This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json) Hash identifier: zoCS8v0DXPHncnh4OAHllJko5OHhCsSKh701VMJkegY= Subject key identifier: 0E:9B:A7:75:A4:0D:8B:09:74:A2:BF:5B:06:63:A3:5E:C3:02:58:2E Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90 Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190 Certificate serial: 019B1A29729C74B54444F11F397834EB646B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft Manifest number: 1774 Signing time: Sun 14 Dec 2025 00:01:22 +0000 Manifest this update: Sun 14 Dec 2025 00:01:22 +0000 Manifest next update: Mon 15 Dec 2025 00:01:22 +0000 Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: /OkAGgaTCa/fo7FZjPGy/0lFrKXcEd0B1MnDLtQ2bzY=) 2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:72:9c:74:b5:44:44:f1:1f:39:78:34:eb:64:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190 Validity Not Before: Dec 14 00:01:22 2025 GMT Not After : Dec 15 00:01:22 2025 GMT Subject: CN=0e9ba775a40d8b0974a2bf5b0663a35ec302582e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:10:2f:9a:33:f8:fb:f9:71:20:16:eb:d7:c4: 41:07:fa:28:fb:e1:d9:80:60:f1:6b:31:43:a4:36: 34:ae:ce:56:dd:6b:ca:f2:82:52:5f:ad:53:fd:5b: d3:76:e1:17:4b:ea:ff:51:69:8a:63:ca:39:17:08: 7c:0b:de:20:1c:07:c7:40:fc:ba:ba:99:aa:4a:e6: 20:b9:08:5b:d8:a4:f9:58:1b:71:50:06:eb:21:00: fe:05:8c:98:b8:58:51:f2:e4:94:10:e0:31:d0:23: d2:a0:3e:e4:6a:1f:cd:08:7c:d2:68:3d:57:72:5d: f9:01:df:09:bf:e3:08:7e:b4:ee:b4:82:3a:30:03: af:da:de:df:12:5c:cf:69:df:2a:a5:a8:27:7f:04: 50:fe:9d:fb:2a:15:25:a9:0c:46:c7:00:e5:96:b5: bd:5d:ed:95:08:41:b7:75:76:33:31:d2:9f:a1:71: 4f:1f:db:30:34:fc:5e:03:a3:13:c7:40:ec:eb:14: d7:b8:70:5e:89:02:bb:a2:f6:79:ee:31:07:54:59: d1:e2:e3:fc:d1:40:48:31:51:b4:e9:cc:ef:92:2d: cf:18:ba:78:e7:c1:13:f6:b7:24:03:b5:ad:60:1a: 92:5f:82:2a:ae:05:96:2c:cd:83:bf:45:58:c0:ce: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9B:A7:75:A4:0D:8B:09:74:A2:BF:5B:06:63:A3:5E:C3:02:58:2E X509v3 Authority Key Identifier: keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6d:89:fb:4d:ff:2d:32:dc:b8:44:83:a5:3e:e5:0f:11:60: 24:65:1a:5c:d3:b2:b0:09:79:38:ed:29:7c:f8:b1:3e:ca:f0: fc:78:40:a6:39:df:0a:6c:fe:dd:5c:a8:04:c0:2e:62:6f:98: 1d:ee:3e:1b:7e:cc:d8:8a:d0:c1:42:7c:e4:8b:01:bc:17:c1: 6a:93:0d:20:13:8f:f0:66:8b:6f:99:11:19:6f:d9:9c:55:f5: ee:d5:53:02:71:c0:80:27:97:45:0f:b8:c4:bf:3a:23:82:74: 9a:da:ad:9b:e8:b7:55:51:a1:b9:9a:eb:90:82:af:f8:18:32: 40:7b:22:7d:93:3f:13:45:c7:09:0e:46:fa:f3:3a:3b:8d:3e: 6f:4c:5e:b5:e3:9c:d7:11:09:ee:8c:ae:69:fa:31:bb:ab:97: f1:48:f0:49:99:cd:81:f2:e3:a9:77:f7:4f:4d:75:f3:e9:f8: 01:20:47:2d:37:7f:c7:51:17:ff:3e:78:2f:52:12:6e:ca:f8: 22:7f:ee:1b:f1:cb:8f:f3:24:e3:63:c3:77:f0:31:4c:d4:af: 07:3a:3e:9b:a5:52:3c:fa:f1:aa:96:5a:bd:20:ee:15:8b:92: 98:82:d9:21:a8:36:67:e1:d6:b2:2b:21:7a:fd:e5:0c:21:fe: de:62:95:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKXKcdLVERPEfOXg062RrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm ZmYxOTAwHhcNMjUxMjE0MDAwMTIyWhcNMjUxMjE1MDAwMTIyWjAzMTEwLwYDVQQD EygwZTliYTc3NWE0MGQ4YjA5NzRhMmJmNWIwNjYzYTM1ZWMzMDI1ODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BAvmjP4+/lxIBbr18RBB/oo++HZ gGDxazFDpDY0rs5W3WvK8oJSX61T/VvTduEXS+r/UWmKY8o5Fwh8C94gHAfHQPy6 upmqSuYguQhb2KT5WBtxUAbrIQD+BYyYuFhR8uSUEOAx0CPSoD7kah/NCHzSaD1X cl35Ad8Jv+MIfrTutII6MAOv2t7fElzPad8qpagnfwRQ/p37KhUlqQxGxwDllrW9 Xe2VCEG3dXYzMdKfoXFPH9swNPxeA6MTx0Ds6xTXuHBeiQK7ovZ57jEHVFnR4uP8 0UBIMVG06czvki3PGLp458ET9rckA7WtYBqSX4IqrgWWLM2Dv0VYwM7lFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6bp3WkDYsJdKK/WwZjo17DAlguMB8GA1UdIwQY MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1 LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG2J+03/ LTLcuESDpT7lDxFgJGUaXNOysAl5OO0pfPixPsrw/HhApjnfCmz+3VyoBMAuYm+Y He4+G37M2IrQwUJ85IsBvBfBapMNIBOP8GaLb5kRGW/ZnFX17tVTAnHAgCeXRQ+4 xL86I4J0mtqtm+i3VVGhuZrrkIKv+BgyQHsifZM/E0XHCQ5G+vM6O40+b0xeteOc 1xEJ7oyuafoxu6uX8UjwSZnNgfLjqXf3T0118+n4ASBHLTd/x1EX/z54L1ISbsr4 In/uG/HLj/Mk42PDd/AxTNSvBzo+m6VSPPrxqpZavSDuFYuSmILZIag2Z+HWsish ev3lDCH+3mKVGA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:04 2025 by rpki-client