This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft File: 7VxHFPIguKxeq3Au-sEaEUJdCmk.mft (raw, json) Hash identifier: vB+8BLoWVz6Gh/xDYuVJ75wAFQERhdEcIlEUEAW88m4= Subject key identifier: 5A:E9:9A:2A:21:11:90:A3:06:55:8A:69:69:44:81:F7:34:9F:DE:D1 Authority key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69 Certificate issuer: /CN=ed5c4714f220b8ac5eab702efac11a11425d0a69 Certificate serial: 019B5977420115BB6C53CEDB8ED35CF19C2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft Manifest number: 78 Signing time: Fri 26 Dec 2025 07:02:26 +0000 Manifest this update: Fri 26 Dec 2025 07:02:26 +0000 Manifest next update: Sat 27 Dec 2025 07:02:26 +0000 Files and hashes: 1: 7VxHFPIguKxeq3Au-sEaEUJdCmk.crl (hash: sOCUfohN6jHDEVPPpQb9hWBmMWW1x1CeXLwvh6MmDGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:42:01:15:bb:6c:53:ce:db:8e:d3:5c:f1:9c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69 Validity Not Before: Dec 26 07:02:26 2025 GMT Not After : Dec 27 07:02:26 2025 GMT Subject: CN=5ae99a2a211190a306558a69694481f7349fded1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:03:90:65:b8:4d:c4:8a:f8:df:29:62:f8: 4f:b7:87:71:88:73:53:85:1f:78:5d:b4:25:24:6b: cb:7e:92:98:25:6c:d9:24:19:75:79:89:c0:a4:44: 73:71:cf:7e:14:c1:8b:30:92:76:f3:87:f8:89:37: 56:3e:1c:fc:bd:b4:3a:f4:0e:91:a6:07:64:8c:77: 18:10:a5:bf:79:31:4b:36:eb:dd:1e:41:cc:5f:ab: f0:69:eb:89:8d:32:fd:17:ba:50:12:3a:d9:b9:00: 88:44:7a:6f:a7:e4:c0:5c:86:db:d9:e5:c4:14:d5: 0d:a9:78:9e:22:67:86:64:85:5f:a4:f7:6a:68:aa: e6:3e:a2:83:a4:31:e3:fa:ae:ba:8e:2a:b8:19:47: 1d:28:19:d5:f0:de:b8:05:79:4f:1b:a4:df:3f:26: 90:13:10:39:8f:94:df:42:10:49:0b:49:54:02:82: c1:6b:26:80:7e:e4:dd:23:19:98:5e:e1:01:d0:82: cd:7f:8a:83:7f:d5:f3:65:66:72:8c:77:e3:91:f1: e5:5b:7a:fa:1a:15:da:37:dd:87:3b:28:05:ec:1b: c1:e0:78:ee:22:62:57:8c:64:0a:64:27:e1:d6:c8: 7d:52:35:2d:82:a6:7a:e8:35:fe:a3:c2:a7:c1:33: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:9A:2A:21:11:90:A3:06:55:8A:69:69:44:81:F7:34:9F:DE:D1 X509v3 Authority Key Identifier: keyid:ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:7f:83:a0:e6:4d:b0:5d:29:29:06:9e:08:5a:51:2d:48: f6:48:a5:c0:9b:0f:c7:d7:5c:21:45:dd:f3:1c:24:b9:81:e2: 26:76:a3:a3:6d:b2:8e:41:e3:39:10:19:6a:a6:c4:92:8a:00: 20:cb:53:b8:df:00:36:53:68:3a:f4:21:5b:77:f9:df:83:ce: 11:e6:8b:aa:e1:58:f0:d6:58:34:0a:2f:41:8e:cd:a9:bb:1e: 92:6e:98:e6:3c:7d:99:4c:87:1f:75:f1:77:72:bb:a5:be:f8: da:e3:03:e8:36:5f:f8:fa:a8:c2:6d:f4:31:9f:bc:06:00:0d: ab:32:25:68:4a:b9:28:79:f9:d0:82:65:76:ea:1f:9f:18:65: 8c:4b:ea:7f:ed:5c:c3:f5:63:24:26:60:b7:0b:db:59:7b:c5: 37:0d:80:b5:48:32:e7:02:4f:92:ba:8d:7e:49:a2:c9:c0:46: 49:14:08:2e:04:67:67:ad:6d:9f:53:38:12:a6:5a:d2:74:71: 23:e7:bf:10:75:24:66:29:2b:b6:84:fa:87:95:43:f4:4a:d3: 8d:54:2f:fc:e3:18:a6:92:90:61:39:cb:a1:70:c5:d8:e7:68: b0:1c:52:a1:36:8f:26:8a:b4:97:bb:d3:df:53:d2:07:ff:d0: 5e:8d:9e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0IBFbtsU87bjtNc8ZwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNWM0NzE0ZjIyMGI4YWM1ZWFiNzAyZWZhYzExYTExNDI1 ZDBhNjkwHhcNMjUxMjI2MDcwMjI2WhcNMjUxMjI3MDcwMjI2WjAzMTEwLwYDVQQD Eyg1YWU5OWEyYTIxMTE5MGEzMDY1NThhNjk2OTQ0ODFmNzM0OWZkZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSwDkGW4TcSK+N8pYvhPt4dxiHNT hR94XbQlJGvLfpKYJWzZJBl1eYnApERzcc9+FMGLMJJ284f4iTdWPhz8vbQ69A6R pgdkjHcYEKW/eTFLNuvdHkHMX6vwaeuJjTL9F7pQEjrZuQCIRHpvp+TAXIbb2eXE FNUNqXieImeGZIVfpPdqaKrmPqKDpDHj+q66jiq4GUcdKBnV8N64BXlPG6TfPyaQ ExA5j5TfQhBJC0lUAoLBayaAfuTdIxmYXuEB0ILNf4qDf9XzZWZyjHfjkfHlW3r6 GhXaN92HOygF7BvB4HjuImJXjGQKZCfh1sh9UjUtgqZ66DX+o8KnwTOI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrpmiohEZCjBlWKaWlEgfc0n97RMB8GA1UdIwQY MBaAFO1cRxTyILisXqtwLvrBGhFCXQppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iOThlOTAtNzk1ZC00MmM5LTk2OWEt OWFiNjAxMjNlNjdmLzEvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iOThlOTAtNzk1ZC00MmM5LTk2OWEtOWFiNjAxMjNlNjdm LzEvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXh/g6Dm TbBdKSkGnghaUS1I9kilwJsPx9dcIUXd8xwkuYHiJnajo22yjkHjORAZaqbEkooA IMtTuN8ANlNoOvQhW3f534POEeaLquFY8NZYNAovQY7Nqbsekm6Y5jx9mUyHH3Xx d3K7pb742uMD6DZf+Pqowm30MZ+8BgANqzIlaEq5KHn50IJlduofnxhljEvqf+1c w/VjJCZgtwvbWXvFNw2AtUgy5wJPkrqNfkmiycBGSRQILgRnZ61tn1M4EqZa0nRx I+e/EHUkZikrtoT6h5VD9ErTjVQv/OMYppKQYTnLoXDF2OdosBxSoTaPJoq0l7vT 31PSB//QXo2eKg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client