This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json) Hash identifier: GFByXHhabZCeYtArbE7WVP2Th8za2+IQS4SAMba0Nuk= Subject key identifier: E1:CB:E8:0D:BB:7D:68:ED:92:F6:D4:BF:5F:8A:E8:32:1A:15:CE:2D Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03 Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03 Certificate serial: 019B59E42DF4383FC4C56D3B0EF510E23109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft Manifest number: 07DB Signing time: Fri 26 Dec 2025 09:01:24 +0000 Manifest this update: Fri 26 Dec 2025 09:01:24 +0000 Manifest next update: Sat 27 Dec 2025 09:01:24 +0000 Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: 0BalOTl5cwG1aDPKIgmeiludPQ/eeNdUbS/j1sVsyMk=) 2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:2d:f4:38:3f:c4:c5:6d:3b:0e:f5:10:e2:31:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef133598bb10542114681ea86a35df169831cf03 Validity Not Before: Dec 26 09:01:24 2025 GMT Not After : Dec 27 09:01:24 2025 GMT Subject: CN=e1cbe80dbb7d68ed92f6d4bf5f8ae8321a15ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:e6:aa:bb:cb:78:bf:28:3c:3b:35:c2:ef: be:5c:8b:13:52:07:e1:28:81:ae:49:b1:8c:fb:fd: 56:8f:37:4f:3a:8c:9b:05:fb:69:45:31:ab:31:59: 4a:29:4a:ea:35:8d:a8:ac:45:64:b7:97:84:8c:24: 20:71:67:1d:cb:84:7c:51:93:11:c7:ef:0b:56:9e: 99:58:ae:5a:6a:5a:e2:c2:0e:ca:4d:e3:e1:b0:e9: ae:3a:13:96:2c:53:91:56:73:2b:ad:a1:3b:37:26: 9a:a3:84:68:a6:b4:c4:31:ca:94:8a:93:f0:59:79: 6e:fd:b6:8e:32:d8:47:dc:03:29:b8:59:49:63:39: 8e:98:c0:aa:ae:31:94:9e:30:2e:65:da:5c:59:86: 1a:7c:c8:7d:7b:98:ec:ef:4c:10:be:31:52:70:7f: b6:a2:f0:9f:9e:bf:ad:76:4d:da:75:42:bf:6f:b8: 54:3c:7a:20:89:cf:9f:ba:8e:32:28:46:24:74:52: 44:15:d9:2c:a6:83:58:af:7a:05:63:20:73:89:15: 8e:ba:fc:08:cb:e5:66:6c:0e:3d:31:10:93:cd:ed: 58:77:f9:46:a4:f5:8b:e9:6f:c2:6a:dd:d4:fe:90: 09:1c:d7:4a:57:16:da:3f:b2:8b:81:2f:0b:19:61: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CB:E8:0D:BB:7D:68:ED:92:F6:D4:BF:5F:8A:E8:32:1A:15:CE:2D X509v3 Authority Key Identifier: keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:24:56:2d:00:d1:63:bd:a8:e8:39:8c:91:10:b4:b2:ee:07: 92:9b:75:62:8f:c7:94:bb:58:9a:e3:3d:11:af:ef:28:a9:23: b1:ed:52:44:e5:45:c0:ff:89:7d:ac:e8:76:e8:f2:0a:c4:3d: ac:6d:b4:cf:67:82:66:27:67:e4:d7:21:76:9a:3f:d8:38:eb: 70:5b:99:b7:95:7f:17:ae:1e:cc:cb:3d:2d:67:96:4e:24:31: fe:08:f1:46:3a:49:74:72:ce:7c:c2:90:8c:9a:ca:e7:55:6c: f0:91:df:98:e4:90:7c:c6:98:d7:85:33:68:7d:c9:86:92:b4: 9d:03:dd:80:88:cc:62:3d:10:5e:95:f6:21:60:c6:88:6e:2a: 28:82:f1:83:22:a3:42:aa:43:f8:14:90:61:21:bb:ad:79:1f: c8:87:69:8d:e4:10:10:9d:5b:5b:be:a1:96:a3:7c:c9:38:9b: 0d:f4:63:5c:45:71:d4:03:29:fc:b8:65:63:ec:a4:e6:0c:f9: d3:ec:45:e3:51:d7:86:e3:d1:98:b0:c6:18:a4:87:df:96:02: c5:b1:2a:d3:be:f0:f0:40:32:ff:2f:16:8b:d4:a1:1a:83:45: e0:df:92:66:0d:76:55:ed:2b:7b:cc:e0:38:77:8f:9e:8c:c3: 4d:c7:0a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5C30OD/ExW07DvUQ4jEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz MWNmMDMwHhcNMjUxMjI2MDkwMTI0WhcNMjUxMjI3MDkwMTI0WjAzMTEwLwYDVQQD EyhlMWNiZTgwZGJiN2Q2OGVkOTJmNmQ0YmY1ZjhhZTgzMjFhMTVjZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmzmqrvLeL8oPDs1wu++XIsTUgfh KIGuSbGM+/1WjzdPOoybBftpRTGrMVlKKUrqNY2orEVkt5eEjCQgcWcdy4R8UZMR x+8LVp6ZWK5aalriwg7KTePhsOmuOhOWLFORVnMrraE7Nyaao4RoprTEMcqUipPw WXlu/baOMthH3AMpuFlJYzmOmMCqrjGUnjAuZdpcWYYafMh9e5js70wQvjFScH+2 ovCfnr+tdk3adUK/b7hUPHogic+fuo4yKEYkdFJEFdkspoNYr3oFYyBziRWOuvwI y+VmbA49MRCTze1Yd/lGpPWL6W/Cat3U/pAJHNdKVxbaP7KLgS8LGWFtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHL6A27fWjtkvbUv1+K6DIaFc4tMB8GA1UdIwQY MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1 LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyRWLQDR Y72o6DmMkRC0su4Hkpt1Yo/HlLtYmuM9Ea/vKKkjse1SROVFwP+JfazodujyCsQ9 rG20z2eCZidn5Nchdpo/2DjrcFuZt5V/F64ezMs9LWeWTiQx/gjxRjpJdHLOfMKQ jJrK51Vs8JHfmOSQfMaY14UzaH3JhpK0nQPdgIjMYj0QXpX2IWDGiG4qKILxgyKj QqpD+BSQYSG7rXkfyIdpjeQQEJ1bW76hlqN8yTibDfRjXEVx1AMp/LhlY+yk5gz5 0+xF41HXhuPRmLDGGKSH35YCxbEq077w8EAy/y8Wi9ShGoNF4N+SZg12Ve0re8zg OHePnozDTccKlg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:08 2025 by rpki-client