This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json) Hash identifier: uaO+Cz+EJGp2j/RfgHbD+9Eg3n/QpwhVNQmIJ3dL6Tc= Subject key identifier: FB:85:91:4C:3B:1F:F5:B0:88:68:D6:32:B4:D4:F5:CC:ED:7E:38:58 Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8 Certificate serial: 019B1ACDAD3F2C2C68B041FDCBA7F7CC3907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft Manifest number: 1709 Signing time: Sun 14 Dec 2025 03:00:45 +0000 Manifest this update: Sun 14 Dec 2025 03:00:45 +0000 Manifest next update: Mon 15 Dec 2025 03:00:45 +0000 Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: zUY9oK/JTjkX/ffV7Zm5EycYgTjSHWxGLhl3frKNl64=) 2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:ad:3f:2c:2c:68:b0:41:fd:cb:a7:f7:cc:39:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8 Validity Not Before: Dec 14 03:00:45 2025 GMT Not After : Dec 15 03:00:45 2025 GMT Subject: CN=fb85914c3b1ff5b08868d632b4d4f5cced7e3858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:e7:f0:78:3f:af:f4:47:7e:9e:55:ff:2c: 64:7f:d6:8d:49:b0:b6:ac:15:a8:8a:e2:e9:38:78: 02:1c:aa:17:04:e1:98:49:5a:06:bd:2e:f6:51:06: 5c:32:90:b3:b3:36:8a:b3:f3:d3:75:02:21:50:81: e0:00:21:bb:24:3b:75:e0:92:a5:9c:7f:36:36:8b: aa:13:dd:0e:f2:05:b3:26:20:f2:35:60:f4:ba:1d: 4f:0b:1a:64:25:8e:ca:e4:0d:b4:ee:12:3b:c3:f0: 1f:f9:d1:45:a2:68:56:db:6f:dd:00:95:75:f0:07: df:de:26:a5:f2:18:74:a7:fe:f6:0e:8d:d4:3d:06: 84:ed:64:e7:41:8c:8b:eb:36:ba:07:5d:78:48:fb: e1:9a:dc:4b:8c:d4:19:1f:42:55:6f:38:28:e7:f5: b0:d2:6d:d1:db:68:be:71:eb:c2:b9:ee:a5:bd:58: f7:9d:92:d6:e8:86:7c:f9:8c:08:15:67:69:48:4d: c5:b3:6a:85:b1:f8:d4:fa:d0:b8:eb:8a:38:cf:84: 1c:e1:25:6c:5a:99:98:d2:a9:3d:6f:a7:11:45:a2: dd:9f:10:65:17:be:0a:08:31:5d:b6:cd:51:93:a6: dd:3e:3b:4f:0f:dd:5d:09:30:b6:44:b5:39:9b:0b: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:91:4C:3B:1F:F5:B0:88:68:D6:32:B4:D4:F5:CC:ED:7E:38:58 X509v3 Authority Key Identifier: keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:64:51:e9:e4:c4:84:e4:ba:8d:dc:33:c0:e5:87:7e:41:7b: 9c:80:25:dd:fc:b8:2e:0a:b7:68:f5:f4:0c:ff:c0:5d:fe:11: a6:66:e3:b2:5e:eb:3d:9c:84:9d:de:72:2f:4f:b4:8d:2e:f7: 9f:48:a7:c6:a2:e6:2c:ee:d0:9a:9d:f5:1a:bd:f8:50:92:2e: f1:c9:03:1e:6d:b3:fa:ab:47:13:7a:f9:eb:90:82:e5:fb:02: e7:fe:dd:48:b2:6c:be:77:60:d0:35:bb:95:82:4f:15:33:c1: 8a:10:85:39:e8:c4:79:9e:a9:4c:7d:aa:56:da:fd:ed:13:f7: 06:4d:66:82:db:fc:35:74:1c:a4:00:5b:d5:dd:c1:65:ff:aa: 24:77:ab:5f:e9:4c:df:99:03:f9:5d:b2:7a:3c:e3:6e:0b:73: 27:86:12:bc:3b:95:5a:d4:58:6c:45:d7:23:bc:01:03:27:ed: 27:21:d4:35:a5:44:e5:9f:21:3f:56:44:23:6d:02:98:ec:07: 50:80:f4:3e:9b:69:f8:7d:00:7d:74:63:59:ce:54:f1:d7:25: 3b:8c:31:d7:b2:58:d0:5e:38:a1:f7:db:2e:56:98:5b:4a:42: 1e:0b:21:c2:a9:d7:a9:5e:b6:ed:52:54:47:2c:71:37:db:e4: 96:aa:bd:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaza0/LCxosEH9y6f3zDkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj NDg1ZDgwHhcNMjUxMjE0MDMwMDQ1WhcNMjUxMjE1MDMwMDQ1WjAzMTEwLwYDVQQD EyhmYjg1OTE0YzNiMWZmNWIwODg2OGQ2MzJiNGQ0ZjVjY2VkN2UzODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbnn8Hg/r/RHfp5V/yxkf9aNSbC2 rBWoiuLpOHgCHKoXBOGYSVoGvS72UQZcMpCzszaKs/PTdQIhUIHgACG7JDt14JKl nH82NouqE90O8gWzJiDyNWD0uh1PCxpkJY7K5A207hI7w/Af+dFFomhW22/dAJV1 8Aff3ial8hh0p/72Do3UPQaE7WTnQYyL6za6B114SPvhmtxLjNQZH0JVbzgo5/Ww 0m3R22i+cevCue6lvVj3nZLW6IZ8+YwIFWdpSE3Fs2qFsfjU+tC464o4z4Qc4SVs WpmY0qk9b6cRRaLdnxBlF74KCDFdts1Rk6bdPjtPD91dCTC2RLU5mwuuQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuFkUw7H/WwiGjWMrTU9cztfjhYMB8GA1UdIwQY MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5 LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WRR6eTE hOS6jdwzwOWHfkF7nIAl3fy4Lgq3aPX0DP/AXf4Rpmbjsl7rPZyEnd5yL0+0jS73 n0inxqLmLO7Qmp31Gr34UJIu8ckDHm2z+qtHE3r565CC5fsC5/7dSLJsvndg0DW7 lYJPFTPBihCFOejEeZ6pTH2qVtr97RP3Bk1mgtv8NXQcpABb1d3BZf+qJHerX+lM 35kD+V2yejzjbgtzJ4YSvDuVWtRYbEXXI7wBAyftJyHUNaVE5Z8hP1ZEI20CmOwH UID0Pptp+H0AfXRjWc5U8dclO4wx17JY0F44offbLlaYW0pCHgshwqnXqV627VJU RyxxN9vklqq9Bw== -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:43 2025 by rpki-client