This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json) Hash identifier: 2Z05ObDUFrpCU4V1Qaf5zGeUlhAIJnWCI9MxIdjnmyg= Subject key identifier: 5C:8A:6D:40:A3:C2:F6:3D:96:32:50:FB:6E:F3:27:02:C9:67:3E:EF Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Certificate serial: 019B4091693E40D49008E2F65C3C282F5005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft Manifest number: 0E16 Signing time: Sun 21 Dec 2025 11:00:29 +0000 Manifest this update: Sun 21 Dec 2025 11:00:29 +0000 Manifest next update: Mon 22 Dec 2025 11:00:29 +0000 Files and hashes: 1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=) 2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: +dxRtIqwUG1QM1OqPTmEs+KCFLVQypfl0l7PacEJaaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:69:3e:40:d4:90:08:e2:f6:5c:3c:28:2f:50:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Validity Not Before: Dec 21 11:00:29 2025 GMT Not After : Dec 22 11:00:29 2025 GMT Subject: CN=5c8a6d40a3c2f63d963250fb6ef32702c9673eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:04:25:ec:66:97:12:05:fc:95:2d:ab:3b: 43:8a:be:4c:74:5f:11:bd:1a:29:b9:01:d6:ac:85: e5:dd:cf:b0:cf:c2:3d:73:a0:2d:8a:d0:39:9d:d7: 84:41:4b:3b:8a:68:78:3b:a7:ff:d6:c3:40:72:4e: 63:92:03:22:56:9a:39:04:67:d9:40:98:83:b5:09: a3:2b:cd:37:7a:50:01:04:50:82:44:ae:1d:ca:94: 95:0c:cd:98:7f:c6:7e:98:a4:cd:25:6a:39:83:aa: 90:7a:36:6e:71:63:84:ec:71:72:a4:d2:bf:28:32: 02:f6:73:87:df:85:03:2c:72:89:d7:d6:4b:79:81: 2f:3e:c1:ee:99:6d:7b:98:3f:3c:9e:4a:c6:c7:ec: 07:67:6a:ca:eb:89:9f:85:62:e5:af:28:2b:fe:91: 88:26:fe:96:ab:95:4f:42:63:0f:27:ba:c1:3f:a4: 67:f3:13:1f:23:2f:e8:2f:fb:10:05:00:48:3e:8f: e6:a3:6c:66:08:06:7c:d2:63:91:10:1a:e2:e2:c3: 2b:67:ed:1c:ca:da:c4:42:2f:36:fd:cf:a0:a8:86: d8:0d:e6:17:0a:0c:51:e7:79:d1:8c:18:38:fb:4e: 15:1f:4c:8c:bf:5f:02:fb:fb:34:f7:69:b2:f8:0c: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:6D:40:A3:C2:F6:3D:96:32:50:FB:6E:F3:27:02:C9:67:3E:EF X509v3 Authority Key Identifier: keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:47:01:4f:77:89:c2:76:1d:92:cb:5a:5d:2d:f9:39:5b:c8: fd:02:db:bb:ba:ac:3b:f7:1f:2b:66:74:fa:97:c4:2a:f8:57: a6:34:b6:f8:f0:1a:30:a0:3f:bd:9a:06:d4:e0:a7:ef:32:e8: 97:81:ba:07:29:bf:1c:76:a7:0f:ff:9f:07:5c:e5:87:37:58: 6c:43:65:ef:41:9f:42:6f:8a:d3:61:1e:2a:e2:71:9f:0d:d4: 44:75:59:77:d3:e2:6c:6d:1e:bb:c5:b8:63:c7:e9:3a:30:f7: 70:13:f2:6c:6b:56:5d:3c:c2:82:ff:e3:27:a7:2c:1e:6f:8e: cd:83:b2:72:2b:8c:8f:ca:01:eb:cb:1a:92:b8:55:c3:7b:28: 71:2c:ed:dc:75:a5:da:82:33:f9:bf:ed:44:cb:6f:3a:f0:9d: 5c:56:9d:f1:4a:87:a3:94:fd:0d:d6:a9:82:29:0a:62:81:63: 6b:a5:1f:56:99:ff:2b:7d:da:bb:f3:93:0e:9f:0e:10:fa:d1: 70:4e:9d:c8:f7:92:ba:25:45:a3:24:0b:c6:10:89:55:5d:d8: 54:c2:21:b5:e7:e8:75:9c:2f:4a:7c:d8:bc:f5:ee:7e:54:32: 40:75:d6:81:7b:e0:2b:92:7e:7a:aa:67:75:1b:15:cc:fe:3c: 27:ba:72:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkWk+QNSQCOL2XDwoL1AFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1 NmRjMzYwHhcNMjUxMjIxMTEwMDI5WhcNMjUxMjIyMTEwMDI5WjAzMTEwLwYDVQQD Eyg1YzhhNmQ0MGEzYzJmNjNkOTYzMjUwZmI2ZWYzMjcwMmM5NjczZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzEEJexmlxIF/JUtqztDir5MdF8R vRopuQHWrIXl3c+wz8I9c6AtitA5ndeEQUs7imh4O6f/1sNAck5jkgMiVpo5BGfZ QJiDtQmjK803elABBFCCRK4dypSVDM2Yf8Z+mKTNJWo5g6qQejZucWOE7HFypNK/ KDIC9nOH34UDLHKJ19ZLeYEvPsHumW17mD88nkrGx+wHZ2rK64mfhWLlrygr/pGI Jv6Wq5VPQmMPJ7rBP6Rn8xMfIy/oL/sQBQBIPo/mo2xmCAZ80mOREBri4sMrZ+0c ytrEQi82/c+gqIbYDeYXCgxR53nRjBg4+04VH0yMv18C+/s092my+Az8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyKbUCjwvY9ljJQ+27zJwLJZz7vMB8GA1UdIwQY MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5 LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0cBT3eJ wnYdkstaXS35OVvI/QLbu7qsO/cfK2Z0+pfEKvhXpjS2+PAaMKA/vZoG1OCn7zLo l4G6Bym/HHanD/+fB1zlhzdYbENl70GfQm+K02EeKuJxnw3URHVZd9PibG0eu8W4 Y8fpOjD3cBPybGtWXTzCgv/jJ6csHm+OzYOyciuMj8oB68sakrhVw3socSzt3HWl 2oIz+b/tRMtvOvCdXFad8UqHo5T9DdapgikKYoFja6UfVpn/K33au/OTDp8OEPrR cE6dyPeSuiVFoyQLxhCJVV3YVMIhtefodZwvSnzYvPXuflQyQHXWgXvgK5J+eqpn dRsVzP48J7pyjg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:26:54 2025 by rpki-client