This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json) Hash identifier: /vQBuLpJBAoGm/3+Mcfcsxv93yqywqyZjRj02lRJV6M= Subject key identifier: 41:9B:C9:73:3B:57:CE:91:F0:17:C9:D2:B4:FA:4C:0A:74:BD:53:18 Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca Certificate serial: 019AF088B706B401AC0F6CBC9EE6CA562A7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft Manifest number: 033D Signing time: Fri 05 Dec 2025 22:01:22 +0000 Manifest this update: Fri 05 Dec 2025 22:01:22 +0000 Manifest next update: Sat 06 Dec 2025 22:01:22 +0000 Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: nG5J9tHTIuBUU3fbttEe6SPLH+XGDeWHGUYKkMo8jHQ=) 2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b7:06:b4:01:ac:0f:6c:bc:9e:e6:ca:56:2a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca Validity Not Before: Dec 5 22:01:22 2025 GMT Not After : Dec 6 22:01:22 2025 GMT Subject: CN=419bc9733b57ce91f017c9d2b4fa4c0a74bd5318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:00:22:17:e1:e1:95:f7:d5:a4:62:17:c2: 8c:9a:af:91:5c:2d:aa:0c:41:44:a6:74:3d:10:7f: 38:2c:d6:7f:91:b3:b2:e1:f7:79:a3:4f:fb:9a:87: eb:95:2b:46:cd:73:dd:f0:65:45:25:56:f2:c3:ea: c5:c1:02:7c:84:3e:00:de:58:cf:64:e8:97:12:56: cc:20:f8:0c:74:27:35:03:69:f1:72:e8:5c:b7:e3: 09:8c:79:1d:bb:0e:6d:aa:aa:25:d7:a1:6e:15:81: c5:df:6a:fa:c6:36:e4:eb:89:23:71:68:71:dd:95: ff:57:c9:01:f7:a8:6f:e7:bf:9f:e5:36:23:0a:f1: bc:85:22:00:4f:8a:c0:42:76:ce:0f:9a:d6:e2:00: 84:b6:47:28:16:0a:f5:21:98:a0:8d:e8:2e:b5:f6: 11:53:f4:00:e8:76:40:15:43:83:d0:55:2f:07:50: 21:73:23:2a:c1:18:d8:55:e4:ad:b6:55:7f:d2:f0: d9:42:8c:5f:e2:9a:af:ef:d8:cd:f9:69:64:63:0c: d7:c2:19:70:e1:81:35:f8:3d:76:a0:7a:d4:bc:9e: 28:d1:9f:ab:26:7e:f8:06:11:7b:cb:1c:fe:d5:cb: 77:18:3c:2e:f4:b3:50:d7:7e:7e:31:e6:02:f5:18: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:C9:73:3B:57:CE:91:F0:17:C9:D2:B4:FA:4C:0A:74:BD:53:18 X509v3 Authority Key Identifier: keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0a:8a:f2:0d:65:d7:7e:d2:80:d2:eb:74:09:73:d5:55:74: d9:de:0d:47:ca:bc:f2:dc:9d:60:f6:0f:6f:ad:c4:8f:18:ab: 5a:f3:72:db:2c:7b:e4:ff:6e:eb:4f:7d:dc:95:97:f2:8a:fb: a7:17:61:bc:ca:9d:0a:00:7b:cb:37:2b:67:36:8d:0a:28:3a: aa:ce:11:41:3e:f1:07:99:5f:ff:42:e1:3b:96:3e:a6:2b:a3: 5d:9c:9e:05:b1:e6:c9:c8:0b:9e:60:3e:a8:cb:80:90:4b:d5: 57:b6:46:cf:9a:4d:9c:4a:65:e1:ee:74:6c:2d:06:61:be:41: 1b:e8:78:55:cf:29:b6:66:09:87:9d:5d:02:dd:1a:b3:39:a4: f4:68:79:6d:33:84:67:aa:7e:85:f2:f1:ce:a4:6b:9e:7f:d9: a7:6a:5d:d8:41:cd:f6:9f:e0:2c:99:2c:24:61:20:9f:32:c7: 4d:89:a8:03:dc:9c:0f:4b:b7:ed:c7:aa:4b:b2:0f:cd:71:7e: 7e:46:7d:65:68:c0:24:f8:31:47:4b:9f:25:fe:6e:17:77:56: 78:0a:ec:a8:5c:e2:0f:5d:32:cf:a9:17:21:d9:3d:5d:10:be: 83:bc:9a:18:28:34:d6:14:2a:ac:e0:b4:39:42:01:d0:1c:38: 0a:d9:2a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLcGtAGsD2y8nubKVip/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1 NTg2Y2EwHhcNMjUxMjA1MjIwMTIyWhcNMjUxMjA2MjIwMTIyWjAzMTEwLwYDVQQD Eyg0MTliYzk3MzNiNTdjZTkxZjAxN2M5ZDJiNGZhNGMwYTc0YmQ1MzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0cAIhfh4ZX31aRiF8KMmq+RXC2q DEFEpnQ9EH84LNZ/kbOy4fd5o0/7mofrlStGzXPd8GVFJVbyw+rFwQJ8hD4A3ljP ZOiXElbMIPgMdCc1A2nxcuhct+MJjHkduw5tqqol16FuFYHF32r6xjbk64kjcWhx 3ZX/V8kB96hv57+f5TYjCvG8hSIAT4rAQnbOD5rW4gCEtkcoFgr1IZigjegutfYR U/QA6HZAFUOD0FUvB1AhcyMqwRjYVeSttlV/0vDZQoxf4pqv79jN+WlkYwzXwhlw 4YE1+D12oHrUvJ4o0Z+rJn74BhF7yxz+1ct3GDwu9LNQ135+MeYC9RjjiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGbyXM7V86R8BfJ0rT6TAp0vVMYMB8GA1UdIwQY MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwqK8g1l 137SgNLrdAlz1VV02d4NR8q88tydYPYPb63EjxirWvNy2yx75P9u60993JWX8or7 pxdhvMqdCgB7yzcrZzaNCig6qs4RQT7xB5lf/0LhO5Y+piujXZyeBbHmycgLnmA+ qMuAkEvVV7ZGz5pNnEpl4e50bC0GYb5BG+h4Vc8ptmYJh51dAt0aszmk9Gh5bTOE Z6p+hfLxzqRrnn/Zp2pd2EHN9p/gLJksJGEgnzLHTYmoA9ycD0u37ceqS7IPzXF+ fkZ9ZWjAJPgxR0ufJf5uF3dWeArsqFziD10yz6kXIdk9XRC+g7yaGCg01hQqrOC0 OUIB0Bw4CtkqEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:25 2025 by rpki-client