This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json) Hash identifier: SDKPPsfS/iuxvSOztISt8L/xfst6N5PgP81stRw1MDk= Subject key identifier: B3:56:74:26:3F:13:69:31:7B:2A:FC:8A:74:51:0F:EB:9D:38:BE:61 Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae Certificate serial: 019B25BFCD55AC3A6955CBF067FCFAEB3029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft Manifest number: 02FD Signing time: Tue 16 Dec 2025 06:01:25 +0000 Manifest this update: Tue 16 Dec 2025 06:01:25 +0000 Manifest next update: Wed 17 Dec 2025 06:01:25 +0000 Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: 7zchmQZThlN0WTWVGKWu1TT7FWPS1TqIaBcuHp3Lo48=) 2: Br2XYkCHvC72aVRHi890y0oAZCY.roa (hash: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:cd:55:ac:3a:69:55:cb:f0:67:fc:fa:eb:30:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae Validity Not Before: Dec 16 06:01:25 2025 GMT Not After : Dec 17 06:01:25 2025 GMT Subject: CN=b35674263f1369317b2afc8a74510feb9d38be61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:19:93:04:97:2b:48:e6:78:6d:0e:03:2d: 0e:e6:ef:8c:65:de:6e:f3:80:75:43:18:47:90:75: 79:31:da:2d:f9:ac:ef:b9:08:c5:c6:44:a5:ef:81: 3a:19:f3:87:36:7b:c6:ff:8c:5f:a4:99:e6:6a:f0: bf:3a:d3:fa:be:a4:e9:08:35:44:72:63:30:e2:c9: e9:0f:52:86:cc:7c:80:8a:3c:81:ed:9f:55:a9:b8: 94:fe:8b:3d:06:48:dc:2c:39:d1:84:ba:74:ac:85: 38:f5:be:82:d1:d0:67:0f:2f:7c:6f:5b:b6:3e:c4: 32:83:7b:a9:cc:cc:25:4d:58:02:89:04:07:6e:5a: 84:fe:12:b9:67:28:a9:97:de:6e:74:02:dd:ae:7a: 34:7e:5f:e8:4a:44:24:ec:70:51:f8:6b:f0:f3:44: 7d:18:f8:b9:31:84:77:da:45:9b:f6:39:f6:2e:78: d6:4b:b4:02:1b:08:5b:05:09:13:ce:2b:60:69:93: c0:78:1d:24:ff:f4:df:53:d2:c3:a0:ec:82:90:c5: 9d:98:15:6c:81:b4:ed:54:a0:ce:75:98:da:2b:16: 14:a0:2d:e7:f0:7e:16:69:4d:72:56:df:88:a0:0c: b7:2b:29:59:63:91:43:e2:ac:b9:55:a3:e8:f0:41: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:56:74:26:3F:13:69:31:7B:2A:FC:8A:74:51:0F:EB:9D:38:BE:61 X509v3 Authority Key Identifier: keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:33:95:cd:0b:f2:29:7b:13:cb:df:07:b7:aa:c5:ee:e5:33: 65:51:9d:87:e9:d2:ca:77:98:ad:49:28:93:73:2f:ab:a3:97: f8:27:7b:e5:f3:29:e6:37:08:b8:c9:91:20:c5:2f:0b:90:86: b6:4e:54:f2:e8:09:86:67:d0:42:c0:8c:89:9e:17:72:b1:97: 37:f5:33:49:3a:f0:e7:80:86:d3:e6:65:56:69:58:d4:f1:5d: ef:10:bf:35:f6:53:00:72:57:5c:42:d5:fe:a9:d8:97:f9:35: 59:7a:7f:b9:3b:e1:08:dc:8e:e5:00:4f:fe:d8:e8:b2:51:d4: 81:88:84:0c:fa:97:ad:0a:86:ae:1e:24:33:8e:88:31:77:f9: 01:c8:cc:6d:07:d7:b7:d6:dd:c1:54:76:56:7a:61:cc:d4:b1: d0:e9:df:ef:a1:0d:65:76:c3:bf:f1:7b:a7:87:4b:db:0c:ad: 8d:1b:8c:85:24:57:01:77:d3:a3:3c:d9:e6:f9:8a:d1:d9:d4: 49:48:00:6e:2d:b3:c4:5c:04:ee:64:24:38:8e:52:81:50:00: c9:ca:71:d8:36:cc:fa:7b:d4:c3:bb:19:a3:a9:58:85:84:51: d1:05:48:35:97:42:c5:67:c0:1d:f1:ba:0e:8d:c4:65:5f:d6: a9:4d:b5:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv81VrDppVcvwZ/z66zApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx NjdkYWUwHhcNMjUxMjE2MDYwMTI1WhcNMjUxMjE3MDYwMTI1WjAzMTEwLwYDVQQD EyhiMzU2NzQyNjNmMTM2OTMxN2IyYWZjOGE3NDUxMGZlYjlkMzhiZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLgZkwSXK0jmeG0OAy0O5u+MZd5u 84B1QxhHkHV5Mdot+azvuQjFxkSl74E6GfOHNnvG/4xfpJnmavC/OtP6vqTpCDVE cmMw4snpD1KGzHyAijyB7Z9VqbiU/os9BkjcLDnRhLp0rIU49b6C0dBnDy98b1u2 PsQyg3upzMwlTVgCiQQHblqE/hK5Zyipl95udALdrno0fl/oSkQk7HBR+Gvw80R9 GPi5MYR32kWb9jn2LnjWS7QCGwhbBQkTzitgaZPAeB0k//TfU9LDoOyCkMWdmBVs gbTtVKDOdZjaKxYUoC3n8H4WaU1yVt+IoAy3KylZY5FD4qy5VaPo8EFStQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNWdCY/E2kxeyr8inRRD+udOL5hMB8GA1UdIwQY MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4 LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTOVzQvy KXsTy98Ht6rF7uUzZVGdh+nSyneYrUkok3Mvq6OX+Cd75fMp5jcIuMmRIMUvC5CG tk5U8ugJhmfQQsCMiZ4XcrGXN/UzSTrw54CG0+ZlVmlY1PFd7xC/NfZTAHJXXELV /qnYl/k1WXp/uTvhCNyO5QBP/tjoslHUgYiEDPqXrQqGrh4kM46IMXf5AcjMbQfX t9bdwVR2VnphzNSx0Onf76ENZXbDv/F7p4dL2wytjRuMhSRXAXfTozzZ5vmK0dnU SUgAbi2zxFwE7mQkOI5SgVAAycpx2DbM+nvUw7sZo6lYhYRR0QVINZdCxWfAHfG6 Do3EZV/WqU21mQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:42:05 2025 by rpki-client