This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft File: e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json) Hash identifier: UDZtc7l0iL/ptR0Jxeq2SNYWRbv3ltiGq89CB5GXpQk= Subject key identifier: 66:DF:4C:14:B7:16:96:4F:4E:AC:C9:95:1A:68:E6:B6:54:2A:56:4C Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB Certificate issuer: /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb Certificate serial: 019B32D724277CDB716B186AFF3FC606F78B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft Manifest number: 0BEA Signing time: Thu 18 Dec 2025 19:01:58 +0000 Manifest this update: Thu 18 Dec 2025 19:01:58 +0000 Manifest next update: Fri 19 Dec 2025 19:01:58 +0000 Files and hashes: 1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: 1QDJ0mIlxHzBEmiM+EzAwm98qfvSFDLNXYKsjvM22QU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:24:27:7c:db:71:6b:18:6a:ff:3f:c6:06:f7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb Validity Not Before: Dec 18 19:01:58 2025 GMT Not After : Dec 19 19:01:58 2025 GMT Subject: CN=66df4c14b716964f4eacc9951a68e6b6542a564c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:a3:5d:e1:58:b5:25:e0:0a:48:10:d0:92: c4:a1:84:c7:44:59:2d:b0:3a:28:6f:7b:5c:d2:ac: 83:1c:7c:ae:43:5e:07:c5:c1:be:e6:17:41:44:f8: e1:88:48:8e:86:20:a7:29:a1:ed:07:06:a5:2b:5f: 50:0b:1e:29:10:5e:23:1c:05:72:cb:c0:d7:0c:76: 96:0a:5b:c5:c7:95:b2:c9:c0:58:db:dc:50:22:c0: 25:c3:d4:bf:34:33:67:ff:44:5c:ce:a4:3c:fa:e8: c0:18:66:07:c3:a4:7d:98:ce:ce:36:fd:a8:27:8b: 71:b5:fd:a2:fa:f5:23:c4:1f:eb:3c:db:16:fc:03: 63:42:dc:66:4c:61:73:91:97:31:6a:f7:1e:75:b5: 28:de:17:fb:7c:60:10:76:1e:05:ab:16:50:c9:2b: 94:b9:d8:cb:41:ed:7b:d7:ab:c7:e5:b0:ab:e9:9e: 00:ff:3e:67:b9:04:0b:1b:dd:43:f7:8f:91:c0:08: 3b:b7:df:4f:ae:43:0b:62:2c:1b:96:0c:98:31:76: b8:3c:ce:01:0c:dd:a3:82:b6:46:f6:ec:7f:e1:02: d4:b9:33:9e:d2:b5:b9:bd:48:35:22:77:5b:09:a0: 44:37:cb:dc:77:ab:de:5a:97:a3:50:2b:cb:5f:c7: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DF:4C:14:B7:16:96:4F:4E:AC:C9:95:1A:68:E6:B6:54:2A:56:4C X509v3 Authority Key Identifier: keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:27:52:16:61:9c:3a:3c:78:bf:d3:46:1a:a2:34:91:e8:14: 76:15:be:64:39:83:ff:a7:62:5c:cd:fa:71:c0:e1:ef:1a:48: 2a:7c:97:81:33:93:ef:49:38:f5:8f:af:ad:ff:8f:7e:af:30: a9:29:41:30:b2:ca:70:65:5c:0a:a6:3a:98:35:05:38:35:92: 4b:79:bb:58:a9:d7:ed:ca:ac:60:9c:4b:80:ab:ae:a2:68:7e: 7f:5c:89:a0:2e:50:98:4c:5e:68:6d:80:6b:1f:20:ea:06:70: 2e:29:b9:17:16:91:5c:2a:16:27:31:eb:e1:54:f9:1b:73:e4: c5:3b:62:d7:eb:ca:62:3c:81:53:5e:ad:2e:69:8b:b9:6d:65: 8a:d9:88:04:70:85:84:43:77:8f:4f:90:4d:67:3f:a2:0e:91: 0b:40:c5:bb:12:af:83:0b:48:f9:d7:06:53:d9:b2:aa:9f:c8: c1:fd:bb:c6:af:b0:6b:cc:48:e6:b3:1c:c8:c7:b6:10:e9:ea: 6f:f8:34:ec:d8:fd:d8:36:9f:3d:a5:a0:0b:9d:d4:88:25:3d: de:26:5a:aa:2c:1a:ca:1a:de:1d:33:7f:41:e6:6d:0f:7d:09: 06:af:f5:17:ad:08:0a:96:36:67:4b:e4:50:c6:e4:f4:00:8a: 4d:f9:12:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yQnfNtxaxhq/z/GBveLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYjgwZGVjY2M1NmViMzY2YjM2Y2MyOTY0YzgxOWJiMWI3 MjlhZGIwHhcNMjUxMjE4MTkwMTU4WhcNMjUxMjE5MTkwMTU4WjAzMTEwLwYDVQQD Eyg2NmRmNGMxNGI3MTY5NjRmNGVhY2M5OTUxYTY4ZTZiNjU0MmE1NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN+jXeFYtSXgCkgQ0JLEoYTHRFkt sDoob3tc0qyDHHyuQ14HxcG+5hdBRPjhiEiOhiCnKaHtBwalK19QCx4pEF4jHAVy y8DXDHaWClvFx5WyycBY29xQIsAlw9S/NDNn/0RczqQ8+ujAGGYHw6R9mM7ONv2o J4txtf2i+vUjxB/rPNsW/ANjQtxmTGFzkZcxavcedbUo3hf7fGAQdh4FqxZQySuU udjLQe1716vH5bCr6Z4A/z5nuQQLG91D94+RwAg7t99PrkMLYiwblgyYMXa4PM4B DN2jgrZG9ux/4QLUuTOe0rW5vUg1IndbCaBEN8vcd6veWpejUCvLX8cNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbfTBS3FpZPTqzJlRpo5rZUKlZMMB8GA1UdIwQY MBaAFHu4DezMVus2azbMKWTIGbsbcprbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xYzNmODktMzNlMS00ZDY0LTkyMzUt NGFhOTI3NzI5NjcyLzEvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xYzNmODktMzNlMS00ZDY0LTkyMzUtNGFhOTI3NzI5Njcy LzEvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVidSFmGc Ojx4v9NGGqI0kegUdhW+ZDmD/6diXM36ccDh7xpIKnyXgTOT70k49Y+vrf+Pfq8w qSlBMLLKcGVcCqY6mDUFODWSS3m7WKnX7cqsYJxLgKuuomh+f1yJoC5QmExeaG2A ax8g6gZwLim5FxaRXCoWJzHr4VT5G3PkxTti1+vKYjyBU16tLmmLuW1litmIBHCF hEN3j0+QTWc/og6RC0DFuxKvgwtI+dcGU9myqp/Iwf27xq+wa8xI5rMcyMe2EOnq b/g07Nj92DafPaWgC53UiCU93iZaqiwayhreHTN/QeZtD30JBq/1F60ICpY2Z0vk UMbk9ACKTfkSqA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:10 2025 by rpki-client