This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json) Hash identifier: BJIYTO6mvO9aWepQp5XgyjtGLKYDS74Bua8IK70aZ1k= Subject key identifier: 17:FA:CE:55:B9:98:D2:8C:03:79:A9:28:BB:1A:65:85:6E:1A:08:15 Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05 Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705 Certificate serial: 019B5A1A60115A69C176438D62EC74B1CA31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft Manifest number: 1208 Signing time: Fri 26 Dec 2025 10:00:36 +0000 Manifest this update: Fri 26 Dec 2025 10:00:36 +0000 Manifest next update: Sat 27 Dec 2025 10:00:36 +0000 Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: PwxTxlG4vaP1BIuK1ujS6/1iUCVQp2qHk0VM3yGtvig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:60:11:5a:69:c1:76:43:8d:62:ec:74:b1:ca:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb39db50128db350aebc84380849918bb05e705 Validity Not Before: Dec 26 10:00:36 2025 GMT Not After : Dec 27 10:00:36 2025 GMT Subject: CN=17face55b998d28c0379a928bb1a65856e1a0815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:af:16:89:18:3e:ec:dc:01:23:07:09:55: 07:ad:d8:e5:3e:2b:cc:9d:54:29:01:29:f8:cc:40: 71:a1:cf:e7:f4:49:53:e5:9b:a0:6e:d4:fc:c9:41: aa:27:f1:20:ad:35:09:e4:ea:2c:ff:34:65:cf:c7: b1:56:1c:80:84:e7:f6:c9:3d:89:bd:2a:e7:2c:c5: a9:cb:e2:68:d9:45:10:f8:af:55:3b:92:2d:6d:87: 64:76:f1:68:b2:5e:24:59:2c:f5:97:84:29:2f:d4: 49:70:12:d1:6d:69:ac:20:32:63:0d:2e:39:e0:76: 90:3e:e4:9a:15:38:8e:29:8c:23:67:79:3e:7e:41: 59:4b:b9:51:05:dd:3d:e5:e0:73:42:cb:1a:76:94: 1b:50:14:e7:b3:72:50:fe:07:04:ea:d3:76:e7:90: e0:de:02:45:bf:be:f1:d6:c4:06:59:e0:da:5f:a9: 73:31:95:e1:7c:d9:8a:48:95:9b:82:f2:b9:a4:55: 50:b3:eb:e3:75:05:bb:9e:72:1e:68:40:dd:3a:df: 9b:12:f0:c1:55:97:f4:b3:4a:41:c1:a8:a8:a6:38: 6d:73:44:ff:fa:34:fd:07:ac:fd:36:8d:e8:ce:bd: 1f:c1:26:e4:02:bc:37:b2:44:be:2c:71:e1:c8:72: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:CE:55:B9:98:D2:8C:03:79:A9:28:BB:1A:65:85:6E:1A:08:15 X509v3 Authority Key Identifier: keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:bb:c1:0a:9c:ea:e2:df:f0:5d:b8:77:2f:7d:4d:44:c3:24: f0:c0:37:57:ad:42:4c:cb:f7:64:f1:4d:5e:f7:08:0e:86:06: 0d:38:1c:48:c6:fc:b4:36:62:30:69:b7:d9:af:f0:7c:4f:70: 63:42:b8:e4:76:19:69:65:7d:d7:c3:6d:65:d2:52:7f:13:10: ab:7e:88:29:6c:38:4d:80:1e:d4:ae:d2:4f:5f:e2:33:c8:71: e0:19:00:bc:89:56:c6:b3:a5:20:1b:08:c2:86:50:13:51:f0: 79:af:be:91:a3:5f:83:73:95:2f:0a:90:0d:f4:1e:27:c0:32: 87:c2:7b:90:51:b7:d0:3b:c2:40:cd:83:a6:01:96:12:13:aa: d6:52:fb:f4:da:40:d3:df:3b:16:01:c9:5b:98:3b:e6:82:1a: a7:c3:36:96:bc:4b:c1:c7:c6:00:7e:06:41:41:e7:48:22:96: 4e:a8:95:93:05:d8:d9:bb:88:23:ca:85:55:7f:fb:75:6f:05: 0a:88:58:fd:95:fa:7d:22:36:fe:86:94:76:bf:ae:ee:ef:05: 2b:5a:22:f7:2e:c0:3a:54:a6:91:90:d3:5b:48:55:4b:7c:2e: 50:87:5e:da:90:1e:fd:78:e4:37:ee:d1:28:af:db:af:f8:a9: 51:40:94:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmARWmnBdkONYux0scoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjM5ZGI1MDEyOGRiMzUwYWViYzg0MzgwODQ5OTE4YmIw NWU3MDUwHhcNMjUxMjI2MTAwMDM2WhcNMjUxMjI3MTAwMDM2WjAzMTEwLwYDVQQD EygxN2ZhY2U1NWI5OThkMjhjMDM3OWE5MjhiYjFhNjU4NTZlMWEwODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBWvFokYPuzcASMHCVUHrdjlPivM nVQpASn4zEBxoc/n9ElT5ZugbtT8yUGqJ/EgrTUJ5Oos/zRlz8exVhyAhOf2yT2J vSrnLMWpy+Jo2UUQ+K9VO5ItbYdkdvFosl4kWSz1l4QpL9RJcBLRbWmsIDJjDS45 4HaQPuSaFTiOKYwjZ3k+fkFZS7lRBd095eBzQssadpQbUBTns3JQ/gcE6tN255Dg 3gJFv77x1sQGWeDaX6lzMZXhfNmKSJWbgvK5pFVQs+vjdQW7nnIeaEDdOt+bEvDB VZf0s0pBwaiopjhtc0T/+jT9B6z9No3ozr0fwSbkArw3skS+LHHhyHJWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf6zlW5mNKMA3mpKLsaZYVuGggVMB8GA1UdIwQY MBaAFJuznbUBKNs1CuvIQ4CEmRi7BecFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMt ZTI4ZmEzOWI0YjE3LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMtZTI4ZmEzOWI0YjE3 LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrvBCpzq 4t/wXbh3L31NRMMk8MA3V61CTMv3ZPFNXvcIDoYGDTgcSMb8tDZiMGm32a/wfE9w Y0K45HYZaWV918NtZdJSfxMQq36IKWw4TYAe1K7ST1/iM8hx4BkAvIlWxrOlIBsI woZQE1Hwea++kaNfg3OVLwqQDfQeJ8Ayh8J7kFG30DvCQM2DpgGWEhOq1lL79NpA 0987FgHJW5g75oIap8M2lrxLwcfGAH4GQUHnSCKWTqiVkwXY2buII8qFVX/7dW8F CohY/ZX6fSI2/oaUdr+u7u8FK1oi9y7AOlSmkZDTW0hVS3wuUIde2pAe/XjkN+7R KK/br/ipUUCUoQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:34 2025 by rpki-client