This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json) Hash identifier: zeXGwIwZSq43kCKdyDEmndPTLsYjSbCgiBQ84glZ89A= Subject key identifier: BE:BD:93:D4:BB:6D:DD:C6:C5:05:3E:0B:F3:45:91:10:EB:50:7C:DB Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2 Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2 Certificate serial: 019B59AD11E9200DE8A5501771442F905FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft Manifest number: 11BE Signing time: Fri 26 Dec 2025 08:01:12 +0000 Manifest this update: Fri 26 Dec 2025 08:01:12 +0000 Manifest next update: Sat 27 Dec 2025 08:01:12 +0000 Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: 0zBMIjCZVRacVhxHswNwu/9VgHWeM37s8Bi/NfjzPq8=) 2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=) 3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:11:e9:20:0d:e8:a5:50:17:71:44:2f:90:5f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2 Validity Not Before: Dec 26 08:01:12 2025 GMT Not After : Dec 27 08:01:12 2025 GMT Subject: CN=bebd93d4bb6dddc6c5053e0bf3459110eb507cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:31:ff:0b:b9:da:7d:15:ef:48:5b:dd:9d: b6:66:b2:c9:cd:e3:5d:0c:7f:a3:d6:01:92:ff:1d: 47:19:72:a5:12:7b:96:92:37:14:c5:60:ea:33:02: f1:21:54:9e:13:ff:26:91:9f:74:d4:6f:fc:3e:4d: 6f:7f:18:52:ca:3f:58:9c:84:4d:d8:16:5e:f5:6d: 2f:db:36:13:ab:02:ca:bb:81:1f:f3:b5:3b:ff:3c: e0:0c:9b:71:f4:c0:42:5b:4b:71:33:c9:58:bb:d4: 91:f7:c5:6e:cd:ea:f5:e1:40:1a:f9:e4:35:5c:7b: ef:fd:32:c6:3a:68:fc:95:4d:7e:65:89:70:ef:46: 47:eb:25:09:9a:c9:ab:08:b3:99:3e:89:15:e9:60: 77:64:92:85:b7:b9:39:e6:90:8d:bb:ad:2c:bb:29: 9d:a9:d4:50:ad:89:60:f1:79:3b:84:fa:af:81:ac: a1:6d:b2:44:84:76:5d:be:a9:7a:d5:a3:9c:14:cc: 6f:1f:86:be:d6:3a:cc:fb:45:ec:e4:99:8c:32:c2: 36:9b:d1:52:0b:db:84:a1:5c:ef:03:58:46:c1:30: 88:97:fb:51:d0:2b:5e:f5:72:29:47:87:ce:36:16: f7:d1:49:c5:fd:0f:f0:78:48:e3:fd:4b:4c:15:54: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BD:93:D4:BB:6D:DD:C6:C5:05:3E:0B:F3:45:91:10:EB:50:7C:DB X509v3 Authority Key Identifier: keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e3:dc:51:27:f0:a9:78:96:7e:81:ef:37:b7:37:b4:a0:02: 5f:bb:07:d8:5a:5d:c2:e3:94:0c:b5:96:7f:af:b3:8d:cc:86: 1c:f4:76:39:07:e0:2b:96:8d:9b:cf:08:c8:dc:a6:89:b3:97: a5:5b:4e:d6:e0:0c:3a:44:9d:ae:a1:52:3c:15:c1:e3:0c:5c: 12:ae:f0:7a:fc:2a:42:2a:83:45:65:00:0b:b1:4b:b1:8e:9e: 35:50:ec:44:53:4d:42:08:eb:79:8a:a5:f5:ef:db:cd:00:a6: 6e:0a:52:3e:f2:9c:e3:f6:67:48:9f:7d:51:c2:d2:ab:57:14: 72:be:ee:4b:43:f0:0f:12:d5:dd:e5:c6:0d:3b:98:83:36:1e: 89:88:11:bd:22:17:d6:69:08:f6:81:79:b7:7b:64:ee:df:5b: 79:09:2c:8d:4b:2d:76:3f:cb:5a:35:78:53:1f:44:4b:e7:c9: c0:53:1b:1e:3b:f5:ad:cd:dd:66:e6:ec:9b:b7:9b:e1:61:cf: 78:d4:10:a0:09:72:36:9d:30:34:2b:1b:6f:9f:4e:6a:de:f9: 19:4e:6b:6d:82:ca:e7:a5:42:f4:6f:52:81:c2:53:e5:6e:01: 3c:a3:ba:55:a1:e5:44:ac:d1:e2:4e:c9:c1:59:d9:c0:b1:95: cd:b9:e1:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrRHpIA3opVAXcUQvkF/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmQ0N2I0N2UwNWIxM2QwNThiMWNiNDI1MjlhN2MxODY2 ZGNkZjIwHhcNMjUxMjI2MDgwMTEyWhcNMjUxMjI3MDgwMTEyWjAzMTEwLwYDVQQD EyhiZWJkOTNkNGJiNmRkZGM2YzUwNTNlMGJmMzQ1OTExMGViNTA3Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vox/wu52n0V70hb3Z22ZrLJzeNd DH+j1gGS/x1HGXKlEnuWkjcUxWDqMwLxIVSeE/8mkZ901G/8Pk1vfxhSyj9YnIRN 2BZe9W0v2zYTqwLKu4Ef87U7/zzgDJtx9MBCW0txM8lYu9SR98Vuzer14UAa+eQ1 XHvv/TLGOmj8lU1+ZYlw70ZH6yUJmsmrCLOZPokV6WB3ZJKFt7k55pCNu60suymd qdRQrYlg8Xk7hPqvgayhbbJEhHZdvql61aOcFMxvH4a+1jrM+0Xs5JmMMsI2m9FS C9uEoVzvA1hGwTCIl/tR0Cte9XIpR4fONhb30UnF/Q/weEjj/UtMFVSDkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL69k9S7bd3GxQU+C/NFkRDrUHzbMB8GA1UdIwQY MBaAFOxtR7R+BbE9BYsctCUpp8GGbc3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEt YzM5YWRiOThmNDI5LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEtYzM5YWRiOThmNDI5 LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+PcUSfw qXiWfoHvN7c3tKACX7sH2FpdwuOUDLWWf6+zjcyGHPR2OQfgK5aNm88IyNymibOX pVtO1uAMOkSdrqFSPBXB4wxcEq7wevwqQiqDRWUAC7FLsY6eNVDsRFNNQgjreYql 9e/bzQCmbgpSPvKc4/ZnSJ99UcLSq1cUcr7uS0PwDxLV3eXGDTuYgzYeiYgRvSIX 1mkI9oF5t3tk7t9beQksjUstdj/LWjV4Ux9ES+fJwFMbHjv1rc3dZubsm7eb4WHP eNQQoAlyNp0wNCsbb59Oat75GU5rbYLK56VC9G9SgcJT5W4BPKO6VaHlRKzR4k7J wVnZwLGVzbnhOw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:23 2025 by rpki-client