This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft File: 7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json) Hash identifier: SEvrPxmI2wJt6dz+flmJUbLkVxsQacl9z21hpn5SxpE= Subject key identifier: 1D:B0:D3:AC:B2:AF:DB:15:C9:D3:46:87:CF:57:9D:09:D7:A2:E9:29 Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5 Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5 Certificate serial: 019AF35251210DA40D496A36B4A3FCD50770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 11:00:49 +0000 Manifest this update: Sat 06 Dec 2025 11:00:49 +0000 Manifest next update: Sun 07 Dec 2025 11:00:49 +0000 Files and hashes: 1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: zR0zX+jB79531+/I4PXS9M1NutjecYMQ7QfTBsGNsUg=) 2: nv2sWsReuDqjbbgU3JKBZoxr2-Q.roa (hash: zWnvxgzXP/IKK0889x3RFyNlj3kERukZMLtV2w01Cbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:51:21:0d:a4:0d:49:6a:36:b4:a3:fc:d5:07:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5 Validity Not Before: Dec 6 11:00:49 2025 GMT Not After : Dec 7 11:00:49 2025 GMT Subject: CN=1db0d3acb2afdb15c9d34687cf579d09d7a2e929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:ca:66:c8:0d:46:ae:cb:8e:40:64:7e:ba: 22:5a:8c:1a:a4:ba:59:6a:25:85:28:8b:0c:5c:d0: e7:3d:08:b8:cd:cf:42:17:1a:21:15:8e:c0:7d:3a: 64:bc:a0:64:ae:37:2c:34:5d:77:87:48:ec:03:c4: 4c:6a:e7:92:c1:f4:bf:c2:da:9e:c1:81:44:f2:a1: 17:62:bb:7b:62:da:d7:d5:01:98:e6:d5:7c:58:39: 88:cd:48:be:8c:f4:8b:fe:6c:5a:19:11:f2:76:7f: 60:3b:61:9c:7d:f9:47:ce:8a:b0:7b:0d:c9:70:77: fe:1a:00:d6:27:73:a3:91:8f:07:56:ca:b2:62:bb: b0:34:7d:40:83:53:6f:c8:18:c1:8c:b4:34:fc:51: 13:ab:dd:4d:c0:14:74:aa:07:39:d0:ca:29:e5:87: 65:70:fb:ab:cf:79:fc:dc:5e:f8:09:7e:2b:b3:f0: 69:76:a4:3f:2a:30:d0:96:03:50:95:63:da:95:e7: 72:79:8b:cd:07:45:bb:6a:5e:a0:75:8f:00:bf:27: 4d:bd:5f:03:6d:ff:e8:d4:ff:8b:df:ca:29:86:bd: 1c:1c:24:89:3e:e4:bd:ba:8e:8d:98:6b:8d:b6:a6: 89:66:6b:70:d0:12:b3:ee:fe:90:63:c3:99:ce:00: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B0:D3:AC:B2:AF:DB:15:C9:D3:46:87:CF:57:9D:09:D7:A2:E9:29 X509v3 Authority Key Identifier: keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8f:d3:c1:02:cd:26:30:4b:a8:0b:fd:dd:78:43:e4:e7:29: 6a:8e:55:55:d6:64:d9:3a:7b:39:47:b4:03:67:a1:0b:10:ce: f9:44:51:86:cb:ae:75:a7:b2:2d:17:60:16:8f:6e:6f:2b:bb: c6:55:93:b4:76:e7:e5:c6:e1:35:28:61:2b:a5:85:ee:55:ae: 2c:ef:3c:9f:ce:69:ea:c6:c9:b9:f1:dd:a7:48:7a:69:78:6c: d6:53:a2:fe:75:e9:f9:eb:44:63:db:44:d4:bc:19:38:90:6c: 04:54:cd:b2:4a:23:57:07:d8:ed:0a:60:d4:d2:fa:40:13:16: 82:7e:10:18:d9:4d:e8:74:7d:78:2d:71:48:c3:1b:c0:25:2f: 67:44:21:8f:9a:52:50:5b:72:c9:db:75:15:44:55:d3:86:30: 97:a7:9d:be:4e:9f:8e:69:b4:82:ec:41:79:88:41:f0:ed:8a: 96:d8:46:ab:80:f0:d3:cb:47:72:e3:d6:d9:c3:b4:0a:59:a1: e4:68:ed:6e:16:7e:87:48:d1:f9:4a:76:18:8c:c4:53:26:f9: 1e:79:4c:78:90:1e:29:4b:2d:61:60:f9:56:af:4b:3a:b6:4d: 9e:e9:37:66:1b:bd:80:56:98:3c:3a:18:2c:e5:24:0d:ec:58: 5a:ce:d0:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlEhDaQNSWo2tKP81QdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDU3Zjk2OWMwZmVjMzViOTI2ZDBmNzJhNDdkZDQ0Yjhi MzAwZjUwHhcNMjUxMjA2MTEwMDQ5WhcNMjUxMjA3MTEwMDQ5WjAzMTEwLwYDVQQD EygxZGIwZDNhY2IyYWZkYjE1YzlkMzQ2ODdjZjU3OWQwOWQ3YTJlOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuILKZsgNRq7LjkBkfroiWowapLpZ aiWFKIsMXNDnPQi4zc9CFxohFY7AfTpkvKBkrjcsNF13h0jsA8RMaueSwfS/wtqe wYFE8qEXYrt7YtrX1QGY5tV8WDmIzUi+jPSL/mxaGRHydn9gO2GcfflHzoqwew3J cHf+GgDWJ3OjkY8HVsqyYruwNH1Ag1NvyBjBjLQ0/FETq91NwBR0qgc50Mop5Ydl cPurz3n83F74CX4rs/BpdqQ/KjDQlgNQlWPaledyeYvNB0W7al6gdY8AvydNvV8D bf/o1P+L38ophr0cHCSJPuS9uo6NmGuNtqaJZmtw0BKz7v6QY8OZzgAI6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2w06yyr9sVydNGh89XnQnXoukpMB8GA1UdIwQY MBaAFO1Ff5acD+w1uSbQ9ypH3US4swD1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjct ZTQ3ZWJlZTJjMDIwLzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjctZTQ3ZWJlZTJjMDIw LzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI/TwQLN JjBLqAv93XhD5Ocpao5VVdZk2Tp7OUe0A2ehCxDO+URRhsuudaeyLRdgFo9ubyu7 xlWTtHbn5cbhNShhK6WF7lWuLO88n85p6sbJufHdp0h6aXhs1lOi/nXp+etEY9tE 1LwZOJBsBFTNskojVwfY7Qpg1NL6QBMWgn4QGNlN6HR9eC1xSMMbwCUvZ0Qhj5pS UFtyydt1FURV04Ywl6edvk6fjmm0guxBeYhB8O2KlthGq4Dw08tHcuPW2cO0Clmh 5GjtbhZ+h0jR+Up2GIzEUyb5HnlMeJAeKUstYWD5Vq9LOrZNnuk3Zhu9gFaYPDoY LOUkDexYWs7QyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:19 2025 by rpki-client