This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json) Hash identifier: TailQWQ3nV5UvuvedIvpMbMFPhzEmGMwAuB0aHsELy8= Subject key identifier: 7F:F6:85:CD:EF:8F:9C:29:D4:38:E2:66:C6:96:12:61:D1:66:E2:CF Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Certificate serial: 019B38D8039D26E38CC033D72FE683277F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft Manifest number: 10BD Signing time: Fri 19 Dec 2025 23:00:39 +0000 Manifest this update: Fri 19 Dec 2025 23:00:39 +0000 Manifest next update: Sat 20 Dec 2025 23:00:39 +0000 Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: lBX05zYJ8QSSSfaBFxCIVijSWfjWg7momcNDQtJqKWQ=) 2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:03:9d:26:e3:8c:c0:33:d7:2f:e6:83:27:7f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Validity Not Before: Dec 19 23:00:39 2025 GMT Not After : Dec 20 23:00:39 2025 GMT Subject: CN=7ff685cdef8f9c29d438e266c6961261d166e2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:7f:05:57:17:98:4e:c9:24:8e:e7:cf:be: 4a:71:a3:b1:84:10:48:66:7d:26:5c:63:64:db:5f: ca:c7:c1:87:85:42:fa:22:72:ce:2b:14:ef:b3:77: 29:c1:f6:15:42:9a:2c:07:77:12:97:66:33:6c:6d: 09:1b:36:30:c3:22:b9:53:d5:84:80:ed:a4:69:c3: 74:d4:0c:f6:a7:d0:71:fb:00:6a:82:00:be:27:30: 80:e7:1e:40:76:1b:ed:33:cc:3b:5f:9f:c5:4f:ce: 61:b6:c6:02:15:7f:6d:5d:89:88:e9:cc:91:64:f6: 7e:fc:92:1f:e1:fc:90:ea:5c:11:c3:40:d2:44:23: 1d:09:7b:92:e0:0b:e9:96:11:b1:db:84:b4:a1:e8: f1:54:1d:de:48:85:54:19:44:28:29:06:62:2c:dc: 06:f4:b2:7b:a8:5d:22:54:15:ae:16:83:dd:7d:76: 7e:6f:0f:b1:96:07:29:55:ad:d4:1e:a8:a9:ee:bf: 4b:34:9b:13:b8:b6:aa:44:9b:13:c5:50:58:55:03: fc:05:2c:11:e8:17:a9:fa:e5:82:c1:5a:12:1f:fa: 3c:d0:43:8f:ac:c4:7c:d3:29:f9:2f:67:bb:bb:89: f8:02:ab:b7:bd:aa:2d:db:84:f0:73:77:5b:38:9d: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F6:85:CD:EF:8F:9C:29:D4:38:E2:66:C6:96:12:61:D1:66:E2:CF X509v3 Authority Key Identifier: keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2e:4c:57:63:35:4c:69:ab:bc:ef:4c:e1:d8:95:93:63:ed: 79:cf:f6:bc:5f:d7:ec:12:19:22:61:a0:47:62:f2:44:f3:ca: 67:79:06:a3:1f:87:9d:a2:35:fc:e7:ad:03:98:d7:cb:4a:6a: 42:3a:de:5a:0a:bb:e7:43:89:34:67:48:3c:01:03:78:4a:4e: 8f:30:19:fd:10:ba:38:ea:e9:1f:67:02:95:d2:f9:ed:f6:5d: 93:aa:fe:f7:60:32:df:a3:32:62:2e:eb:3f:10:07:fd:59:85: 9d:1e:4f:31:9b:1a:26:90:b9:03:d7:42:3f:3c:e1:4b:c8:bb: 16:62:9d:b7:f6:4c:1c:bb:3f:a4:8e:4c:97:77:d3:ec:86:c1: 7f:8f:c2:65:36:3c:4b:29:b9:0e:6b:fd:8a:b4:79:60:65:b2: 55:13:2d:21:f7:30:2d:c6:6b:74:21:e8:59:61:89:c9:b5:be: e9:24:ab:ad:fe:20:5a:c0:91:76:a2:61:c2:51:6c:b4:1f:44: 33:0e:2f:f5:12:d0:06:ba:32:4c:15:0e:66:c8:82:d0:c1:63: 83:12:1b:fd:da:3e:79:b3:6f:9a:17:41:e2:7c:df:6a:bb:07: fb:e4:36:3b:8c:16:59:33:8c:82:d9:5c:ea:4e:bd:42:a9:ae: 74:9e:83:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42AOdJuOMwDPXL+aDJ38HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2 ZjUxZjMwHhcNMjUxMjE5MjMwMDM5WhcNMjUxMjIwMjMwMDM5WjAzMTEwLwYDVQQD Eyg3ZmY2ODVjZGVmOGY5YzI5ZDQzOGUyNjZjNjk2MTI2MWQxNjZlMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/t/BVcXmE7JJI7nz75KcaOxhBBI Zn0mXGNk21/Kx8GHhUL6InLOKxTvs3cpwfYVQposB3cSl2YzbG0JGzYwwyK5U9WE gO2kacN01Az2p9Bx+wBqggC+JzCA5x5AdhvtM8w7X5/FT85htsYCFX9tXYmI6cyR ZPZ+/JIf4fyQ6lwRw0DSRCMdCXuS4AvplhGx24S0oejxVB3eSIVUGUQoKQZiLNwG 9LJ7qF0iVBWuFoPdfXZ+bw+xlgcpVa3UHqip7r9LNJsTuLaqRJsTxVBYVQP8BSwR 6Bep+uWCwVoSH/o80EOPrMR80yn5L2e7u4n4Aqu3vaot24Twc3dbOJ3pOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/2hc3vj5wp1DjiZsaWEmHRZuLPMB8GA1UdIwQY MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS5MV2M1 TGmrvO9M4diVk2Ptec/2vF/X7BIZImGgR2LyRPPKZ3kGox+HnaI1/OetA5jXy0pq QjreWgq750OJNGdIPAEDeEpOjzAZ/RC6OOrpH2cCldL57fZdk6r+92Ay36MyYi7r PxAH/VmFnR5PMZsaJpC5A9dCPzzhS8i7FmKdt/ZMHLs/pI5Ml3fT7IbBf4/CZTY8 Sym5Dmv9irR5YGWyVRMtIfcwLcZrdCHoWWGJybW+6SSrrf4gWsCRdqJhwlFstB9E Mw4v9RLQBroyTBUOZsiC0MFjgxIb/do+ebNvmhdB4nzfarsH++Q2O4wWWTOMgtlc 6k69QqmudJ6DQA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:46:55 2025 by rpki-client