This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json) Hash identifier: +KsN9vumIt6upd7IFncsV830ITCiCHHG9F+hRvH8A+w= Subject key identifier: 26:29:2F:7E:7B:70:4C:F2:35:49:76:46:1D:A6:BD:32:6E:91:AA:6E Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34 Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634 Certificate serial: 019B21E2CA90E3A0C42412AC6DDB92CF405D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 12:01:09 +0000 Manifest this update: Mon 15 Dec 2025 12:01:09 +0000 Manifest next update: Tue 16 Dec 2025 12:01:09 +0000 Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: lbzRfmJep0yqSByV4dSL93Wyfq34U1Xwno3URjQwhmM=) 2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:ca:90:e3:a0:c4:24:12:ac:6d:db:92:cf:40:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634 Validity Not Before: Dec 15 12:01:09 2025 GMT Not After : Dec 16 12:01:09 2025 GMT Subject: CN=26292f7e7b704cf2354976461da6bd326e91aa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:f2:c3:71:26:62:d2:c0:33:2d:f7:67:87: 2c:27:a9:d7:6c:34:cc:40:48:92:f0:e4:af:e8:55: 23:f6:11:1b:d7:b1:90:b9:f1:8d:16:c8:23:38:f7: a6:4f:5a:df:2a:d7:56:1f:36:13:a6:01:3d:8b:4e: 20:02:af:95:3a:8a:8c:45:cd:3f:31:8d:6f:9a:5c: fe:c1:48:14:91:65:22:52:35:e5:85:a5:cf:49:7b: 3b:33:10:ab:31:4f:95:ee:b0:4e:9b:e7:9d:ba:0d: 80:9a:0b:72:41:1e:e2:0a:aa:63:de:dd:a5:f0:2b: f6:14:4c:65:17:49:77:43:11:09:8e:a4:63:2a:1a: 39:e9:28:89:7c:63:a7:ce:05:62:ce:d6:b4:bc:53: 97:3a:ba:a7:c9:22:20:4e:40:58:07:f7:1e:f4:74: 82:01:75:9a:b9:10:27:93:12:dc:81:02:6a:65:2d: df:04:31:d2:53:9c:27:09:7d:46:88:5c:62:5c:ea: ca:ab:02:ce:07:64:f1:d1:6f:86:cd:3c:93:ed:37: f8:6e:8b:83:e7:35:2b:67:79:6b:14:95:e2:c5:29: ef:17:6f:ea:1f:32:24:75:b1:6d:bf:cd:08:21:b3: 28:3b:3c:f2:1d:5f:d9:ce:84:17:55:ce:48:b4:b9: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:2F:7E:7B:70:4C:F2:35:49:76:46:1D:A6:BD:32:6E:91:AA:6E X509v3 Authority Key Identifier: keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1e:85:70:2c:d8:59:94:5e:1e:16:a6:e9:10:38:b8:ad:91: 70:d8:13:cb:cd:7c:c4:6f:1e:3f:93:ba:c9:c9:98:dd:5c:76: 1e:41:d8:fe:c9:2c:ed:1d:1d:9b:ba:de:57:23:b6:37:d9:e3: 3d:bc:01:76:20:45:55:a9:d3:cd:1f:4d:23:a5:6d:29:54:5c: bf:60:cc:7a:8f:2e:de:68:d7:e0:6d:3a:33:76:dd:34:54:21: 8a:b3:ac:41:3f:1b:04:7e:ec:96:e4:d5:75:83:05:8e:da:0b: 9b:f0:f0:87:af:ea:4c:e4:6f:5c:b8:ae:3d:71:a2:11:e5:26: 0b:68:94:d0:63:70:2d:7c:8a:af:2a:49:73:cc:5d:9e:dc:f8: 7d:21:13:27:24:39:42:72:37:a2:65:57:6d:85:fb:41:c0:4b: 44:ac:4c:70:58:2e:1b:58:69:99:35:41:b4:49:8b:c6:a2:7f: d5:08:b5:32:5f:51:3d:bb:08:3b:34:c5:22:23:16:69:2b:44: ff:5f:9f:c9:6a:aa:fd:4f:10:a9:cf:a8:e0:27:b8:f2:cb:0f: 56:ca:53:5e:b5:1a:52:b6:01:ea:d6:bc:df:64:a7:ca:79:c7: 7c:49:81:b8:d3:8f:12:b8:9e:49:0a:c3:91:96:92:bb:36:30: d8:01:f8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4sqQ46DEJBKsbduSz0BdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMmM0ODdiNmI2YmRkYTIyMTc5MDcyZDkyYThmMDFlOGU3 MzY2MzQwHhcNMjUxMjE1MTIwMTA5WhcNMjUxMjE2MTIwMTA5WjAzMTEwLwYDVQQD EygyNjI5MmY3ZTdiNzA0Y2YyMzU0OTc2NDYxZGE2YmQzMjZlOTFhYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+zyw3EmYtLAMy33Z4csJ6nXbDTM QEiS8OSv6FUj9hEb17GQufGNFsgjOPemT1rfKtdWHzYTpgE9i04gAq+VOoqMRc0/ MY1vmlz+wUgUkWUiUjXlhaXPSXs7MxCrMU+V7rBOm+edug2AmgtyQR7iCqpj3t2l 8Cv2FExlF0l3QxEJjqRjKho56SiJfGOnzgVizta0vFOXOrqnySIgTkBYB/ce9HSC AXWauRAnkxLcgQJqZS3fBDHSU5wnCX1GiFxiXOrKqwLOB2Tx0W+GzTyT7Tf4bouD 5zUrZ3lrFJXixSnvF2/qHzIkdbFtv80IIbMoOzzyHV/ZzoQXVc5ItLmIYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYpL357cEzyNUl2Rh2mvTJukapuMB8GA1UdIwQY MBaAFO4sSHtra92iIXkHLZKo8B6Oc2Y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmIt NGI5ODNmMWI4NGEyLzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmItNGI5ODNmMWI4NGEy LzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx6FcCzY WZReHham6RA4uK2RcNgTy818xG8eP5O6ycmY3Vx2HkHY/sks7R0dm7reVyO2N9nj PbwBdiBFVanTzR9NI6VtKVRcv2DMeo8u3mjX4G06M3bdNFQhirOsQT8bBH7sluTV dYMFjtoLm/Dwh6/qTORvXLiuPXGiEeUmC2iU0GNwLXyKrypJc8xdntz4fSETJyQ5 QnI3omVXbYX7QcBLRKxMcFguG1hpmTVBtEmLxqJ/1Qi1Ml9RPbsIOzTFIiMWaStE /1+fyWqq/U8Qqc+o4Ce48ssPVspTXrUaUrYB6ta832SnynnHfEmBuNOPErieSQrD kZaSuzYw2AH4Qw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:52 2025 by rpki-client