This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json) Hash identifier: VJ6aS5cU1YVazI78i5bBQapPZUw7cmcEHKjeec0hmcM= Subject key identifier: E0:27:BC:39:6C:97:60:DA:70:3B:AA:61:68:61:C3:96:3C:2B:EA:2F Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11 Certificate serial: 019B39B40726CE1D42F3561CE976C6D8528B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft Manifest number: 070A Signing time: Sat 20 Dec 2025 03:00:58 +0000 Manifest this update: Sat 20 Dec 2025 03:00:58 +0000 Manifest next update: Sun 21 Dec 2025 03:00:58 +0000 Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: Kwni8m/Ctcgw3efkaCNzOc43n4JJrvWdGyTNIq0HGCY=) 2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:07:26:ce:1d:42:f3:56:1c:e9:76:c6:d8:52:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11 Validity Not Before: Dec 20 03:00:58 2025 GMT Not After : Dec 21 03:00:58 2025 GMT Subject: CN=e027bc396c9760da703baa616861c3963c2bea2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:67:ea:81:08:01:32:b3:f9:8e:37:34:2a: d3:99:7a:36:c3:1f:d5:91:d0:10:64:e8:87:f7:87: 85:6e:29:e0:2d:57:f9:09:12:53:a5:a0:c1:b2:a5: 32:9b:26:a0:96:ff:61:51:ff:88:3f:a4:ab:45:8f: 00:96:bc:d9:0b:3f:6b:13:b4:5b:9e:ae:cc:a2:d2: 48:2f:72:58:b5:76:08:86:8e:ce:73:87:ae:6e:66: 28:39:dd:69:b9:e1:d9:70:2f:74:d9:6d:14:ce:84: 0e:c8:6a:29:f3:61:70:91:b1:eb:e1:94:5a:7a:97: 62:77:6a:52:e5:16:25:53:78:7c:f7:fa:93:2f:d1: 03:4a:9d:5f:76:93:6f:7a:ac:2d:5f:1f:d1:9e:0a: 06:66:94:81:b6:a0:76:cb:6b:95:84:15:6e:86:90: 93:81:5c:b3:b4:c8:3b:ac:d5:a5:14:61:96:4c:e0: 9b:b7:e7:7b:97:ce:86:0d:06:09:aa:7d:84:1e:00: 9e:96:9e:9e:45:50:a9:e1:d4:28:f1:53:7a:23:98: 78:d0:8d:b5:63:47:8f:a4:c2:11:2b:50:43:1c:1a: 7b:34:e6:8e:44:5b:88:00:a6:0b:11:da:68:29:df: 1e:b6:1d:1e:fb:da:0f:78:54:81:8d:91:1c:14:4a: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:27:BC:39:6C:97:60:DA:70:3B:AA:61:68:61:C3:96:3C:2B:EA:2F X509v3 Authority Key Identifier: keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:13:a4:fe:82:16:7b:72:2b:7b:54:9b:55:de:5d:78:2e:cd: 41:9d:52:3a:41:34:ca:42:40:56:cd:e5:75:1c:8e:99:b8:bf: 48:b3:0b:99:5c:31:ae:a8:cf:3e:8e:ab:70:6d:ae:b9:db:d9: 61:d9:fd:0c:32:a2:44:6a:e0:d0:c8:0a:c0:24:23:9b:d7:a2: d4:04:db:57:2b:65:37:cb:92:e3:66:7a:99:4d:fa:21:47:d2: a6:09:f6:7f:de:52:a9:c6:8a:18:50:99:d8:32:c9:72:ae:41: 4b:e4:a4:78:c2:3e:10:7e:b8:aa:fe:67:c1:0b:e9:cc:d5:eb: 8a:87:f4:a8:a7:51:07:2f:22:a1:cc:84:ec:04:c5:34:3c:96: dd:e3:13:3c:0c:dd:93:87:87:1b:ff:ee:bb:2d:dc:ca:25:e5: f4:83:98:3a:21:6d:0c:67:bb:08:f1:3c:5e:95:0f:35:65:64: 4e:23:9c:96:b6:35:90:be:d1:fc:d3:5d:ab:71:fe:73:1c:30: 09:59:c6:4e:f4:27:8d:0b:1b:a5:56:cd:91:1c:2e:66:7f:2f: 3f:cb:b7:e2:2e:08:03:5e:80:af:b5:eb:2f:3b:11:84:77:5f: 31:88:11:6f:08:42:0b:80:80:ef:68:44:c6:2c:84:e7:fc:4b: 2c:79:24:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tAcmzh1C81Yc6XbG2FKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4 OWNlMTEwHhcNMjUxMjIwMDMwMDU4WhcNMjUxMjIxMDMwMDU4WjAzMTEwLwYDVQQD EyhlMDI3YmMzOTZjOTc2MGRhNzAzYmFhNjE2ODYxYzM5NjNjMmJlYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Bn6oEIATKz+Y43NCrTmXo2wx/V kdAQZOiH94eFbingLVf5CRJTpaDBsqUymyaglv9hUf+IP6SrRY8AlrzZCz9rE7Rb nq7MotJIL3JYtXYIho7Oc4eubmYoOd1pueHZcC902W0UzoQOyGop82FwkbHr4ZRa epdid2pS5RYlU3h89/qTL9EDSp1fdpNveqwtXx/RngoGZpSBtqB2y2uVhBVuhpCT gVyztMg7rNWlFGGWTOCbt+d7l86GDQYJqn2EHgCelp6eRVCp4dQo8VN6I5h40I21 Y0ePpMIRK1BDHBp7NOaORFuIAKYLEdpoKd8eth0e+9oPeFSBjZEcFEopfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAnvDlsl2DacDuqYWhhw5Y8K+ovMB8GA1UdIwQY MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohOk/oIW e3Ire1SbVd5deC7NQZ1SOkE0ykJAVs3ldRyOmbi/SLMLmVwxrqjPPo6rcG2uudvZ Ydn9DDKiRGrg0MgKwCQjm9ei1ATbVytlN8uS42Z6mU36IUfSpgn2f95SqcaKGFCZ 2DLJcq5BS+SkeMI+EH64qv5nwQvpzNXriof0qKdRBy8iocyE7ATFNDyW3eMTPAzd k4eHG//uuy3cyiXl9IOYOiFtDGe7CPE8XpUPNWVkTiOclrY1kL7R/NNdq3H+cxww CVnGTvQnjQsbpVbNkRwuZn8vP8u34i4IA16Ar7XrLzsRhHdfMYgRbwhCC4CA72hE xiyE5/xLLHkkbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:55 2025 by rpki-client