This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json) Hash identifier: pvsJxkmOk1GdgBeKCsSZDHFvl25tAtfYyH/qIcmwFD4= Subject key identifier: 10:A1:02:08:1B:42:C1:D1:F0:C6:1B:C0:FB:1D:21:54:69:AA:00:18 Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Certificate serial: 019AF2ADABB4E7F4F012C79BE8264A616DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft Manifest number: 1568 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=) 2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: Euwr2gSaJkhGVQQ0AffnGRAdIvwxaRo+hK9vTphLK3E=) 3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=) 4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ab:b4:e7:f4:f0:12:c7:9b:e8:26:4a:61:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77 Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=10a102081b42c1d1f0c61bc0fb1d215469aa0018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:d4:c6:9c:bc:c7:2e:fe:4e:0a:8b:4e:3a: b1:8b:f8:a7:8c:02:c1:c8:26:18:16:bc:a9:bb:96: d2:64:73:88:64:e6:89:df:d3:21:52:ec:39:40:51: 70:df:a2:fc:75:5e:84:69:06:0b:a3:2e:aa:08:41: dc:ee:57:9c:de:48:22:d5:ad:cb:56:d1:e5:e7:51: 3c:85:27:6d:e7:21:4a:24:9b:cb:d9:a9:13:c7:4b: df:7e:53:ba:7d:0f:2a:8b:dc:37:08:4d:f4:19:17: a5:fb:4e:b8:2b:1a:f0:14:de:7b:6e:78:00:25:7e: 82:8c:51:6a:a0:67:fc:12:51:a5:8d:ab:99:29:19: a7:28:52:05:10:5e:c0:7c:30:ec:30:e6:a2:d7:96: a9:d5:38:ca:2a:e9:df:bf:6c:0a:96:83:59:f3:c3: 79:d5:0f:df:d0:04:34:e8:63:ea:27:0c:7d:ff:c5: 90:9e:87:f3:d2:b7:6b:d2:05:7b:f6:70:5e:74:02: a3:04:9a:55:1b:80:56:f1:48:d4:10:75:9a:7a:ad: dc:69:66:25:02:74:bc:d8:5c:b8:67:85:ec:2a:46: 86:d8:5d:4d:4c:23:40:8b:dc:10:79:61:56:c3:fa: 5a:7f:49:ae:b0:b3:c2:07:27:a1:56:e8:08:a0:35: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A1:02:08:1B:42:C1:D1:F0:C6:1B:C0:FB:1D:21:54:69:AA:00:18 X509v3 Authority Key Identifier: keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:88:c9:5f:46:fd:26:3f:d5:89:f3:29:1a:96:21:9d:a5:bd: 62:51:33:f6:9a:b8:ba:96:2e:82:ec:c3:b1:65:c4:ff:29:ba: 62:4a:3d:5c:e5:5e:02:73:b2:ee:24:0d:42:e2:2c:b0:71:94: a0:b0:44:d1:3d:ae:25:50:6c:15:3a:66:60:58:db:50:1d:d9: e8:46:ab:f2:93:22:64:4d:e9:ae:39:79:2b:61:32:29:41:9e: 0e:39:63:32:ad:79:49:e9:76:af:ae:47:63:37:16:fe:6a:f6: de:15:c2:eb:a3:3a:39:c1:c0:df:86:c5:fa:84:43:14:46:27: 24:77:4f:91:ee:28:9b:86:c5:f6:bc:00:a0:72:a9:20:40:17: f3:8d:4b:1a:cb:3d:63:c8:4a:2e:e0:c7:b7:73:9e:2d:0d:1f: 0b:41:3f:91:65:9e:de:90:5f:20:a7:2e:dc:fb:55:c5:42:8c: cb:29:32:11:cb:e4:a6:9c:f7:0c:49:32:8f:e9:0b:f1:2c:a9: 3b:a1:61:c5:37:27:26:dd:d6:3a:1e:8b:0b:c1:39:9c:a0:3e: 1a:91:e6:4e:7c:61:97:b8:5f:f5:68:9a:58:49:84:9a:26:bc: 82:49:85:e2:97:2a:7b:f3:83:e5:3c:2d:98:df:75:9c:c5:e5: b2:fd:89:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrau05/TwEseb6CZKYW3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3 OWFkNzcwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EygxMGExMDIwODFiNDJjMWQxZjBjNjFiYzBmYjFkMjE1NDY5YWEwMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbbUxpy8xy7+TgqLTjqxi/injALB yCYYFrypu5bSZHOIZOaJ39MhUuw5QFFw36L8dV6EaQYLoy6qCEHc7lec3kgi1a3L VtHl51E8hSdt5yFKJJvL2akTx0vfflO6fQ8qi9w3CE30GRel+064KxrwFN57bngA JX6CjFFqoGf8ElGljauZKRmnKFIFEF7AfDDsMOai15ap1TjKKunfv2wKloNZ88N5 1Q/f0AQ06GPqJwx9/8WQnofz0rdr0gV79nBedAKjBJpVG4BW8UjUEHWaeq3caWYl AnS82Fy4Z4XsKkaG2F1NTCNAi9wQeWFWw/paf0musLPCByehVugIoDVIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBChAggbQsHR8MYbwPsdIVRpqgAYMB8GA1UdIwQY MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4 LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIjJX0b9 Jj/VifMpGpYhnaW9YlEz9pq4upYuguzDsWXE/ym6Yko9XOVeAnOy7iQNQuIssHGU oLBE0T2uJVBsFTpmYFjbUB3Z6Ear8pMiZE3prjl5K2EyKUGeDjljMq15Sel2r65H YzcW/mr23hXC66M6OcHA34bF+oRDFEYnJHdPke4om4bF9rwAoHKpIEAX841LGss9 Y8hKLuDHt3OeLQ0fC0E/kWWe3pBfIKcu3PtVxUKMyykyEcvkppz3DEkyj+kL8Syp O6FhxTcnJt3WOh6LC8E5nKA+GpHmTnxhl7hf9WiaWEmEmia8gkmF4pcqe/OD5Twt mN91nMXlsv2JAg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:38 2025 by rpki-client