This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json) Hash identifier: m7iGd0t8mLiyBb9wOcbWgh38EsdaZRRO7+U8CcZKbjw= Subject key identifier: 7C:7D:E5:C1:5A:BE:CB:4B:B2:E5:4D:70:ED:02:95:FE:40:57:00:04 Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Certificate serial: 019AF42E1A73EAACD3AB3916D0F2E412597D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft Manifest number: 06B1 Signing time: Sat 06 Dec 2025 15:00:53 +0000 Manifest this update: Sat 06 Dec 2025 15:00:53 +0000 Manifest next update: Sun 07 Dec 2025 15:00:53 +0000 Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: 0kM8YEq0WD/DY1j9kAKVPH0ZSXQe53PR55kEvoQl4uY=) 2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:1a:73:ea:ac:d3:ab:39:16:d0:f2:e4:12:59:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204 Validity Not Before: Dec 6 15:00:53 2025 GMT Not After : Dec 7 15:00:53 2025 GMT Subject: CN=7c7de5c15abecb4bb2e54d70ed0295fe40570004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:32:3f:eb:9b:6b:ba:69:62:c5:52:98:fa: 13:68:cb:e5:79:e3:ac:c9:d8:fc:a0:83:39:1e:a7: 1a:63:2e:7d:6e:3d:82:01:c4:37:57:aa:88:7c:a5: 8d:43:37:86:4b:0e:84:1f:14:a1:97:83:d5:51:e2: 3e:6e:dc:7d:08:f6:d4:da:2f:9a:63:4c:29:8f:ea: 93:71:12:8f:d5:00:79:cb:33:88:1d:b3:1d:fd:15: 8b:49:44:b2:0b:43:f7:ab:82:cf:a7:86:e0:cb:a2: 7d:2e:64:f3:18:40:10:ef:1f:96:2e:d4:91:97:70: bc:21:b7:ec:b0:22:c0:04:41:39:46:ee:6a:be:b1: 31:f4:e7:8b:16:49:cd:a3:97:0b:c0:78:12:32:7b: 31:8c:fa:03:48:d6:fd:b7:13:4b:47:27:ad:b1:42: d4:fe:3f:e3:7e:3a:93:2f:56:5f:52:8e:8f:f8:69: 99:7e:bc:ee:d5:61:e0:e6:8c:23:ec:00:c2:74:73: 2e:1e:e7:f1:f7:71:61:8c:3d:79:c9:b4:64:d3:95: 0a:c3:69:07:a9:1c:05:8b:b7:2e:5a:31:d8:9e:39: 49:34:0d:fc:be:11:22:1c:db:73:f1:d1:c0:e3:c1: ef:30:8d:79:69:3a:4c:26:20:75:e5:6a:e2:d5:a6: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7D:E5:C1:5A:BE:CB:4B:B2:E5:4D:70:ED:02:95:FE:40:57:00:04 X509v3 Authority Key Identifier: keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4d:29:62:92:9b:04:9a:a7:40:53:f8:6a:46:a5:e3:4c:58: f7:a0:f9:54:2c:24:19:d2:d8:35:7b:20:75:97:ce:88:7e:1d: d2:ad:8a:9a:11:ae:d6:ef:64:5f:02:ce:85:ee:8a:92:d2:19: a5:0f:a3:11:5a:38:77:22:26:dd:b1:cc:cd:15:ce:7e:51:32: b8:26:07:f4:cf:6e:aa:34:7e:37:ae:7f:8e:a5:15:fe:ce:fe: eb:14:27:1e:f3:c4:d4:94:fd:72:ce:9b:46:aa:1a:d3:fd:ff: 02:0a:e5:b9:22:db:af:45:cd:03:2e:26:d4:04:74:0f:e1:a2: e8:57:e9:a2:e3:d1:f4:36:37:1a:61:58:e2:3d:41:86:ad:5f: 31:a0:3a:70:cc:25:56:f6:5e:4d:25:31:9c:28:9a:3b:8d:2b: 79:18:94:43:69:d6:0f:e4:5d:88:37:fb:9c:d6:25:14:c8:1a: 4d:b9:0b:50:b6:cd:d6:bc:c2:3d:3b:70:46:c7:0a:9f:1e:3c: 35:7a:f1:e4:2d:ae:d5:4c:60:83:5d:5a:21:2c:3a:23:1b:40: 11:5a:4b:a0:b9:71:df:87:2f:f6:c7:50:1e:7f:c5:f7:45:86: 7a:ec:e1:7b:da:ca:0d:70:cf:11:13:ce:c6:0f:02:2a:cd:96: d0:43:17:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lhpz6qzTqzkW0PLkEll9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2 MTkyMDQwHhcNMjUxMjA2MTUwMDUzWhcNMjUxMjA3MTUwMDUzWjAzMTEwLwYDVQQD Eyg3YzdkZTVjMTVhYmVjYjRiYjJlNTRkNzBlZDAyOTVmZTQwNTcwMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteoyP+uba7ppYsVSmPoTaMvleeOs ydj8oIM5HqcaYy59bj2CAcQ3V6qIfKWNQzeGSw6EHxShl4PVUeI+btx9CPbU2i+a Y0wpj+qTcRKP1QB5yzOIHbMd/RWLSUSyC0P3q4LPp4bgy6J9LmTzGEAQ7x+WLtSR l3C8IbfssCLABEE5Ru5qvrEx9OeLFknNo5cLwHgSMnsxjPoDSNb9txNLRyetsULU /j/jfjqTL1ZfUo6P+GmZfrzu1WHg5owj7ADCdHMuHufx93FhjD15ybRk05UKw2kH qRwFi7cuWjHYnjlJNA38vhEiHNtz8dHA48HvMI15aTpMJiB15Wri1abbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx95cFavstLsuVNcO0Clf5AVwAEMB8GA1UdIwQY MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct ZjcyMjMzMTc5Y2NmLzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS00pYpKb BJqnQFP4akal40xY96D5VCwkGdLYNXsgdZfOiH4d0q2KmhGu1u9kXwLOhe6KktIZ pQ+jEVo4dyIm3bHMzRXOflEyuCYH9M9uqjR+N65/jqUV/s7+6xQnHvPE1JT9cs6b Rqoa0/3/AgrluSLbr0XNAy4m1AR0D+Gi6FfpouPR9DY3GmFY4j1Bhq1fMaA6cMwl VvZeTSUxnCiaO40reRiUQ2nWD+RdiDf7nNYlFMgaTbkLULbN1rzCPTtwRscKnx48 NXrx5C2u1Uxgg11aISw6IxtAEVpLoLlx34cv9sdQHn/F90WGeuzhe9rKDXDPERPO xg8CKs2W0EMXdg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:12 2025 by rpki-client