This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: Lu3/5+LhkGLBb6jnrLT0RqNHY8try4famzxLxxt52/Q= Subject key identifier: CD:BD:3E:92:63:6A:B8:43:61:72:0D:31:CB:78:61:70:9C:FA:F5:6F Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 751063632E7E49E6AAE4D67B4EBE70F2FD019F0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 01BB Signing time: Thu 18 Dec 2025 22:17:33 +0000 Manifest this update: Thu 18 Dec 2025 22:12:33 +0000 Manifest next update: Sat 20 Dec 2025 01:22:33 +0000 Files and hashes: 1: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 2: 3134312e39382e34332e302f32342d3234203d3e2039333034.roa (hash: EUrjF0PmxgD6k8/uJk6czg5XM/CvfFtfbWFt5avYo9A=) 3: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 4: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: 0ZLyapPHHoncQ42xeWapxNM/yollW4s/UKKsJp0kiX8=) 5: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:10:63:63:2e:7e:49:e6:aa:e4:d6:7b:4e:be:70:f2:fd:01:9f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 18 22:12:33 2025 GMT Not After : Dec 20 01:22:33 2025 GMT Subject: CN=CDBD3E92636AB84361720D31CB7861709CFAF56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:8d:a2:97:24:d9:bf:9d:4e:8e:8e:ad:d2: ce:c9:9c:71:b7:3e:4d:82:0d:62:c7:9e:95:74:c4: 99:5f:bd:ae:2b:cc:c4:19:e5:a9:20:64:b4:79:1b: 19:ac:df:09:ae:43:6b:12:67:50:a2:c6:ab:96:16: 82:02:1d:b5:68:14:ca:df:49:10:cf:bf:95:07:b9: 4c:bd:be:42:ae:79:0f:8c:7d:40:76:d5:75:aa:23: 4f:65:9d:df:e3:5f:72:d2:1e:d6:f9:14:6d:6a:ba: 87:c3:a3:1e:b5:04:ef:a2:f7:f5:9c:78:a4:38:24: 3d:5b:02:8d:68:d0:49:38:33:7c:9a:e7:1f:38:a3: cc:62:ab:38:0e:b0:32:8e:1a:f8:4f:00:e2:ec:a2: a1:55:da:55:5a:74:31:24:4d:87:85:96:71:7a:e2: f4:e9:26:94:62:94:ef:1c:a6:a2:d8:8b:e3:76:b8: 04:92:bb:ca:54:57:6c:a0:7e:d6:95:bb:2e:47:63: 39:44:56:06:9f:16:4c:30:f0:d7:89:95:59:06:b2: 3e:e7:de:f9:35:2b:f0:0e:34:01:ba:eb:c7:25:17: a1:10:9d:62:f8:9b:c6:47:b9:bc:c8:f8:64:3f:e1: 7e:0d:54:5b:1a:1b:0d:bf:28:10:ee:03:43:db:54: 52:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BD:3E:92:63:6A:B8:43:61:72:0D:31:CB:78:61:70:9C:FA:F5:6F X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:8a:a5:c2:a7:94:f7:fa:42:57:c4:0a:8a:42:38:26:d3:1e: 34:b9:87:db:23:53:16:99:8e:45:35:6e:75:e1:f8:e9:78:49: 83:7c:d7:1d:e6:48:0a:40:03:71:e5:99:8f:1a:21:da:b3:13: 8a:b9:66:c2:cb:e3:37:d1:7c:5f:9f:c6:ae:47:c1:d7:d4:7d: 46:57:fb:a8:41:23:f5:4d:fb:17:3b:e2:f3:af:36:54:32:a9: 5d:d1:e9:98:c9:7d:d8:bf:30:9d:57:32:d7:cf:7f:e0:32:0b: 18:cc:e2:3d:46:99:44:d5:48:34:6b:3e:ae:1b:be:3c:d9:88: c1:7b:81:5f:ab:43:7a:fa:30:a2:bf:8e:49:31:f0:a9:a4:d3: de:69:e2:27:5b:25:aa:e8:b3:4f:59:f7:50:f3:b4:9a:1f:02: a0:84:6d:57:78:36:e5:f1:f8:14:14:a3:58:56:1c:1d:3c:f7: e9:ff:c9:c2:90:e7:6d:50:b7:16:86:cd:ec:22:c8:4e:33:be: 17:de:92:b0:8a:a2:40:b7:bb:b7:ca:5a:76:9e:22:94:f1:8c: 9e:42:17:fa:dc:cb:1a:08:fe:d0:6f:7e:62:6f:7d:cc:59:c6: 0f:1a:ac:31:fb:61:5c:90:7f:5c:c1:d7:56:b3:ac:9c:82:e1: c8:9b:29:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdRBjYy5+Seaq5NZ7Tr5w8v0Bnw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTgyMjEyMzNaFw0yNTEyMjAwMTIyMzNaMDMxMTAvBgNV BAMTKENEQkQzRTkyNjM2QUI4NDM2MTcyMEQzMUNCNzg2MTcwOUNGQUY1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kY2ilyTZv51Ojo6t0s7JnHG3 Pk2CDWLHnpV0xJlfva4rzMQZ5akgZLR5Gxms3wmuQ2sSZ1CixquWFoICHbVoFMrf SRDPv5UHuUy9vkKueQ+MfUB21XWqI09lnd/jX3LSHtb5FG1quofDox61BO+i9/Wc eKQ4JD1bAo1o0Ek4M3ya5x84o8xiqzgOsDKOGvhPAOLsoqFV2lVadDEkTYeFlnF6 4vTpJpRilO8cpqLYi+N2uASSu8pUV2ygftaVuy5HYzlEVgafFkww8NeJlVkGsj7n 3vk1K/AONAG668clF6EQnWL4m8ZHubzI+GQ/4X4NVFsaGw2/KBDuA0PbVFKvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzb0+kmNquENhcg0xy3hhcJz69W8wHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4qlwqeU9/pCV8QKikI4 JtMeNLmH2yNTFpmORTVudeH46XhJg3zXHeZICkADceWZjxoh2rMTirlmwsvjN9F8 X5/GrkfB19R9Rlf7qEEj9U37Fzvi8682VDKpXdHpmMl92L8wnVcy189/4DILGMzi PUaZRNVINGs+rhu+PNmIwXuBX6tDevowor+OSTHwqaTT3mniJ1slquizT1n3UPO0 mh8CoIRtV3g25fH4FBSjWFYcHTz36f/JwpDnbVC3FobN7CLITjO+F96SsIqiQLe7 t8padp4ilPGMnkIX+tzLGgj+0G9+Ym99zFnGDxqsMfthXJB/XMHXVrOsnILhyJsp kQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:09:57 2025 by rpki-client