This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json) Hash identifier: cWFNXdjQc+RlK5cEVzIJdhClW5iEluhxz3ob7htdNnU= Subject key identifier: 44:68:95:C1:84:02:98:16:3F:E4:9C:57:53:F8:76:4A:13:DF:85:8D Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Certificate serial: 019B3268A41A7B6D219340679FC8F8D85BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft Manifest number: 1589 Signing time: Thu 18 Dec 2025 17:01:17 +0000 Manifest this update: Thu 18 Dec 2025 17:01:17 +0000 Manifest next update: Fri 19 Dec 2025 17:01:17 +0000 Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=) 2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: wXs4SL+nR9OCMpllVs6+Uo70wQhnXAKiTHBQIZPzkW8=) 3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=) 4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:a4:1a:7b:6d:21:93:40:67:9f:c8:f8:d8:5b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Validity Not Before: Dec 18 17:01:17 2025 GMT Not After : Dec 19 17:01:17 2025 GMT Subject: CN=446895c1840298163fe49c5753f8764a13df858d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:2d:0d:a6:7d:c8:37:19:1f:cf:ae:cd:48: 21:77:f1:b0:06:7b:a6:e1:01:5d:67:75:41:97:6f: d5:5a:99:c5:69:5c:46:8d:9a:be:92:0f:7f:54:44: b2:a5:8a:de:91:90:db:f5:a1:3e:1b:b9:14:09:b9: 07:c3:41:83:a8:c3:eb:f1:bb:b4:78:d2:ce:08:6e: 84:db:9e:a5:5e:9c:44:84:65:2f:e1:88:14:a2:2a: 98:7c:51:49:f5:60:7f:93:66:22:9a:42:1c:ba:db: 60:1f:dc:aa:33:e6:40:58:06:e4:4d:64:d6:cc:9c: e4:8f:91:20:34:64:90:f9:b0:fd:80:fa:e5:85:36: 20:92:d4:86:e0:13:85:d2:1d:6e:3a:6e:ff:7b:5b: 65:24:1e:93:0f:00:50:7e:dc:20:00:57:d4:c3:34: 66:4f:a6:1d:85:c2:30:c1:76:73:46:a0:ca:c9:24: 6a:85:0d:59:68:91:a8:78:14:2b:8f:28:56:52:a9: d4:82:d2:13:5e:eb:22:8e:6a:56:c7:d0:dd:83:17: 36:34:7c:f5:1a:9d:1c:29:a7:6a:c1:a6:fa:d8:45: 5b:91:00:ea:78:b4:79:8b:6d:09:81:da:3b:d1:27: 66:ac:d5:ca:e8:75:08:29:38:fb:6a:e5:46:44:f2: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:68:95:C1:84:02:98:16:3F:E4:9C:57:53:F8:76:4A:13:DF:85:8D X509v3 Authority Key Identifier: keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6c:7b:a3:2f:d5:c0:79:34:da:b8:9a:93:cf:9d:6c:2c:67: 6a:05:ca:99:ca:f6:0c:79:1b:b3:09:45:09:9a:2a:ea:16:15: c4:0b:a5:10:02:02:19:59:77:7c:e2:87:51:44:83:54:17:31: d2:40:fc:52:26:2b:54:6b:14:a5:f8:d8:49:35:b6:0d:07:94: 48:50:bf:27:1e:89:26:15:fc:63:da:51:21:b2:f4:a1:5a:81: 2c:a4:7c:1a:96:1e:b6:06:08:a7:79:3a:c0:eb:e0:a6:1c:f2: 13:2e:d4:52:e0:d3:96:1c:a2:cc:3b:b7:e6:28:77:df:49:9c: 62:84:12:37:63:fa:09:4c:88:27:ab:a1:d1:c6:5c:4b:7b:54: e1:43:ad:cb:63:39:ef:d3:00:55:ba:f8:e4:21:e6:c2:b6:f7: ae:c0:d2:41:f0:14:51:ad:77:f0:77:84:34:77:d4:fa:1e:a7: af:21:89:ab:72:74:db:ca:fd:07:1a:a8:72:80:33:45:94:ac: 6b:3d:fe:25:d1:bd:81:36:01:a2:6a:cc:8f:21:b8:35:ea:2f: 04:15:91:fa:36:97:3b:ea:5a:ca:aa:71:71:e3:24:7d:85:8d: db:fb:b3:1e:a6:cf:cf:ba:4b:6b:3b:20:46:f5:f2:1d:03:2b: b2:0b:0e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaKQae20hk0Bnn8j42FusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3 OWFkNzcwHhcNMjUxMjE4MTcwMTE3WhcNMjUxMjE5MTcwMTE3WjAzMTEwLwYDVQQD Eyg0NDY4OTVjMTg0MDI5ODE2M2ZlNDljNTc1M2Y4NzY0YTEzZGY4NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBMtDaZ9yDcZH8+uzUghd/GwBnum 4QFdZ3VBl2/VWpnFaVxGjZq+kg9/VESypYrekZDb9aE+G7kUCbkHw0GDqMPr8bu0 eNLOCG6E256lXpxEhGUv4YgUoiqYfFFJ9WB/k2YimkIcuttgH9yqM+ZAWAbkTWTW zJzkj5EgNGSQ+bD9gPrlhTYgktSG4BOF0h1uOm7/e1tlJB6TDwBQftwgAFfUwzRm T6YdhcIwwXZzRqDKySRqhQ1ZaJGoeBQrjyhWUqnUgtITXusijmpWx9Ddgxc2NHz1 Gp0cKadqwab62EVbkQDqeLR5i20Jgdo70SdmrNXK6HUIKTj7auVGRPJwkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERolcGEApgWP+ScV1P4dkoT34WNMB8GA1UdIwQY MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4 LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGx7oy/V wHk02riak8+dbCxnagXKmcr2DHkbswlFCZoq6hYVxAulEAICGVl3fOKHUUSDVBcx 0kD8UiYrVGsUpfjYSTW2DQeUSFC/Jx6JJhX8Y9pRIbL0oVqBLKR8GpYetgYIp3k6 wOvgphzyEy7UUuDTlhyizDu35ih330mcYoQSN2P6CUyIJ6uh0cZcS3tU4UOty2M5 79MAVbr45CHmwrb3rsDSQfAUUa138HeENHfU+h6nryGJq3J028r9BxqocoAzRZSs az3+JdG9gTYBomrMjyG4NeovBBWR+jaXO+payqpxceMkfYWN2/uzHqbPz7pLazsg RvXyHQMrsgsOUg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:55 2025 by rpki-client