This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json) Hash identifier: 4QOObfT3vz1OyqewXyDEqqDx7ysrqJ9gWWC6QWbuBqs= Subject key identifier: 1C:D7:D7:6F:53:A1:21:7C:E4:E2:B3:EE:43:04:BB:75:9F:19:5A:A1 Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac Certificate serial: 019B123877508A2FA5EF659159DA0F6604DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft Manifest number: 15DC Signing time: Fri 12 Dec 2025 11:00:48 +0000 Manifest this update: Fri 12 Dec 2025 11:00:48 +0000 Manifest next update: Sat 13 Dec 2025 11:00:48 +0000 Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: zYODQ7iUfkNcRn5K8bI/Ujz3abBOIMAKSFvxXje7R5A=) 2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:77:50:8a:2f:a5:ef:65:91:59:da:0f:66:04:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac Validity Not Before: Dec 12 11:00:48 2025 GMT Not After : Dec 13 11:00:48 2025 GMT Subject: CN=1cd7d76f53a1217ce4e2b3ee4304bb759f195aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:e7:65:6b:57:1e:2f:e0:1e:75:a1:7a:ae: 03:e2:70:cd:c9:3d:9f:43:e5:c1:9e:36:2d:28:6f: ee:13:b5:5d:a1:27:40:7d:44:c6:b2:31:bf:ff:96: 2b:66:1b:45:7c:0d:ab:c4:aa:9e:b0:2f:e2:5b:4f: 0d:0b:67:c2:b0:52:16:bd:87:14:31:a3:d4:21:47: 34:6f:12:5a:0e:7a:c6:01:ac:6d:30:f3:d1:f8:8a: 97:70:58:12:2e:ef:c5:74:bb:d1:cf:cb:6e:5a:fa: df:ac:cd:51:22:c4:c0:a7:ff:d3:38:b0:62:91:ff: 56:d1:36:59:80:1e:a8:bf:2b:fe:ce:6a:90:03:02: a5:d9:3d:26:83:6a:a0:b0:85:4f:a7:07:5d:76:71: 8f:50:ed:28:f3:32:56:88:6b:48:40:7f:92:46:15: f1:89:a7:f5:ae:1f:6a:4e:ed:ec:b7:91:ac:76:bb: b7:2f:c8:f3:3e:b9:28:9a:42:f4:3f:26:1e:f5:9b: 48:4b:23:b9:5f:08:cb:6d:c8:b3:be:9f:e6:d8:fd: 28:b3:e3:2a:9d:26:0a:09:89:b2:f3:62:76:7c:7b: 17:98:0e:ed:85:b8:05:05:c0:be:d8:b1:77:d9:ed: 06:05:66:e4:10:ec:f8:b9:61:8f:d8:3c:a1:55:b1: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D7:D7:6F:53:A1:21:7C:E4:E2:B3:EE:43:04:BB:75:9F:19:5A:A1 X509v3 Authority Key Identifier: keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:84:6e:9d:c2:dc:8c:2f:00:4f:fa:00:50:14:7d:15:57:46: 3d:65:5b:d5:35:c4:26:4e:8a:7e:ec:0e:98:4c:59:c9:39:12: d7:72:dd:ec:af:4c:fa:aa:d7:55:94:79:a0:5d:02:84:de:b5: aa:6f:58:b8:b6:a6:4d:3e:9f:6f:e8:46:9a:33:38:6a:37:b4: e6:f5:ce:09:c8:b0:2e:4b:e3:e3:6d:9a:84:41:51:4c:7f:57: 9c:1e:7c:ce:1f:12:01:28:c2:4b:1c:3c:59:7a:ec:d6:82:18: e1:d9:0f:f8:76:4a:9e:1b:d6:57:24:a8:ea:5a:55:62:a3:8e: 8a:40:89:3e:cf:18:75:d3:44:71:23:d2:7d:ce:81:4b:38:c5: e6:b3:14:66:56:99:d7:08:18:5b:39:ca:26:b6:e9:53:1d:82: f7:a5:e3:c3:25:3f:eb:4c:3a:ff:48:c1:1b:ce:83:37:8e:b1: 79:d9:d7:8c:f5:49:11:e2:78:3f:af:27:5c:8e:23:ba:84:4a: 88:73:0c:e4:6a:a4:8c:7b:3a:94:43:13:01:b5:5f:63:b3:8d: 44:ee:f2:f6:ec:2c:0a:ab:74:40:3b:f3:52:82:8f:5a:c1:11: 64:28:88:60:4d:35:fa:e9:0c:46:fb:ba:bd:25:3e:54:7d:b4: ae:da:90:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOHdQii+l72WRWdoPZgTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmE5OGIyMjFhYmU0ZGQ5NTk5OWVlZjI5MmZmMGJlYTQx MjE4YWMwHhcNMjUxMjEyMTEwMDQ4WhcNMjUxMjEzMTEwMDQ4WjAzMTEwLwYDVQQD EygxY2Q3ZDc2ZjUzYTEyMTdjZTRlMmIzZWU0MzA0YmI3NTlmMTk1YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eHnZWtXHi/gHnWheq4D4nDNyT2f Q+XBnjYtKG/uE7VdoSdAfUTGsjG//5YrZhtFfA2rxKqesC/iW08NC2fCsFIWvYcU MaPUIUc0bxJaDnrGAaxtMPPR+IqXcFgSLu/FdLvRz8tuWvrfrM1RIsTAp//TOLBi kf9W0TZZgB6ovyv+zmqQAwKl2T0mg2qgsIVPpwdddnGPUO0o8zJWiGtIQH+SRhXx iaf1rh9qTu3st5Gsdru3L8jzPrkomkL0PyYe9ZtISyO5XwjLbcizvp/m2P0os+Mq nSYKCYmy82J2fHsXmA7thbgFBcC+2LF32e0GBWbkEOz4uWGP2DyhVbEObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzX129ToSF85OKz7kMEu3WfGVqhMB8GA1UdIwQY MBaAFO8qmLIhq+TdlZme7ykv8L6kEhisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQt NTZiNjViOTFhNzNjLzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQtNTZiNjViOTFhNzNj LzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIRuncLc jC8AT/oAUBR9FVdGPWVb1TXEJk6KfuwOmExZyTkS13Ld7K9M+qrXVZR5oF0ChN61 qm9YuLamTT6fb+hGmjM4aje05vXOCciwLkvj422ahEFRTH9XnB58zh8SASjCSxw8 WXrs1oIY4dkP+HZKnhvWVySo6lpVYqOOikCJPs8YddNEcSPSfc6BSzjF5rMUZlaZ 1wgYWznKJrbpUx2C96XjwyU/60w6/0jBG86DN46xednXjPVJEeJ4P68nXI4juoRK iHMM5GqkjHs6lEMTAbVfY7ONRO7y9uwsCqt0QDvzUoKPWsERZCiIYE01+ukMRvu6 vSU+VH20rtqQDw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:04:24 2025 by rpki-client