This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft File: 7tf2sWWjjP80bePjUhGNyZ7YIsc.mft (raw, json) Hash identifier: p7Xzcaua6bzcmF/e4yOoV6yTk7LR8zOiHx/N3Kpro0I= Subject key identifier: DB:73:49:C3:CB:C1:71:06:7E:D0:B2:EE:5C:1E:AD:12:EB:B2:E7:C6 Authority key identifier: EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7 Certificate issuer: /CN=eed7f6b165a38cff346de3e352118dc99ed822c7 Certificate serial: 019B5A886D3E23B398A5A4C1412F0E30858A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft Manifest number: 83 Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: 7tf2sWWjjP80bePjUhGNyZ7YIsc.crl (hash: IywOiK70XYoqDzjLZCWq7cfBTI4tHgOBzO1zRq/UuOE=) 2: Ki-liMzit2Jo2WHroCxM5VPpxjM.roa (hash: 9WXsbfSa8emQvpxcrQX0QIVMCI+roYDTEL0EsjFfF+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6d:3e:23:b3:98:a5:a4:c1:41:2f:0e:30:85:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed7f6b165a38cff346de3e352118dc99ed822c7 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=db7349c3cbc171067ed0b2ee5c1ead12ebb2e7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:4b:d9:b0:02:3d:df:16:db:fc:3c:d6:36: 92:af:71:bd:df:2a:3c:46:19:86:0b:00:97:c0:39: 8a:93:b9:18:48:ae:d5:0c:e7:2a:f2:7b:64:cb:fe: e6:be:c5:ae:52:40:ea:ef:9f:d3:9f:e3:54:05:c8: 71:47:e4:a6:6f:59:b1:48:a4:5b:e0:1c:f1:d3:63: a3:db:29:e9:d0:00:0d:1c:b7:cc:bd:d5:4b:73:9c: fa:a9:f6:47:f8:81:80:71:eb:14:30:92:2b:e6:bf: b1:f7:39:62:f6:22:93:45:1f:47:d1:92:9c:a1:a2: fa:1b:bb:f2:d3:31:72:27:c1:b7:51:51:78:48:be: 2c:14:3a:26:b9:42:3f:73:39:08:9c:d9:d6:57:f9: c8:90:d2:fe:c3:59:0f:7b:6f:3c:9a:d1:7f:12:2d: 2e:b6:b5:3a:bd:0e:e9:b3:33:05:fe:d1:f6:19:0a: 69:26:43:5d:49:4a:71:4e:bf:33:8d:b8:dc:a0:b8: 14:09:a8:9c:b9:b8:97:40:58:cf:cc:d0:52:f7:c8: 81:f2:eb:d9:23:af:eb:5c:d1:ba:ba:73:43:d8:58: d2:92:55:99:18:9b:e0:2b:83:a6:a6:1e:f4:08:c3: 25:ce:05:fe:1b:ec:be:80:2e:3d:a8:b6:bd:05:15: d6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:73:49:C3:CB:C1:71:06:7E:D0:B2:EE:5C:1E:AD:12:EB:B2:E7:C6 X509v3 Authority Key Identifier: keyid:EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c7:77:25:b9:4b:22:ba:48:6d:40:d2:9c:5d:a3:89:3b:3e: 14:21:b5:83:67:84:69:c9:ec:0e:a1:c7:a5:bc:e7:30:79:1d: 0a:ef:0e:21:b4:70:f3:e7:cb:22:19:d3:51:56:57:3f:06:43: 8f:1d:6c:fc:86:05:a7:98:0c:ba:60:06:78:15:6e:85:85:ab: 2e:ac:c6:f6:a1:67:14:8d:0f:cc:c9:fa:b8:be:bd:38:07:b1: 6d:ff:54:cb:02:f0:be:d4:12:bf:37:36:11:90:79:21:9e:0b: 24:a3:fb:e5:f6:3d:e5:65:e8:be:5a:26:18:ab:7a:04:9f:65: 35:b8:9c:35:62:44:7f:cf:61:5c:65:bb:50:3b:ff:b7:e5:13: be:e3:de:8e:89:a2:c6:54:75:70:ca:ee:eb:71:19:31:97:a4: 47:12:fb:79:5f:3b:f2:c7:d1:32:c0:0c:41:18:e1:dc:f2:70: d5:fd:12:c4:c2:f6:4a:b9:a8:56:8e:ce:8a:ba:60:44:ae:18: 42:cf:6f:bf:4c:47:51:af:7b:bf:68:c4:9f:af:c1:95:59:37: 58:5d:74:54:68:71:64:71:dc:2d:24:86:6d:e5:83:9c:00:04: 22:45:5a:b8:e8:c5:c6:4c:8d:75:49:1e:bd:42:68:3a:ce:b5: 12:23:ce:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiG0+I7OYpaTBQS8OMIWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDdmNmIxNjVhMzhjZmYzNDZkZTNlMzUyMTE4ZGM5OWVk ODIyYzcwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EyhkYjczNDljM2NiYzE3MTA2N2VkMGIyZWU1YzFlYWQxMmViYjJlN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkFL2bACPd8W2/w81jaSr3G93yo8 RhmGCwCXwDmKk7kYSK7VDOcq8ntky/7mvsWuUkDq75/Tn+NUBchxR+Smb1mxSKRb 4Bzx02Oj2ynp0AANHLfMvdVLc5z6qfZH+IGAcesUMJIr5r+x9zli9iKTRR9H0ZKc oaL6G7vy0zFyJ8G3UVF4SL4sFDomuUI/czkInNnWV/nIkNL+w1kPe288mtF/Ei0u trU6vQ7pszMF/tH2GQppJkNdSUpxTr8zjbjcoLgUCaicubiXQFjPzNBS98iB8uvZ I6/rXNG6unND2FjSklWZGJvgK4Omph70CMMlzgX+G+y+gC49qLa9BRXWJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtzScPLwXEGftCy7lwerRLrsufGMB8GA1UdIwQY MBaAFO7X9rFlo4z/NG3j41IRjcme2CLHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jNTVlYTItNjJkMC00ZGI5LTkwMWMt ZWFjNjNjMzNiMDg1LzEvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jNTVlYTItNjJkMC00ZGI5LTkwMWMtZWFjNjNjMzNiMDg1 LzEvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsd3JblL IrpIbUDSnF2jiTs+FCG1g2eEacnsDqHHpbznMHkdCu8OIbRw8+fLIhnTUVZXPwZD jx1s/IYFp5gMumAGeBVuhYWrLqzG9qFnFI0PzMn6uL69OAexbf9UywLwvtQSvzc2 EZB5IZ4LJKP75fY95WXovlomGKt6BJ9lNbicNWJEf89hXGW7UDv/t+UTvuPejomi xlR1cMru63EZMZekRxL7eV878sfRMsAMQRjh3PJw1f0SxML2SrmoVo7OirpgRK4Y Qs9vv0xHUa97v2jEn6/BlVk3WF10VGhxZHHcLSSGbeWDnAAEIkVauOjFxkyNdUke vUJoOs61EiPOBA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:01 2025 by rpki-client