This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json) Hash identifier: lVrRPKWFpAcnUV5OHI9af87nZryF6UYj5dqjm+s6WsY= Subject key identifier: C7:8A:10:C6:FA:D5:87:4F:12:A0:09:CF:64:D1:27:29:3B:79:BA:18 Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4 Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4 Certificate serial: 019B3BA2A0C0E98DA1BB556394AE3AEC22E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:01:12 +0000 Manifest this update: Sat 20 Dec 2025 12:01:12 +0000 Manifest next update: Sun 21 Dec 2025 12:01:12 +0000 Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: AmAX4zAeSkJrK+7gJ+lppUsyclCCyZQtKmK6qEjO8C8=) 2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a0:c0:e9:8d:a1:bb:55:63:94:ae:3a:ec:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4 Validity Not Before: Dec 20 12:01:12 2025 GMT Not After : Dec 21 12:01:12 2025 GMT Subject: CN=c78a10c6fad5874f12a009cf64d127293b79ba18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:3a:91:c7:ae:af:73:5c:13:f8:91:3e:eb: 37:e3:02:f8:c0:62:31:d3:65:f7:c3:54:af:6f:96: a3:f6:ae:29:3f:d9:ea:c3:ee:6b:6a:59:13:9b:53: 43:1e:02:ec:66:7d:05:9b:ae:1d:13:00:62:e1:6e: 5e:71:d4:3a:62:1e:63:44:1d:10:bb:b0:53:ac:50: 9b:43:65:34:56:56:76:40:b8:0a:06:95:65:bc:1b: 4f:42:d9:eb:43:d9:d0:4c:11:e3:59:62:2f:4a:1c: 05:52:4d:0b:29:5e:32:27:ea:97:dc:3d:11:b4:88: 28:d9:93:49:17:38:39:46:0c:fa:e3:4a:6c:8b:34: 86:77:0e:df:4f:76:89:62:70:31:4a:05:56:64:87: 7d:b9:d3:48:54:39:70:04:46:5f:5d:f2:16:3a:76: 04:a5:e8:ab:36:c7:a3:55:8e:0d:65:9f:b1:02:c2: 7f:c7:21:24:9d:71:1b:9c:6f:df:20:53:45:3d:92: c5:24:d3:09:7b:7c:43:a4:00:8c:7f:63:3f:eb:66: 97:3b:55:3a:74:53:1c:30:9a:d5:19:87:0c:16:1d: 6b:85:87:8b:81:98:9f:df:07:cb:80:28:6f:31:bd: ec:55:c1:08:50:31:9d:8b:f4:0d:92:c6:ac:52:ec: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8A:10:C6:FA:D5:87:4F:12:A0:09:CF:64:D1:27:29:3B:79:BA:18 X509v3 Authority Key Identifier: keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e4:a6:a4:2c:f5:33:5b:5d:88:be:aa:22:de:6b:96:3d:8e: 1f:84:6c:12:e3:e4:60:65:4b:a8:f3:41:b9:d7:9a:28:71:04: 1c:f9:35:42:a1:e7:bc:42:9d:b1:64:70:77:a4:e3:2f:49:b2: 2b:2b:1b:55:3d:f7:2c:0f:2f:26:6c:68:d7:91:04:57:25:94: 4b:ef:f9:69:82:5f:50:6c:b5:4c:ac:66:e7:5b:ca:9d:41:ae: af:19:1d:1c:5e:db:74:bf:7f:2b:e6:91:fc:53:91:8f:e2:f8: 2e:00:16:dd:24:58:2f:e7:94:65:4f:c2:11:80:4f:eb:ef:0d: 25:6b:8c:0f:10:07:2e:e7:1f:6a:a5:85:a2:b9:3d:67:df:64: f0:c2:6e:a9:91:43:1a:c2:32:72:2c:c9:a5:b2:11:ee:03:63: bd:6a:a7:26:f1:40:fe:99:20:da:7d:a7:6a:0d:f8:74:bf:41: 3a:76:b9:8e:54:26:7d:1f:fa:00:a1:a2:40:82:40:7f:3f:eb: 2d:06:49:3b:61:a2:8f:21:21:51:d4:eb:42:d3:3c:3c:c0:7c: 13:0a:95:db:60:df:56:0d:50:3a:d6:1e:8a:d3:c0:18:59:46: 53:60:41:7c:00:5b:ef:7b:d3:bb:a5:17:8b:e6:ad:79:0f:00: 37:dc:50:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqDA6Y2hu1VjlK467CLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODIzOTUwMDFiMDNjNjYzNTA5OTA5OTc5ZGZiNzg0NDVi M2Q5YzQwHhcNMjUxMjIwMTIwMTEyWhcNMjUxMjIxMTIwMTEyWjAzMTEwLwYDVQQD EyhjNzhhMTBjNmZhZDU4NzRmMTJhMDA5Y2Y2NGQxMjcyOTNiNzliYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTY6kceur3NcE/iRPus34wL4wGIx 02X3w1Svb5aj9q4pP9nqw+5ralkTm1NDHgLsZn0Fm64dEwBi4W5ecdQ6Yh5jRB0Q u7BTrFCbQ2U0VlZ2QLgKBpVlvBtPQtnrQ9nQTBHjWWIvShwFUk0LKV4yJ+qX3D0R tIgo2ZNJFzg5Rgz640psizSGdw7fT3aJYnAxSgVWZId9udNIVDlwBEZfXfIWOnYE peirNsejVY4NZZ+xAsJ/xyEknXEbnG/fIFNFPZLFJNMJe3xDpACMf2M/62aXO1U6 dFMcMJrVGYcMFh1rhYeLgZif3wfLgChvMb3sVcEIUDGdi/QNksasUuyEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeKEMb61YdPEqAJz2TRJyk7eboYMB8GA1UdIwQY MBaAFO6COVABsDxmNQmQmXnft4RFs9nEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZjJhMDEtZDhjYS00Yjk0LThmNjct NzhlYTgzZDIxMjQ5LzEvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lZjJhMDEtZDhjYS00Yjk0LThmNjctNzhlYTgzZDIxMjQ5 LzEvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteSmpCz1 M1tdiL6qIt5rlj2OH4RsEuPkYGVLqPNBudeaKHEEHPk1QqHnvEKdsWRwd6TjL0my KysbVT33LA8vJmxo15EEVyWUS+/5aYJfUGy1TKxm51vKnUGurxkdHF7bdL9/K+aR /FORj+L4LgAW3SRYL+eUZU/CEYBP6+8NJWuMDxAHLucfaqWFork9Z99k8MJuqZFD GsIycizJpbIR7gNjvWqnJvFA/pkg2n2nag34dL9BOna5jlQmfR/6AKGiQIJAfz/r LQZJO2GijyEhUdTrQtM8PMB8EwqV22DfVg1QOtYeitPAGFlGU2BBfABb73vTu6UX i+ateQ8AN9xQbA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:14:58 2025 by rpki-client