This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json) Hash identifier: bzqtYAOUpq8m8wVzIsH/v+G5aAdpkdm2wnOYdgsy7yo= Subject key identifier: E5:0E:CA:1A:4F:09:4D:FE:15:8D:7A:FB:20:25:4B:D7:5E:72:E8:F1 Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b Certificate serial: 019B5A1AEBE0C851CF8F7177BD01CB8DE6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft Manifest number: 079C Signing time: Fri 26 Dec 2025 10:01:12 +0000 Manifest this update: Fri 26 Dec 2025 10:01:12 +0000 Manifest next update: Sat 27 Dec 2025 10:01:12 +0000 Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: 9eSYW5YfFFvkWEOS8NM+yHLCGRFQjegN9bsBLFnTwIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:eb:e0:c8:51:cf:8f:71:77:bd:01:cb:8d:e6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b Validity Not Before: Dec 26 10:01:12 2025 GMT Not After : Dec 27 10:01:12 2025 GMT Subject: CN=e50eca1a4f094dfe158d7afb20254bd75e72e8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c0:a1:52:80:fa:8a:9d:11:52:98:54:8b:28: 94:dc:e6:dc:2b:df:96:86:b6:97:77:8c:b2:29:31: f7:bf:81:b0:19:21:51:32:9a:4c:e7:92:18:be:6d: 8b:45:ad:36:06:7d:ab:56:c5:47:02:0d:73:4d:0d: 33:f2:27:b0:fc:ee:43:18:76:06:53:6a:99:00:38: 3d:f6:48:b4:ec:db:75:80:82:5d:69:ad:26:f1:46: 84:8b:c9:c1:69:a3:65:17:32:52:1c:06:82:52:5c: 82:b1:6e:74:90:df:f4:48:1e:69:a6:23:33:02:64: c9:93:c0:fc:7c:60:64:77:6d:db:44:f5:ef:b4:f7: 45:30:9f:6d:d6:f0:02:e0:dc:f6:56:3e:b6:a9:41: 76:55:5a:04:19:ce:4d:21:ce:7b:1a:b6:fe:56:c6: 44:6d:6d:84:87:57:77:59:9d:4f:5a:fa:7d:2b:81: 25:73:0c:f1:77:56:77:5e:97:ac:a3:ff:d2:41:d8: 69:55:49:76:64:01:58:68:1e:a6:c6:04:53:89:2e: 8d:c6:0b:e3:4d:d4:38:09:76:ff:fc:e7:3c:f4:d8: 80:b8:bf:34:cb:e3:36:00:56:14:ba:71:f9:b9:d5: 68:14:04:ab:19:e3:c3:2b:39:62:36:a0:e1:b5:4f: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:CA:1A:4F:09:4D:FE:15:8D:7A:FB:20:25:4B:D7:5E:72:E8:F1 X509v3 Authority Key Identifier: keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bc:ac:20:a8:64:b2:e9:b0:41:a3:82:94:aa:e1:0a:ed:a0: 6e:43:44:44:79:30:a7:17:2c:d6:59:36:39:de:08:17:d9:13: ff:c3:3b:85:74:47:17:72:72:22:ad:63:59:ce:da:7a:28:9d: a1:da:b8:03:9b:72:66:44:a5:88:3c:fd:89:46:66:65:38:64: c4:02:f4:53:7a:ef:a0:a1:8c:c0:1c:0e:08:7a:98:ed:86:7b: 72:e6:04:ec:22:71:7f:2a:d8:9e:32:02:55:e0:ae:2d:a8:66: 08:3c:b3:2a:9d:63:3c:e0:ed:75:1d:8f:1d:a3:17:63:d0:94: ca:81:70:28:2a:14:69:b1:88:64:d0:ee:e1:c1:71:36:0b:14: 31:bf:a5:5b:3d:29:34:f7:f6:d3:7c:07:af:1e:6e:d6:1c:96: 4e:0d:88:b5:f7:94:84:bd:46:49:d7:ed:45:c2:6b:a4:a1:11: 68:41:ec:86:d2:cc:ac:28:b8:83:77:4b:32:2e:55:7d:41:79: 5e:13:10:18:ff:f9:78:17:0c:fd:b6:c1:7b:f0:b9:88:7c:1b: b7:fd:bf:ee:2e:db:40:ff:9d:26:cf:a6:ff:a7:ea:51:b6:5d: 85:87:be:a1:f7:8b:48:e9:e8:16:3e:af:27:7e:25:7e:9a:50: 49:d8:fb:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGuvgyFHPj3F3vQHLjebwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZWQ4MzE5ZGVkMTVkNWYwYjZhYjQ0MTAwOWRlMTliMTlk MTUyOWIwHhcNMjUxMjI2MTAwMTEyWhcNMjUxMjI3MTAwMTEyWjAzMTEwLwYDVQQD EyhlNTBlY2ExYTRmMDk0ZGZlMTU4ZDdhZmIyMDI1NGJkNzVlNzJlOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48ChUoD6ip0RUphUiyiU3ObcK9+W hraXd4yyKTH3v4GwGSFRMppM55IYvm2LRa02Bn2rVsVHAg1zTQ0z8iew/O5DGHYG U2qZADg99ki07Nt1gIJdaa0m8UaEi8nBaaNlFzJSHAaCUlyCsW50kN/0SB5ppiMz AmTJk8D8fGBkd23bRPXvtPdFMJ9t1vAC4Nz2Vj62qUF2VVoEGc5NIc57Grb+VsZE bW2Eh1d3WZ1PWvp9K4Elcwzxd1Z3Xpeso//SQdhpVUl2ZAFYaB6mxgRTiS6Nxgvj TdQ4CXb//Oc89NiAuL80y+M2AFYUunH5udVoFASrGePDKzliNqDhtU9OewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUOyhpPCU3+FY16+yAlS9decujxMB8GA1UdIwQY MBaAFOztgxne0V1fC2q0QQCd4ZsZ0VKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTct NzA2OWY0MzgyY2FiLzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTctNzA2OWY0MzgyY2Fi LzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrysIKhk sumwQaOClKrhCu2gbkNERHkwpxcs1lk2Od4IF9kT/8M7hXRHF3JyIq1jWc7aeiid odq4A5tyZkSliDz9iUZmZThkxAL0U3rvoKGMwBwOCHqY7YZ7cuYE7CJxfyrYnjIC VeCuLahmCDyzKp1jPODtdR2PHaMXY9CUyoFwKCoUabGIZNDu4cFxNgsUMb+lWz0p NPf203wHrx5u1hyWTg2ItfeUhL1GSdftRcJrpKERaEHshtLMrCi4g3dLMi5VfUF5 XhMQGP/5eBcM/bbBe/C5iHwbt/2/7i7bQP+dJs+m/6fqUbZdhYe+ofeLSOnoFj6v J34lfppQSdj7/Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:11 2025 by rpki-client