This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json) Hash identifier: GKjLANvSbnU6i9j4uOMZSGNtYCkyka3cz5CuPQb8aWg= Subject key identifier: F2:B6:94:81:62:BA:45:87:52:83:9F:61:CE:70:B0:DA:05:41:37:DB Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca Certificate serial: 019B0F6EB8381FDFB4C41ACF17F768545AC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft Manifest number: 034D Signing time: Thu 11 Dec 2025 22:01:12 +0000 Manifest this update: Thu 11 Dec 2025 22:01:12 +0000 Manifest next update: Fri 12 Dec 2025 22:01:12 +0000 Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: 8aExhOdjsmtwUbyMDq/OCeMsXIVtwAJs591LcApXOpo=) 2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:b8:38:1f:df:b4:c4:1a:cf:17:f7:68:54:5a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca Validity Not Before: Dec 11 22:01:12 2025 GMT Not After : Dec 12 22:01:12 2025 GMT Subject: CN=f2b6948162ba458752839f61ce70b0da054137db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:b1:cf:1d:be:2b:f7:4e:43:97:e4:3a:c5: 47:a9:c6:ea:ee:25:c3:e9:e9:fc:a0:51:c3:8c:4d: f9:b6:b4:94:d2:1e:38:f3:fe:80:4e:8d:b5:02:41: 69:9a:6f:6b:bf:dc:1e:8e:5d:e9:9a:7d:27:a8:35: f4:a9:e6:44:6f:f7:c6:93:18:9a:e1:28:17:bc:f6: 4e:f7:9c:29:3f:0d:a6:b2:a8:38:83:b3:e3:a6:31: 0e:b4:c2:7c:e1:51:95:18:6b:bb:c7:83:3c:20:da: 5f:57:3c:58:02:9b:58:13:27:c8:13:0d:70:56:00: 86:7e:4f:45:20:bb:14:1d:6f:da:22:db:39:2c:c4: 12:2c:86:23:7b:6f:1b:7c:a0:a7:33:58:7c:1e:49: ad:92:d1:5a:3e:5a:ea:56:8e:92:a3:7d:d4:e4:bd: 3d:f2:83:70:ba:c3:68:34:5b:9e:bd:f9:92:6e:67: f9:03:2c:0d:a3:82:6a:01:b3:ad:b1:15:1f:4c:43: c4:8a:b7:c5:5e:27:71:e1:40:bc:58:6d:7c:73:eb: f3:84:0f:1c:27:66:45:58:57:15:97:5e:85:53:75: ac:7d:e5:73:36:61:5f:7d:4c:3c:3b:40:1a:d9:3c: d7:97:41:6e:58:f2:8d:28:97:cb:5c:3c:95:e7:dc: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:94:81:62:BA:45:87:52:83:9F:61:CE:70:B0:DA:05:41:37:DB X509v3 Authority Key Identifier: keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:f6:5d:47:0f:55:35:b3:8e:e2:77:32:01:2e:d0:16:44: 02:b2:2d:1b:44:dc:83:67:e5:85:ac:74:91:1e:57:c9:ce:d9: 74:47:89:a7:de:f3:95:9a:5f:65:84:2a:2d:7e:6a:00:19:a6: 1e:16:1f:48:93:db:95:e6:58:35:57:01:b7:4b:4f:60:19:d6: e1:da:0d:6d:e9:73:14:c7:a8:ff:18:ec:3b:c7:5a:cb:59:f5: 18:5a:fc:f5:43:f5:a2:43:e6:f5:29:3f:67:a7:eb:4c:b9:70: f9:36:f0:3c:f3:af:1d:ea:ae:86:5d:51:fa:49:1f:0f:a5:19: ab:2c:08:0d:8a:20:92:0b:2c:f8:0d:c6:90:8c:6a:bb:11:ce: b1:ab:21:76:2c:9d:9c:f4:b6:e8:45:99:35:95:2e:ac:7b:64: 00:de:b2:29:c8:7e:32:8b:1a:98:a4:9f:47:bc:24:f5:fd:64: 34:07:e1:3b:18:51:e3:87:09:69:83:df:b9:4f:78:57:a2:99: 70:8e:99:cb:36:35:75:da:99:92:59:94:ef:14:dd:1c:a8:cd: 3b:2c:83:41:ff:ad:9a:4b:45:63:e9:70:f3:da:8a:dd:7a:6f: 38:04:8f:da:b2:90:8d:ee:46:b1:d4:ea:55:ff:1e:0d:e6:1e: f9:91:59:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbrg4H9+0xBrPF/doVFrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1 NTg2Y2EwHhcNMjUxMjExMjIwMTEyWhcNMjUxMjEyMjIwMTEyWjAzMTEwLwYDVQQD EyhmMmI2OTQ4MTYyYmE0NTg3NTI4MzlmNjFjZTcwYjBkYTA1NDEzN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qexzx2+K/dOQ5fkOsVHqcbq7iXD 6en8oFHDjE35trSU0h448/6ATo21AkFpmm9rv9wejl3pmn0nqDX0qeZEb/fGkxia 4SgXvPZO95wpPw2msqg4g7PjpjEOtMJ84VGVGGu7x4M8INpfVzxYAptYEyfIEw1w VgCGfk9FILsUHW/aIts5LMQSLIYje28bfKCnM1h8HkmtktFaPlrqVo6So33U5L09 8oNwusNoNFuevfmSbmf5AywNo4JqAbOtsRUfTEPEirfFXidx4UC8WG18c+vzhA8c J2ZFWFcVl16FU3WsfeVzNmFffUw8O0Aa2TzXl0FuWPKNKJfLXDyV59zLzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK2lIFiukWHUoOfYc5wsNoFQTfbMB8GA1UdIwQY MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3b2XUcP VTWzjuJ3MgEu0BZEArItG0Tcg2flhax0kR5Xyc7ZdEeJp97zlZpfZYQqLX5qABmm HhYfSJPbleZYNVcBt0tPYBnW4doNbelzFMeo/xjsO8day1n1GFr89UP1okPm9Sk/ Z6frTLlw+TbwPPOvHequhl1R+kkfD6UZqywIDYogkgss+A3GkIxquxHOsashdiyd nPS26EWZNZUurHtkAN6yKch+MosamKSfR7wk9f1kNAfhOxhR44cJaYPfuU94V6KZ cI6ZyzY1ddqZklmU7xTdHKjNOyyDQf+tmktFY+lw89qK3XpvOASP2rKQje5GsdTq Vf8eDeYe+ZFZOg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:29:47 2025 by rpki-client