This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json) Hash identifier: 8u5eR7YLreZsba+odv1C4qrfnbyeihcqfgQzGn9F82w= Subject key identifier: E1:FB:5C:2E:67:8B:C8:0D:34:5B:4F:0E:18:D4:6A:E4:8F:8B:17:79 Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69 Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69 Certificate serial: 019B47027298423A018844E17D1E9BD665CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft Manifest number: 06EA Signing time: Mon 22 Dec 2025 17:01:41 +0000 Manifest this update: Mon 22 Dec 2025 17:01:41 +0000 Manifest next update: Tue 23 Dec 2025 17:01:41 +0000 Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: 8fe+H4S+rrb6ps9L6sHn/yutmbA8m9gO4P1oVVQ+/wY=) 2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:72:98:42:3a:01:88:44:e1:7d:1e:9b:d6:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69 Validity Not Before: Dec 22 17:01:41 2025 GMT Not After : Dec 23 17:01:41 2025 GMT Subject: CN=e1fb5c2e678bc80d345b4f0e18d46ae48f8b1779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:06:0d:56:93:66:6a:a9:a1:97:86:0d:9c: 44:94:68:19:3c:be:31:98:e8:ef:30:f2:14:3d:02: e9:8d:ef:92:0a:2b:92:14:e4:bb:5d:37:4e:bc:bc: be:10:fa:73:b2:20:8f:5f:fd:ff:87:d0:ac:4e:d1: e6:88:9e:96:24:c8:3d:91:00:24:69:25:25:58:f7: f4:5d:96:f2:57:6f:ac:66:b5:d6:fa:08:a7:80:13: f0:b2:68:cb:e7:8a:a9:31:87:5c:17:15:06:b8:98: d3:75:b8:f2:2c:41:77:1c:3c:8a:e3:9f:b0:4e:2d: d0:94:be:67:95:3a:e4:0b:78:bf:67:ed:3e:bc:ac: 93:4b:ba:ad:ca:ed:7f:3d:f9:63:72:aa:4a:f5:b7: ed:b9:d8:51:d6:da:44:d1:6d:72:1d:5f:8e:f8:c9: fe:7c:cd:5b:72:7e:f0:bd:f8:ae:9f:0c:2d:30:a4: 4c:59:24:0f:7c:27:b9:26:75:04:cd:58:4b:fd:f8: 01:d4:ea:a2:aa:dd:f1:a7:bb:d7:21:e3:3d:f9:10: a0:ac:21:47:f6:0b:f4:8b:ea:cf:25:97:d4:c9:e0: e6:47:e1:6a:b8:03:a6:65:3c:93:39:67:c4:52:57: 91:4a:c8:4c:36:39:d2:e2:dc:74:a7:20:52:0f:3f: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FB:5C:2E:67:8B:C8:0D:34:5B:4F:0E:18:D4:6A:E4:8F:8B:17:79 X509v3 Authority Key Identifier: keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:1f:a6:f2:40:a3:19:3c:9f:da:95:e1:2a:ea:68:cf:48: 08:8d:85:89:ed:b2:4c:c3:76:0e:d6:02:f1:52:03:a7:9b:e2: f9:18:0d:30:30:e7:d7:e1:ba:3d:41:c2:e8:fe:05:8e:6e:cc: 86:e6:61:48:df:35:41:7d:1d:e2:ad:e0:0b:8f:36:80:f5:43: 96:47:b7:a3:85:d7:f1:dc:59:3c:0d:8a:9b:e9:fe:1d:ab:73: e2:86:73:10:1f:3b:8c:97:a4:ee:44:8f:a1:8d:e0:a6:ec:7b: 4b:d2:18:b0:3d:41:51:85:d7:50:3b:d0:aa:f2:6e:6f:26:61: 01:77:a3:ab:d2:b3:8b:aa:6b:8b:f0:46:b8:0d:ff:e5:21:1e: 7c:a1:31:f8:9d:f3:52:7d:13:6a:2f:04:41:01:d2:1e:51:81: 60:7d:71:5d:12:8f:96:ef:d8:c1:8b:9f:88:4c:5f:66:8f:be: 4f:e9:1c:4f:0f:a0:e4:ac:f9:34:4d:a1:01:48:fe:4c:89:8e: 1a:39:da:92:63:c1:f5:33:d8:fe:d4:29:ca:cc:1d:55:c5:89: ba:09:42:96:1d:1c:7e:24:0f:ac:83:60:6c:92:1c:68:b9:50: 09:6c:b1:0b:e0:9e:73:10:9c:9b:9e:f6:14:23:16:05:b2:a0: 48:91:5d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAnKYQjoBiEThfR6b1mXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy MzRlNjkwHhcNMjUxMjIyMTcwMTQxWhcNMjUxMjIzMTcwMTQxWjAzMTEwLwYDVQQD EyhlMWZiNWMyZTY3OGJjODBkMzQ1YjRmMGUxOGQ0NmFlNDhmOGIxNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkGDVaTZmqpoZeGDZxElGgZPL4x mOjvMPIUPQLpje+SCiuSFOS7XTdOvLy+EPpzsiCPX/3/h9CsTtHmiJ6WJMg9kQAk aSUlWPf0XZbyV2+sZrXW+gingBPwsmjL54qpMYdcFxUGuJjTdbjyLEF3HDyK45+w Ti3QlL5nlTrkC3i/Z+0+vKyTS7qtyu1/PfljcqpK9bftudhR1tpE0W1yHV+O+Mn+ fM1bcn7wvfiunwwtMKRMWSQPfCe5JnUEzVhL/fgB1Oqiqt3xp7vXIeM9+RCgrCFH 9gv0i+rPJZfUyeDmR+FquAOmZTyTOWfEUleRSshMNjnS4tx0pyBSDz8SDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOH7XC5ni8gNNFtPDhjUauSPixd5MB8GA1UdIwQY MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt MDVjMDY3OTZlOTM4LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4 LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev8fpvJA oxk8n9qV4SrqaM9ICI2Fie2yTMN2DtYC8VIDp5vi+RgNMDDn1+G6PUHC6P4Fjm7M huZhSN81QX0d4q3gC482gPVDlke3o4XX8dxZPA2Km+n+Hatz4oZzEB87jJek7kSP oY3gpux7S9IYsD1BUYXXUDvQqvJubyZhAXejq9Kzi6pri/BGuA3/5SEefKEx+J3z Un0Tai8EQQHSHlGBYH1xXRKPlu/YwYufiExfZo++T+kcTw+g5Kz5NE2hAUj+TImO GjnakmPB9TPY/tQpyswdVcWJuglClh0cfiQPrINgbJIcaLlQCWyxC+CecxCcm572 FCMWBbKgSJFdyA== -----END CERTIFICATE-----Generated at Mon Dec 22 23:45:28 2025 by rpki-client