This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json) Hash identifier: ICc+3uuNNTiBFTfaD8F3/0FN2iAwmy3Zg44U7LeK0vs= Subject key identifier: 55:AD:8F:A7:DE:BF:68:06:6E:B8:E5:1D:2A:89:A6:F9:4F:7C:8C:F2 Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Certificate serial: 019B2BF88B893AECE04121A78944B41772D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft Manifest number: 1713 Signing time: Wed 17 Dec 2025 11:01:07 +0000 Manifest this update: Wed 17 Dec 2025 11:01:07 +0000 Manifest next update: Thu 18 Dec 2025 11:01:07 +0000 Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: KzdwQC+6hTHuLrsBSMgRDEn6QI9InM9VyPPHDObfA14=) 2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:8b:89:3a:ec:e0:41:21:a7:89:44:b4:17:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Validity Not Before: Dec 17 11:01:07 2025 GMT Not After : Dec 18 11:01:07 2025 GMT Subject: CN=55ad8fa7debf68066eb8e51d2a89a6f94f7c8cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:fa:b9:ab:00:a7:8c:16:78:52:20:b6:f5: 6a:13:c8:e1:a4:ea:16:3f:c8:dc:8c:be:17:91:6a: 81:cf:3a:ac:76:be:54:d7:1d:88:dc:d4:93:f9:87: 1a:dc:68:39:07:63:df:2d:d4:63:d5:df:5b:f3:da: d2:45:1e:48:c6:a5:a5:40:b2:88:13:42:6d:46:34: 6b:02:f8:b9:8d:5d:31:4e:16:a2:36:41:e6:1d:17: f1:da:26:bf:fc:54:6b:ae:77:61:38:d5:d8:fb:56: 78:1d:e7:97:1a:6f:d0:37:14:db:8f:ac:fa:3c:72: a4:1a:76:4a:d6:20:21:2f:c3:66:fc:b7:dd:13:88: 37:1d:ba:06:87:af:0d:a4:9c:f6:58:27:5f:37:07: eb:4a:32:5a:66:be:7a:2d:0e:66:14:5d:df:6b:29: f1:0a:72:28:08:7f:10:3d:15:89:95:de:35:48:60: c7:2f:0d:b5:3d:5b:33:08:e9:fb:19:23:42:e8:75: 97:58:04:bb:d1:59:27:74:3e:db:86:84:fe:a4:09: 3c:6e:03:8d:35:b2:87:a5:d4:f1:6f:e2:6f:4e:95: 7c:56:0f:b0:43:38:27:1a:a2:12:17:f1:16:25:3c: f5:f2:4d:48:d8:ab:2b:84:fd:df:fe:2c:47:5d:31: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AD:8F:A7:DE:BF:68:06:6E:B8:E5:1D:2A:89:A6:F9:4F:7C:8C:F2 X509v3 Authority Key Identifier: keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e8:30:f1:ab:70:68:33:59:ee:c8:84:5e:83:dd:12:06:f7: 21:fe:63:b8:e3:b4:dd:f8:90:0b:4f:29:b5:9b:84:81:97:bf: cf:1e:9c:7f:32:e6:42:0f:12:8e:d4:10:9a:3d:e7:4e:93:73: ee:76:ac:b2:8f:9e:49:b3:d6:09:1c:8d:94:ac:9f:aa:01:49: 28:5b:f3:de:b1:61:5b:a5:4c:f3:cf:8b:99:85:fc:3d:ad:2e: 90:91:60:e4:9b:1d:17:fc:a6:05:c3:8d:d1:96:06:2d:78:63: d3:4b:73:a0:d7:b4:a9:36:75:8e:7a:96:6e:69:c2:2b:93:c5: 7d:4f:5f:4f:69:cb:6f:b8:4c:cb:98:b1:16:65:5f:be:cd:2d: 6e:d6:c4:65:23:ff:ec:dc:79:87:7b:53:81:f1:ca:33:5e:10: 95:6e:99:a4:c8:19:d3:be:03:ae:ff:5d:66:79:74:b4:fb:54: 72:14:8b:a9:f6:c1:3f:24:65:48:11:6d:78:fb:9b:f1:21:36: da:bc:55:4f:c4:2e:95:db:d3:05:58:ce:7c:79:2f:11:a2:15: e6:61:7f:92:60:06:7d:8d:58:15:9e:ec:e0:7e:93:23:35:16: db:17:a7:5e:60:d2:43:cb:ce:27:6a:d0:ce:eb:6f:f0:7e:80: 08:30:2e:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IuJOuzgQSGniUS0F3LQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmI0YzBiNGFmNjE1Yzg1YTNjZGNkZWQ0YjdlYmI2NjYz MTFiNDgwHhcNMjUxMjE3MTEwMTA3WhcNMjUxMjE4MTEwMTA3WjAzMTEwLwYDVQQD Eyg1NWFkOGZhN2RlYmY2ODA2NmViOGU1MWQyYTg5YTZmOTRmN2M4Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTT6uasAp4wWeFIgtvVqE8jhpOoW P8jcjL4XkWqBzzqsdr5U1x2I3NST+Yca3Gg5B2PfLdRj1d9b89rSRR5IxqWlQLKI E0JtRjRrAvi5jV0xThaiNkHmHRfx2ia//FRrrndhONXY+1Z4HeeXGm/QNxTbj6z6 PHKkGnZK1iAhL8Nm/LfdE4g3HboGh68NpJz2WCdfNwfrSjJaZr56LQ5mFF3faynx CnIoCH8QPRWJld41SGDHLw21PVszCOn7GSNC6HWXWAS70VkndD7bhoT+pAk8bgON NbKHpdTxb+JvTpV8Vg+wQzgnGqISF/EWJTz18k1I2KsrhP3f/ixHXTFX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWtj6fev2gGbrjlHSqJpvlPfIzyMB8GA1UdIwQY MBaAFO67TAtK9hXIWjzc3tS367ZmMRtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQt MThlODRlNzQ3ZDIyLzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQtMThlODRlNzQ3ZDIy LzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnugw8atw aDNZ7siEXoPdEgb3If5juOO03fiQC08ptZuEgZe/zx6cfzLmQg8SjtQQmj3nTpNz 7nasso+eSbPWCRyNlKyfqgFJKFvz3rFhW6VM88+LmYX8Pa0ukJFg5JsdF/ymBcON 0ZYGLXhj00tzoNe0qTZ1jnqWbmnCK5PFfU9fT2nLb7hMy5ixFmVfvs0tbtbEZSP/ 7Nx5h3tTgfHKM14QlW6ZpMgZ074Drv9dZnl0tPtUchSLqfbBPyRlSBFtePub8SE2 2rxVT8QuldvTBVjOfHkvEaIV5mF/kmAGfY1YFZ7s4H6TIzUW2xenXmDSQ8vOJ2rQ zutv8H6ACDAupw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:29 2025 by rpki-client