This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json) Hash identifier: 6IqmEK4bR00/Iti6kgRZ1zWupztXAghRu3DFZRCPY2g= Subject key identifier: BF:C7:1F:1B:2C:1E:50:03:CF:65:76:4D:0D:12:4B:12:7A:17:63:D4 Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430 Certificate serial: 019B5A51836FA8E668DAEB6E31A0AC12A175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft Manifest number: 1728 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: FuNZzNw/UQDpDgI294kpefGrCQuSA2UZrIFMPJUBGeQ=) 2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:83:6f:a8:e6:68:da:eb:6e:31:a0:ac:12:a1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430 Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=bfc71f1b2c1e5003cf65764d0d124b127a1763d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:95:ce:66:c0:9d:77:c4:8d:fd:e8:36:a2: 97:a5:61:a6:31:c1:7a:a5:b5:a7:da:1d:67:2f:a2: 5d:fb:5e:5f:9f:13:d7:00:85:9c:24:a3:f5:44:c9: b7:73:0c:c8:b3:0b:1b:af:26:79:57:07:37:93:db: a1:e4:86:59:cd:29:35:ee:57:b5:95:b4:42:38:5e: 0a:70:0d:5c:3a:57:bf:eb:76:1d:5e:d6:7d:ea:30: b5:f2:6c:2e:3b:bd:a4:1f:c3:fe:3a:87:5b:98:5a: c9:59:c0:b0:26:94:93:5c:16:8a:88:fe:58:c8:c9: ae:e3:bc:59:42:dd:1b:9e:67:f7:1c:ee:fe:39:75: bf:b8:51:1b:53:16:02:e1:c2:53:69:30:a8:4c:aa: 46:03:2e:9d:b7:cf:b5:52:07:0c:7f:73:45:57:10: 10:d6:a3:17:b9:ce:22:cb:85:b7:00:33:1d:c0:a0: 0c:d4:ce:6b:1e:b7:d5:89:e1:63:60:4c:a3:66:a2: d0:3a:11:44:9d:73:94:c9:82:18:a0:d2:0f:5e:3a: 02:6c:7b:89:52:af:48:54:46:f6:d0:bf:68:89:13: 00:2b:55:a2:b2:e1:e0:10:47:f4:fa:02:28:2a:1b: 06:0c:ac:1e:8c:b2:df:bc:6d:7f:82:dd:41:89:c8: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C7:1F:1B:2C:1E:50:03:CF:65:76:4D:0D:12:4B:12:7A:17:63:D4 X509v3 Authority Key Identifier: keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a9:ff:e7:a0:ed:c2:9d:17:44:23:8c:ad:ad:ff:a1:07:79: f8:fb:28:02:5c:df:de:9c:8c:16:bc:a2:fd:4e:09:a0:9f:71: 19:e8:10:ac:21:a0:4e:4c:6e:b5:35:b7:62:97:e9:c7:fa:31: fc:0b:8b:d4:ad:e8:ee:3a:47:43:a3:ea:8f:a8:a4:cb:d0:b9: 98:ff:ce:c0:c9:e6:1b:9c:f3:24:7f:39:bc:8d:7c:77:98:58: 28:dd:d7:00:df:30:8e:7e:a5:03:3b:fd:78:c5:f2:c0:a2:0c: be:e5:3b:b6:f1:3f:a5:c9:b3:54:39:d1:a6:60:37:e5:6e:f0: 79:54:c8:ac:06:83:05:0e:db:56:1b:2c:b3:dd:66:e9:07:5a: 61:80:66:63:da:d6:f1:7a:44:c7:70:0a:ea:16:f0:a6:1f:db: 50:34:77:54:18:31:e5:c5:b6:08:a7:a9:43:35:48:a6:1a:43: 8b:7f:8a:59:bd:b7:bc:0d:8d:b1:60:73:2b:47:d6:02:74:50: df:11:bc:4f:39:b7:2a:29:70:b0:9f:61:00:da:ee:1d:88:46: 29:eb:b3:fc:72:04:30:27:94:01:75:52:77:84:e8:d7:b6:2f: 54:b5:b8:68:98:ff:df:23:5a:4a:d5:a2:9e:67:74:0f:23:57: ec:67:9c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYNvqOZo2utuMaCsEqF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw NmY0MzAwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD EyhiZmM3MWYxYjJjMWU1MDAzY2Y2NTc2NGQwZDEyNGIxMjdhMTc2M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBGVzmbAnXfEjf3oNqKXpWGmMcF6 pbWn2h1nL6Jd+15fnxPXAIWcJKP1RMm3cwzIswsbryZ5Vwc3k9uh5IZZzSk17le1 lbRCOF4KcA1cOle/63YdXtZ96jC18mwuO72kH8P+OodbmFrJWcCwJpSTXBaKiP5Y yMmu47xZQt0bnmf3HO7+OXW/uFEbUxYC4cJTaTCoTKpGAy6dt8+1UgcMf3NFVxAQ 1qMXuc4iy4W3ADMdwKAM1M5rHrfVieFjYEyjZqLQOhFEnXOUyYIYoNIPXjoCbHuJ Uq9IVEb20L9oiRMAK1WisuHgEEf0+gIoKhsGDKwejLLfvG1/gt1BicjWwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/HHxssHlADz2V2TQ0SSxJ6F2PUMB8GA1UdIwQY MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0 LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6n/56Dt wp0XRCOMra3/oQd5+PsoAlzf3pyMFryi/U4JoJ9xGegQrCGgTkxutTW3Ypfpx/ox /AuL1K3o7jpHQ6Pqj6iky9C5mP/OwMnmG5zzJH85vI18d5hYKN3XAN8wjn6lAzv9 eMXywKIMvuU7tvE/pcmzVDnRpmA35W7weVTIrAaDBQ7bVhsss91m6QdaYYBmY9rW 8XpEx3AK6hbwph/bUDR3VBgx5cW2CKepQzVIphpDi3+KWb23vA2NsWBzK0fWAnRQ 3xG8Tzm3KilwsJ9hANruHYhGKeuz/HIEMCeUAXVSd4To17YvVLW4aJj/3yNaStWi nmd0DyNX7GecCg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:10 2025 by rpki-client