This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft File: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json) Hash identifier: P+wG38ttpfHY8JhxRNOjj6dpKIqCfkZtTcUoiqhNcTo= Subject key identifier: 54:99:A6:2F:56:16:4A:32:42:23:1E:FE:2E:BF:66:82:9D:D9:C3:BD Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Certificate serial: 019B48158525227A1A2E1DC07B938AE5127F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft Manifest number: 05E9 Signing time: Mon 22 Dec 2025 22:02:08 +0000 Manifest this update: Mon 22 Dec 2025 22:02:08 +0000 Manifest next update: Tue 23 Dec 2025 22:02:08 +0000 Files and hashes: 1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: 4SKYF7vPr3LyLe2U0uEH9kIBvtsIET2ZFZq+lIWwops=) 2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:85:25:22:7a:1a:2e:1d:c0:7b:93:8a:e5:12:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Validity Not Before: Dec 22 22:02:08 2025 GMT Not After : Dec 23 22:02:08 2025 GMT Subject: CN=5499a62f56164a3242231efe2ebf66829dd9c3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:a7:1c:61:d2:30:7f:4e:99:ed:9f:3a:3d: ba:4d:df:da:67:8d:2e:b4:7f:51:b4:f6:d6:a9:22: f2:e5:e6:7e:d9:b1:df:a4:35:db:60:8a:b1:d1:d0: 56:61:1f:33:d8:8d:d9:74:97:e9:5a:58:d9:9f:05: 8c:20:70:d7:49:63:e0:14:cc:af:55:bb:eb:3e:93: 7c:da:80:62:f3:ba:58:09:c1:7e:d6:b5:84:18:09: 2f:5e:5a:f8:c2:b9:e6:e3:c7:5c:0c:26:14:42:0a: 08:75:24:ea:38:eb:47:2d:fc:c7:2c:97:0e:57:06: 40:e9:e3:91:9e:ae:c9:45:e6:f0:01:ff:32:6c:cf: 9d:3d:c2:6d:f4:89:2e:8a:dc:69:c8:56:fc:43:d4: 80:d8:dc:4c:7e:c3:23:a2:10:e2:58:00:a9:5d:72: 2b:f7:4c:cb:d9:45:c8:3c:51:af:71:8b:c1:62:c3: 9e:30:57:58:1a:c4:af:1f:0d:ad:f1:d7:aa:5d:35: 1f:7a:ef:62:69:e7:2e:73:40:07:5a:8c:3b:d1:2c: b0:13:48:63:5a:7c:1e:06:55:8f:36:79:48:f3:50: 27:89:15:ae:94:f1:82:ed:1b:64:a3:5f:32:6d:fa: 19:9f:de:8b:12:5c:d4:59:a4:8d:3d:10:84:d2:ae: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:99:A6:2F:56:16:4A:32:42:23:1E:FE:2E:BF:66:82:9D:D9:C3:BD X509v3 Authority Key Identifier: keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:85:c1:77:f7:1c:50:02:fe:f8:19:32:92:e6:83:b4:cc:7f: ee:57:f3:20:3b:e9:18:08:12:4e:4e:43:a0:72:fc:90:7d:39: a9:51:de:3e:3d:e8:83:df:bf:44:36:11:b4:d9:ce:44:8b:e1: b5:a8:59:34:85:b0:c9:0c:f5:e5:9a:33:7c:de:30:74:ec:b1: da:61:68:ee:56:38:ad:b8:d0:2b:9f:4e:b3:89:95:47:f8:d1: c6:50:f9:1a:b7:2d:05:a2:ab:f4:41:ef:25:3b:db:b9:45:38: f0:64:bb:63:28:d5:64:36:51:8c:c2:a5:1d:b1:00:fd:c9:bc: 8f:e2:4a:e8:86:86:ab:b4:d3:94:84:cb:71:ec:5f:38:55:02: fd:81:06:55:d4:69:80:85:82:c8:75:53:9b:0e:d1:10:6e:a7: 0a:db:a2:54:0f:56:06:43:ff:63:18:55:08:23:0c:d3:ec:63: 61:b3:48:40:74:3a:1f:cb:1f:8d:38:7c:54:d7:34:75:53:8d: e4:2b:e1:18:f3:88:bc:97:4f:96:d2:0a:81:f5:38:c8:95:51: e9:45:91:81:d2:62:33:a8:bc:ed:ca:5c:10:7b:d3:1d:ad:5b: 09:be:3e:41:b5:e0:47:c6:c7:7d:8b:3a:78:f6:34:6d:b7:0f: a3:a8:4e:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFYUlInoaLh3Ae5OK5RJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWE1MjQxNjMxM2I3NjQzZWQyOGQ0M2JjM2M0NjYxZjQ2 YWIzNjYwHhcNMjUxMjIyMjIwMjA4WhcNMjUxMjIzMjIwMjA4WjAzMTEwLwYDVQQD Eyg1NDk5YTYyZjU2MTY0YTMyNDIyMzFlZmUyZWJmNjY4MjlkZDljM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1enHGHSMH9Ome2fOj26Td/aZ40u tH9RtPbWqSLy5eZ+2bHfpDXbYIqx0dBWYR8z2I3ZdJfpWljZnwWMIHDXSWPgFMyv VbvrPpN82oBi87pYCcF+1rWEGAkvXlr4wrnm48dcDCYUQgoIdSTqOOtHLfzHLJcO VwZA6eORnq7JRebwAf8ybM+dPcJt9IkuitxpyFb8Q9SA2NxMfsMjohDiWACpXXIr 90zL2UXIPFGvcYvBYsOeMFdYGsSvHw2t8deqXTUfeu9iaecuc0AHWow70SywE0hj WnweBlWPNnlI81AniRWulPGC7Rtko18ybfoZn96LElzUWaSNPRCE0q7B2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSZpi9WFkoyQiMe/i6/ZoKd2cO9MB8GA1UdIwQY MBaAFO6qUkFjE7dkPtKNQ7w8RmH0arNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAt ZDMzN2I5MzhkM2NjLzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAtZDMzN2I5MzhkM2Nj LzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoXBd/cc UAL++BkykuaDtMx/7lfzIDvpGAgSTk5DoHL8kH05qVHePj3og9+/RDYRtNnORIvh tahZNIWwyQz15ZozfN4wdOyx2mFo7lY4rbjQK59Os4mVR/jRxlD5GrctBaKr9EHv JTvbuUU48GS7YyjVZDZRjMKlHbEA/cm8j+JK6IaGq7TTlITLcexfOFUC/YEGVdRp gIWCyHVTmw7REG6nCtuiVA9WBkP/YxhVCCMM0+xjYbNIQHQ6H8sfjTh8VNc0dVON 5CvhGPOIvJdPltIKgfU4yJVR6UWRgdJiM6i87cpcEHvTHa1bCb4+QbXgR8bHfYs6 ePY0bbcPo6hOBg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:17:09 2025 by rpki-client