This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json) Hash identifier: a7sHg85A6PJ7y4xIROqw/6cBKtad3iPM24GczjKSwKc= Subject key identifier: A7:A5:C7:6A:AE:18:E7:84:02:7E:1C:77:01:38:BC:1A:A6:49:83:29 Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Certificate serial: 019B1E3C728596C16B7492983F9CC3891789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 19:00:36 +0000 Manifest this update: Sun 14 Dec 2025 19:00:36 +0000 Manifest next update: Mon 15 Dec 2025 19:00:36 +0000 Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: 2UlsxZfpBAs+QuPMLhfhGCMCaw8pI9N3rXH72t/u0S8=) 2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:72:85:96:c1:6b:74:92:98:3f:9c:c3:89:17:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Validity Not Before: Dec 14 19:00:36 2025 GMT Not After : Dec 15 19:00:36 2025 GMT Subject: CN=a7a5c76aae18e784027e1c770138bc1aa6498329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d4:87:61:b7:ae:6c:5c:29:e5:0e:82:63:9f: b9:5a:2a:27:83:08:29:6a:17:e1:38:4a:3c:ce:f9: 9a:fb:76:91:4a:cb:b3:75:24:75:c9:2e:87:c2:16: 7f:71:f9:4b:ca:fe:60:3d:d2:b4:42:4d:68:4c:60: 36:d5:7d:d6:90:4b:07:88:20:3a:2a:ea:8a:45:9e: 32:87:e1:aa:b0:7d:c2:8b:53:8e:93:c4:72:0b:4d: 9f:b1:08:e0:e6:ae:e5:d7:d8:c0:57:44:1e:e8:99: c3:1d:09:bd:ca:2e:aa:25:6a:2c:a7:1c:c6:30:79: 7c:de:20:06:8f:d2:48:93:10:84:fc:ab:c5:5d:57: 40:40:5a:01:63:7b:7f:cf:8c:c1:27:d4:14:f0:a2: 74:c0:cc:80:f1:7a:3d:ec:be:24:0e:dd:77:4c:c4: ad:a1:1e:79:f2:e6:26:71:97:e0:cb:43:9b:c8:da: 2d:c4:98:4f:61:d0:3d:12:eb:bf:59:7d:37:58:db: 0c:22:af:17:c2:11:77:51:17:ab:9e:46:aa:2f:7d: ef:b1:e1:65:4a:86:01:35:08:5d:6a:51:43:a1:3a: 8e:c9:9c:ca:e5:ad:db:9f:08:8b:3e:12:69:e3:7b: 01:ab:00:ea:d7:ac:27:fa:cb:db:ae:ec:4e:ae:fc: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A5:C7:6A:AE:18:E7:84:02:7E:1C:77:01:38:BC:1A:A6:49:83:29 X509v3 Authority Key Identifier: keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f5:01:09:fc:67:8a:6f:82:e7:5a:37:a7:62:e6:58:9c:d6: fe:90:5b:6e:f2:2e:cc:cb:5d:c6:4e:b7:28:52:d3:54:4c:9b: 44:bb:7c:a9:c5:08:91:57:00:e0:a7:3a:e6:23:4f:82:44:8a: 85:55:44:3c:fd:1a:76:f0:64:2a:9a:e5:e4:1f:6e:8f:d9:22: 0e:cd:49:b9:19:88:72:5a:fc:38:27:6d:49:46:f5:d2:fc:68: f7:5a:f1:00:bc:3b:07:4a:d7:13:a2:f6:f1:c5:64:51:37:f5: 95:ee:e0:d6:65:99:1b:1a:16:fd:99:f6:a8:f9:e3:bd:c3:b9: 33:11:74:a9:d0:16:c0:af:ee:c5:e5:79:74:a4:5f:b4:a3:12: 6c:d2:cf:ca:ad:32:cb:26:34:c1:cb:fd:fa:0d:fe:e7:da:07: bf:1d:73:50:dc:d7:d0:c4:74:a4:19:45:1b:13:40:63:1c:e3: 74:7b:78:ea:42:67:af:5c:bc:fe:a6:28:88:41:1e:ec:da:85: cc:55:b7:e6:f7:8b:36:61:a7:af:51:fc:b8:cb:29:c7:0b:32: 02:5c:e5:48:a0:bc:30:fb:06:00:d1:26:31:69:a2:e0:8a:4a: cf:4f:18:3f:c9:c5:ee:16:c1:46:ec:de:70:c0:15:05:05:4e: cb:9d:8e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePHKFlsFrdJKYP5zDiReJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2ZkYWVlMWU5ZWFiZDgwMjM3NjAyOTYxYmFhMjVhYmM2 OWNkNjQwHhcNMjUxMjE0MTkwMDM2WhcNMjUxMjE1MTkwMDM2WjAzMTEwLwYDVQQD EyhhN2E1Yzc2YWFlMThlNzg0MDI3ZTFjNzcwMTM4YmMxYWE2NDk4MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NSHYbeubFwp5Q6CY5+5Wiongwgp ahfhOEo8zvma+3aRSsuzdSR1yS6HwhZ/cflLyv5gPdK0Qk1oTGA21X3WkEsHiCA6 KuqKRZ4yh+GqsH3Ci1OOk8RyC02fsQjg5q7l19jAV0Qe6JnDHQm9yi6qJWospxzG MHl83iAGj9JIkxCE/KvFXVdAQFoBY3t/z4zBJ9QU8KJ0wMyA8Xo97L4kDt13TMSt oR558uYmcZfgy0ObyNotxJhPYdA9Euu/WX03WNsMIq8XwhF3URernkaqL33vseFl SoYBNQhdalFDoTqOyZzK5a3bnwiLPhJp43sBqwDq16wn+svbruxOrvwhhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKelx2quGOeEAn4cdwE4vBqmSYMpMB8GA1UdIwQY MBaAFOzP2u4enqvYAjdgKWG6olq8ac1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt M2YxYzE1MjNhMTIzLzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz LzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfUBCfxn im+C51o3p2LmWJzW/pBbbvIuzMtdxk63KFLTVEybRLt8qcUIkVcA4Kc65iNPgkSK hVVEPP0advBkKprl5B9uj9kiDs1JuRmIclr8OCdtSUb10vxo91rxALw7B0rXE6L2 8cVkUTf1le7g1mWZGxoW/Zn2qPnjvcO5MxF0qdAWwK/uxeV5dKRftKMSbNLPyq0y yyY0wcv9+g3+59oHvx1zUNzX0MR0pBlFGxNAYxzjdHt46kJnr1y8/qYoiEEe7NqF zFW35veLNmGnr1H8uMspxwsyAlzlSKC8MPsGANEmMWmi4IpKz08YP8nF7hbBRuze cMAVBQVOy52ONg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:06 2025 by rpki-client