This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json) Hash identifier: aVJ580kO9+oer5vc7sbYa0fn2r4LqHeWVAIUXCe/w0s= Subject key identifier: 23:77:8F:F7:5D:0E:4C:0E:F5:9E:E6:38:30:D9:84:3D:2B:72:89:45 Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Certificate serial: 019B09DA4C10B63078D311965B48C612E509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft Manifest number: 1574 Signing time: Wed 10 Dec 2025 20:00:59 +0000 Manifest this update: Wed 10 Dec 2025 20:00:59 +0000 Manifest next update: Thu 11 Dec 2025 20:00:59 +0000 Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=) 2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: J3fnf9o+GegZF0y+tWtVTgMmDVGvulZCJkCJOa/ql8o=) 3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=) 4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:da:4c:10:b6:30:78:d3:11:96:5b:48:c6:12:e5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Validity Not Before: Dec 10 20:00:59 2025 GMT Not After : Dec 11 20:00:59 2025 GMT Subject: CN=23778ff75d0e4c0ef59ee63830d9843d2b728945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:99:a4:34:a2:65:43:d2:71:06:77:22:ec: 36:ce:7a:0b:ac:6c:56:f2:38:70:32:e9:ec:15:e9: 2e:ff:64:1e:95:16:ff:a5:ab:18:14:07:1a:83:8a: 1c:b0:c7:aa:51:c2:0f:89:3c:c7:1a:96:7a:25:33: c4:8b:1a:1f:df:b2:36:5f:f4:05:d5:94:8a:ba:40: 31:8a:a4:30:a6:45:6b:0e:9f:86:5a:00:64:54:bd: 35:83:e0:9d:0d:e1:d7:60:fe:1e:a9:fc:47:8f:5b: 01:dc:04:b9:fe:ee:54:98:1f:f8:9c:a9:27:6d:ab: 9e:eb:77:8e:3c:d9:e3:d5:38:4b:6a:cc:ec:66:68: 67:0c:b4:cb:6a:80:12:8a:3c:ea:11:90:cb:4d:c9: 72:a3:a2:61:60:8f:fd:41:17:0c:5f:7e:39:31:b5: e9:49:e6:94:ef:d5:8a:80:8f:d8:03:9a:bb:40:37: 76:7f:1c:1b:58:ff:30:ab:99:6e:9d:19:50:79:c4: 95:4a:f0:bf:1f:e5:5a:73:25:63:f3:8e:aa:7d:ca: 7b:1e:d4:34:ee:78:e9:14:fe:5e:0a:81:a6:ea:5f: 5c:13:78:c4:93:f9:e5:66:c7:b4:26:22:10:41:ef: ee:2e:66:ab:f4:46:fb:ef:ca:d9:18:b2:c8:30:b2: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:77:8F:F7:5D:0E:4C:0E:F5:9E:E6:38:30:D9:84:3D:2B:72:89:45 X509v3 Authority Key Identifier: keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:37:7b:ca:e6:61:1a:30:02:14:7d:39:11:89:47:55:7b:59: c5:fa:81:53:b7:10:83:fb:bf:a6:23:b4:ab:2e:ec:37:08:aa: 9f:98:d3:3c:56:6a:ec:0a:c4:b6:da:80:82:c6:84:38:8e:75: 2d:13:dc:c1:77:69:90:b0:ad:19:0b:7f:4a:8a:c5:f3:20:e7: df:8b:5b:b4:6d:ea:69:06:ef:f2:5f:0b:54:96:c6:10:95:5b: b1:92:6a:4f:0d:83:64:a2:f7:36:59:71:72:64:ec:dd:29:0a: eb:6d:3d:f0:ac:b1:29:c1:66:b5:bc:70:38:37:dc:58:1c:3f: bf:38:9b:b0:29:74:dd:b0:e4:83:93:99:b8:9a:58:33:7f:b1: 6c:3c:e3:74:0f:46:36:c2:6b:33:c5:c5:37:6a:62:0a:eb:d7: 70:56:12:53:62:1c:19:83:f2:34:8f:e7:24:6c:48:c7:a6:d2: 50:98:d7:73:d9:4d:19:e2:81:0b:5f:e1:46:be:64:13:9b:57: 6d:d2:dc:61:9d:48:0e:3f:64:79:68:c2:3b:11:eb:11:a7:3c: 91:68:6c:c6:68:eb:d4:5a:e7:7f:27:55:93:63:28:c0:c1:29: 88:63:49:76:d8:4a:c6:e5:f4:6c:f0:7f:a5:6f:e7:50:5c:f8: 3f:38:d2:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJ2kwQtjB40xGWW0jGEuUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3 OWFkNzcwHhcNMjUxMjEwMjAwMDU5WhcNMjUxMjExMjAwMDU5WjAzMTEwLwYDVQQD EygyMzc3OGZmNzVkMGU0YzBlZjU5ZWU2MzgzMGQ5ODQzZDJiNzI4OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GGZpDSiZUPScQZ3Iuw2znoLrGxW 8jhwMunsFeku/2QelRb/pasYFAcag4ocsMeqUcIPiTzHGpZ6JTPEixof37I2X/QF 1ZSKukAxiqQwpkVrDp+GWgBkVL01g+CdDeHXYP4eqfxHj1sB3AS5/u5UmB/4nKkn baue63eOPNnj1ThLaszsZmhnDLTLaoASijzqEZDLTclyo6JhYI/9QRcMX345MbXp SeaU79WKgI/YA5q7QDd2fxwbWP8wq5lunRlQecSVSvC/H+VacyVj846qfcp7HtQ0 7njpFP5eCoGm6l9cE3jEk/nlZse0JiIQQe/uLmar9Eb778rZGLLIMLJBaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN3j/ddDkwO9Z7mODDZhD0rcolFMB8GA1UdIwQY MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4 LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzd7yuZh GjACFH05EYlHVXtZxfqBU7cQg/u/piO0qy7sNwiqn5jTPFZq7ArEttqAgsaEOI51 LRPcwXdpkLCtGQt/SorF8yDn34tbtG3qaQbv8l8LVJbGEJVbsZJqTw2DZKL3Nllx cmTs3SkK62098KyxKcFmtbxwODfcWBw/vzibsCl03bDkg5OZuJpYM3+xbDzjdA9G NsJrM8XFN2piCuvXcFYSU2IcGYPyNI/nJGxIx6bSUJjXc9lNGeKBC1/hRr5kE5tX bdLcYZ1IDj9keWjCOxHrEac8kWhsxmjr1FrnfydVk2MowMEpiGNJdthKxuX0bPB/ pW/nUFz4PzjSrA== -----END CERTIFICATE-----Generated at Thu Dec 11 06:48:13 2025 by rpki-client