This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json) Hash identifier: q+uWb0hbdqoAUJqxD/zH/5twDT+cPehosJhDGtpcL9I= Subject key identifier: CD:64:B9:76:1C:CB:1D:B6:A0:83:58:49:F8:20:3E:62:72:BC:FD:36 Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Certificate serial: 019AFDD631984895456C6F52C4CD207542C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft Manifest number: 06B6 Signing time: Mon 08 Dec 2025 12:01:04 +0000 Manifest this update: Mon 08 Dec 2025 12:01:04 +0000 Manifest next update: Tue 09 Dec 2025 12:01:04 +0000 Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: 9tEtKK30Sw3iu37n1htXWm2cdBpFMP31GK5iTziF99s=) 2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:d6:31:98:48:95:45:6c:6f:52:c4:cd:20:75:42:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Validity Not Before: Dec 8 12:01:04 2025 GMT Not After : Dec 9 12:01:04 2025 GMT Subject: CN=cd64b9761ccb1db6a0835849f8203e6272bcfd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:c9:bc:3f:d8:f4:63:2d:7c:51:1e:b0:d4: 6f:0c:30:e1:9a:08:5e:39:35:ab:d7:eb:de:be:a9: b5:c4:2d:c9:32:11:6d:b4:c2:24:d1:a7:6f:44:63: 44:93:4d:57:1c:49:57:f0:0b:ff:ca:6e:cd:70:aa: 98:12:b2:7f:5c:11:1e:f6:9f:d9:d7:85:74:44:58: 69:11:a1:ed:41:20:a5:c0:08:29:19:cb:5a:cc:bf: 41:49:b4:53:0c:6c:45:02:36:a7:a4:aa:c4:d5:45: bc:26:d1:9f:81:e1:d3:16:0c:ae:32:0a:93:f2:34: a9:3d:f6:62:82:8f:2d:96:3f:58:fd:e1:41:01:46: 31:dc:19:4d:30:cc:74:cc:de:15:79:a6:ef:73:de: 67:e9:cf:47:29:37:29:83:d6:85:68:83:ac:94:28: 3f:be:8e:28:45:0b:6b:06:70:ab:0b:54:34:76:b5: b7:07:c6:33:25:ba:6d:a2:36:c4:76:17:2c:a8:d2: f2:a3:29:e1:1e:b3:ec:62:f5:09:f3:8f:9e:17:14: 82:6b:53:99:d7:f4:84:a7:e5:65:34:1e:a2:d3:fc: 6c:d7:88:42:e0:8f:c5:d4:a6:71:5f:60:90:97:1d: 2c:56:1d:ad:36:c1:28:7e:d3:a3:34:81:4b:56:16: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:64:B9:76:1C:CB:1D:B6:A0:83:58:49:F8:20:3E:62:72:BC:FD:36 X509v3 Authority Key Identifier: keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:1f:d5:bf:6c:30:53:e6:58:9e:0d:c0:ae:c7:71:1d:52:2f: 78:b3:67:33:2f:99:01:6f:91:86:4f:7a:53:55:12:c7:69:0b: 7c:c6:e1:04:3c:ce:db:8d:3e:79:5c:04:9b:1b:41:0d:da:ec: e3:34:5b:2f:c5:9e:80:60:de:d2:c2:70:ff:56:02:dc:51:ae: 2f:80:d0:da:af:ae:92:42:f2:07:8e:72:4b:77:63:c9:4c:66: 87:b6:3c:63:13:2d:6f:6a:3c:21:b1:b7:be:3b:e1:6e:90:4b: 28:2e:af:11:9b:6f:a8:46:69:d7:5b:ed:db:76:31:9b:43:10: 4e:73:60:87:91:e1:99:14:4b:18:c3:6a:2f:15:ce:d6:31:3e: 47:07:c8:02:8e:b6:cd:0c:70:b4:cf:8e:2c:45:04:ed:55:29: d8:68:28:62:0e:4b:65:0f:11:a8:be:ef:58:b2:8b:fb:9d:ff: dc:d9:df:4c:22:82:04:0a:9b:40:a1:44:21:c2:b5:c1:ed:63: fb:9a:bc:58:34:ad:8a:b4:5e:e9:67:d8:49:07:57:0a:09:be: 9d:12:4e:5c:2a:f1:1a:45:3d:6a:94:4f:75:13:29:ce:32:72: 4d:1e:3b:06:bb:5b:19:b1:19:9e:a0:e3:b2:4e:72:8b:82:eb: 04:21:c6:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr91jGYSJVFbG9SxM0gdULBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2 MTkyMDQwHhcNMjUxMjA4MTIwMTA0WhcNMjUxMjA5MTIwMTA0WjAzMTEwLwYDVQQD EyhjZDY0Yjk3NjFjY2IxZGI2YTA4MzU4NDlmODIwM2U2MjcyYmNmZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfDJvD/Y9GMtfFEesNRvDDDhmghe OTWr1+vevqm1xC3JMhFttMIk0advRGNEk01XHElX8Av/ym7NcKqYErJ/XBEe9p/Z 14V0RFhpEaHtQSClwAgpGctazL9BSbRTDGxFAjanpKrE1UW8JtGfgeHTFgyuMgqT 8jSpPfZigo8tlj9Y/eFBAUYx3BlNMMx0zN4Veabvc95n6c9HKTcpg9aFaIOslCg/ vo4oRQtrBnCrC1Q0drW3B8YzJbptojbEdhcsqNLyoynhHrPsYvUJ84+eFxSCa1OZ 1/SEp+VlNB6i0/xs14hC4I/F1KZxX2CQlx0sVh2tNsEoftOjNIFLVhbZ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1kuXYcyx22oINYSfggPmJyvP02MB8GA1UdIwQY MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct ZjcyMjMzMTc5Y2NmLzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7h/Vv2ww U+ZYng3ArsdxHVIveLNnMy+ZAW+Rhk96U1USx2kLfMbhBDzO240+eVwEmxtBDdrs 4zRbL8WegGDe0sJw/1YC3FGuL4DQ2q+ukkLyB45yS3djyUxmh7Y8YxMtb2o8IbG3 vjvhbpBLKC6vEZtvqEZp11vt23Yxm0MQTnNgh5HhmRRLGMNqLxXO1jE+RwfIAo62 zQxwtM+OLEUE7VUp2GgoYg5LZQ8RqL7vWLKL+53/3NnfTCKCBAqbQKFEIcK1we1j +5q8WDStirRe6WfYSQdXCgm+nRJOXCrxGkU9apRPdRMpzjJyTR47BrtbGbEZnqDj sk5yi4LrBCHGbw== -----END CERTIFICATE-----Generated at Mon Dec 8 15:43:11 2025 by rpki-client