This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json) Hash identifier: K0XHv5aYB+E3PxTSn6Y0pf+ochOo0a/jCbzxpO7kF0c= Subject key identifier: EA:23:AD:B4:A8:D4:F9:D0:AA:AB:07:71:5D:5A:18:A1:11:71:CD:15 Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A Certificate issuer: /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a Certificate serial: 019B10818367A3E026D55D82BC2266593415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 03:01:21 +0000 Manifest this update: Fri 12 Dec 2025 03:01:21 +0000 Manifest next update: Sat 13 Dec 2025 03:01:21 +0000 Files and hashes: 1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: 2SYH4z1XtK1GVm3/ih4oj4AJzlCsTWnFT+EeopC0f4I=) 2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:83:67:a3:e0:26:d5:5d:82:bc:22:66:59:34:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a Validity Not Before: Dec 12 03:01:21 2025 GMT Not After : Dec 13 03:01:21 2025 GMT Subject: CN=ea23adb4a8d4f9d0aaab07715d5a18a11171cd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:d0:78:33:4a:f2:6f:13:5e:12:d7:52:0a: b3:4f:3b:b7:1a:a2:64:c3:39:63:f5:26:de:1d:a3: 1a:31:4f:84:e8:cb:ef:b3:d7:f6:df:87:a1:12:00: 37:1d:2d:3c:30:08:73:b0:2b:c7:4e:07:1a:02:ab: be:ad:a0:be:b5:da:e9:b1:9e:04:91:6c:77:40:4d: 97:48:d5:5f:c5:13:69:60:bf:b6:cb:96:b5:56:79: e1:0f:68:eb:21:5b:a4:f9:85:98:31:e2:9a:ec:52: b2:5f:64:3d:73:d4:59:49:c6:af:7a:61:57:e1:6e: 81:f8:76:90:27:d1:5f:c3:48:05:86:3c:7f:6c:99: b9:27:5e:7b:0f:86:e8:d1:a4:3f:d0:ce:e3:49:b6: 96:97:97:00:c2:71:f3:51:87:fa:d3:c9:1c:07:12: 43:d1:fc:a2:f2:1e:c6:d4:b4:c3:95:a3:f4:4e:e6: ea:c8:27:72:7a:2d:03:83:3f:d2:da:a8:c9:5f:6f: 33:ba:37:d6:0f:d5:20:b4:13:39:39:a2:de:b1:83: 98:2a:11:1c:c7:c2:51:16:b3:64:ef:61:03:70:e8: f2:e0:bd:81:45:e4:64:8a:8a:90:a1:13:d0:4a:76: a6:ca:09:49:32:07:75:91:88:0d:de:56:64:27:13: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:AD:B4:A8:D4:F9:D0:AA:AB:07:71:5D:5A:18:A1:11:71:CD:15 X509v3 Authority Key Identifier: keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e8:5b:e8:d1:42:b5:59:f6:0a:f6:3e:11:67:d2:5b:f8:16: f1:68:60:9d:1b:a2:79:ee:24:38:8f:a5:37:cd:ac:7e:0f:56: 59:86:ee:53:ae:76:cc:6a:52:78:ef:46:ce:0a:44:68:71:82: d0:0b:9d:a9:0b:a7:42:e4:fd:c7:7b:34:8c:07:84:d0:9b:4e: 43:ec:53:37:e7:9a:5f:4f:60:a9:eb:01:dc:7a:3e:e4:c9:ba: 2e:84:bb:7e:71:c9:ab:90:d3:22:d5:90:35:da:5e:40:b0:dd: 23:0c:39:55:f7:1c:1e:c8:c1:4c:d7:cb:22:9b:8a:a1:64:39: 5c:19:99:cc:9b:4b:df:32:31:34:5d:0f:26:f6:32:a2:1d:10: b7:ba:54:16:78:25:05:d2:69:6b:03:f5:66:e2:9a:1f:5b:83: e7:ae:33:57:39:d0:ee:74:c4:52:95:6f:b9:12:4f:5e:f1:8a: af:be:43:81:22:2c:96:93:bb:94:40:88:67:b6:fe:05:f2:ab: 14:33:bc:31:3b:f5:e7:2a:99:5b:dd:6b:4e:4e:38:44:45:19: 2c:2a:de:66:96:a9:60:7f:59:d4:80:0d:c5:33:d4:1d:dc:45: 0a:9f:28:db:0c:54:b2:40:d2:cb:16:d6:fb:91:03:d2:29:1b: 69:95:52:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYNno+Am1V2CvCJmWTQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODUwNDgzY2NlMTMzN2IxYzZjMmZkZGVhOWM1ZGJiNGE3 ZTE5MWEwHhcNMjUxMjEyMDMwMTIxWhcNMjUxMjEzMDMwMTIxWjAzMTEwLwYDVQQD EyhlYTIzYWRiNGE4ZDRmOWQwYWFhYjA3NzE1ZDVhMThhMTExNzFjZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMHQeDNK8m8TXhLXUgqzTzu3GqJk wzlj9SbeHaMaMU+E6Mvvs9f234ehEgA3HS08MAhzsCvHTgcaAqu+raC+tdrpsZ4E kWx3QE2XSNVfxRNpYL+2y5a1VnnhD2jrIVuk+YWYMeKa7FKyX2Q9c9RZScavemFX 4W6B+HaQJ9Ffw0gFhjx/bJm5J157D4bo0aQ/0M7jSbaWl5cAwnHzUYf608kcBxJD 0fyi8h7G1LTDlaP0TubqyCdyei0Dgz/S2qjJX28zujfWD9UgtBM5OaLesYOYKhEc x8JRFrNk72EDcOjy4L2BReRkioqQoRPQSnamyglJMgd1kYgN3lZkJxMdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOojrbSo1PnQqqsHcV1aGKERcc0VMB8GA1UdIwQY MBaAFO2FBIPM4TN7HGwv3eqcXbtKfhkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUt YjkxNTNiMzMyMGMxLzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUtYjkxNTNiMzMyMGMx LzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOhb6NFC tVn2CvY+EWfSW/gW8WhgnRuiee4kOI+lN82sfg9WWYbuU652zGpSeO9GzgpEaHGC 0AudqQunQuT9x3s0jAeE0JtOQ+xTN+eaX09gqesB3Ho+5Mm6LoS7fnHJq5DTItWQ NdpeQLDdIww5VfccHsjBTNfLIpuKoWQ5XBmZzJtL3zIxNF0PJvYyoh0Qt7pUFngl BdJpawP1ZuKaH1uD564zVznQ7nTEUpVvuRJPXvGKr75DgSIslpO7lECIZ7b+BfKr FDO8MTv15yqZW91rTk44REUZLCreZpapYH9Z1IANxTPUHdxFCp8o2wxUskDSyxbW +5ED0ikbaZVSJA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:18:38 2025 by rpki-client