This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json) Hash identifier: iIPe2tRA7X5D66x4k/ECie/XuvR3Yi3cIjBuv3/9bL4= Subject key identifier: 28:0C:23:DF:70:59:AC:2A:F6:E1:E1:11:C0:AA:D9:49:96:73:24:53 Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Certificate serial: 019B0890468162CD7D168C0CA34D9E53B304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft Manifest number: 0DF9 Signing time: Wed 10 Dec 2025 14:00:31 +0000 Manifest this update: Wed 10 Dec 2025 14:00:31 +0000 Manifest next update: Thu 11 Dec 2025 14:00:31 +0000 Files and hashes: 1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=) 2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: 3kt4rtJKYE7LnDF61k5vgYriau+WNKQFRN4xJXKFWGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:46:81:62:cd:7d:16:8c:0c:a3:4d:9e:53:b3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Validity Not Before: Dec 10 14:00:31 2025 GMT Not After : Dec 11 14:00:31 2025 GMT Subject: CN=280c23df7059ac2af6e1e111c0aad94996732453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:31:55:c4:95:c1:6c:1d:7f:ad:ac:a2:e8: 08:19:f9:8b:aa:bc:5a:38:e3:0c:8d:b6:4e:38:24: 4e:46:35:01:dc:00:4d:c6:64:bb:75:9a:b1:78:af: 7a:73:3d:ab:4b:9c:c4:b2:2f:b1:2d:15:5e:75:df: dc:17:fa:1e:4c:82:04:a5:c4:d0:59:c8:0f:32:69: 7e:17:7c:f7:f6:0b:72:4a:e3:fe:b5:7d:59:c6:c0: f6:eb:6f:b4:4d:c7:e4:46:78:2c:7b:18:d9:ea:01: 4d:d7:ba:cc:00:52:22:d2:a1:ad:40:c3:22:5e:c7: bc:a8:4e:d1:a0:63:1b:57:4f:22:9b:9a:df:a1:73: 75:69:8d:2d:59:58:36:42:0c:35:f6:54:3c:08:04: e7:6c:50:04:e9:21:66:68:aa:f3:42:eb:37:e7:dc: e1:94:f8:e4:9b:b8:fc:dd:25:0a:e9:80:bc:42:4c: e2:95:e5:70:f2:9b:86:65:1e:82:59:60:43:ca:e4: de:18:e7:d7:a0:2d:b2:10:96:32:c1:ee:fc:9a:97: 93:b7:d2:f8:9c:c8:f5:6d:2b:3b:5c:31:18:ad:0f: a9:40:50:e5:c3:9c:eb:f5:53:6c:9f:a4:29:01:76: 27:d7:0c:91:7b:00:87:22:48:b2:cb:33:5b:55:e0: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0C:23:DF:70:59:AC:2A:F6:E1:E1:11:C0:AA:D9:49:96:73:24:53 X509v3 Authority Key Identifier: keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9d:6b:3f:e1:17:d0:12:27:37:f0:63:20:6e:01:82:10:67: 30:81:08:52:8d:3a:4c:04:b4:54:a0:ec:d0:cb:0c:ed:1e:33: 90:aa:a5:42:6d:5c:fd:69:6d:49:1f:4a:f2:ef:12:7c:6c:01: 52:12:83:5e:5a:61:97:a1:a6:86:10:a3:ff:2f:e0:80:19:05: 1a:60:c4:84:ac:85:d1:8f:62:b9:fb:f5:51:52:23:17:18:3e: e8:f4:9e:b6:b5:69:14:fe:56:6d:a2:aa:b7:36:5b:78:50:a9: 92:76:1f:6d:02:dd:0e:f4:e5:e3:c5:18:6f:bf:ae:54:3c:19: d6:df:8e:3f:d2:64:f4:63:6f:0e:fc:f2:6f:13:d5:81:34:fe: 0e:6e:f0:26:a2:d0:82:0a:30:d6:31:84:00:96:a0:cc:62:be: 65:76:a0:23:57:92:f7:a5:ad:6d:01:a9:b0:14:03:78:55:39: e1:34:39:26:18:6f:1b:a4:e9:a0:e0:2c:5a:d0:fe:fd:b6:0d: 27:51:e0:bf:bf:13:71:99:91:89:56:fc:53:81:de:98:aa:15: 33:42:ad:ca:2c:5c:bc:42:78:4f:d8:ae:45:3b:a5:ad:58:58: 82:a2:2a:fb:78:ef:47:a7:1b:97:7b:01:13:f9:81:88:cd:14: 8a:61:ec:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkEaBYs19FowMo02eU7MEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1 NmRjMzYwHhcNMjUxMjEwMTQwMDMxWhcNMjUxMjExMTQwMDMxWjAzMTEwLwYDVQQD EygyODBjMjNkZjcwNTlhYzJhZjZlMWUxMTFjMGFhZDk0OTk2NzMyNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UkxVcSVwWwdf62sougIGfmLqrxa OOMMjbZOOCRORjUB3ABNxmS7dZqxeK96cz2rS5zEsi+xLRVedd/cF/oeTIIEpcTQ WcgPMml+F3z39gtySuP+tX1ZxsD262+0TcfkRngsexjZ6gFN17rMAFIi0qGtQMMi Xse8qE7RoGMbV08im5rfoXN1aY0tWVg2Qgw19lQ8CATnbFAE6SFmaKrzQus359zh lPjkm7j83SUK6YC8QkzileVw8puGZR6CWWBDyuTeGOfXoC2yEJYywe78mpeTt9L4 nMj1bSs7XDEYrQ+pQFDlw5zr9VNsn6QpAXYn1wyRewCHIkiyyzNbVeAmDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgMI99wWawq9uHhEcCq2UmWcyRTMB8GA1UdIwQY MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5 LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr51rP+EX 0BInN/BjIG4BghBnMIEIUo06TAS0VKDs0MsM7R4zkKqlQm1c/WltSR9K8u8SfGwB UhKDXlphl6GmhhCj/y/ggBkFGmDEhKyF0Y9iufv1UVIjFxg+6PSetrVpFP5WbaKq tzZbeFCpknYfbQLdDvTl48UYb7+uVDwZ1t+OP9Jk9GNvDvzybxPVgTT+Dm7wJqLQ ggow1jGEAJagzGK+ZXagI1eS96WtbQGpsBQDeFU54TQ5JhhvG6TpoOAsWtD+/bYN J1Hgv78TcZmRiVb8U4HemKoVM0KtyixcvEJ4T9iuRTulrVhYgqIq+3jvR6cbl3sB E/mBiM0UimHsXQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:13:56 2025 by rpki-client