This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json) Hash identifier: Do2oCbls7VpbvTdGSR4CrPrgtZfUx6A+WdtjHCVrIJ8= Subject key identifier: 66:EF:9D:15:82:0C:29:6F:50:AA:F4:9C:D4:52:0D:AE:42:B1:4A:47 Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Certificate serial: 019B32315B3C8FBE9F5B3B297836F5DAF752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft Manifest number: 1790 Signing time: Thu 18 Dec 2025 16:00:53 +0000 Manifest this update: Thu 18 Dec 2025 16:00:53 +0000 Manifest next update: Fri 19 Dec 2025 16:00:53 +0000 Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: cXvIG0q3sVkp/dtyn0fcf6du/s7liPnl0Bvcf01F6cY=) 2: LOmlB_bYvUhvImzOEpyfmmb13tA.roa (hash: HMIbD2TeO88jNncglQPQEr9MPZGx95F03Z4iEkE8RIQ=) 3: owMuSAzaSSpr7jsUSC0mWrVKDU4.roa (hash: XKmvqtHVDmpyZyY4yBF/VjW7n8WfcDAr9Yhc2CLZYr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:5b:3c:8f:be:9f:5b:3b:29:78:36:f5:da:f7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Validity Not Before: Dec 18 16:00:53 2025 GMT Not After : Dec 19 16:00:53 2025 GMT Subject: CN=66ef9d15820c296f50aaf49cd4520dae42b14a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:46:9b:0c:94:8c:4c:14:dc:4c:90:ed:7f: c1:34:6f:52:68:0c:62:82:aa:7e:af:98:35:ec:ef: ed:4a:f5:9d:fb:28:eb:92:5d:92:7e:7e:23:8e:ac: c5:69:57:3f:d5:f4:6a:ca:03:80:a7:5e:1b:bf:a6: 21:02:3b:ea:81:fa:32:1b:8d:61:93:16:4e:27:e5: f2:8e:7f:86:87:d8:07:63:dc:27:de:b8:2b:a2:3f: 00:38:f7:6e:61:0b:e0:69:de:75:0d:c9:c4:3c:ea: d4:5f:6a:ff:01:5d:57:1e:06:6a:f8:9f:50:56:2a: 46:0d:d1:ed:24:6b:5d:e9:84:29:81:d5:16:ab:ab: af:6e:04:c7:e0:f8:25:56:e6:8f:cd:a3:26:6e:97: 21:34:a7:fc:19:1a:d7:30:6e:d1:c7:06:48:63:c4: e5:6a:c7:9e:8c:2e:fa:af:8c:e0:b4:88:35:4e:60: 56:83:07:77:74:62:8d:cf:09:04:29:7d:60:1d:2f: 0d:ed:bf:94:a4:a8:cc:d9:6e:59:54:76:ee:7c:9f: f0:02:00:7c:39:5b:55:ab:c8:27:bc:72:62:11:0f: 4e:3a:c9:52:d2:b8:a8:5e:76:71:4d:38:05:51:c4: c4:31:18:af:2d:1f:68:fb:5c:e5:c4:59:5c:c9:bd: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:9D:15:82:0C:29:6F:50:AA:F4:9C:D4:52:0D:AE:42:B1:4A:47 X509v3 Authority Key Identifier: keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4c:1c:8a:c2:3a:55:28:68:03:83:e9:40:68:b1:c8:41:11: 37:49:1b:84:ce:c7:fc:37:bc:50:6e:02:e3:c7:b3:32:0c:1d: 1c:51:20:83:a3:5a:59:5b:14:f1:7f:a7:5d:b4:19:cd:f7:f7: 4c:2a:94:e3:3b:fa:53:82:35:9e:64:0d:88:8d:38:77:c2:f5: cb:8e:5e:98:a6:b1:a4:0f:a5:5f:50:c9:7e:13:ad:cc:9b:cd: 7a:7b:3a:b9:9d:9f:c2:32:ff:9a:ec:45:5f:0f:8c:69:c0:d6: 6b:6c:c5:d8:25:23:c6:3d:41:68:eb:f9:95:d1:65:99:ba:ce: dc:f4:1b:93:aa:95:44:75:c6:26:bb:34:82:9e:33:4a:44:0b: 3b:95:eb:04:1d:f3:ce:7d:b4:3c:07:ce:a1:36:5a:94:2b:b4: db:fc:23:08:8f:91:36:54:54:5a:33:3a:ac:41:f4:0d:d8:d6: 7e:82:a5:c0:d9:c5:5c:0a:36:2d:60:f0:6a:db:ed:0f:26:25: ac:e9:85:69:0b:bc:c9:85:3a:f8:e3:05:75:8e:f9:65:17:30: 7b:48:cf:cc:f6:73:c1:5b:7a:85:6f:73:f4:c5:de:cc:7c:59: 92:77:79:e7:49:9c:b5:33:fc:fd:b0:22:b3:9b:3f:f1:94:14: 54:e5:f1:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMVs8j76fWzspeDb12vdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWQ3NjNiNDllMDI0YTdiNmExOWVhZjdkZmI5ODkxMWE5 Yzk0YzgwHhcNMjUxMjE4MTYwMDUzWhcNMjUxMjE5MTYwMDUzWjAzMTEwLwYDVQQD Eyg2NmVmOWQxNTgyMGMyOTZmNTBhYWY0OWNkNDUyMGRhZTQyYjE0YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcNGmwyUjEwU3EyQ7X/BNG9SaAxi gqp+r5g17O/tSvWd+yjrkl2Sfn4jjqzFaVc/1fRqygOAp14bv6YhAjvqgfoyG41h kxZOJ+Xyjn+Gh9gHY9wn3rgroj8AOPduYQvgad51DcnEPOrUX2r/AV1XHgZq+J9Q VipGDdHtJGtd6YQpgdUWq6uvbgTH4PglVuaPzaMmbpchNKf8GRrXMG7RxwZIY8Tl aseejC76r4zgtIg1TmBWgwd3dGKNzwkEKX1gHS8N7b+UpKjM2W5ZVHbufJ/wAgB8 OVtVq8gnvHJiEQ9OOslS0rioXnZxTTgFUcTEMRivLR9o+1zlxFlcyb07YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbvnRWCDClvUKr0nNRSDa5CsUpHMB8GA1UdIwQY MBaAFO+ddjtJ4CSntqGer337mJEanJTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzct MDg3MGU2NTk2NDViLzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzctMDg3MGU2NTk2NDVi LzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEwcisI6 VShoA4PpQGixyEERN0kbhM7H/De8UG4C48ezMgwdHFEgg6NaWVsU8X+nXbQZzff3 TCqU4zv6U4I1nmQNiI04d8L1y45emKaxpA+lX1DJfhOtzJvNens6uZ2fwjL/muxF Xw+MacDWa2zF2CUjxj1BaOv5ldFlmbrO3PQbk6qVRHXGJrs0gp4zSkQLO5XrBB3z zn20PAfOoTZalCu02/wjCI+RNlRUWjM6rEH0DdjWfoKlwNnFXAo2LWDwatvtDyYl rOmFaQu8yYU6+OMFdY75ZRcwe0jPzPZzwVt6hW9z9MXezHxZknd550mctTP8/bAi s5s/8ZQUVOXxgQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:08 2025 by rpki-client