This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json) Hash identifier: 41NewEJTUv7D5Wy72yoOf4rh/XMb4U5hQSJ54LRu2xk= Subject key identifier: 52:A8:DF:90:24:89:53:D2:11:05:69:AC:18:FA:65:00:36:28:BF:4D Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81 Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081 Certificate serial: 019B5977325A68E60521EB34A848E6C3E451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft Manifest number: 0BA3 Signing time: Fri 26 Dec 2025 07:02:22 +0000 Manifest this update: Fri 26 Dec 2025 07:02:22 +0000 Manifest next update: Sat 27 Dec 2025 07:02:22 +0000 Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: HQljRViGfkv1oIghR/q+p33q5EJ1aq0bKPIpkokvH1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:32:5a:68:e6:05:21:eb:34:a8:48:e6:c3:e4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081 Validity Not Before: Dec 26 07:02:22 2025 GMT Not After : Dec 27 07:02:22 2025 GMT Subject: CN=52a8df90248953d2110569ac18fa65003628bf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:c8:c5:21:44:6e:85:6b:6f:ac:7e:16:76: ad:f7:17:82:2a:2d:c7:8a:85:09:06:ad:df:f2:af: e4:e8:d2:c4:ea:ab:27:6a:64:d1:19:80:29:d6:df: 9f:c6:1b:dc:0c:f3:a4:b6:8a:df:25:a5:3a:84:9c: ad:44:be:00:06:b6:80:bb:6a:11:b3:1c:6d:95:b5: 93:22:09:28:4b:1b:5e:e2:86:4d:ab:f3:62:79:09: e9:b0:c7:58:97:b4:f6:0b:56:40:e1:29:97:ae:ca: 26:94:6c:a4:a2:84:67:b3:c6:ee:20:08:ea:2f:20: d9:c3:b1:50:bd:22:f8:29:06:ce:a9:7b:eb:6a:94: 22:69:10:ed:eb:ba:ef:df:81:0d:9b:09:83:36:5f: 92:cd:81:a6:f5:a8:e9:3a:bf:df:2c:8a:b7:5d:8b: 8c:43:cc:ac:3c:10:72:f3:8c:a5:44:fb:b9:e0:81: b3:a4:f4:d4:f0:d4:12:94:b9:0f:28:ac:b5:fe:5a: 01:3a:48:00:46:0a:90:81:b1:e1:c0:f3:93:69:52: bd:fe:be:05:d9:7a:ac:13:96:2a:d8:d2:0c:39:bd: f6:8d:fb:63:8f:22:b6:ec:ea:44:97:f0:2d:fa:9c: d5:52:51:d6:92:ea:40:60:80:fe:7b:35:39:7f:e6: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:DF:90:24:89:53:D2:11:05:69:AC:18:FA:65:00:36:28:BF:4D X509v3 Authority Key Identifier: keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7b:42:56:4d:ed:1b:c3:f9:bb:af:bd:86:d3:cd:bd:9b:a9: 80:2f:8c:9d:2f:8c:47:af:5d:07:eb:a2:46:9f:cd:c1:ef:23: 78:f1:85:9a:63:4a:3d:25:08:cf:97:60:1c:96:a9:69:67:26: 5d:09:21:d5:f1:dc:c0:d1:fa:e1:70:d6:a8:a2:44:77:5a:6e: 87:30:98:f3:09:b6:5c:69:9c:82:ef:29:5b:17:7c:19:28:fc: 63:13:c1:c3:23:c7:72:be:d9:a1:90:49:d1:24:3e:eb:b8:38: 66:fc:37:43:0c:e4:26:0d:70:66:97:91:b7:5b:ad:ac:31:72: 72:c4:ba:04:b0:25:1b:1c:80:be:dc:5d:55:66:38:97:62:1f: 3f:6d:d7:94:5f:8d:a6:5c:cf:0d:59:80:66:f4:d8:4b:64:59: 33:7f:8f:24:e3:72:a2:7d:b3:52:4e:87:fd:7b:45:98:c6:ed: 5a:74:8a:37:5d:2f:30:f5:9a:00:3f:18:4d:6d:aa:2d:ed:d8: 05:d3:d6:03:97:70:82:17:23:c6:7d:b4:e0:0e:ae:cd:a3:3d: 30:f7:ab:0d:f8:8b:b5:44:46:d6:95:ee:4a:8c:e1:64:7a:e9: 15:51:ce:35:0f:d7:a1:78:f3:47:c7:a6:ca:5e:65:7f:23:2d: cd:8a:01:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdzJaaOYFIes0qEjmw+RRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy MzkwODEwHhcNMjUxMjI2MDcwMjIyWhcNMjUxMjI3MDcwMjIyWjAzMTEwLwYDVQQD Eyg1MmE4ZGY5MDI0ODk1M2QyMTEwNTY5YWMxOGZhNjUwMDM2MjhiZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE7IxSFEboVrb6x+Fnat9xeCKi3H ioUJBq3f8q/k6NLE6qsnamTRGYAp1t+fxhvcDPOktorfJaU6hJytRL4ABraAu2oR sxxtlbWTIgkoSxte4oZNq/NieQnpsMdYl7T2C1ZA4SmXrsomlGykooRns8buIAjq LyDZw7FQvSL4KQbOqXvrapQiaRDt67rv34ENmwmDNl+SzYGm9ajpOr/fLIq3XYuM Q8ysPBBy84ylRPu54IGzpPTU8NQSlLkPKKy1/loBOkgARgqQgbHhwPOTaVK9/r4F 2XqsE5Yq2NIMOb32jftjjyK27OpEl/At+pzVUlHWkupAYID+ezU5f+ZAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKo35AkiVPSEQVprBj6ZQA2KL9NMB8GA1UdIwQY MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXtCVk3t G8P5u6+9htPNvZupgC+MnS+MR69dB+uiRp/Nwe8jePGFmmNKPSUIz5dgHJapaWcm XQkh1fHcwNH64XDWqKJEd1puhzCY8wm2XGmcgu8pWxd8GSj8YxPBwyPHcr7ZoZBJ 0SQ+67g4Zvw3QwzkJg1wZpeRt1utrDFycsS6BLAlGxyAvtxdVWY4l2IfP23XlF+N plzPDVmAZvTYS2RZM3+PJONyon2zUk6H/XtFmMbtWnSKN10vMPWaAD8YTW2qLe3Y BdPWA5dwghcjxn204A6uzaM9MPerDfiLtURG1pXuSozhZHrpFVHONQ/XoXjzR8em yl5lfyMtzYoBWg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:34 2025 by rpki-client