This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.mft (raw, json) Hash identifier: Ut+wvXFT26HwRA3M4egqEd8X1BpETbmkjAYCDx7bQ4I= Subject key identifier: 12:C8:79:A8:2D:F1:57:E8:7D:CD:5D:64:6F:95:68:68:08:7F:20:6E Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA Certificate issuer: /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Certificate serial: 019B5AF67440E3AB1090899690477656DF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft Manifest number: 3C Signing time: Fri 26 Dec 2025 14:00:59 +0000 Manifest this update: Fri 26 Dec 2025 14:00:59 +0000 Manifest next update: Sat 27 Dec 2025 14:00:59 +0000 Files and hashes: 1: 7SGj8xKknz6djGxEyd4TOp7Yd-o.crl (hash: S0VccfNJ9eY/cMeRvUxu6ntP83AywsjaJCO/fsCMioE=) 2: GItA89gTg0p-mLBeGLPJPcYa2v0.roa (hash: EpM8bV8r7JZ4MZME62WBG/o48GsiiOJyISRSLG6lvvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:74:40:e3:ab:10:90:89:96:90:47:76:56:df:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Validity Not Before: Dec 26 14:00:59 2025 GMT Not After : Dec 27 14:00:59 2025 GMT Subject: CN=12c879a82df157e87dcd5d646f956868087f206e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:6b:42:07:be:37:11:b3:27:1c:a9:c0:6d: 33:9d:5f:5d:f4:3a:95:b5:a4:ae:18:01:78:06:e6: b6:5a:9a:a0:2d:49:9e:ec:22:0c:f0:37:63:3c:a3: 67:46:d9:5c:ab:01:ea:88:b0:27:0b:fe:56:8a:ed: 5d:52:86:15:12:88:13:ac:8a:2d:e1:20:6b:d2:9c: 77:19:1f:1c:ff:87:32:39:0d:19:4b:42:6b:d0:b2: a4:7e:d8:d3:3a:df:40:bf:60:62:82:21:0c:10:c0: a6:e2:59:26:39:05:7e:61:02:ba:12:84:99:24:fb: 9e:6e:c3:eb:72:e3:cd:78:66:2a:9d:f0:ea:29:25: d0:fc:96:91:cd:02:9f:56:31:6c:66:da:d5:82:d0: c3:d6:ec:ab:6a:60:cc:22:e9:46:3b:25:4b:d0:4c: 25:37:19:e7:31:77:92:4a:cc:72:38:ae:11:54:38: a0:f8:26:63:58:a4:70:d2:a0:fc:80:af:fd:db:64: 20:b9:93:08:a8:bf:d8:e1:43:43:ac:e0:20:22:f0: 0b:be:58:f8:82:f3:0a:5b:9c:24:d2:51:95:19:51: ba:6d:5e:1e:df:84:29:98:4c:83:c9:fb:53:64:59: e0:a8:9f:06:78:89:34:14:79:f4:b7:aa:92:0a:8a: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C8:79:A8:2D:F1:57:E8:7D:CD:5D:64:6F:95:68:68:08:7F:20:6E X509v3 Authority Key Identifier: keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:58:af:0b:ac:06:83:d5:b3:90:e9:4a:99:b4:a6:e3:2a:7d: 94:cb:33:a1:d0:a1:5c:62:72:24:d3:65:61:19:c3:a9:f8:93: a7:68:dd:50:dd:27:66:3b:cd:69:43:d0:5d:08:0b:09:74:e7: ac:81:9a:83:a6:59:fc:76:eb:d7:0e:a4:b4:56:1f:3f:19:bb: 59:a0:12:5f:8c:54:b1:47:8b:0d:0b:97:bc:e2:4c:cc:76:63: 49:04:fe:e9:b5:8f:90:90:5b:87:cd:ae:8a:1d:6f:68:8e:a6: 19:0f:5e:97:8b:c6:59:ea:b6:f0:75:56:bf:7f:cd:49:e5:74: c6:26:61:1d:8c:48:cb:de:1c:0a:e2:d4:f0:89:7a:e1:a3:b1: 7f:00:96:b2:d6:56:da:f3:d1:cf:47:93:75:5e:56:c9:47:f2: f3:ca:b2:c9:b5:94:e5:11:4b:7b:72:6a:c9:40:07:a4:ff:43: 22:b0:18:6b:ad:fb:e4:90:ea:6e:46:38:19:dd:a2:8d:57:8b: cc:e9:e6:96:b0:6b:07:05:7f:38:98:5a:76:5d:47:dd:3b:34: f7:ac:17:73:87:d9:68:03:22:81:84:fe:20:cf:59:29:72:96: 82:ef:3a:72:36:58:a9:87:8f:fc:6b:2e:67:83:3d:47:cd:b6: 1c:8f:50:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nRA46sQkImWkEd2Vt9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjFhM2YzMTJhNDlmM2U5ZDhjNmM0NGM5ZGUxMzNhOWVk ODc3ZWEwHhcNMjUxMjI2MTQwMDU5WhcNMjUxMjI3MTQwMDU5WjAzMTEwLwYDVQQD EygxMmM4NzlhODJkZjE1N2U4N2RjZDVkNjQ2Zjk1Njg2ODA4N2YyMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW1rQge+NxGzJxypwG0znV9d9DqV taSuGAF4Bua2WpqgLUme7CIM8DdjPKNnRtlcqwHqiLAnC/5Wiu1dUoYVEogTrIot 4SBr0px3GR8c/4cyOQ0ZS0Jr0LKkftjTOt9Av2BigiEMEMCm4lkmOQV+YQK6EoSZ JPuebsPrcuPNeGYqnfDqKSXQ/JaRzQKfVjFsZtrVgtDD1uyramDMIulGOyVL0Ewl NxnnMXeSSsxyOK4RVDig+CZjWKRw0qD8gK/922QguZMIqL/Y4UNDrOAgIvALvlj4 gvMKW5wk0lGVGVG6bV4e34QpmEyDyftTZFngqJ8GeIk0FHn0t6qSCopyuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLIeagt8Vfofc1dZG+VaGgIfyBuMB8GA1UdIwQY MBaAFO0ho/MSpJ8+nYxsRMneEzqe2HfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTct ZGYxMzRmMmEyZTZjLzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTctZGYxMzRmMmEyZTZj LzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVivC6wG g9WzkOlKmbSm4yp9lMszodChXGJyJNNlYRnDqfiTp2jdUN0nZjvNaUPQXQgLCXTn rIGag6ZZ/Hbr1w6ktFYfPxm7WaASX4xUsUeLDQuXvOJMzHZjSQT+6bWPkJBbh82u ih1vaI6mGQ9el4vGWeq28HVWv3/NSeV0xiZhHYxIy94cCuLU8Il64aOxfwCWstZW 2vPRz0eTdV5WyUfy88qyybWU5RFLe3JqyUAHpP9DIrAYa6375JDqbkY4Gd2ijVeL zOnmlrBrBwV/OJhadl1H3Ts096wXc4fZaAMigYT+IM9ZKXKWgu86cjZYqYeP/Gsu Z4M9R822HI9QRA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client