2VbTE5HIqAZxw27qwYV49jFdScD+PrPfsQJt8JfdNi WhzpXPwPDpkaLKXVgYxLwPdKY6jlduIHD2Km5F1dr6C9dJuLPG68d/9pnco5HWkv qt6j9wM3UDp2o9bQEGFLLN/EWmsTwabqRkhBYuIbyztQOFLYNvRW9oS8tHMBxbut SexgDEvTmmYIW173V59Rwppf8Q2qBN0z/dFYwl7NrO2Tj4On2TI9ht8c1J/AOccn 4Y5So4vvMMSiBg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:48:08 2025 by rpki-client