This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json) Hash identifier: Much0JROQ8jWKCL8vBhFmjETjYEqfo7yMO9LHfV0YEE= Subject key identifier: C6:25:82:4F:F8:B7:4E:16:54:91:0B:51:C2:69:93:AC:D2:B0:B4:1E Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Certificate serial: 019AF0F5EB168632E1CAEEE6C61A412F5B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 00:00:39 +0000 Manifest this update: Sat 06 Dec 2025 00:00:39 +0000 Manifest next update: Sun 07 Dec 2025 00:00:39 +0000 Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: eH460ClNSvFMthaGW09/8iJpJt0lIg3fvWU+oEdzpNI=) 2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:eb:16:86:32:e1:ca:ee:e6:c6:1a:41:2f:5b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Validity Not Before: Dec 6 00:00:39 2025 GMT Not After : Dec 7 00:00:39 2025 GMT Subject: CN=c625824ff8b74e1654910b51c26993acd2b0b41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:8e:12:d0:bf:e9:8e:41:16:91:d9:eb:b1: d1:54:0b:59:a6:fd:f3:d3:ac:18:48:00:fb:8e:be: 7e:7e:72:54:4a:61:bb:d5:c2:d4:c1:67:f3:cd:53: 06:e2:ba:b2:84:8f:34:94:87:dd:8b:84:f6:c6:0c: 69:44:93:b8:dc:24:61:e9:66:bc:cf:7c:4c:dc:fa: 98:bb:79:76:e5:43:36:1c:d8:f7:89:dc:cb:3a:cb: 66:c5:7e:bd:ad:a9:61:b7:e8:71:9f:cf:34:65:60: cb:b1:a4:db:e4:ee:6a:48:dd:79:6d:79:2d:12:95: 71:0a:f6:4e:1a:f7:08:20:fc:2f:17:d7:d4:6b:8b: aa:1d:8c:29:bd:4b:ef:87:9b:3f:40:fa:3e:86:f7: 00:50:85:f7:e2:04:24:03:44:e5:9e:8f:a6:a1:3d: 49:69:21:79:a7:44:a8:7e:70:3e:44:fe:67:7b:bd: 5b:d1:ae:be:35:74:6e:9a:02:bb:c0:be:71:07:ba: 8e:d1:dc:22:64:fc:83:74:2c:e6:b1:ed:b1:dc:cc: 54:f6:94:6b:c1:52:60:4c:1c:80:bd:16:d8:75:23: 19:33:5b:5b:ec:34:60:29:2c:2e:9e:73:0e:e5:7b: 45:81:b6:32:be:36:43:1a:72:31:f3:f7:cb:6a:b5: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:82:4F:F8:B7:4E:16:54:91:0B:51:C2:69:93:AC:D2:B0:B4:1E X509v3 Authority Key Identifier: keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:53:94:ca:0c:92:5e:16:42:80:21:c7:83:56:17:48:d5:9e: fb:1f:6f:a9:9b:b3:af:cf:ba:c3:bf:b8:69:ae:c9:5b:f9:f3: bd:e7:54:c4:fd:17:4b:d0:b9:05:fc:9c:5d:aa:bf:97:2a:c5: 60:7a:26:c8:87:2e:0a:c8:53:2c:67:6c:e4:f8:2c:0a:08:33: 1d:3c:85:68:e2:1e:d7:8b:03:79:ac:34:67:41:cf:e3:ad:4c: ac:bd:45:2f:28:49:93:95:24:e9:e4:c5:39:c1:89:aa:0d:a3: bf:8b:bb:6e:20:6b:b6:d6:41:a0:27:51:99:75:35:f6:6f:43: 2c:f7:01:18:00:1b:da:e9:ce:9b:43:ed:2c:a9:81:5b:c3:a3: c0:86:b2:e1:54:c9:49:7c:f3:95:b4:b5:3a:a5:03:41:49:27: 2b:ce:8f:b0:1b:f8:fa:6a:2d:36:5d:2b:cf:fa:f4:26:94:e9: f6:8a:89:19:b2:45:46:84:b3:a4:bb:95:4c:fc:17:4c:87:28: a1:99:dc:92:13:55:aa:57:d1:d7:31:01:5c:fd:a6:46:36:36: 09:00:da:20:c6:22:f1:fb:a1:da:64:1c:9f:d6:91:c4:5c:98: 42:4b:2c:55:28:fd:7a:f7:48:3c:03:6c:08:2e:62:d0:c3:e4: 6f:a5:50:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9esWhjLhyu7mxhpBL1t+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5 YWFlNTEwHhcNMjUxMjA2MDAwMDM5WhcNMjUxMjA3MDAwMDM5WjAzMTEwLwYDVQQD EyhjNjI1ODI0ZmY4Yjc0ZTE2NTQ5MTBiNTFjMjY5OTNhY2QyYjBiNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWOEtC/6Y5BFpHZ67HRVAtZpv3z 06wYSAD7jr5+fnJUSmG71cLUwWfzzVMG4rqyhI80lIfdi4T2xgxpRJO43CRh6Wa8 z3xM3PqYu3l25UM2HNj3idzLOstmxX69ralht+hxn880ZWDLsaTb5O5qSN15bXkt EpVxCvZOGvcIIPwvF9fUa4uqHYwpvUvvh5s/QPo+hvcAUIX34gQkA0Tlno+moT1J aSF5p0SofnA+RP5ne71b0a6+NXRumgK7wL5xB7qO0dwiZPyDdCzmse2x3MxU9pRr wVJgTByAvRbYdSMZM1tb7DRgKSwunnMO5XtFgbYyvjZDGnIx8/fLarVhvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYlgk/4t04WVJELUcJpk6zSsLQeMB8GA1UdIwQY MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4 LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFOUygyS XhZCgCHHg1YXSNWe+x9vqZuzr8+6w7+4aa7JW/nzvedUxP0XS9C5BfycXaq/lyrF YHomyIcuCshTLGds5PgsCggzHTyFaOIe14sDeaw0Z0HP461MrL1FLyhJk5Uk6eTF OcGJqg2jv4u7biBrttZBoCdRmXU19m9DLPcBGAAb2unOm0PtLKmBW8OjwIay4VTJ SXzzlbS1OqUDQUknK86PsBv4+motNl0rz/r0JpTp9oqJGbJFRoSzpLuVTPwXTIco oZnckhNVqlfR1zEBXP2mRjY2CQDaIMYi8fuh2mQcn9aRxFyYQkssVSj9evdIPANs CC5i0MPkb6VQYA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:45 2025 by rpki-client