This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json) Hash identifier: PG5Gc/KTNXtlMVb1OMh47DqMVPXfXy3WvXO7jJ6xRJU= Subject key identifier: C6:9E:99:29:3B:4D:4F:8A:AD:81:22:37:20:A5:DD:C8:BE:54:D5:0F Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Certificate serial: 019B292E42D755AA17BCBE91A22DB014F79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft Manifest number: 04F3 Signing time: Tue 16 Dec 2025 22:00:56 +0000 Manifest this update: Tue 16 Dec 2025 22:00:56 +0000 Manifest next update: Wed 17 Dec 2025 22:00:56 +0000 Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: 3331y9CTsH3OWf763Es5x6KdPq6mQd251FQsoUuU8U0=) 2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:42:d7:55:aa:17:bc:be:91:a2:2d:b0:14:f7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Validity Not Before: Dec 16 22:00:56 2025 GMT Not After : Dec 17 22:00:56 2025 GMT Subject: CN=c69e99293b4d4f8aad81223720a5ddc8be54d50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:dc:57:b7:94:c3:1d:85:e2:6f:bd:22:00: 1a:1d:1e:9d:01:13:74:18:19:c9:9e:61:ff:95:66: 95:7f:aa:a8:46:41:a7:ee:d6:06:da:a3:04:1b:f7: bb:09:e0:d6:09:e8:4b:63:5e:c0:4c:de:41:a7:db: 74:5e:40:77:b6:25:ed:7d:47:e6:26:9b:d3:8b:c0: 95:3e:ab:34:34:a2:e5:ca:97:b1:58:86:c8:4b:08: 5b:6e:c3:32:3b:61:85:96:2e:e9:ef:d4:53:67:15: 9b:70:94:09:ca:13:d3:cb:c3:a3:60:cc:b1:67:41: 31:57:3c:4a:41:b7:c9:c9:c9:65:56:78:52:51:6c: 06:3d:bc:c6:6f:84:c7:e5:0d:31:6e:92:54:35:4e: f4:b0:20:f1:45:2a:8c:0f:e3:b0:f1:71:31:71:97: c6:4f:39:28:de:ad:b5:fd:1e:a4:b8:ab:d1:6e:4d: b7:fd:b4:3a:b7:2f:e4:94:53:bf:02:d3:dd:24:19: 0c:9a:25:b9:fa:da:01:ac:df:59:43:27:33:c7:1a: 5a:05:2f:67:c5:a7:e9:bd:e3:0d:d8:9c:72:6c:dd: dc:3e:f3:5d:92:72:9a:73:cc:fb:75:26:b6:05:de: f9:a6:58:7a:48:a7:4e:f6:fb:6b:06:31:a4:8e:ae: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:99:29:3B:4D:4F:8A:AD:81:22:37:20:A5:DD:C8:BE:54:D5:0F X509v3 Authority Key Identifier: keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2e:5b:5e:19:0e:57:63:8d:e7:a8:c1:8a:06:be:65:21:f2: dd:c5:e2:ed:13:79:88:7f:e3:e2:4f:ad:ce:d3:ed:81:70:9b: c6:23:8d:91:39:4a:11:33:66:8d:9b:d1:06:06:40:25:5c:ab: ea:a5:a9:c7:e2:6c:51:f2:bc:73:9b:fd:5f:96:7a:e1:65:51: 3c:24:91:7e:03:f0:5e:26:6c:f1:eb:76:fc:11:03:2d:9b:b5: dc:6c:79:7e:e2:c3:1c:f9:d9:55:3a:be:1f:2f:6f:20:ec:42: ef:c5:e1:90:54:da:f8:32:43:fc:2c:3c:9d:0b:5b:3d:9b:df: 95:22:db:2c:ba:fb:f1:27:f9:b9:c7:72:1d:98:10:30:b1:66: 5f:3c:97:b4:b8:f8:fc:06:8b:e7:53:cb:1f:2e:5a:36:32:4c: 27:7a:f4:74:32:e1:31:84:cc:ba:89:47:d6:4d:a8:12:5f:d7: 25:a3:fe:56:79:6a:a6:1a:e7:d9:a3:fb:46:da:54:93:bf:14: d5:d2:d4:09:71:38:56:96:86:96:48:fa:71:10:23:b2:52:dc: 15:50:80:24:7c:96:52:d6:d7:c2:a7:ac:46:03:9e:d5:e4:61: 7f:87:57:e7:fb:3b:38:e1:80:39:d7:b7:56:5f:76:11:15:0b: c5:65:9a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLkLXVaoXvL6Roi2wFPefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDE1NGY5NmFkY2ViOWJjZWUwYmRjMGI4MzVhZmJlMDUw OTc1MWEwHhcNMjUxMjE2MjIwMDU2WhcNMjUxMjE3MjIwMDU2WjAzMTEwLwYDVQQD EyhjNjllOTkyOTNiNGQ0ZjhhYWQ4MTIyMzcyMGE1ZGRjOGJlNTRkNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsLcV7eUwx2F4m+9IgAaHR6dARN0 GBnJnmH/lWaVf6qoRkGn7tYG2qMEG/e7CeDWCehLY17ATN5Bp9t0XkB3tiXtfUfm JpvTi8CVPqs0NKLlypexWIbISwhbbsMyO2GFli7p79RTZxWbcJQJyhPTy8OjYMyx Z0ExVzxKQbfJycllVnhSUWwGPbzGb4TH5Q0xbpJUNU70sCDxRSqMD+Ow8XExcZfG Tzko3q21/R6kuKvRbk23/bQ6ty/klFO/AtPdJBkMmiW5+toBrN9ZQyczxxpaBS9n xafpveMN2JxybN3cPvNdknKac8z7dSa2Bd75plh6SKdO9vtrBjGkjq7HEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaemSk7TU+KrYEiNyCl3ci+VNUPMB8GA1UdIwQY MBaAFO7RVPlq3OubzuC9wLg1r74FCXUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYt NzZiN2VlZDUxZTRhLzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYtNzZiN2VlZDUxZTRh LzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi5bXhkO V2ON56jBiga+ZSHy3cXi7RN5iH/j4k+tztPtgXCbxiONkTlKETNmjZvRBgZAJVyr 6qWpx+JsUfK8c5v9X5Z64WVRPCSRfgPwXiZs8et2/BEDLZu13Gx5fuLDHPnZVTq+ Hy9vIOxC78XhkFTa+DJD/Cw8nQtbPZvflSLbLLr78Sf5ucdyHZgQMLFmXzyXtLj4 /AaL51PLHy5aNjJMJ3r0dDLhMYTMuolH1k2oEl/XJaP+Vnlqphrn2aP7RtpUk78U 1dLUCXE4VpaGlkj6cRAjslLcFVCAJHyWUtbXwqesRgOe1eRhf4dX5/s7OOGAOde3 Vl92ERULxWWa1Q== -----END CERTIFICATE-----Generated at Wed Dec 17 06:15:26 2025 by rpki-client