This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json) Hash identifier: OV3UmyGsAp36Lysu0V/2e199jbBwm6KIIJ7nWKJeX7k= Subject key identifier: 2C:81:98:24:3A:33:55:3A:F8:78:F4:B3:BB:3D:4B:EC:FC:35:00:D7 Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Certificate serial: 019B5A51C02AB0EFDC68A1DB86AA50282439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft Manifest number: 0F6C Signing time: Fri 26 Dec 2025 11:01:05 +0000 Manifest this update: Fri 26 Dec 2025 11:01:05 +0000 Manifest next update: Sat 27 Dec 2025 11:01:05 +0000 Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: tfHIqX4r2WfSBZPr4jlhh6eaOecTcpREVb1aPz/0E8g=) 2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c0:2a:b0:ef:dc:68:a1:db:86:aa:50:28:24:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Validity Not Before: Dec 26 11:01:05 2025 GMT Not After : Dec 27 11:01:05 2025 GMT Subject: CN=2c8198243a33553af878f4b3bb3d4becfc3500d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:4d:c7:c6:71:9a:6d:25:2a:84:ce:57:af: 0c:23:fd:94:20:c2:96:b0:c7:2b:1f:72:04:61:7f: 25:3f:98:94:d8:84:d2:3c:e9:53:e6:db:dc:45:aa: 34:8f:a7:22:25:7f:bd:a7:bb:07:a1:15:81:ae:dd: b2:d2:41:f5:57:f7:9f:97:96:d6:0d:49:32:e8:2d: 87:b2:2d:87:99:fb:46:4c:e6:b8:cb:da:b2:4d:93: 5f:c5:04:87:a9:51:1d:4f:ec:13:eb:2a:51:39:ce: 37:f7:1d:b1:04:f7:06:0b:a7:81:63:c6:92:4d:74: b0:e3:24:0c:10:b2:aa:ff:7b:bb:1e:02:dc:39:09: e2:e4:18:68:7b:78:28:6f:0e:34:29:23:85:c8:67: 28:2e:36:8f:92:c5:60:ee:ad:c6:bb:81:d7:6a:3a: da:c9:ef:3c:fb:29:e7:54:45:75:ff:77:7b:a2:38: 1b:e4:21:34:be:57:4c:d7:3a:6f:fe:54:8c:8a:41: ee:86:1c:a6:f7:3c:d2:0b:90:98:d7:ee:37:bd:05: 22:06:20:62:9c:f6:18:2f:df:55:e9:2b:8a:60:65: 35:a2:88:83:5e:ce:a7:32:18:95:e6:10:37:61:79: cf:a7:42:fb:5d:3e:e9:d9:22:9e:fc:74:3a:10:80: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:81:98:24:3A:33:55:3A:F8:78:F4:B3:BB:3D:4B:EC:FC:35:00:D7 X509v3 Authority Key Identifier: keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5a:fc:d0:c3:3a:b7:58:86:c4:92:b8:79:37:35:16:90:96: 36:7c:96:84:fc:f5:8d:be:b3:a0:3c:fe:73:52:65:47:48:66: 63:11:7f:5c:bc:a1:8b:a4:a9:63:87:81:2b:61:e9:73:5e:18: 86:78:75:cb:d1:e7:f8:14:4e:21:22:75:d1:f1:14:28:c5:a5: aa:49:f5:13:8c:89:06:31:c2:be:79:34:20:51:6b:3d:ba:a7: e4:f7:49:9e:c5:65:c0:c9:45:83:71:30:d3:8a:f3:f1:b8:84: f3:91:c4:93:de:8a:aa:ea:72:fd:1c:14:6a:b7:d3:06:73:4c: 32:e7:38:f3:00:bd:bb:34:f0:e1:3d:e8:2a:aa:9e:05:49:78: 24:2f:11:4e:47:5d:05:19:9f:dc:39:c4:ab:7f:21:af:4f:1b: d9:21:e2:bd:d5:00:c6:0f:aa:cd:6c:14:db:b1:b9:67:b0:dc: 53:91:35:92:95:57:82:7b:0d:ac:6a:c0:3b:38:3f:9d:2a:59: 1b:e1:89:13:34:59:64:b9:25:a1:fe:ba:8b:61:a8:4a:31:23: a6:cd:b7:79:96:cd:7a:ec:53:1f:fe:e5:11:40:a7:4c:7e:af: 40:0b:cf:10:f4:d4:6e:e8:02:cf:26:04:e5:4c:88:85:c1:f0: 19:50:2e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcAqsO/caKHbhqpQKCQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx ODFhNGMwHhcNMjUxMjI2MTEwMTA1WhcNMjUxMjI3MTEwMTA1WjAzMTEwLwYDVQQD EygyYzgxOTgyNDNhMzM1NTNhZjg3OGY0YjNiYjNkNGJlY2ZjMzUwMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonRNx8Zxmm0lKoTOV68MI/2UIMKW sMcrH3IEYX8lP5iU2ITSPOlT5tvcRao0j6ciJX+9p7sHoRWBrt2y0kH1V/efl5bW DUky6C2Hsi2HmftGTOa4y9qyTZNfxQSHqVEdT+wT6ypROc439x2xBPcGC6eBY8aS TXSw4yQMELKq/3u7HgLcOQni5Bhoe3gobw40KSOFyGcoLjaPksVg7q3Gu4HXajra ye88+ynnVEV1/3d7ojgb5CE0vldM1zpv/lSMikHuhhym9zzSC5CY1+43vQUiBiBi nPYYL99V6SuKYGU1ooiDXs6nMhiV5hA3YXnPp0L7XT7p2SKe/HQ6EICmVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyBmCQ6M1U6+Hj0s7s9S+z8NQDXMB8GA1UdIwQY MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1r80MM6 t1iGxJK4eTc1FpCWNnyWhPz1jb6zoDz+c1JlR0hmYxF/XLyhi6SpY4eBK2Hpc14Y hnh1y9Hn+BROISJ10fEUKMWlqkn1E4yJBjHCvnk0IFFrPbqn5PdJnsVlwMlFg3Ew 04rz8biE85HEk96Kqupy/RwUarfTBnNMMuc48wC9uzTw4T3oKqqeBUl4JC8RTkdd BRmf3DnEq38hr08b2SHivdUAxg+qzWwU27G5Z7DcU5E1kpVXgnsNrGrAOzg/nSpZ G+GJEzRZZLklof66i2GoSjEjps23eZbNeuxTH/7lEUCnTH6vQAvPEPTUbugCzyYE 5UyIhcHwGVAuVw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:52 2025 by rpki-client