This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json) Hash identifier: W0wIa55YKMPVQanw0Z+tgql+0qsNEyAW2EVZLQdHGIc= Subject key identifier: BE:3E:1A:95:16:F8:5D:1F:89:0E:F8:C6:2A:EA:33:7A:C3:CF:35:31 Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8 Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8 Certificate serial: 019B59758E4680D4B078722B7E6936A95A57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft Manifest number: 0436 Signing time: Fri 26 Dec 2025 07:00:34 +0000 Manifest this update: Fri 26 Dec 2025 07:00:34 +0000 Manifest next update: Sat 27 Dec 2025 07:00:34 +0000 Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: c49mJVRD0Eh89+vRv+qijYLOFy6nJMq+e5L1Sk343Og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:8e:46:80:d4:b0:78:72:2b:7e:69:36:a9:5a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8 Validity Not Before: Dec 26 07:00:34 2025 GMT Not After : Dec 27 07:00:34 2025 GMT Subject: CN=be3e1a9516f85d1f890ef8c62aea337ac3cf3531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:b6:bb:43:b2:1a:77:01:3e:2d:13:94:29: b7:a0:9f:e6:6d:e1:73:60:7c:0b:9c:1f:51:89:93: 5f:a8:2d:c9:8d:f1:5c:a0:b3:f3:70:49:ba:08:57: d9:25:68:bb:22:1e:06:8b:4b:09:e9:c5:48:e7:67: 9d:5c:e6:b9:3d:ea:a0:f9:92:1d:7b:7d:19:25:0f: 4c:3a:8a:b6:18:25:69:a5:b2:57:ee:83:60:c6:4d: 45:2d:29:65:1a:49:5f:4e:ac:00:ab:4b:09:30:38: c7:08:57:39:52:43:cd:7d:0e:cb:9f:40:aa:74:a3: 81:a9:59:e9:67:18:2a:e6:60:9d:24:1d:e3:9e:55: ee:e3:e9:c3:e0:45:9c:70:88:94:f7:f4:df:e3:3c: 01:b9:3a:56:a7:d1:27:e5:37:29:c8:31:b9:f7:0c: a4:39:07:99:8a:73:76:48:87:d8:7b:8d:37:2b:13: fb:1c:a9:27:20:77:23:e5:0c:1c:ed:bd:10:65:6e: 64:a7:31:a1:53:2d:00:14:24:84:b1:33:a6:61:b4: 16:54:cb:d8:2f:90:ce:64:65:70:dc:5c:36:d1:d9: 08:5b:65:97:de:fa:85:d9:02:05:89:ec:30:94:21: a1:41:72:30:6d:3d:36:d4:f9:34:36:e5:ff:f8:20: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3E:1A:95:16:F8:5D:1F:89:0E:F8:C6:2A:EA:33:7A:C3:CF:35:31 X509v3 Authority Key Identifier: keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2b:8a:ab:50:c7:0f:16:ae:21:ed:6a:b5:15:12:d2:b1:af: 59:40:0c:7f:2c:e9:35:ca:54:53:ce:0a:bc:3a:28:a9:0c:43: 11:6a:bd:ce:32:53:be:30:27:82:89:5c:64:fb:80:41:d6:7f: 87:a5:c6:d1:dd:8b:62:20:1a:04:de:ca:63:ca:a2:04:19:74: de:86:c4:a1:4b:77:f3:82:ab:25:1c:c4:44:41:32:d8:58:cb: 7c:b2:64:9a:5c:67:04:f9:ce:69:e0:d7:49:f6:23:c0:c1:6b: 23:a0:50:f3:b5:37:80:a6:56:8b:ea:68:04:62:44:5d:90:36: ba:8a:6a:00:8b:08:4d:3c:a2:ef:ee:37:23:45:96:61:d1:a4: 21:b5:52:06:63:f0:d2:ad:43:3d:28:bc:d2:9c:5c:7a:20:ca: 25:06:e9:b1:19:6f:a2:1f:2a:70:39:f0:32:8c:32:da:dd:6f: d4:5e:fe:e2:d0:8e:97:5f:22:46:04:8d:1a:2f:e2:64:af:00: 53:fb:e7:df:6e:63:47:c2:11:8a:94:48:d3:97:dc:84:03:d3: c0:96:93:41:4e:eb:21:81:c1:d1:be:96:ad:3c:ff:ee:d0:64: 32:85:1c:a4:39:76:4f:7f:78:67:62:0c:00:f8:ac:c9:78:2c: ce:72:0e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdY5GgNSweHIrfmk2qVpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMWI2YWRjOTk0OTdmZDFiMzBhMGE0ODJlZGM0MDJiMGM0 ZjBjZjgwHhcNMjUxMjI2MDcwMDM0WhcNMjUxMjI3MDcwMDM0WjAzMTEwLwYDVQQD EyhiZTNlMWE5NTE2Zjg1ZDFmODkwZWY4YzYyYWVhMzM3YWMzY2YzNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVS2u0OyGncBPi0TlCm3oJ/mbeFz YHwLnB9RiZNfqC3JjfFcoLPzcEm6CFfZJWi7Ih4Gi0sJ6cVI52edXOa5Peqg+ZId e30ZJQ9MOoq2GCVppbJX7oNgxk1FLSllGklfTqwAq0sJMDjHCFc5UkPNfQ7Ln0Cq dKOBqVnpZxgq5mCdJB3jnlXu4+nD4EWccIiU9/Tf4zwBuTpWp9En5TcpyDG59wyk OQeZinN2SIfYe403KxP7HKknIHcj5Qwc7b0QZW5kpzGhUy0AFCSEsTOmYbQWVMvY L5DOZGVw3Fw20dkIW2WX3vqF2QIFiewwlCGhQXIwbT021Pk0NuX/+CD9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4+GpUW+F0fiQ74xirqM3rDzzUxMB8GA1UdIwQY MBaAFO0batyZSX/RswoKSC7cQCsMTwz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgt MmM5NmZiODU1NTdhLzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgtMmM5NmZiODU1NTdh LzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViuKq1DH DxauIe1qtRUS0rGvWUAMfyzpNcpUU84KvDooqQxDEWq9zjJTvjAngolcZPuAQdZ/ h6XG0d2LYiAaBN7KY8qiBBl03obEoUt384KrJRzEREEy2FjLfLJkmlxnBPnOaeDX SfYjwMFrI6BQ87U3gKZWi+poBGJEXZA2uopqAIsITTyi7+43I0WWYdGkIbVSBmPw 0q1DPSi80pxceiDKJQbpsRlvoh8qcDnwMowy2t1v1F7+4tCOl18iRgSNGi/iZK8A U/vn325jR8IRipRI05fchAPTwJaTQU7rIYHB0b6WrTz/7tBkMoUcpDl2T394Z2IM APisyXgsznIOIw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:04 2025 by rpki-client