This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft File: 7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json) Hash identifier: gBzg298zBIRGMHN0lpKb0Ym9n+noWBsYI8laBDSWnzk= Subject key identifier: 93:F5:18:A3:EC:7A:73:F9:26:5D:22:57:C4:1F:95:A6:55:AF:A2:33 Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d Certificate serial: 019B330D56D6135ACF4970EE62A87A87DF97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft Manifest number: 0748 Signing time: Thu 18 Dec 2025 20:01:10 +0000 Manifest this update: Thu 18 Dec 2025 20:01:10 +0000 Manifest next update: Fri 19 Dec 2025 20:01:10 +0000 Files and hashes: 1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: DPDAMqAO3lJ7hB3bDXhpQ1aS8RLM+GRZ2vvYS/oeqm0=) 2: cOvqfWc0KSjggAuY6_9kDhPxPi4.roa (hash: qOhF3wsSLpYe0ueqSqnl30WHCmyv59VHWzhvhRJuKFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:56:d6:13:5a:cf:49:70:ee:62:a8:7a:87:df:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d Validity Not Before: Dec 18 20:01:10 2025 GMT Not After : Dec 19 20:01:10 2025 GMT Subject: CN=93f518a3ec7a73f9265d2257c41f95a655afa233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:57:66:c1:84:8f:22:7e:99:47:6e:ad:2f: 89:65:5f:d0:11:81:bd:3d:9a:b1:77:d8:f4:b2:1a: 75:d2:fa:0e:b2:06:55:5e:94:2f:46:50:10:1a:3c: 52:27:1d:78:75:4a:b9:c2:c7:81:42:e0:b7:8a:29: 98:48:0b:49:25:bb:41:5c:fb:16:12:7e:b3:b9:23: aa:41:da:3c:65:08:ef:39:f9:a3:d8:f0:5e:3b:16: 0d:cd:02:c0:7c:ec:2a:fe:c1:d5:c9:30:20:f2:6b: e4:6a:f7:da:e3:70:4f:da:8c:c4:39:19:0e:b5:51: 11:83:e9:d5:d9:1c:f9:da:28:c5:f4:cb:24:c6:bf: 7b:5e:e7:2a:f2:21:68:b9:93:c4:98:bd:13:b1:e0: b9:02:3c:52:5b:c6:f0:68:45:60:e9:62:5e:eb:df: c1:60:ed:87:b1:f1:6b:b8:4e:c3:d2:b7:73:4c:94: 71:7a:2a:85:7d:8c:b2:65:bb:dd:70:1b:6a:ad:39: fc:35:ad:a5:45:69:85:d8:a7:1d:68:70:37:49:3c: e2:d3:2e:c3:a2:7f:38:9f:01:de:90:f2:37:30:4e: 39:cd:8b:ae:4b:3e:68:51:09:3b:d0:24:e5:0f:dd: 55:61:8b:7b:7d:23:6f:c4:d1:8e:cc:90:6d:34:d9: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F5:18:A3:EC:7A:73:F9:26:5D:22:57:C4:1F:95:A6:55:AF:A2:33 X509v3 Authority Key Identifier: keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:92:4e:02:ba:27:a2:5a:96:8c:b1:d0:e7:78:5c:ac:d5:cb: 07:2b:eb:13:72:09:3c:0f:c9:92:bc:23:5c:bd:a7:c7:69:87: 21:f7:62:97:20:f8:2d:a6:d5:e6:f5:81:ec:61:6b:8c:2f:61: 45:2c:5b:aa:57:f5:65:f1:df:7e:b0:d9:24:8c:62:95:96:8d: 84:5d:ed:17:a4:e5:2a:ea:e0:60:eb:99:aa:fa:87:41:80:4c: b4:d0:60:74:67:31:93:20:8e:6d:71:1e:a5:58:46:93:d1:74: b1:e2:af:4a:f2:02:54:96:f5:11:0f:6e:63:4e:ab:b2:6a:c7: 66:b8:cb:f7:93:7b:a6:af:8e:cd:57:ad:5b:c3:a5:a0:22:69: 49:b0:2a:ce:35:bc:ba:04:79:b2:11:bc:50:ec:32:b6:3f:2b: e7:46:58:bc:1e:6b:0c:04:84:53:7d:c9:2f:c7:6b:52:f0:a0: 81:b0:32:7c:72:66:60:f8:e8:6f:3b:61:20:72:a3:85:25:ab: 46:2c:c6:94:ac:0b:07:fc:f8:29:1d:29:42:c5:d2:c8:78:a1: b6:cd:f0:e0:c6:f7:de:4f:8f:bf:0c:9e:1e:48:92:60:5e:52: 54:35:17:f2:d2:96:79:77:40:9b:6f:57:23:fc:6a:54:60:46: d6:d8:a9:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDVbWE1rPSXDuYqh6h9+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYzIzYjBlNzgyMGJjM2VjZDRmODcwOGU3Yjk5MGVkZDY5 MjBkNWQwHhcNMjUxMjE4MjAwMTEwWhcNMjUxMjE5MjAwMTEwWjAzMTEwLwYDVQQD Eyg5M2Y1MThhM2VjN2E3M2Y5MjY1ZDIyNTdjNDFmOTVhNjU1YWZhMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBhXZsGEjyJ+mUdurS+JZV/QEYG9 PZqxd9j0shp10voOsgZVXpQvRlAQGjxSJx14dUq5wseBQuC3iimYSAtJJbtBXPsW En6zuSOqQdo8ZQjvOfmj2PBeOxYNzQLAfOwq/sHVyTAg8mvkavfa43BP2ozEORkO tVERg+nV2Rz52ijF9Mskxr97Xucq8iFouZPEmL0TseC5AjxSW8bwaEVg6WJe69/B YO2HsfFruE7D0rdzTJRxeiqFfYyyZbvdcBtqrTn8Na2lRWmF2KcdaHA3STzi0y7D on84nwHekPI3ME45zYuuSz5oUQk70CTlD91VYYt7fSNvxNGOzJBtNNl83QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP1GKPsenP5Jl0iV8QflaZVr6IzMB8GA1UdIwQY MBaAFO7COw54ILw+zU+HCOe5kO3Wkg1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWFhNDgtM2VkNi00YjcyLWFhNzYt OGNlYmM1ZDE2NDg5LzEvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNWFhNDgtM2VkNi00YjcyLWFhNzYtOGNlYmM1ZDE2NDg5 LzEvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZJOAron olqWjLHQ53hcrNXLByvrE3IJPA/JkrwjXL2nx2mHIfdilyD4LabV5vWB7GFrjC9h RSxbqlf1ZfHffrDZJIxilZaNhF3tF6TlKurgYOuZqvqHQYBMtNBgdGcxkyCObXEe pVhGk9F0seKvSvICVJb1EQ9uY06rsmrHZrjL95N7pq+OzVetW8OloCJpSbAqzjW8 ugR5shG8UOwytj8r50ZYvB5rDASEU33JL8drUvCggbAyfHJmYPjobzthIHKjhSWr RizGlKwLB/z4KR0pQsXSyHihts3w4Mb33k+PvwyeHkiSYF5SVDUX8tKWeXdAm29X I/xqVGBG1tipgA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:47 2025 by rpki-client