This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json) Hash identifier: T5Ifb3fU9Z97M415ITM9TcMh8sbQTnGnhCg/NN4OTqU= Subject key identifier: 38:E3:A6:22:95:43:CA:B7:E2:88:A9:72:43:07:B8:BE:43:0F:E4:B1 Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a Certificate serial: 019B3720C3B78E43BEE9C0FD90EC6AEAF846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft Manifest number: 117C Signing time: Fri 19 Dec 2025 15:00:52 +0000 Manifest this update: Fri 19 Dec 2025 15:00:52 +0000 Manifest next update: Sat 20 Dec 2025 15:00:52 +0000 Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: 1JCn/f07sawy16MKEEEYDsFR/1QDbJFhmCURFhhYuFw=) 2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:c3:b7:8e:43:be:e9:c0:fd:90:ec:6a:ea:f8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a Validity Not Before: Dec 19 15:00:52 2025 GMT Not After : Dec 20 15:00:52 2025 GMT Subject: CN=38e3a6229543cab7e288a9724307b8be430fe4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ed:85:dd:97:32:4f:4c:ab:f7:a2:f1:f0:cd: 9b:62:9d:7b:78:5e:91:16:4c:4b:cf:c0:ab:19:5a: d5:88:e6:e5:2f:28:86:01:eb:58:c8:67:85:07:43: b7:16:1a:c0:a8:23:d4:e2:8c:61:b2:92:88:ee:c2: 38:74:f4:17:6e:5f:06:a2:57:e8:56:92:56:e5:87: 44:ee:ae:2d:95:17:07:00:5b:ed:0d:b4:a7:3b:d3: fc:72:96:b3:9d:bb:f8:a7:d7:ac:0e:0c:33:81:30: 0f:3a:14:92:77:4a:30:c6:50:3a:0d:ac:e7:5c:1a: b3:1f:3f:c8:a3:ed:e6:11:38:ca:58:82:f5:91:95: 35:bc:24:cf:c8:6a:39:ea:92:26:3f:35:3e:e0:37: e6:0b:48:20:38:00:e2:fe:f6:02:52:59:8f:c4:71: b2:13:01:32:63:5e:f6:95:f3:0d:f7:8e:dd:ad:da: d7:5d:df:a9:d2:7d:04:90:fb:49:c6:81:eb:f5:cf: 42:97:44:fc:a8:07:c0:68:8a:34:4d:1e:17:66:a6: f4:b4:1b:ba:de:61:d0:37:0f:05:ee:5d:60:ba:a5: 44:d9:a4:da:4e:9a:d8:65:2b:65:1f:58:03:b6:4d: df:38:77:15:35:8a:e9:3a:f8:71:8d:c6:9e:bf:c5: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:A6:22:95:43:CA:B7:E2:88:A9:72:43:07:B8:BE:43:0F:E4:B1 X509v3 Authority Key Identifier: keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d9:60:48:09:5c:2f:a2:c9:18:ad:85:9c:84:b6:0f:8e:24: d6:77:b1:24:87:f6:33:9b:bf:08:43:d9:f8:7d:c8:df:ff:78: 14:fb:ce:ad:bc:f1:64:ee:71:ec:f1:f3:f2:41:23:ce:ef:ce: 81:9e:b4:cd:5b:21:c5:ff:47:fa:d0:ae:a8:c3:ee:85:5b:98: 00:8e:c8:84:62:2b:dd:f5:c7:cc:d8:72:73:a1:9f:d2:f3:06: 94:55:d5:ab:64:93:ad:1a:f0:22:d9:09:d8:ea:1a:03:63:cc: b4:58:5c:31:5a:4b:99:96:d6:e2:b6:e6:03:20:fe:91:c5:23: 0d:1d:37:bd:b9:3b:01:b6:a5:7e:2b:ba:d1:a4:40:6a:75:41: f2:78:e0:04:02:e7:8a:5e:2f:6f:78:47:45:86:fb:a5:23:da: 32:87:cd:d9:1d:39:f2:e8:de:6f:11:e7:1c:b6:7a:f2:33:0e: 77:31:fe:ea:82:1a:25:6d:6f:de:6e:44:0c:6b:8e:a0:94:02: 5c:a4:57:0b:09:47:a4:57:57:70:39:74:ed:a9:71:98:bc:1c: 3d:0c:63:81:11:14:72:c8:5c:54:7b:7d:94:84:f5:17:ca:48: 7c:c6:bb:54:8c:3b:f9:f4:df:2c:32:06:ff:b7:db:fe:3b:02: fa:2c:62:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IMO3jkO+6cD9kOxq6vhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYzMxMzE5NzZhZWEyN2QxNzFjNmMyNjdhOThkM2YzODJh NjFhMmEwHhcNMjUxMjE5MTUwMDUyWhcNMjUxMjIwMTUwMDUyWjAzMTEwLwYDVQQD EygzOGUzYTYyMjk1NDNjYWI3ZTI4OGE5NzI0MzA3YjhiZTQzMGZlNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+2F3ZcyT0yr96Lx8M2bYp17eF6R FkxLz8CrGVrViOblLyiGAetYyGeFB0O3FhrAqCPU4oxhspKI7sI4dPQXbl8Golfo VpJW5YdE7q4tlRcHAFvtDbSnO9P8cpaznbv4p9esDgwzgTAPOhSSd0owxlA6Dazn XBqzHz/Io+3mETjKWIL1kZU1vCTPyGo56pImPzU+4DfmC0ggOADi/vYCUlmPxHGy EwEyY172lfMN947drdrXXd+p0n0EkPtJxoHr9c9Cl0T8qAfAaIo0TR4XZqb0tBu6 3mHQNw8F7l1guqVE2aTaTprYZStlH1gDtk3fOHcVNYrpOvhxjcaev8UKqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjjpiKVQ8q34oipckMHuL5DD+SxMB8GA1UdIwQY MBaAFO7DExl2rqJ9FxxsJnqY0/OCphoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEt NGNkM2U3MzIxNmYxLzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEtNGNkM2U3MzIxNmYx LzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItlgSAlc L6LJGK2FnIS2D44k1nexJIf2M5u/CEPZ+H3I3/94FPvOrbzxZO5x7PHz8kEjzu/O gZ60zVshxf9H+tCuqMPuhVuYAI7IhGIr3fXHzNhyc6Gf0vMGlFXVq2STrRrwItkJ 2OoaA2PMtFhcMVpLmZbW4rbmAyD+kcUjDR03vbk7Abalfiu60aRAanVB8njgBALn il4vb3hHRYb7pSPaMofN2R058ujebxHnHLZ68jMOdzH+6oIaJW1v3m5EDGuOoJQC XKRXCwlHpFdXcDl07alxmLwcPQxjgREUcshcVHt9lIT1F8pIfMa7VIw7+fTfLDIG /7fb/jsC+ixi1w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:27 2025 by rpki-client