This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json) Hash identifier: RWc6jBvBfPfjaYvdef2aQfn6GpXXEudKaF97aHzr3xY= Subject key identifier: 01:9F:F8:5C:BC:B8:51:61:DA:CC:23:3C:92:2F:34:26:5B:FB:59:CE Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82 Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482 Certificate serial: 019B33B27444BA8AB5FE62FCAE333981902F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft Manifest number: 0E04 Signing time: Thu 18 Dec 2025 23:01:31 +0000 Manifest this update: Thu 18 Dec 2025 23:01:31 +0000 Manifest next update: Fri 19 Dec 2025 23:01:31 +0000 Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: +inNrVauBZgzmTa9DKSCk+NP2edX2QpyTxjuA5SQHFc=) 2: z0lqz9_pi7nNDOaCZPjUekef-0s.roa (hash: YdH1v7lP8vjgkR0BPfbp4nmWFfYVAUVYWhhC0qKj8kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:74:44:ba:8a:b5:fe:62:fc:ae:33:39:81:90:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482 Validity Not Before: Dec 18 23:01:31 2025 GMT Not After : Dec 19 23:01:31 2025 GMT Subject: CN=019ff85cbcb85161dacc233c922f34265bfb59ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:38:c6:59:cc:99:5b:bc:ea:2d:eb:b0:1e: 73:59:39:42:88:89:7e:1d:c1:4c:2d:2c:85:6b:df: 61:ea:8e:31:35:74:d3:92:8a:70:1b:44:9b:17:77: 1a:91:81:ee:27:c3:3c:cf:33:70:30:79:61:d5:66: 52:22:00:8c:75:65:13:21:99:52:1f:bc:d8:10:5b: 0f:d5:e8:1d:f5:ab:55:be:f8:50:24:ff:2a:1a:91: a4:be:27:9b:0e:bb:de:f6:d7:e2:81:1f:42:5a:ea: b8:c5:55:eb:40:e4:6a:02:d1:fa:5d:3e:b4:c5:c1: 60:36:a6:c0:1b:2d:cd:4e:9b:57:04:3e:a8:2e:75: 30:1a:b0:9f:70:b1:84:fb:c5:ee:8f:46:99:7c:fb: b5:0a:e5:43:fd:ee:0d:63:93:be:84:9d:26:dd:e3: be:71:fc:48:b6:ba:1a:1f:e1:61:77:ff:ff:7b:5b: aa:7e:9e:73:2a:25:04:81:29:30:db:10:98:df:31: 7b:ba:8d:b6:b2:78:72:b6:0b:83:24:9f:bc:98:0d: fd:58:8d:d2:33:fe:ef:1c:e5:fd:26:df:38:47:b8: 80:4c:3b:ed:fe:ba:69:ff:4e:76:06:2c:61:ce:ed: cd:e9:06:e4:c4:78:41:c9:df:56:fb:17:19:2d:db: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9F:F8:5C:BC:B8:51:61:DA:CC:23:3C:92:2F:34:26:5B:FB:59:CE X509v3 Authority Key Identifier: keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4e:e0:91:9b:8a:50:25:4d:05:35:46:ff:ff:de:fb:07:6d: 0d:56:b5:82:b5:6b:82:60:48:41:28:8d:6b:b3:9d:d9:6f:c3: 8f:f9:ba:5e:86:8b:27:43:4c:53:83:c4:ae:e4:8e:ce:5b:84: 22:be:82:04:d2:00:64:3e:79:4c:51:bf:5a:da:5c:63:83:c8: bb:7a:95:f2:fc:ff:11:a0:af:ab:cb:78:da:55:ce:dc:cd:56: 89:c8:9e:2c:84:94:1e:c8:e3:2f:56:98:c3:0f:f4:30:ac:58: 76:97:c7:13:08:14:25:ce:02:85:a4:5a:d5:fa:a0:2d:a9:b7: 56:bd:6c:73:c2:27:5f:36:6c:af:9c:2b:9b:27:b6:6f:4d:88: 38:60:a2:55:d0:53:2d:2f:80:15:4c:bb:fe:09:c3:8a:6e:5a: 54:ea:80:26:96:15:48:22:c3:86:35:08:45:3a:ba:97:5b:bc: f0:e1:bf:1f:72:62:57:63:13:ab:e4:53:5e:99:e1:28:99:5d: 85:09:0a:84:a6:2c:bc:30:b0:d2:9e:0e:1f:58:a6:7c:9e:69: 74:34:f9:bb:b0:d5:66:b2:6f:33:6f:98:1f:20:68:30:f0:56: 80:fd:f6:11:79:53:8a:d9:e0:6e:f1:f9:70:2c:97:29:62:c1: 09:64:c1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsnREuoq1/mL8rjM5gZAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1 Nzc0ODIwHhcNMjUxMjE4MjMwMTMxWhcNMjUxMjE5MjMwMTMxWjAzMTEwLwYDVQQD EygwMTlmZjg1Y2JjYjg1MTYxZGFjYzIzM2M5MjJmMzQyNjViZmI1OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuks4xlnMmVu86i3rsB5zWTlCiIl+ HcFMLSyFa99h6o4xNXTTkopwG0SbF3cakYHuJ8M8zzNwMHlh1WZSIgCMdWUTIZlS H7zYEFsP1egd9atVvvhQJP8qGpGkviebDrve9tfigR9CWuq4xVXrQORqAtH6XT60 xcFgNqbAGy3NTptXBD6oLnUwGrCfcLGE+8Xuj0aZfPu1CuVD/e4NY5O+hJ0m3eO+ cfxItroaH+Fhd///e1uqfp5zKiUEgSkw2xCY3zF7uo22snhytguDJJ+8mA39WI3S M/7vHOX9Jt84R7iATDvt/rpp/052Bixhzu3N6QbkxHhByd9W+xcZLdur3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGf+Fy8uFFh2swjPJIvNCZb+1nOMB8GA1UdIwQY MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt ZTlkODFlM2Q4YjU0LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0 LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqk7gkZuK UCVNBTVG///e+wdtDVa1grVrgmBIQSiNa7Od2W/Dj/m6XoaLJ0NMU4PEruSOzluE Ir6CBNIAZD55TFG/WtpcY4PIu3qV8vz/EaCvq8t42lXO3M1WicieLISUHsjjL1aY ww/0MKxYdpfHEwgUJc4ChaRa1fqgLam3Vr1sc8InXzZsr5wrmye2b02IOGCiVdBT LS+AFUy7/gnDim5aVOqAJpYVSCLDhjUIRTq6l1u88OG/H3JiV2MTq+RTXpnhKJld hQkKhKYsvDCw0p4OH1imfJ5pdDT5u7DVZrJvM2+YHyBoMPBWgP32EXlTitngbvH5 cCyXKWLBCWTB0g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:45:32 2025 by rpki-client