This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier: CiDwgmTDkSl1S+wXcGWcVhrHo4Tt7BIQiUZIaUstKp4=
Subject key identifier: 57:72:63:78:99:71:32:0E:24:D0:6F:D8:F8:8F:71:DC:26:74:67:32
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer: /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial: 019B5A8893E35913DEF1F4A5C03A544AD617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number: 1A
Signing time: Fri 26 Dec 2025 12:00:58 +0000
Manifest this update: Fri 26 Dec 2025 12:00:58 +0000
Manifest next update: Sat 27 Dec 2025 12:00:58 +0000
Files and hashes: 1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: 4zRMVaDZQALP7mdkfiz9KyPN8KCYIRPngbchIHbhK/I=)
2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:88:93:e3:59:13:de:f1:f4:a5:c0:3a:54:4a:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
Validity
Not Before: Dec 26 12:00:58 2025 GMT
Not After : Dec 27 12:00:58 2025 GMT
Subject: CN=577263789971320e24d06fd8f88f71dc26746732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:f8:9c:89:7b:7a:4d:ae:04:4e:76:55:da:
11:5f:9d:a4:db:5f:8a:18:95:0c:00:31:2b:32:12:
13:58:cc:1b:42:8d:db:01:42:f1:3a:79:83:dc:c3:
16:5c:41:ad:66:ea:40:85:ba:ae:30:30:e1:00:68:
4f:f9:9c:b1:1c:be:94:5e:8f:30:52:29:91:0f:f5:
b8:65:53:5f:70:6c:3a:8e:e5:ad:6b:09:8d:14:99:
8a:93:a8:00:be:d6:d9:33:f3:ad:55:13:ef:d0:ad:
c9:6e:1e:78:de:21:e1:29:ac:40:bf:46:d6:ee:d4:
e5:d0:54:7c:e2:64:bf:d1:3a:11:c6:94:aa:c0:57:
23:ec:a8:a8:0d:8c:c2:aa:43:17:f3:f7:36:3a:f7:
4f:10:ee:66:68:9d:7d:3d:24:fd:16:21:83:05:ba:
93:2b:3d:5b:d4:d2:6a:5f:35:3d:c8:ee:d8:90:1f:
0d:ca:0b:c5:ab:e6:62:3a:04:25:06:67:19:07:8c:
a6:b2:ba:f7:0a:c9:ec:6d:59:65:b3:01:03:7f:c3:
37:8c:cf:93:6b:b3:d2:ac:ea:d4:49:ca:f7:48:df:
26:ad:80:17:47:75:5d:c1:92:2f:6f:20:d4:14:2e:
2b:88:73:ed:38:0c:0d:a3:18:5f:1c:c4:d0:08:98:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:63:78:99:71:32:0E:24:D0:6F:D8:F8:8F:71:DC:26:74:67:32
X509v3 Authority Key Identifier:
keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1c:79:1c:a8:4e:d9:e8:03:2c:28:c5:6d:3d:7d:a1:b8:8a:
b2:c5:78:b0:95:2e:22:cc:01:6f:c9:61:c6:9f:7d:2a:76:74:
a3:87:51:e0:aa:25:ac:0f:2c:1a:05:c6:5f:56:85:29:98:0b:
39:0b:15:b3:03:27:63:af:3b:fb:2b:1a:51:6e:bd:0f:44:dd:
84:48:74:33:6f:62:23:c0:74:f6:f9:f2:fb:1b:41:5d:40:c8:
7e:3f:e6:4a:7b:ab:73:11:2f:c5:46:3a:57:e0:f8:15:16:37:
66:b8:94:1e:3b:f7:84:6e:0a:d6:87:bd:67:b0:1a:42:aa:dd:
3a:c2:02:3b:c6:e2:f4:72:87:9b:17:52:25:02:16:09:aa:da:
d7:b6:a3:1f:7c:40:89:03:ab:18:99:34:80:ea:09:6a:db:f1:
1f:bf:5b:d3:53:05:17:e1:f0:03:a5:f7:9c:5a:a6:b5:cd:e2:
76:56:48:d0:4b:43:b3:0b:a4:7a:24:d5:75:79:27:00:9b:c4:
98:32:ed:ec:92:2e:a8:93:85:7b:81:f5:06:9b:53:29:3c:6b:
80:1f:89:21:1f:bd:82:1d:c5:31:42:11:d6:92:68:b2:4a:02:
9b:fc:1a:ad:b7:48:e1:49:32:20:6a:f0:8f:94:08:4d:bf:7c:
3d:aa:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:41:42 2025 by rpki-client