This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json) Hash identifier: 3m/1H0hGJGCcwWRL1DarWXUhBALpAJqpWY3m05uSNbE= Subject key identifier: 9B:19:DB:7A:8C:37:EA:2B:94:6B:A1:47:15:C5:81:93:A5:D5:9F:D4 Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Certificate serial: 019B5B2D505C9F2D9E260329D9A248ADFD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 15:00:54 +0000 Manifest this update: Fri 26 Dec 2025 15:00:54 +0000 Manifest next update: Sat 27 Dec 2025 15:00:54 +0000 Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: kIuK7TA0FI2TYlLYu443dqeL4V0tMPUqLg1vWhTrBRY=) 2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:2d:50:5c:9f:2d:9e:26:03:29:d9:a2:48:ad:fd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Validity Not Before: Dec 26 15:00:54 2025 GMT Not After : Dec 27 15:00:54 2025 GMT Subject: CN=9b19db7a8c37ea2b946ba14715c58193a5d59fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:fa:81:7a:f2:54:fe:f8:a2:68:91:4a:5f: 17:99:62:75:9e:3f:9e:5e:0c:4e:35:37:34:71:85: 63:bf:ff:8e:7e:2d:48:65:35:f9:c0:6c:c9:b9:66: fe:39:9e:c9:93:05:a8:96:6b:fd:08:58:a4:ce:e2: c1:5c:13:13:d9:d3:1b:9e:a0:2c:c5:e7:f9:8d:5f: f0:89:5c:ee:82:f6:27:07:b8:d4:bd:08:4b:3a:7a: 9a:34:79:ff:c3:fe:d8:94:f0:66:4f:95:31:f1:92: 5a:80:3b:64:db:a8:f1:01:f6:e2:7c:38:f7:c4:ad: 34:54:c5:cc:e4:26:50:c6:b5:25:ff:b9:16:67:83: 36:fc:34:a0:58:7a:3d:92:f2:66:41:0d:04:7c:cc: 21:ed:7a:20:05:56:13:26:4f:f6:b3:7b:da:87:33: 0d:9f:eb:20:da:92:ad:3c:69:7c:a0:4d:cf:f4:9e: ad:1a:5c:a0:d6:22:04:8b:44:0e:b4:f7:31:d2:a2: 67:1f:3a:5d:3b:32:81:87:c0:ed:41:37:f5:75:c9: ad:6a:2d:2b:ba:3f:c3:d1:98:4a:00:81:b3:42:36: d6:e9:ac:bc:aa:a7:33:1a:e2:03:3f:60:a3:56:4f: ef:5a:3d:d5:fa:d2:63:12:00:85:e3:cd:8e:8b:4e: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:19:DB:7A:8C:37:EA:2B:94:6B:A1:47:15:C5:81:93:A5:D5:9F:D4 X509v3 Authority Key Identifier: keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f3:66:15:c3:d6:1c:8d:0d:c7:4b:8d:60:9e:ac:4a:ef:ef: fd:7e:0e:e7:40:e2:56:fb:6c:cb:38:22:0c:25:8e:64:a4:d7: 08:b7:db:29:63:18:c8:38:a2:96:5a:ae:f7:bb:b0:27:a1:f1: f4:65:2c:ad:b7:ca:a4:9b:d3:c2:d6:8e:bf:75:64:3a:4b:4f: 7d:a3:2b:bb:54:b1:e0:8e:78:52:51:7b:c5:f4:f7:85:c2:5a: 72:a2:b7:85:d1:29:22:d8:6e:27:0c:b9:10:d4:04:14:84:66: 3b:54:04:33:ce:d6:e4:2d:e0:4f:22:ef:33:9e:b2:c6:6e:e7: 0a:04:46:23:aa:83:fc:7f:14:df:37:33:d8:5a:54:7b:6f:70: ed:d6:b7:58:e6:c8:99:f2:f2:77:f1:53:62:41:f3:1b:df:1f: fc:94:14:82:c2:05:c9:f8:10:13:7b:2b:d2:23:e5:bc:03:ba: b2:6b:da:5b:02:bb:15:d5:f2:c9:34:74:1e:61:55:54:05:fa: cf:81:63:41:51:6e:8e:21:af:e5:2d:cf:fc:6b:fb:7e:e2:47: 4a:59:ec:92:c1:26:8f:86:7e:c0:83:d1:5e:ca:1e:4c:3d:e7: b0:9b:83:1f:b2:01:c3:d9:19:ac:52:fc:81:e9:32:38:5f:ce: e4:de:92:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbLVBcny2eJgMp2aJIrf1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5 YWFlNTEwHhcNMjUxMjI2MTUwMDU0WhcNMjUxMjI3MTUwMDU0WjAzMTEwLwYDVQQD Eyg5YjE5ZGI3YThjMzdlYTJiOTQ2YmExNDcxNWM1ODE5M2E1ZDU5ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGr6gXryVP74omiRSl8XmWJ1nj+e XgxONTc0cYVjv/+Ofi1IZTX5wGzJuWb+OZ7JkwWolmv9CFikzuLBXBMT2dMbnqAs xef5jV/wiVzugvYnB7jUvQhLOnqaNHn/w/7YlPBmT5Ux8ZJagDtk26jxAfbifDj3 xK00VMXM5CZQxrUl/7kWZ4M2/DSgWHo9kvJmQQ0EfMwh7XogBVYTJk/2s3vahzMN n+sg2pKtPGl8oE3P9J6tGlyg1iIEi0QOtPcx0qJnHzpdOzKBh8DtQTf1dcmtai0r uj/D0ZhKAIGzQjbW6ay8qqczGuIDP2CjVk/vWj3V+tJjEgCF482Oi06wDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsZ23qMN+orlGuhRxXFgZOl1Z/UMB8GA1UdIwQY MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4 LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPNmFcPW HI0Nx0uNYJ6sSu/v/X4O50DiVvtsyzgiDCWOZKTXCLfbKWMYyDiillqu97uwJ6Hx 9GUsrbfKpJvTwtaOv3VkOktPfaMru1Sx4I54UlF7xfT3hcJacqK3hdEpIthuJwy5 ENQEFIRmO1QEM87W5C3gTyLvM56yxm7nCgRGI6qD/H8U3zcz2FpUe29w7da3WObI mfLyd/FTYkHzG98f/JQUgsIFyfgQE3sr0iPlvAO6smvaWwK7FdXyyTR0HmFVVAX6 z4FjQVFujiGv5S3P/Gv7fuJHSlnsksEmj4Z+wIPRXsoeTD3nsJuDH7IBw9kZrFL8 gekyOF/O5N6SsA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:41 2025 by rpki-client