This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft File: 7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json) Hash identifier: pRfmewkkHV0XabmBqNa0nUkzSQLtehL84X01rvnpHWc= Subject key identifier: A1:BE:3B:6A:D4:1E:7C:C0:03:A4:D4:69:B1:CF:C3:27:D8:A6:94:D8 Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d Certificate serial: 019B416DB67D7EC79ACD4795E712992FB4BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft Manifest number: 16E4 Signing time: Sun 21 Dec 2025 15:01:07 +0000 Manifest this update: Sun 21 Dec 2025 15:01:07 +0000 Manifest next update: Mon 22 Dec 2025 15:01:07 +0000 Files and hashes: 1: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: T1FQzOv8/yYxT3mawbFS1xEBPokS1VymmezRrAcRen8=) 2: p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa (hash: kc/WazVc1v12QWHIn2ON5G/S24+0++IA58aa0ys1ptw=) 3: rlceh0z0qi4FxUGYf1S5hv84tmY.roa (hash: YCNm2JKiZX4EgTQdbPRuaICefNmNsS+Ht6wjs3LlOwQ=) 4: teWsxLl9UxMj2Kg2LV885UEXtBs.roa (hash: ZwKl0NAlGw0kpVRl3+bmWBFp/xFATu8jsyEj+n7/Y6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:b6:7d:7e:c7:9a:cd:47:95:e7:12:99:2f:b4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d Validity Not Before: Dec 21 15:01:07 2025 GMT Not After : Dec 22 15:01:07 2025 GMT Subject: CN=a1be3b6ad41e7cc003a4d469b1cfc327d8a694d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:90:30:87:16:d5:6b:b2:7d:6d:d8:5b:a1: e7:9c:1c:21:64:ab:6f:87:ed:4f:53:1d:7d:2a:6c: 58:b4:3a:3a:48:99:2f:ec:b5:ab:bb:1d:0f:b9:f4: 3d:09:84:9e:46:c1:62:e2:3d:bd:08:35:d2:94:97: 3e:15:0c:21:d4:19:4d:ba:03:b3:82:d6:f1:eb:36: b4:e0:a5:9c:95:ac:1b:9f:92:ad:8a:66:81:0a:7f: a9:e2:be:a7:e5:a4:48:4e:99:3d:58:a8:af:db:7a: 13:38:65:93:28:c9:1c:e3:c0:78:53:4f:28:48:5c: 5e:87:3c:4b:32:3b:92:38:93:4c:d4:b9:db:fc:aa: 27:e6:62:f6:fc:39:23:a8:00:c8:a4:c7:b5:65:31: 33:b9:2c:f8:5d:8d:71:ea:19:00:bd:1a:4d:d0:fb: 0d:86:27:84:6a:db:88:ff:c2:8b:4a:b5:c9:34:aa: da:47:bc:1d:19:f1:5a:35:f0:4c:40:85:a9:30:58: 1a:37:30:a9:ae:31:f5:60:79:90:3f:e0:d7:af:24: c3:f6:e3:94:5c:69:90:26:fd:11:10:b6:46:a2:84: a7:62:83:0c:21:79:47:7b:65:df:66:f5:e0:42:6a: eb:e4:72:2a:04:23:8f:14:9f:62:bc:39:b7:fa:30: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:3B:6A:D4:1E:7C:C0:03:A4:D4:69:B1:CF:C3:27:D8:A6:94:D8 X509v3 Authority Key Identifier: keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:38:67:c0:36:45:26:8d:5a:24:c8:1e:96:89:d8:e1:4b: 6e:71:75:6a:d9:6e:fe:08:0a:b6:7f:ba:d2:49:09:b3:cb:e5: 41:a9:66:4f:c0:28:94:50:f5:51:7e:69:6e:db:4d:30:ca:49: 6c:2e:c7:6c:3f:d0:55:38:6c:c1:81:14:ad:2e:c7:4d:72:0d: 61:e6:c3:00:a5:77:4a:dd:33:b7:1d:38:f0:b4:35:53:a4:c7: 92:ce:a4:14:00:1e:45:7a:34:da:3d:4c:f8:22:a4:68:36:29: df:a5:14:16:31:e6:35:1b:53:b7:5a:ed:f3:c5:e9:ec:81:5d: 8e:92:78:b7:75:cd:ae:03:48:eb:40:aa:f2:32:ba:60:36:f4: ac:95:66:1d:23:a4:37:6e:09:57:37:9b:cf:36:c0:af:60:82: 7f:cb:c9:83:ad:4a:f5:32:22:5a:d3:f0:6e:94:16:29:e5:52: 24:c0:07:c8:22:df:ea:9b:bd:7d:c7:ff:60:b4:d4:28:52:26: d1:f2:eb:18:a6:30:3d:3e:81:3e:42:fc:39:f9:a7:b4:68:cd: 3e:b8:aa:a9:80:43:35:1e:b0:f0:d5:70:80:59:1c:8b:50:dc: e4:70:e0:4e:32:3d:42:5a:30:01:c3:e9:93:05:b0:d5:5c:95: a9:b3:87:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbbZ9fseazUeV5xKZL7S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTQxNjU5MDU4NWE1ZDM1MWRiYmNhMWYwYjNjYTlmNjJh Yjc4NWQwHhcNMjUxMjIxMTUwMTA3WhcNMjUxMjIyMTUwMTA3WjAzMTEwLwYDVQQD EyhhMWJlM2I2YWQ0MWU3Y2MwMDNhNGQ0NjliMWNmYzMyN2Q4YTY5NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHGQMIcW1WuyfW3YW6HnnBwhZKtv h+1PUx19KmxYtDo6SJkv7LWrux0PufQ9CYSeRsFi4j29CDXSlJc+FQwh1BlNugOz gtbx6za04KWclawbn5KtimaBCn+p4r6n5aRITpk9WKiv23oTOGWTKMkc48B4U08o SFxehzxLMjuSOJNM1Lnb/Kon5mL2/DkjqADIpMe1ZTEzuSz4XY1x6hkAvRpN0PsN hieEatuI/8KLSrXJNKraR7wdGfFaNfBMQIWpMFgaNzCprjH1YHmQP+DXryTD9uOU XGmQJv0RELZGooSnYoMMIXlHe2XfZvXgQmrr5HIqBCOPFJ9ivDm3+jBg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG+O2rUHnzAA6TUabHPwyfYppTYMB8GA1UdIwQY MBaAFO7kFlkFhaXTUdu8ofCzyp9iq3hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMt MDc2YTc1MGI4NTQxLzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMtMDc2YTc1MGI4NTQx LzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmk4Z8A2 RSaNWiTIHpaJ2OFLbnF1atlu/ggKtn+60kkJs8vlQalmT8AolFD1UX5pbttNMMpJ bC7HbD/QVThswYEUrS7HTXINYebDAKV3St0ztx048LQ1U6THks6kFAAeRXo02j1M +CKkaDYp36UUFjHmNRtTt1rt88Xp7IFdjpJ4t3XNrgNI60Cq8jK6YDb0rJVmHSOk N24JVzebzzbAr2CCf8vJg61K9TIiWtPwbpQWKeVSJMAHyCLf6pu9fcf/YLTUKFIm 0fLrGKYwPT6BPkL8OfmntGjNPriqqYBDNR6w8NVwgFkci1Dc5HDgTjI9QlowAcPp kwWw1VyVqbOHHA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:15 2025 by rpki-client