This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft File: e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json) Hash identifier: TUoMAhU7zmJdVPuaeoZij+3oHIxEX5ERZOMXWnVCFhk= Subject key identifier: B2:35:CD:28:21:A0:0F:7C:DC:90:43:16:B7:15:5A:B1:CB:E8:F8:2B Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52 Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652 Certificate serial: 019B1F8781243FFFFC427B41B31DA184F2B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 01:02:12 +0000 Manifest this update: Mon 15 Dec 2025 01:02:12 +0000 Manifest next update: Tue 16 Dec 2025 01:02:12 +0000 Files and hashes: 1: TTLplKYMw3ALMHBQOquflMCv_74.roa (hash: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=) 2: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: X8C3IYBWGl6rIhLTsTNsKy5GGMcV+a37wchRlULq0ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:81:24:3f:ff:fc:42:7b:41:b3:1d:a1:84:f2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652 Validity Not Before: Dec 15 01:02:12 2025 GMT Not After : Dec 16 01:02:12 2025 GMT Subject: CN=b235cd2821a00f7cdc904316b7155ab1cbe8f82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:ce:b5:f8:f3:ac:6d:0e:b8:de:1b:be:f0: 31:ad:d5:d2:a1:a2:9a:90:3f:78:4c:a4:32:27:a6: c4:1c:b8:6a:eb:d5:7b:45:e6:b8:8a:63:56:88:87: 5e:dc:a6:bc:94:09:56:18:b5:0c:8e:11:e8:17:63: 4c:a9:15:26:d7:67:de:86:b7:fb:fe:55:ca:6f:3c: 45:9f:8f:1c:aa:cf:ab:7c:d6:28:ad:08:1b:a6:67: 82:05:0f:06:59:ac:1e:33:51:3e:46:8d:2d:3c:c7: d1:64:ba:52:cb:f6:f2:ba:34:05:39:63:1d:b7:6d: 10:26:b2:c7:26:77:d7:a9:f4:ce:a3:a6:8f:a8:9e: 5e:10:bc:ac:75:6b:35:b7:33:bd:e6:35:e3:8c:ea: 3f:6a:6c:67:f9:f8:2b:ae:94:a6:9c:37:be:a0:cf: 5b:58:4f:21:3a:bf:f5:37:59:49:d1:13:ff:98:71: 0c:e5:a1:3f:fc:74:28:48:19:e2:fa:b0:87:3b:b4: 61:f5:46:ce:e8:73:59:e0:dc:c0:34:ff:ec:10:26: dd:9f:bc:75:c8:22:f9:6a:9c:e3:7d:6f:95:76:55: ca:44:b5:71:3b:eb:50:af:9a:48:51:61:b0:1a:bb: c4:68:87:b8:b1:ff:f2:61:ff:d2:6d:2a:4d:7f:b5: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:CD:28:21:A0:0F:7C:DC:90:43:16:B7:15:5A:B1:CB:E8:F8:2B X509v3 Authority Key Identifier: keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e2:e7:e6:a3:90:0a:80:94:75:60:48:0e:39:ef:57:1d:3f: 47:40:89:50:87:06:50:f1:52:79:de:61:b4:11:86:07:dd:f6: b8:28:34:7d:4e:11:05:cb:09:85:8d:49:eb:8c:d4:04:e4:3d: 44:c5:30:9b:b5:ef:ae:29:2d:84:f9:44:0a:31:69:ce:16:d7: 33:a2:a1:84:be:8a:1e:cc:bd:53:db:a4:0a:d8:35:d4:2b:8c: a6:3e:10:db:4b:d3:20:47:c5:02:89:0a:64:6e:f6:37:b8:93: 57:30:db:a6:31:a8:bf:c7:41:da:2c:d9:f1:85:31:00:72:50: b2:5f:4c:8a:7b:6d:33:01:07:9a:28:47:fe:6b:c7:7e:6c:85: 69:c0:37:5d:63:8e:a3:62:b6:4a:6e:9d:db:fa:07:55:ed:fc: 09:1c:b4:0c:a6:84:71:ba:e3:06:dd:30:9d:61:ce:76:56:74: be:f0:ff:81:a4:a0:34:5c:e3:39:bd:0c:ba:30:bd:ab:6a:3d: b0:e7:7b:1d:df:2f:60:b1:c5:c0:9d:47:4d:9f:84:05:d3:05: 90:a3:73:39:ba:f5:9e:9c:b7:9f:a8:3e:12:60:7d:ff:00:ef: ca:1c:a2:e2:5b:95:38:6e:27:15:df:69:1f:dd:57:2c:a4:67: fa:86:b1:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh4EkP//8QntBsx2hhPK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZWVmNWUxNmMxNDY3ZGE3YTAyZjE5MjM3NjUzYWU0MmIx MDk2NTIwHhcNMjUxMjE1MDEwMjEyWhcNMjUxMjE2MDEwMjEyWjAzMTEwLwYDVQQD EyhiMjM1Y2QyODIxYTAwZjdjZGM5MDQzMTZiNzE1NWFiMWNiZThmODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHTOtfjzrG0OuN4bvvAxrdXSoaKa kD94TKQyJ6bEHLhq69V7Rea4imNWiIde3Ka8lAlWGLUMjhHoF2NMqRUm12fehrf7 /lXKbzxFn48cqs+rfNYorQgbpmeCBQ8GWaweM1E+Ro0tPMfRZLpSy/byujQFOWMd t20QJrLHJnfXqfTOo6aPqJ5eELysdWs1tzO95jXjjOo/amxn+fgrrpSmnDe+oM9b WE8hOr/1N1lJ0RP/mHEM5aE//HQoSBni+rCHO7Rh9UbO6HNZ4NzANP/sECbdn7x1 yCL5apzjfW+VdlXKRLVxO+tQr5pIUWGwGrvEaIe4sf/yYf/SbSpNf7UzkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI1zSghoA983JBDFrcVWrHL6PgrMB8GA1UdIwQY MBaAFHvu9eFsFGfaegLxkjdlOuQrEJZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYt MTdhNjliNzAyZTFiLzEvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYtMTdhNjliNzAyZTFi LzEvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOLn5qOQ CoCUdWBIDjnvVx0/R0CJUIcGUPFSed5htBGGB932uCg0fU4RBcsJhY1J64zUBOQ9 RMUwm7XvrikthPlECjFpzhbXM6KhhL6KHsy9U9ukCtg11CuMpj4Q20vTIEfFAokK ZG72N7iTVzDbpjGov8dB2izZ8YUxAHJQsl9MinttMwEHmihH/mvHfmyFacA3XWOO o2K2Sm6d2/oHVe38CRy0DKaEcbrjBt0wnWHOdlZ0vvD/gaSgNFzjOb0MujC9q2o9 sOd7Hd8vYLHFwJ1HTZ+EBdMFkKNzObr1npy3n6g+EmB9/wDvyhyi4luVOG4nFd9p H91XLKRn+oax8A== -----END CERTIFICATE-----Generated at Mon Dec 15 12:12:13 2025 by rpki-client