This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json) Hash identifier: 739mVWWcJ2F6lL197X21KNb+GL1LHooiGEmP09pThG8= Subject key identifier: F2:5A:38:D5:AF:11:8D:1F:03:3D:25:3D:CE:80:5E:87:49:5C:DB:B0 Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f Certificate serial: 019B48F076ACA8052D4949089D361454D033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft Manifest number: 15CF Signing time: Tue 23 Dec 2025 02:01:17 +0000 Manifest this update: Tue 23 Dec 2025 02:01:17 +0000 Manifest next update: Wed 24 Dec 2025 02:01:17 +0000 Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=) 2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: OtHJjs7RVLGjI22azLAOVs/J5JxgZhbUP0XLo53of/g=) 3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:76:ac:a8:05:2d:49:49:08:9d:36:14:54:d0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f Validity Not Before: Dec 23 02:01:17 2025 GMT Not After : Dec 24 02:01:17 2025 GMT Subject: CN=f25a38d5af118d1f033d253dce805e87495cdbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:05:03:14:e7:a9:01:ff:b2:00:f3:28:d6: 4e:59:7f:7e:26:9d:7d:78:e7:2a:bd:06:d8:d6:2a: 85:c8:cd:03:3a:7f:f0:da:f4:21:c0:7e:93:f7:ee: 02:f7:17:09:9f:83:a3:7b:dc:c9:c2:90:7b:e1:a0: 08:eb:8f:81:c7:80:86:fa:b7:65:47:56:bc:8d:47: 53:e1:88:04:5a:74:e6:08:0c:8d:49:c6:54:17:37: 50:d0:5c:65:b2:e9:9c:a0:a7:ad:77:1d:4a:57:5d: 8a:a1:61:98:b4:87:54:15:2c:bc:13:48:7f:a1:32: 43:91:15:83:05:f5:9d:07:9e:5e:24:00:2e:fe:fc: 44:9d:8f:b4:a2:4d:e0:4c:b7:56:b0:f8:fe:9a:b7: 89:15:7d:7a:8b:3e:14:b9:fe:c9:17:2f:7a:4b:5a: e9:6c:c5:3c:84:ba:bc:e4:a1:38:d3:2e:eb:ad:43: 36:eb:24:cd:7a:a4:4f:7a:8e:ac:7e:3e:3a:92:00: 4c:b9:2b:21:40:69:cc:a6:86:72:6f:77:2b:de:eb: 19:9d:fd:ed:4d:4b:89:61:44:e6:81:61:6e:3b:e3: 4c:6c:66:f8:c0:54:96:e7:57:2b:e8:aa:23:6b:a5: 8f:4d:e1:a8:25:f5:1c:fe:bb:8b:f9:67:b6:73:b4: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:38:D5:AF:11:8D:1F:03:3D:25:3D:CE:80:5E:87:49:5C:DB:B0 X509v3 Authority Key Identifier: keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2e:50:88:39:55:64:c8:45:c3:ce:bd:a3:a4:9d:4b:ba:16: 32:4b:07:e0:e8:f3:26:16:94:6c:a8:a7:07:1d:61:f6:6d:92: 28:ae:4a:4e:cf:aa:38:fa:7d:93:b3:99:26:aa:6d:a4:bd:88: d0:f1:39:9b:7e:2b:09:1f:b3:5b:e7:e1:3d:26:d5:65:3b:59: 10:93:50:14:09:d0:de:fa:02:b7:20:06:63:5b:57:ef:38:de: a8:82:ef:48:b7:07:75:53:36:a3:9e:79:9c:a1:fc:07:4d:3f: 5e:b2:82:1a:ce:a5:c2:7c:d5:14:89:eb:83:79:35:69:22:54: 63:5c:c8:d9:e4:1c:32:41:a6:6b:8b:d8:c8:d2:8f:64:93:4a: 71:3a:94:4b:d8:c7:4e:f6:d7:32:21:b3:8d:18:a6:8e:08:d0: cd:cb:4a:5f:44:ad:a7:ce:17:a4:ff:80:48:0f:72:bd:6c:46: 6f:cb:da:1e:17:45:6d:c4:2c:86:89:0c:a5:68:2f:2b:10:68: ce:0d:fe:93:cc:d0:81:54:a3:52:91:97:af:1f:ca:50:a9:f4: 54:26:e1:d1:27:05:85:fd:4d:19:46:74:0e:8d:bb:20:13:ea: b3:ac:64:bd:ee:9b:e9:c6:0e:7c:23:8c:18:86:1c:a4:98:3e: 53:73:c0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8HasqAUtSUkInTYUVNAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmJmMmJhNWIzMmU0MmU4YjZjMDNiODM2ZDc2NGY5NzVi NTg5OGYwHhcNMjUxMjIzMDIwMTE3WhcNMjUxMjI0MDIwMTE3WjAzMTEwLwYDVQQD EyhmMjVhMzhkNWFmMTE4ZDFmMDMzZDI1M2RjZTgwNWU4NzQ5NWNkYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFEFAxTnqQH/sgDzKNZOWX9+Jp19 eOcqvQbY1iqFyM0DOn/w2vQhwH6T9+4C9xcJn4Oje9zJwpB74aAI64+Bx4CG+rdl R1a8jUdT4YgEWnTmCAyNScZUFzdQ0FxlsumcoKetdx1KV12KoWGYtIdUFSy8E0h/ oTJDkRWDBfWdB55eJAAu/vxEnY+0ok3gTLdWsPj+mreJFX16iz4Uuf7JFy96S1rp bMU8hLq85KE40y7rrUM26yTNeqRPeo6sfj46kgBMuSshQGnMpoZyb3cr3usZnf3t TUuJYUTmgWFuO+NMbGb4wFSW51cr6Koja6WPTeGoJfUc/ruL+We2c7RoKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJaONWvEY0fAz0lPc6AXodJXNuwMB8GA1UdIwQY MBaAFOy78rpbMuQui2wDuDbXZPl1tYmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAt ODNmZmM4MDA3M2IyLzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAtODNmZmM4MDA3M2Iy LzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC5QiDlV ZMhFw869o6SdS7oWMksH4OjzJhaUbKinBx1h9m2SKK5KTs+qOPp9k7OZJqptpL2I 0PE5m34rCR+zW+fhPSbVZTtZEJNQFAnQ3voCtyAGY1tX7zjeqILvSLcHdVM2o555 nKH8B00/XrKCGs6lwnzVFInrg3k1aSJUY1zI2eQcMkGma4vYyNKPZJNKcTqUS9jH TvbXMiGzjRimjgjQzctKX0Stp84XpP+ASA9yvWxGb8vaHhdFbcQshokMpWgvKxBo zg3+k8zQgVSjUpGXrx/KUKn0VCbh0ScFhf1NGUZ0Do27IBPqs6xkve6b6cYOfCOM GIYcpJg+U3PAhQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:55 2025 by rpki-client