This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json) Hash identifier: 2Hc2t6+V3dGaev2FvSvfoAQngVKWMSAc2hLgOBk7uns= Subject key identifier: 44:17:2E:84:21:58:3A:61:30:F2:FF:54:38:A7:C0:28:CB:62:9E:C4 Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Certificate serial: 019B4A3A2E9A1CD3214D1D3762D789C6CA18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft Manifest number: 07C0 Signing time: Tue 23 Dec 2025 08:01:25 +0000 Manifest this update: Tue 23 Dec 2025 08:01:25 +0000 Manifest next update: Wed 24 Dec 2025 08:01:25 +0000 Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: 1bYcyL0G/bos1NBs6k/CQwti+0AZabDLhrL9JQ0ZT0A=) 2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=) 3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:2e:9a:1c:d3:21:4d:1d:37:62:d7:89:c6:ca:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Validity Not Before: Dec 23 08:01:25 2025 GMT Not After : Dec 24 08:01:25 2025 GMT Subject: CN=44172e8421583a6130f2ff5438a7c028cb629ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:35:65:8d:7f:47:0c:98:ea:fe:50:13:84: ae:68:2b:e6:b7:1f:e0:b6:cc:15:27:81:5e:09:ab: 40:8b:c6:6c:1a:cf:b8:c0:c7:c8:e2:58:f2:c5:c3: 8d:28:bd:7d:bc:3d:c8:d4:14:7e:53:54:86:69:ab: e8:35:be:55:49:54:46:e3:c1:a8:cb:c6:41:6f:8f: 80:8c:dd:19:74:88:6e:87:02:2d:81:8f:64:06:39: 5e:51:c6:4d:26:2e:b4:eb:d8:fd:52:2c:02:4c:c6: cd:1b:d7:49:bb:fc:65:88:dd:71:a0:5a:52:23:3b: b3:b3:6d:34:56:73:06:91:05:0d:4f:e1:eb:d7:fc: a1:4f:fe:76:a5:3e:d9:6f:e2:c2:e8:a5:80:26:ff: 58:18:b4:a7:af:7a:5a:7d:05:71:62:fb:9e:85:60: f0:18:d0:e6:15:e4:3f:64:f9:ea:4a:9c:31:bd:d6: 1c:4c:16:25:47:95:32:69:ba:9d:a2:d1:ea:48:1c: 43:40:bb:1b:31:c1:15:97:5e:11:60:17:a9:d6:d7: 29:f4:74:8e:da:01:62:56:9d:30:42:af:9c:0a:a1: 51:a6:31:dc:8a:5a:b9:b0:ab:80:04:f8:57:8f:62: 4e:09:99:a6:71:84:83:54:84:32:d5:2e:2f:c5:e6: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:2E:84:21:58:3A:61:30:F2:FF:54:38:A7:C0:28:CB:62:9E:C4 X509v3 Authority Key Identifier: keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b2:7c:fb:a2:d9:b2:14:7b:54:3b:0c:2d:83:31:5e:76:e2: ce:7b:c6:d1:dd:14:4c:68:9a:af:11:e5:e0:5d:4f:e6:94:66: 5f:69:bf:b3:48:50:7a:52:96:97:e2:c2:bf:9d:ce:d9:80:c8: c8:b4:77:45:97:35:0c:5a:75:18:0e:f1:f9:b0:f4:ee:48:fe: c1:99:5f:90:c0:85:34:b6:9f:0c:aa:2f:cc:91:c0:c3:42:71: ec:45:4b:db:a1:79:99:78:43:db:43:95:c2:44:e3:22:f1:96: c4:87:cb:32:36:74:ec:da:b7:a3:ca:f8:51:9a:d4:5b:ea:4b: 28:3e:f1:d2:6e:0f:c3:cd:a7:94:58:07:c2:61:e9:fc:27:bd: 2c:1c:20:9b:ce:d9:dc:a5:a5:e2:ee:9f:c2:65:f0:0e:d9:82: eb:1d:43:9e:db:c7:3d:64:87:e9:37:75:8a:cb:7c:7c:6e:64: 57:68:49:18:50:ca:fd:64:19:da:7c:42:f0:2a:72:a3:63:cf: f2:cc:64:67:61:f9:f1:7d:51:71:01:c6:d1:73:c1:dd:57:e3: 29:c3:51:d4:c4:e3:88:36:d9:17:25:bf:49:81:f4:d2:b0:15: bb:4d:39:c3:9c:fd:d7:ef:37:93:d7:2c:95:82:4b:a7:ea:c0: 15:3f:a0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOi6aHNMhTR03YteJxsoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2 NzcyYjAwHhcNMjUxMjIzMDgwMTI1WhcNMjUxMjI0MDgwMTI1WjAzMTEwLwYDVQQD Eyg0NDE3MmU4NDIxNTgzYTYxMzBmMmZmNTQzOGE3YzAyOGNiNjI5ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4I1ZY1/RwyY6v5QE4SuaCvmtx/g tswVJ4FeCatAi8ZsGs+4wMfI4ljyxcONKL19vD3I1BR+U1SGaavoNb5VSVRG48Go y8ZBb4+AjN0ZdIhuhwItgY9kBjleUcZNJi6069j9UiwCTMbNG9dJu/xliN1xoFpS Izuzs200VnMGkQUNT+Hr1/yhT/52pT7Zb+LC6KWAJv9YGLSnr3pafQVxYvuehWDw GNDmFeQ/ZPnqSpwxvdYcTBYlR5UyabqdotHqSBxDQLsbMcEVl14RYBep1tcp9HSO 2gFiVp0wQq+cCqFRpjHcilq5sKuABPhXj2JOCZmmcYSDVIQy1S4vxeZUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQXLoQhWDphMPL/VDinwCjLYp7EMB8GA1UdIwQY MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0 LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLJ8+6LZ shR7VDsMLYMxXnbiznvG0d0UTGiarxHl4F1P5pRmX2m/s0hQelKWl+LCv53O2YDI yLR3RZc1DFp1GA7x+bD07kj+wZlfkMCFNLafDKovzJHAw0Jx7EVL26F5mXhD20OV wkTjIvGWxIfLMjZ07Nq3o8r4UZrUW+pLKD7x0m4Pw82nlFgHwmHp/Ce9LBwgm87Z 3KWl4u6fwmXwDtmC6x1DntvHPWSH6Td1ist8fG5kV2hJGFDK/WQZ2nxC8Cpyo2PP 8sxkZ2H58X1RcQHG0XPB3VfjKcNR1MTjiDbZFyW/SYH00rAVu005w5z91+83k9cs lYJLp+rAFT+grw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:27 2025 by rpki-client