This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json) Hash identifier: X7gmeeTkZNm5S4sia9raKJ0Ih/oJkq27hB6y+vYtkm0= Subject key identifier: 71:85:22:16:BD:47:63:74:55:70:DD:3C:DD:26:88:75:2A:4F:AC:9A Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd Certificate serial: 019B30E84FDC68FCDADC6D2E854F44F693AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 10:01:29 +0000 Manifest this update: Thu 18 Dec 2025 10:01:29 +0000 Manifest next update: Fri 19 Dec 2025 10:01:29 +0000 Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: rw1H8ZOkmwOYZYajb1RrPNa9q9yMXifL6l7jOblDmqU=) 2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:4f:dc:68:fc:da:dc:6d:2e:85:4f:44:f6:93:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd Validity Not Before: Dec 18 10:01:29 2025 GMT Not After : Dec 19 10:01:29 2025 GMT Subject: CN=71852216bd4763745570dd3cdd2688752a4fac9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:80:ea:ae:21:46:8a:6d:3f:6f:da:de:bb: ef:90:d0:34:8f:39:40:f8:52:04:8c:5a:20:40:df: b7:07:a4:e7:a0:5f:69:a7:fe:35:54:97:5a:cf:52: fe:30:7d:75:40:f1:e5:b3:71:a7:fb:12:aa:eb:d0: 80:22:b5:17:4c:04:ca:9f:45:89:d6:fd:76:2f:5a: e9:ab:99:72:f5:ec:2d:fa:f2:bf:75:4e:68:ef:30: be:42:8c:f4:cc:6b:22:d9:3b:04:d5:22:60:db:d9: be:1c:73:dc:e8:51:38:71:9f:90:01:9c:8d:18:9c: 5b:36:4b:80:4f:0c:ed:14:64:6f:4e:04:48:2d:2e: 38:8e:4b:be:44:88:5a:63:90:7c:ef:73:18:2b:45: a8:98:e9:fe:c2:0c:60:ee:6a:70:0f:34:78:ee:3e: 87:29:8e:b4:7c:21:91:34:ed:bc:ba:9d:50:66:0a: 85:ca:77:8b:7e:4f:d5:16:cb:bf:04:07:50:6a:44: af:c7:6c:27:45:fa:f9:12:fc:b8:15:86:e9:37:d0: 44:48:97:35:c2:1a:5f:e5:a9:7f:47:13:6a:47:1e: 72:6d:0d:58:d4:44:1a:23:f2:0e:36:74:ea:bf:1f: 46:1d:4f:fd:75:f5:b2:87:14:2c:21:17:3f:aa:85: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:85:22:16:BD:47:63:74:55:70:DD:3C:DD:26:88:75:2A:4F:AC:9A X509v3 Authority Key Identifier: keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4e:2b:ec:e4:23:2f:bc:2c:96:e2:cc:14:e3:64:f7:a6:41: 78:47:18:d6:50:d9:73:ad:4b:95:9c:ef:96:b7:41:c9:fc:7f: 58:e1:5c:6f:95:68:e6:7e:91:8a:90:0b:f5:4d:24:69:6a:24: aa:86:86:7d:27:97:7f:d9:c5:4b:42:4d:00:8e:37:37:de:55: a9:b1:34:5b:44:8a:54:7e:92:1b:fe:0e:02:f9:e6:0c:e4:50: 78:57:f0:be:f1:ed:31:b0:58:8b:94:bc:88:57:b7:1e:7f:b0: 74:c4:39:23:0d:50:e5:c6:67:f0:dc:00:86:24:e9:73:9f:8a: de:73:76:a0:97:2c:46:ce:a9:98:b8:51:bc:0e:04:e7:22:52: 2f:a2:20:ff:64:2b:a7:cf:0c:cb:85:50:22:a7:4c:9b:77:4b: 12:2d:c9:95:98:ab:47:d8:d1:31:9b:dc:22:2e:e1:24:c3:44: 6a:14:77:08:12:a5:25:05:01:18:b6:e2:96:84:b5:84:e5:06: db:06:6e:fa:bb:24:d9:43:a5:07:29:6c:1d:07:66:7f:26:c7: fc:5a:56:4c:bf:75:6c:f6:ec:c9:8d:41:68:59:ee:52:93:fc: ef:50:1c:9f:b3:be:63:61:73:eb:85:48:ba:b0:35:b6:eb:a3: 29:b3:fa:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6E/caPza3G0uhU9E9pOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMzFhMDU0ZmM5ZmI0YjE0N2U4YTk4YmRhN2U3MWM4MWFm MGJjZmQwHhcNMjUxMjE4MTAwMTI5WhcNMjUxMjE5MTAwMTI5WjAzMTEwLwYDVQQD Eyg3MTg1MjIxNmJkNDc2Mzc0NTU3MGRkM2NkZDI2ODg3NTJhNGZhYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34+A6q4hRoptP2/a3rvvkNA0jzlA +FIEjFogQN+3B6TnoF9pp/41VJdaz1L+MH11QPHls3Gn+xKq69CAIrUXTATKn0WJ 1v12L1rpq5ly9ewt+vK/dU5o7zC+Qoz0zGsi2TsE1SJg29m+HHPc6FE4cZ+QAZyN GJxbNkuATwztFGRvTgRILS44jku+RIhaY5B873MYK0WomOn+wgxg7mpwDzR47j6H KY60fCGRNO28up1QZgqFyneLfk/VFsu/BAdQakSvx2wnRfr5Evy4FYbpN9BESJc1 whpf5al/RxNqRx5ybQ1Y1EQaI/IONnTqvx9GHU/9dfWyhxQsIRc/qoUAsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGFIha9R2N0VXDdPN0miHUqT6yaMB8GA1UdIwQY MBaAFO8xoFT8n7SxR+ipi9p+ccga8Lz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0Mjct MjcxMzYyZTNmMjVhLzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0MjctMjcxMzYyZTNmMjVh LzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE4r7OQj L7wsluLMFONk96ZBeEcY1lDZc61LlZzvlrdByfx/WOFcb5Vo5n6RipAL9U0kaWok qoaGfSeXf9nFS0JNAI43N95VqbE0W0SKVH6SG/4OAvnmDORQeFfwvvHtMbBYi5S8 iFe3Hn+wdMQ5Iw1Q5cZn8NwAhiTpc5+K3nN2oJcsRs6pmLhRvA4E5yJSL6Ig/2Qr p88My4VQIqdMm3dLEi3JlZirR9jRMZvcIi7hJMNEahR3CBKlJQUBGLbiloS1hOUG 2wZu+rsk2UOlBylsHQdmfybH/FpWTL91bPbsyY1BaFnuUpP871Acn7O+Y2Fz64VI urA1tuujKbP6qg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:31:02 2025 by rpki-client