This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json) Hash identifier: 0ghWlLo8jE+wElXiIcvm5PbD3VYoNhbkkS0xuOc48oc= Subject key identifier: B7:C5:04:B1:5B:4A:E1:15:04:85:95:5B:33:E3:D6:6B:1E:80:91:CF Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41 Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741 Certificate serial: 019B378ED17DCEA0603DC62F5AE7D2C409FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft Manifest number: 1285 Signing time: Fri 19 Dec 2025 17:01:05 +0000 Manifest this update: Fri 19 Dec 2025 17:01:05 +0000 Manifest next update: Sat 20 Dec 2025 17:01:05 +0000 Files and hashes: 1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: WsHeId+u9cm1pXF5khKowz/DwPbMMBa5ECEirabpuak=) 2: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (hash: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d1:7d:ce:a0:60:3d:c6:2f:5a:e7:d2:c4:09:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741 Validity Not Before: Dec 19 17:01:05 2025 GMT Not After : Dec 20 17:01:05 2025 GMT Subject: CN=b7c504b15b4ae1150485955b33e3d66b1e8091cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:bf:2e:c3:74:b2:ce:ed:c9:37:41:cf:3e: 68:d5:8f:1b:e8:4f:70:06:0b:e7:79:d0:eb:5a:5f: 39:8b:6f:04:22:f2:90:fc:58:22:f4:d1:db:2e:b4: fb:d4:a8:df:eb:c0:44:a4:95:8d:0e:22:7a:b7:ed: c8:03:9e:85:52:46:59:b6:ec:12:5c:99:ab:df:55: 8d:4e:35:ff:17:fb:ba:8b:4d:3c:dc:dd:a8:61:dd: 4d:cf:dd:e4:57:05:52:f1:89:d3:19:67:b9:52:0d: b3:a1:62:87:c4:61:06:dc:b2:79:1d:d4:54:07:64: 0f:e7:26:74:5f:12:a0:84:5d:23:d2:2a:d5:08:5f: c8:0d:0f:4c:42:6e:d1:69:aa:1a:34:6a:3f:64:c7: 6c:9e:09:9b:e7:b0:cf:f7:5e:7f:01:00:ff:f9:7b: db:5b:b4:33:b5:5b:81:1c:1f:92:62:a3:74:76:85: 16:a7:ce:6b:f6:20:be:18:16:b1:1e:7c:49:d9:0a: da:fa:7e:2a:58:9c:0a:a1:5f:f6:39:20:e8:be:d9: f3:fc:f2:b6:8a:22:59:f5:d3:ac:99:4a:2e:2e:14: 04:5b:cb:f0:bc:91:9d:00:0c:fb:4a:7a:4d:0d:36: 86:d8:08:7b:cb:c4:99:cd:a5:b3:0d:99:13:ee:de: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C5:04:B1:5B:4A:E1:15:04:85:95:5B:33:E3:D6:6B:1E:80:91:CF X509v3 Authority Key Identifier: keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:33:bb:15:e4:10:1f:74:dd:38:fb:d0:05:25:cd:bd:ff:8c: 19:75:31:d6:82:ba:7b:e4:45:f7:69:1f:ab:90:9a:b2:25:4a: 15:6a:3d:d9:66:6f:d1:97:6d:15:4f:98:f2:e7:48:13:77:64: 9f:b1:96:3a:54:24:19:44:a7:e9:d8:7b:df:e8:61:30:e1:e6: 2b:d2:9e:88:2e:f9:e4:f4:c4:fe:f7:3f:b4:83:30:f7:1a:7f: ca:d3:0a:29:71:42:09:92:84:dd:c9:01:e2:06:60:d7:7a:16: b8:22:61:88:e8:37:e8:a1:c0:e0:49:72:0b:12:63:e3:88:94: 85:28:94:9b:74:31:e5:28:7d:9f:41:e7:f3:a1:8a:5e:60:2a: 48:3c:9f:63:5c:bc:c8:7f:be:93:f5:f7:03:0a:c4:c0:a6:cf: b4:36:1c:fc:16:f2:60:57:1f:3d:3d:0f:96:80:6b:92:df:58: 26:83:a1:b6:d0:18:d9:0e:32:bd:df:bd:a1:ee:14:a9:66:ad: ec:b6:a6:8b:2a:42:81:5f:37:8f:e7:d8:f6:59:89:73:44:46: d6:51:55:44:8d:0d:20:6c:c1:a8:35:d8:3e:78:1f:7a:88:dd: 92:d9:d8:b2:d9:a4:09:83:f3:e5:b1:38:d4:a0:27:4f:00:4d: ae:75:38:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtF9zqBgPcYvWufSxAn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0 Y2U3NDEwHhcNMjUxMjE5MTcwMTA1WhcNMjUxMjIwMTcwMTA1WjAzMTEwLwYDVQQD EyhiN2M1MDRiMTViNGFlMTE1MDQ4NTk1NWIzM2UzZDY2YjFlODA5MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXC/LsN0ss7tyTdBzz5o1Y8b6E9w BgvnedDrWl85i28EIvKQ/Fgi9NHbLrT71Kjf68BEpJWNDiJ6t+3IA56FUkZZtuwS XJmr31WNTjX/F/u6i0083N2oYd1Nz93kVwVS8YnTGWe5Ug2zoWKHxGEG3LJ5HdRU B2QP5yZ0XxKghF0j0irVCF/IDQ9MQm7RaaoaNGo/ZMdsngmb57DP915/AQD/+Xvb W7QztVuBHB+SYqN0doUWp85r9iC+GBaxHnxJ2Qra+n4qWJwKoV/2OSDovtnz/PK2 iiJZ9dOsmUouLhQEW8vwvJGdAAz7SnpNDTaG2Ah7y8SZzaWzDZkT7t6DIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfFBLFbSuEVBIWVWzPj1msegJHPMB8GA1UdIwQY MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt OTgxZmJiMzQ0MmRkLzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjO7FeQQ H3TdOPvQBSXNvf+MGXUx1oK6e+RF92kfq5CasiVKFWo92WZv0ZdtFU+Y8udIE3dk n7GWOlQkGUSn6dh73+hhMOHmK9KeiC755PTE/vc/tIMw9xp/ytMKKXFCCZKE3ckB 4gZg13oWuCJhiOg36KHA4ElyCxJj44iUhSiUm3Qx5Sh9n0Hn86GKXmAqSDyfY1y8 yH++k/X3AwrEwKbPtDYc/BbyYFcfPT0PloBrkt9YJoOhttAY2Q4yvd+9oe4UqWat 7LamiypCgV83j+fY9lmJc0RG1lFVRI0NIGzBqDXYPngfeojdktnYstmkCYPz5bE4 1KAnTwBNrnU4Rg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:06:54 2025 by rpki-client