This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json) Hash identifier: grZCKIlqAUjMlTF+2/MA20QNRHhpvrgJNlYfBKZ2EXc= Subject key identifier: 26:DE:8A:D1:56:6A:42:64:A9:D9:2E:0D:0F:0D:47:AB:E7:2F:76:0F Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456 Certificate serial: 019AF49BDED5627E64B5085875A2F331D236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft Manifest number: 0268 Signing time: Sat 06 Dec 2025 17:00:46 +0000 Manifest this update: Sat 06 Dec 2025 17:00:46 +0000 Manifest next update: Sun 07 Dec 2025 17:00:46 +0000 Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: mXlk1kL7LBdrTrY+2Hj0PxM2PEFUTgaeBMG+iEwzPuA=) 2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:de:d5:62:7e:64:b5:08:58:75:a2:f3:31:d2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456 Validity Not Before: Dec 6 17:00:46 2025 GMT Not After : Dec 7 17:00:46 2025 GMT Subject: CN=26de8ad1566a4264a9d92e0d0f0d47abe72f760f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:0d:08:37:36:61:09:9c:22:c1:fd:e1:a3: be:02:e8:ab:d2:51:2c:91:fa:39:30:84:28:b1:d6: 64:5f:e5:da:52:b3:3c:24:33:95:53:54:21:54:32: ab:4c:cd:ba:f7:b6:dc:63:ab:d7:0c:e0:28:b9:94: 25:10:61:13:11:04:1b:b8:4f:3e:ed:c5:32:8b:e0: 2f:09:53:02:6d:f6:52:8a:51:25:0c:96:43:5e:ff: e9:21:3a:77:84:6c:a0:ce:b4:2f:1d:4c:b4:be:70: 61:5b:ae:c5:44:b1:67:67:35:96:98:8a:a0:d4:5e: 72:75:ec:22:8f:0b:4c:a7:4d:2b:5e:b9:19:23:c5: 00:aa:39:c5:18:70:00:2b:e8:07:2d:e5:cc:d9:af: e2:6f:2b:c9:5f:47:0f:77:bc:7f:a0:68:f3:f2:d1: 60:75:7b:48:27:00:fc:90:a4:b2:43:7b:10:fa:1b: 17:82:c8:e2:ee:65:70:05:08:9e:76:18:fe:20:2a: 95:73:d6:8a:85:bc:a2:08:24:97:bd:91:e5:8c:ae: 7d:2f:57:9d:1d:dd:e1:a4:f5:61:b9:2f:06:56:39: 0f:32:9e:66:6e:be:e1:91:3a:53:b8:80:a3:d2:30: 7a:64:b6:1d:0b:18:24:5e:05:aa:c3:a0:5a:ac:da: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:8A:D1:56:6A:42:64:A9:D9:2E:0D:0F:0D:47:AB:E7:2F:76:0F X509v3 Authority Key Identifier: keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:26:07:d7:45:ae:ef:b9:ca:e5:8e:16:14:03:96:e7:d8:50: 83:01:be:86:9f:39:a1:a3:84:b2:8d:82:34:d9:8d:c7:21:ef: 79:e9:9f:7d:60:48:22:bb:8f:96:f6:32:41:3b:d6:bb:2c:41: df:ef:7e:f7:48:c2:41:9a:1b:62:39:b1:9e:bc:43:a1:29:c0: 6a:c1:4a:df:d0:8f:83:eb:84:16:dc:5f:6b:c3:43:14:9f:ff: 6f:7c:56:3d:46:ba:51:c3:4a:bf:f1:d9:e0:0f:08:b5:3f:0f: 21:3e:45:0a:64:64:0f:72:ae:4c:88:90:42:6b:6a:4e:66:0e: 2f:3e:e0:fd:9a:48:42:45:9d:80:77:63:81:be:e1:aa:01:f9: 03:96:62:e8:86:de:96:2f:3a:a3:05:5c:43:36:4e:72:a6:e3: e6:8b:b6:fe:33:a8:ed:3e:c7:e0:0a:ac:ef:53:92:d0:22:03: 91:66:d1:b1:0f:94:3a:78:a4:52:3a:28:71:e3:4e:80:9d:93: ff:ad:0e:c9:78:a5:de:b4:df:c8:52:2b:10:ec:d9:d4:cb:8b: f4:25:a8:6b:91:81:42:81:03:b3:f4:c4:f5:a4:42:f3:e2:5a: 97:52:18:ed:e9:3e:87:19:6f:39:db:41:db:4b:80:3f:25:65: 31:e3:60:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m97VYn5ktQhYdaLzMdI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5 MDc0NTYwHhcNMjUxMjA2MTcwMDQ2WhcNMjUxMjA3MTcwMDQ2WjAzMTEwLwYDVQQD EygyNmRlOGFkMTU2NmE0MjY0YTlkOTJlMGQwZjBkNDdhYmU3MmY3NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrYNCDc2YQmcIsH94aO+Auir0lEs kfo5MIQosdZkX+XaUrM8JDOVU1QhVDKrTM2697bcY6vXDOAouZQlEGETEQQbuE8+ 7cUyi+AvCVMCbfZSilElDJZDXv/pITp3hGygzrQvHUy0vnBhW67FRLFnZzWWmIqg 1F5ydewijwtMp00rXrkZI8UAqjnFGHAAK+gHLeXM2a/ibyvJX0cPd7x/oGjz8tFg dXtIJwD8kKSyQ3sQ+hsXgsji7mVwBQiedhj+ICqVc9aKhbyiCCSXvZHljK59L1ed Hd3hpPVhuS8GVjkPMp5mbr7hkTpTuICj0jB6ZLYdCxgkXgWqw6BarNqFAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbeitFWakJkqdkuDQ8NR6vnL3YPMB8GA1UdIwQY MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiYH10Wu 77nK5Y4WFAOW59hQgwG+hp85oaOEso2CNNmNxyHveemffWBIIruPlvYyQTvWuyxB 3+9+90jCQZobYjmxnrxDoSnAasFK39CPg+uEFtxfa8NDFJ//b3xWPUa6UcNKv/HZ 4A8ItT8PIT5FCmRkD3KuTIiQQmtqTmYOLz7g/ZpIQkWdgHdjgb7hqgH5A5Zi6Ibe li86owVcQzZOcqbj5ou2/jOo7T7H4Aqs71OS0CIDkWbRsQ+UOnikUjooceNOgJ2T /60OyXil3rTfyFIrEOzZ1MuL9CWoa5GBQoEDs/TE9aRC8+Jal1IY7ek+hxlvOdtB 20uAPyVlMeNgnA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:49 2025 by rpki-client