This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft File: 7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json) Hash identifier: g5O0aDVBsgMXJC9IPeRNxdx3DY/I1CGcHdGraSj4Jo8= Subject key identifier: 17:1C:FC:7C:C2:EE:81:6F:46:81:42:67:72:AB:95:07:A8:43:6A:22 Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8 Certificate issuer: /CN=ed54b2e75935531278e7bad157c48c8aec43eee8 Certificate serial: 019B217613F706C4443405FC1C0ADF364324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft Manifest number: 075A Signing time: Mon 15 Dec 2025 10:02:24 +0000 Manifest this update: Mon 15 Dec 2025 10:02:24 +0000 Manifest next update: Tue 16 Dec 2025 10:02:24 +0000 Files and hashes: 1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: 3GUxktPBim6JDxOGcfbk2dCbdyAlxS+RKFIrFfessyo=) 2: lvckIph_fXtXurl5ym_WZRsaXmo.roa (hash: 5C1YRHd0ILljxfVn9Q8Mwd3r0vdxXZvngPftxEnCVwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:13:f7:06:c4:44:34:05:fc:1c:0a:df:36:43:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8 Validity Not Before: Dec 15 10:02:24 2025 GMT Not After : Dec 16 10:02:24 2025 GMT Subject: CN=171cfc7cc2ee816f4681426772ab9507a8436a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:32:8a:7b:64:b5:dc:68:1e:61:03:68:18: f8:fb:9f:91:2b:f0:4b:a9:f3:75:de:d6:1d:69:43: 66:e9:36:7e:b4:65:3e:94:c2:e5:46:5f:46:4e:16: 6d:63:1b:08:24:dc:4d:df:6f:24:59:99:39:16:31: 72:93:67:41:dd:6e:f4:a8:cc:50:f4:af:22:02:9e: 7c:d5:1d:08:e2:85:93:b3:f1:a3:eb:9c:27:2a:ab: f0:0b:cf:5d:34:39:f8:8f:04:52:f9:99:ea:9e:04: 10:df:44:90:37:43:fa:1b:a4:86:2a:92:7e:a5:2b: 5c:48:ae:06:49:11:f0:72:e5:e6:cc:fb:bb:dc:8d: 5e:aa:fb:1a:45:f6:78:c7:f9:4c:9d:a4:8d:f5:9f: 4f:bb:e5:d3:6e:61:79:25:5b:99:6c:60:53:a8:d0: 02:91:45:c0:f9:02:08:9a:c6:14:fb:02:e3:82:aa: 7b:b3:c7:91:4c:af:c8:3d:0a:bf:ff:30:00:62:0b: d4:12:bd:70:da:a0:bb:ad:79:6a:bf:5b:41:bb:93: 9c:e8:b9:47:3d:96:ca:7b:28:89:75:09:93:a6:ff: 80:b7:45:a5:4f:fe:15:54:b9:71:de:f1:8b:c2:0b: 22:d7:6f:f8:33:0d:8a:69:b6:c4:02:84:a4:66:c4: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1C:FC:7C:C2:EE:81:6F:46:81:42:67:72:AB:95:07:A8:43:6A:22 X509v3 Authority Key Identifier: keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:34:0a:8c:f6:be:3c:ee:3a:42:6b:ae:87:55:45:b0:30:73: 61:48:19:f6:87:83:da:f9:50:d9:1c:9e:07:18:0c:15:cf:0a: 84:d7:be:75:b9:eb:05:59:22:f8:eb:1c:26:0c:44:dd:f2:48: 37:73:7a:20:5e:07:3a:a9:6c:55:d5:4d:b4:6c:0f:65:2d:ff: 67:8c:09:d6:15:a2:9c:08:c3:47:af:32:b4:a9:71:ff:37:7e: 46:43:3b:42:1d:53:b3:37:2f:1e:17:66:5a:17:00:9b:e1:42: 16:6e:36:67:c8:7d:27:64:73:65:ba:19:07:bb:7d:52:47:12: ca:28:5e:68:3a:f7:fc:5d:d6:4c:73:16:d2:4b:bb:54:66:de: fd:12:ce:a5:3a:c1:0a:77:d7:9f:56:70:15:11:62:c8:13:5f: c9:e2:2c:43:ca:ba:03:44:f9:05:6a:4b:32:88:d3:f6:78:84: 74:3f:b7:66:48:6c:97:18:68:40:e0:63:cb:12:e5:9e:12:35: ba:dc:0c:1b:94:fc:fc:10:3e:62:bc:67:2c:9f:ec:a2:f0:97: a6:a7:05:35:fb:ec:ea:dc:d2:87:0a:9e:d9:5c:c4:84:a8:ac: 40:af:a2:1c:85:16:d8:ea:df:e5:5c:da:19:52:f9:30:c8:d5: 5a:08:ec:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdhP3BsRENAX8HArfNkMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTRiMmU3NTkzNTUzMTI3OGU3YmFkMTU3YzQ4YzhhZWM0 M2VlZTgwHhcNMjUxMjE1MTAwMjI0WhcNMjUxMjE2MTAwMjI0WjAzMTEwLwYDVQQD EygxNzFjZmM3Y2MyZWU4MTZmNDY4MTQyNjc3MmFiOTUwN2E4NDM2YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZsyintktdxoHmEDaBj4+5+RK/BL qfN13tYdaUNm6TZ+tGU+lMLlRl9GThZtYxsIJNxN328kWZk5FjFyk2dB3W70qMxQ 9K8iAp581R0I4oWTs/Gj65wnKqvwC89dNDn4jwRS+ZnqngQQ30SQN0P6G6SGKpJ+ pStcSK4GSRHwcuXmzPu73I1eqvsaRfZ4x/lMnaSN9Z9Pu+XTbmF5JVuZbGBTqNAC kUXA+QIImsYU+wLjgqp7s8eRTK/IPQq//zAAYgvUEr1w2qC7rXlqv1tBu5Oc6LlH PZbKeyiJdQmTpv+At0WlT/4VVLlx3vGLwgsi12/4Mw2KabbEAoSkZsRzgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcc/HzC7oFvRoFCZ3KrlQeoQ2oiMB8GA1UdIwQY MBaAFO1UsudZNVMSeOe60VfEjIrsQ+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAt MTA0NTU3MjU3ZmI4LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAtMTA0NTU3MjU3ZmI4 LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDQKjPa+ PO46Qmuuh1VFsDBzYUgZ9oeD2vlQ2RyeBxgMFc8KhNe+dbnrBVki+OscJgxE3fJI N3N6IF4HOqlsVdVNtGwPZS3/Z4wJ1hWinAjDR68ytKlx/zd+RkM7Qh1TszcvHhdm WhcAm+FCFm42Z8h9J2RzZboZB7t9UkcSyiheaDr3/F3WTHMW0ku7VGbe/RLOpTrB CnfXn1ZwFRFiyBNfyeIsQ8q6A0T5BWpLMojT9niEdD+3ZkhslxhoQOBjyxLlnhI1 utwMG5T8/BA+YrxnLJ/sovCXpqcFNfvs6tzShwqe2VzEhKisQK+iHIUW2Orf5Vza GVL5MMjVWgjskQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:10 2025 by rpki-client