This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json) Hash identifier: IfJrYcUlUzu4WKz+xozW15+mBGYGluU88MTErOKK/yM= Subject key identifier: 91:BB:77:71:31:14:81:D9:A2:F2:ED:D6:9D:84:FD:93:C8:9A:54:79 Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Certificate serial: 019B462607F3465DECD1342982479C3EAADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft Manifest number: 0502 Signing time: Mon 22 Dec 2025 13:00:56 +0000 Manifest this update: Mon 22 Dec 2025 13:00:56 +0000 Manifest next update: Tue 23 Dec 2025 13:00:56 +0000 Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: MojotOnKAHlxU5RlcBi3pFzmD1YFJXmv47XWb7yY8nE=) 2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:07:f3:46:5d:ec:d1:34:29:82:47:9c:3e:aa:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Validity Not Before: Dec 22 13:00:56 2025 GMT Not After : Dec 23 13:00:56 2025 GMT Subject: CN=91bb7771311481d9a2f2edd69d84fd93c89a5479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:92:14:46:6f:27:45:7b:f5:62:52:29:a4: d5:ac:98:2b:94:c8:9a:99:a6:a2:24:b1:6e:0a:3d: ac:c2:32:a2:7c:e2:f0:13:5d:8d:54:e1:8d:dd:86: 6b:fa:76:33:b1:06:a5:0c:2c:f0:ab:0b:df:55:53: b6:8c:fa:1c:6d:79:77:ff:fb:49:6a:2d:0c:d7:4f: b9:6d:c1:0c:f4:aa:0a:bb:d3:1b:f9:53:0c:41:28: 7a:d2:63:8c:71:eb:bd:5f:e4:65:4a:08:b1:99:c2: e6:cc:60:fc:bd:5c:96:38:f5:03:fd:a3:58:69:0c: 90:e0:f4:18:93:8e:b3:2b:3c:6d:cb:e8:03:f4:57: 63:b6:09:6b:79:c7:9e:92:83:9b:4f:21:e3:4b:54: 55:2b:b2:e8:61:42:fd:19:33:ac:ed:7d:73:64:3c: 2a:28:7c:11:43:83:46:0a:d6:7d:33:82:77:3c:b5: f3:31:b5:f8:88:19:a8:e2:64:b8:91:54:c7:bb:7b: 36:e8:58:99:39:ac:af:96:e2:41:2b:c2:9b:c7:d3: 10:95:4b:a8:dc:fa:90:6c:89:79:3c:a0:f2:29:66: 3a:a4:40:98:9f:63:1d:fb:28:31:36:e6:44:d4:f1: 77:24:49:ca:4c:49:56:2e:9d:7a:eb:79:af:c6:e6: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:77:71:31:14:81:D9:A2:F2:ED:D6:9D:84:FD:93:C8:9A:54:79 X509v3 Authority Key Identifier: keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e0:ec:af:61:8a:be:fb:ad:27:26:a5:f6:3b:b8:30:93:e5: b4:17:fb:f7:f7:4a:77:37:63:5b:55:df:de:cc:46:70:b1:72: 8f:22:68:db:68:d5:73:82:fe:5d:19:05:7c:0c:6a:b8:67:97: 89:f0:55:91:a6:0b:5c:0b:a7:2a:df:e6:ef:61:61:36:f1:d1: 71:75:b4:c6:f5:58:dc:7d:7e:da:30:9d:50:2f:5e:28:29:a1: dc:1d:b1:4d:17:b4:cc:1d:ca:07:81:5c:9e:bf:f5:18:53:b7: 03:68:ed:ea:ca:6b:e2:4c:e0:32:5e:ec:86:99:7c:4d:da:d5: 37:73:94:0a:d3:76:e5:68:2a:26:0a:09:f2:2b:87:54:ae:3e: 8b:20:2b:4d:bb:7a:05:73:60:a0:d1:5d:91:c7:b5:c9:e6:09: ae:4f:39:28:51:09:ec:54:27:4c:32:8c:f4:66:c3:e0:f4:c6: 86:c7:a2:c0:11:2f:33:1a:2e:e9:b2:81:e4:40:ed:80:1f:d7: c2:40:41:48:93:0c:6c:3c:89:27:c6:63:0c:03:3f:2a:9c:3d: a7:93:c7:93:8d:14:57:c0:38:96:62:fd:c0:6a:97:2d:45:22: 07:64:a3:ed:33:89:e4:10:c6:80:18:4b:1e:00:65:70:9c:4d: de:8b:a9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJgfzRl3s0TQpgkecPqrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDE1NGY5NmFkY2ViOWJjZWUwYmRjMGI4MzVhZmJlMDUw OTc1MWEwHhcNMjUxMjIyMTMwMDU2WhcNMjUxMjIzMTMwMDU2WjAzMTEwLwYDVQQD Eyg5MWJiNzc3MTMxMTQ4MWQ5YTJmMmVkZDY5ZDg0ZmQ5M2M4OWE1NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bSSFEZvJ0V79WJSKaTVrJgrlMia maaiJLFuCj2swjKifOLwE12NVOGN3YZr+nYzsQalDCzwqwvfVVO2jPocbXl3//tJ ai0M10+5bcEM9KoKu9Mb+VMMQSh60mOMceu9X+RlSgixmcLmzGD8vVyWOPUD/aNY aQyQ4PQYk46zKzxty+gD9FdjtglreceekoObTyHjS1RVK7LoYUL9GTOs7X1zZDwq KHwRQ4NGCtZ9M4J3PLXzMbX4iBmo4mS4kVTHu3s26FiZOayvluJBK8Kbx9MQlUuo 3PqQbIl5PKDyKWY6pECYn2Md+ygxNuZE1PF3JEnKTElWLp1663mvxuazVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG7d3ExFIHZovLt1p2E/ZPImlR5MB8GA1UdIwQY MBaAFO7RVPlq3OubzuC9wLg1r74FCXUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYt NzZiN2VlZDUxZTRhLzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYtNzZiN2VlZDUxZTRh LzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeDsr2GK vvutJyal9ju4MJPltBf79/dKdzdjW1Xf3sxGcLFyjyJo22jVc4L+XRkFfAxquGeX ifBVkaYLXAunKt/m72FhNvHRcXW0xvVY3H1+2jCdUC9eKCmh3B2xTRe0zB3KB4Fc nr/1GFO3A2jt6spr4kzgMl7shpl8TdrVN3OUCtN25WgqJgoJ8iuHVK4+iyArTbt6 BXNgoNFdkce1yeYJrk85KFEJ7FQnTDKM9GbD4PTGhseiwBEvMxou6bKB5EDtgB/X wkBBSJMMbDyJJ8ZjDAM/Kpw9p5PHk40UV8A4lmL9wGqXLUUiB2Sj7TOJ5BDGgBhL HgBlcJxN3oupUg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:23:50 2025 by rpki-client