This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json) Hash identifier: Rwgu7IvjbDmCvtmA2z3sHCuy6SzahgQGbbt4UmdEdg0= Subject key identifier: 76:2C:63:D5:94:2D:00:6F:BD:F3:6E:CD:AA:2D:AC:9A:B0:FF:03:FF Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba Certificate serial: 019B194D613C5AB3B585E071FDBC732B52BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft Manifest number: 022B Signing time: Sat 13 Dec 2025 20:01:00 +0000 Manifest this update: Sat 13 Dec 2025 20:01:00 +0000 Manifest next update: Sun 14 Dec 2025 20:01:00 +0000 Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: ICmXt+iLj28L4N4XQuzN+pGGfllaQTAQcSZuGY/bv8I=) 2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:61:3c:5a:b3:b5:85:e0:71:fd:bc:73:2b:52:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba Validity Not Before: Dec 13 20:01:00 2025 GMT Not After : Dec 14 20:01:00 2025 GMT Subject: CN=762c63d5942d006fbdf36ecdaa2dac9ab0ff03ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:07:d1:ab:a7:7c:22:12:b9:6d:0f:9b:6f:e9: 7f:52:f8:99:e7:13:f3:83:5d:2e:c5:26:f3:eb:76: 3c:b2:2d:da:76:fa:b0:04:ab:37:df:20:3b:b4:a9: 10:d7:69:8e:fa:ac:35:e1:2e:80:77:3a:c8:1b:20: cb:71:86:dc:1b:68:bc:68:62:c2:73:57:d3:cb:f9: 4c:fa:ae:cd:da:6a:f3:33:c6:6a:4d:01:c0:f8:98: 08:e0:cf:f2:55:1e:0d:57:f5:66:2d:33:8b:94:27: 1a:eb:47:4e:fe:97:12:51:97:66:5b:1b:90:4e:2d: 68:36:4a:89:7c:e0:79:3b:b7:a1:ac:91:ae:7c:71: ac:b0:9b:67:8c:13:9f:b2:01:18:78:7a:47:6a:f6: 7a:bf:5f:92:3c:d5:b4:1f:6d:fb:d2:da:03:6d:a2: 96:af:0d:8c:8c:d9:82:c9:07:eb:6b:ff:07:1d:b9: db:cc:42:5f:de:df:a8:f6:c8:1b:69:15:6e:aa:50: a7:92:23:80:b3:8a:e3:65:15:a8:51:6c:1d:21:4c: c0:b8:24:04:c9:78:b1:69:5f:3b:ee:49:d9:87:e6: e2:0c:07:94:a7:6f:11:f6:3a:f8:1e:90:ec:13:73: 89:3d:9b:e0:6f:17:1f:7f:83:79:f4:a8:1f:b3:30: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2C:63:D5:94:2D:00:6F:BD:F3:6E:CD:AA:2D:AC:9A:B0:FF:03:FF X509v3 Authority Key Identifier: keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e6:e6:22:e2:eb:af:63:1e:d5:a1:43:2c:68:87:f8:e0:ba: 9f:ca:f0:ff:25:97:02:19:2a:98:eb:64:0a:54:43:0e:e9:14: b3:88:ff:2e:6c:62:de:7e:ea:56:85:9e:01:32:07:54:0d:04: e4:e2:e3:6e:02:2e:62:af:c1:0b:29:a5:3a:da:c5:bc:9b:29: 71:a8:1f:f0:aa:17:e6:b3:6e:a3:fa:d9:11:b0:3f:a0:3b:04: b3:04:21:29:eb:44:2b:e2:a7:0a:05:54:c3:03:a7:10:df:95: e7:67:9b:37:4a:58:ad:c3:be:dc:b9:fe:a0:38:5b:12:25:10: f7:fe:cc:58:2c:31:8f:4a:0b:ae:2f:b3:3c:19:fe:ca:06:69: a8:7d:f2:2e:f6:72:50:fd:d3:ed:7c:04:fb:21:71:e6:e7:71: 1e:33:cd:5f:72:23:65:fb:81:1f:00:51:60:69:5e:b9:a3:b5: 96:9a:53:cd:37:74:9d:4f:23:4f:28:0f:1e:58:af:43:ef:68: 9f:ac:86:56:b2:81:63:10:82:20:13:78:44:64:f5:7e:c6:55: 10:70:d1:ae:a5:24:5c:2b:21:d2:03:bb:6d:09:81:ff:2d:60: 27:71:4a:f2:70:2c:41:2a:3b:67:65:2c:f2:d6:b0:ad:20:ae: 04:97:21:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTWE8WrO1heBx/bxzK1K+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzJlZjBjYWYwYTA1NzUyOWZiOTI4Zjc2OTYyYTc0MjUz OTBkYmEwHhcNMjUxMjEzMjAwMTAwWhcNMjUxMjE0MjAwMTAwWjAzMTEwLwYDVQQD Eyg3NjJjNjNkNTk0MmQwMDZmYmRmMzZlY2RhYTJkYWM5YWIwZmYwM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gfRq6d8IhK5bQ+bb+l/UviZ5xPz g10uxSbz63Y8si3advqwBKs33yA7tKkQ12mO+qw14S6AdzrIGyDLcYbcG2i8aGLC c1fTy/lM+q7N2mrzM8ZqTQHA+JgI4M/yVR4NV/VmLTOLlCca60dO/pcSUZdmWxuQ Ti1oNkqJfOB5O7ehrJGufHGssJtnjBOfsgEYeHpHavZ6v1+SPNW0H2370toDbaKW rw2MjNmCyQfra/8HHbnbzEJf3t+o9sgbaRVuqlCnkiOAs4rjZRWoUWwdIUzAuCQE yXixaV877knZh+biDAeUp28R9jr4HpDsE3OJPZvgbxcff4N59KgfszDNsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYsY9WULQBvvfNuzaotrJqw/wP/MB8GA1UdIwQY MBaAFO0y7wyvCgV1KfuSj3aWKnQlOQ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEt MWRiNTMxYzlkMmQ4LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEtMWRiNTMxYzlkMmQ4 LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdubmIuLr r2Me1aFDLGiH+OC6n8rw/yWXAhkqmOtkClRDDukUs4j/Lmxi3n7qVoWeATIHVA0E 5OLjbgIuYq/BCymlOtrFvJspcagf8KoX5rNuo/rZEbA/oDsEswQhKetEK+KnCgVU wwOnEN+V52ebN0pYrcO+3Ln+oDhbEiUQ9/7MWCwxj0oLri+zPBn+ygZpqH3yLvZy UP3T7XwE+yFx5udxHjPNX3IjZfuBHwBRYGleuaO1lppTzTd0nU8jTygPHlivQ+9o n6yGVrKBYxCCIBN4RGT1fsZVEHDRrqUkXCsh0gO7bQmB/y1gJ3FK8nAsQSo7Z2Us 8tawrSCuBJchgg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:45 2025 by rpki-client