This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json) Hash identifier: mC+luMgeVpGn+iO5MbJX2hMm4WhcZz8FsXHhQCHBkW0= Subject key identifier: 87:44:3D:10:26:94:D9:B2:86:23:DC:FF:96:C6:A8:82:E9:68:E9:9E Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48 Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448 Certificate serial: 019B5ABF81DEB09E99FB5A1E5096E317EBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft Manifest number: 01B6 Signing time: Fri 26 Dec 2025 13:00:58 +0000 Manifest this update: Fri 26 Dec 2025 13:00:58 +0000 Manifest next update: Sat 27 Dec 2025 13:00:58 +0000 Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: MsRBJKubI9Xo7I+mJhjNbM1qJ1HF0fWP2X2GIDhv6HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:81:de:b0:9e:99:fb:5a:1e:50:96:e3:17:eb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448 Validity Not Before: Dec 26 13:00:58 2025 GMT Not After : Dec 27 13:00:58 2025 GMT Subject: CN=87443d102694d9b28623dcff96c6a882e968e99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:39:59:d9:55:95:e5:d0:a6:2b:cb:92:bf: b7:df:a7:ea:1b:9c:2b:9f:ea:a1:b0:27:e5:a0:4a: 8a:4a:6e:ec:6e:7f:7f:12:0c:bf:e9:70:89:fa:1e: 70:14:53:46:5a:b0:dc:8b:5f:f9:00:48:ff:cf:af: 8d:f9:41:68:ab:3f:bf:35:34:be:a3:f1:a3:16:e8: 5f:5f:7a:06:d7:af:6b:70:94:d2:25:fb:fe:9c:1b: ec:95:72:0b:f3:39:ed:7a:29:fc:8b:5d:f1:06:4e: d8:d8:d6:ba:85:0e:56:73:bf:32:72:01:42:b6:0c: 46:8e:24:0a:c7:88:72:a7:0e:8a:04:95:21:9c:03: 6d:56:6d:ae:fe:13:23:03:11:0e:41:10:df:f0:5d: e2:ea:ba:c0:f6:04:94:bd:d0:bb:bf:6f:9e:cb:95: 96:0a:c9:b6:61:33:d6:89:cb:c1:9c:9b:a6:7d:4d: 7d:08:0b:1d:e2:e7:47:ee:17:59:f0:92:a6:9a:bc: 8e:dd:65:a7:c8:fb:8e:02:76:a6:7c:16:55:6d:2b: b4:79:df:34:50:20:65:c3:d2:2d:55:0c:43:bc:d6: 64:38:3d:a6:19:e2:21:10:08:be:c1:54:79:72:63: ee:d2:1f:79:76:78:ee:53:f4:a3:79:20:cc:65:b5: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:3D:10:26:94:D9:B2:86:23:DC:FF:96:C6:A8:82:E9:68:E9:9E X509v3 Authority Key Identifier: keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0d:d9:65:3e:13:77:1b:d4:88:5e:08:a6:38:5d:b2:ef:8f: 2c:1d:a2:b8:52:27:d5:e7:3d:db:c9:b7:fe:90:01:80:f7:b6: e6:20:53:9e:aa:a6:a4:84:bc:f4:cb:1e:dc:2b:42:0e:b6:07: 18:eb:64:db:7f:1b:3a:ff:ff:be:27:1d:32:18:a1:ec:c9:1d: 62:48:99:f8:1c:dc:9a:5e:ee:44:30:21:03:91:af:17:39:0e: 4a:11:cd:f1:57:b5:78:fe:5e:56:c1:b9:a2:84:4c:4a:07:ac: 13:3a:6c:84:44:83:b7:ff:44:f8:25:ac:73:17:56:c6:27:c8: 50:6d:00:d8:b8:74:cd:0f:9a:ed:43:fd:a1:8d:b5:dd:0d:16: d4:6d:78:43:5e:96:82:31:fc:1c:ea:fb:e2:e1:91:0e:88:a8: ee:4c:3f:ac:5c:56:7b:5c:e2:45:12:b5:49:a1:1f:de:58:85: 0a:27:c8:93:15:fc:a1:41:40:8d:06:a3:cc:e5:78:10:e6:fc: 44:2a:d4:3d:f7:90:be:53:2d:36:e8:7d:00:5b:4b:61:41:10: de:34:76:2e:c1:f8:01:80:75:fd:37:ff:00:18:07:9b:48:4b: c3:98:0a:47:98:7b:20:17:30:e5:c9:1c:e5:37:8c:a8:aa:b5: 1f:27:71:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4HesJ6Z+1oeUJbjF+viMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNWIwZDM2YTM3NGFiMzVjNDM2ZWUwMGMyZWNhZWZiYjJh MzU0NDgwHhcNMjUxMjI2MTMwMDU4WhcNMjUxMjI3MTMwMDU4WjAzMTEwLwYDVQQD Eyg4NzQ0M2QxMDI2OTRkOWIyODYyM2RjZmY5NmM2YTg4MmU5NjhlOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBc5WdlVleXQpivLkr+336fqG5wr n+qhsCfloEqKSm7sbn9/Egy/6XCJ+h5wFFNGWrDci1/5AEj/z6+N+UFoqz+/NTS+ o/GjFuhfX3oG169rcJTSJfv+nBvslXIL8zntein8i13xBk7Y2Na6hQ5Wc78ycgFC tgxGjiQKx4hypw6KBJUhnANtVm2u/hMjAxEOQRDf8F3i6rrA9gSUvdC7v2+ey5WW Csm2YTPWicvBnJumfU19CAsd4udH7hdZ8JKmmryO3WWnyPuOAnamfBZVbSu0ed80 UCBlw9ItVQxDvNZkOD2mGeIhEAi+wVR5cmPu0h95dnjuU/SjeSDMZbXsBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdEPRAmlNmyhiPc/5bGqILpaOmeMB8GA1UdIwQY MBaAFO5bDTajdKs1xDbuAMLsrvuyo1RIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjIt NjlhMjM4Zjk4ODlhLzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjItNjlhMjM4Zjk4ODlh LzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQ3ZZT4T dxvUiF4Ipjhdsu+PLB2iuFIn1ec928m3/pABgPe25iBTnqqmpIS89Mse3CtCDrYH GOtk238bOv//vicdMhih7MkdYkiZ+Bzcml7uRDAhA5GvFzkOShHN8Ve1eP5eVsG5 ooRMSgesEzpshESDt/9E+CWscxdWxifIUG0A2Lh0zQ+a7UP9oY213Q0W1G14Q16W gjH8HOr74uGRDoio7kw/rFxWe1ziRRK1SaEf3liFCifIkxX8oUFAjQajzOV4EOb8 RCrUPfeQvlMtNuh9AFtLYUEQ3jR2LsH4AYB1/Tf/ABgHm0hLw5gKR5h7IBcw5ckc 5TeMqKq1HydxOg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:46 2025 by rpki-client