This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json) Hash identifier: JSBZwr/UHtKjHkXwxJvUZIZJDsHg8p+o5FOjfBUsX0c= Subject key identifier: DD:14:64:06:81:9B:23:18:07:69:CA:07:DB:7D:DB:73:B6:2D:04:48 Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Certificate serial: 019B25F63E9CDFF080D3ED2F3A360BBF5A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 07:00:53 +0000 Manifest this update: Tue 16 Dec 2025 07:00:53 +0000 Manifest next update: Wed 17 Dec 2025 07:00:53 +0000 Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: vT8Kbbh8zqRVObxYWeCMS2/SCO6B42yAf5s+zYOzdEk=) 2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:3e:9c:df:f0:80:d3:ed:2f:3a:36:0b:bf:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Validity Not Before: Dec 16 07:00:53 2025 GMT Not After : Dec 17 07:00:53 2025 GMT Subject: CN=dd146406819b23180769ca07db7ddb73b62d0448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:bc:e4:32:b0:3a:04:d4:85:6f:fe:7c:fe: db:9a:0c:32:f8:c4:14:0f:66:8f:a3:fa:5e:3c:1d: 3d:64:82:7d:6d:5f:af:12:3b:c2:35:0d:52:f5:2f: f2:ce:4e:ae:41:5e:db:ac:9c:05:0a:54:f6:fa:42: c8:81:03:88:5b:37:24:55:e5:c1:ae:37:99:19:ad: fb:d5:e9:1c:2f:6a:ad:4e:28:d7:79:92:7a:d0:43: 2b:7a:4c:d5:f8:e4:2e:a2:c1:ab:be:43:7b:99:f3: 36:22:c4:03:f8:42:d4:d6:e2:fc:aa:07:49:f5:fa: a0:8e:66:70:7c:d2:ff:dd:fa:c1:33:20:7d:0a:ef: da:09:bc:b7:13:bd:7c:21:e7:f9:51:ab:55:f6:33: a3:23:ec:0c:9b:da:a7:20:8f:b2:b4:3c:f5:91:57: 5b:52:f6:1b:d7:d2:33:16:74:cb:71:bc:73:a4:8c: 58:b4:3a:9d:62:76:b5:a7:ff:69:4a:33:7e:56:38: c9:e8:e2:b6:f8:bc:7f:73:9a:14:db:26:39:46:76: df:39:13:fd:b4:8f:0f:23:88:80:0a:4c:7e:56:05: 3c:7b:b4:79:f5:35:44:cd:7c:c1:0d:d0:b1:81:d9: 99:d8:16:3a:8c:f7:57:3d:eb:e5:1c:76:d5:f6:ae: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:64:06:81:9B:23:18:07:69:CA:07:DB:7D:DB:73:B6:2D:04:48 X509v3 Authority Key Identifier: keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c1:45:63:41:9d:82:2d:52:fe:06:17:5f:5e:7f:a9:d2:09: 8b:67:a5:04:51:43:fc:43:e8:96:4c:6c:7d:b6:aa:18:9f:d7: 28:75:a5:7e:39:ea:0f:7c:c5:bb:ef:ab:fb:87:83:e4:63:35: 4b:cb:ce:5e:16:22:db:66:33:43:c6:b8:86:e6:24:54:b8:76: cb:0d:b8:d2:c0:55:64:8b:ac:d7:9e:34:6f:33:81:99:59:be: 50:37:e8:1b:73:05:23:73:5c:a9:97:10:bd:74:a3:83:13:64: a5:10:10:d1:b4:e3:d3:9a:46:35:04:95:0c:50:c9:ff:b0:58: 88:88:16:7b:49:42:8e:5d:c9:ad:7a:9c:b2:36:1a:60:ef:00: 70:72:92:5e:78:0a:9b:17:99:f9:51:9b:a2:1a:16:4c:8b:4b: e7:fb:2f:56:b2:e4:24:ce:dd:91:b5:06:f1:46:46:fb:0f:f9: 6c:e0:eb:1b:b4:35:d9:98:6c:4d:63:97:00:e1:f5:f1:a2:5d: c5:7d:d0:b8:de:60:bb:d5:b3:79:e5:f0:8c:6b:5e:c3:b6:a1: e3:fd:77:6f:07:8f:27:21:18:c7:9c:9c:6f:17:82:f9:e6:27: cd:ef:e7:7c:13:8a:42:24:d7:4b:d4:1e:07:5a:dd:17:07:c2: 94:1e:58:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9j6c3/CA0+0vOjYLv1ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx MTAwYTMwHhcNMjUxMjE2MDcwMDUzWhcNMjUxMjE3MDcwMDUzWjAzMTEwLwYDVQQD EyhkZDE0NjQwNjgxOWIyMzE4MDc2OWNhMDdkYjdkZGI3M2I2MmQwNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXW85DKwOgTUhW/+fP7bmgwy+MQU D2aPo/pePB09ZIJ9bV+vEjvCNQ1S9S/yzk6uQV7brJwFClT2+kLIgQOIWzckVeXB rjeZGa371ekcL2qtTijXeZJ60EMrekzV+OQuosGrvkN7mfM2IsQD+ELU1uL8qgdJ 9fqgjmZwfNL/3frBMyB9Cu/aCby3E718Ief5UatV9jOjI+wMm9qnII+ytDz1kVdb UvYb19IzFnTLcbxzpIxYtDqdYna1p/9pSjN+VjjJ6OK2+Lx/c5oU2yY5RnbfORP9 tI8PI4iACkx+VgU8e7R59TVEzXzBDdCxgdmZ2BY6jPdXPevlHHbV9q78iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0UZAaBmyMYB2nKB9t923O2LQRIMB8GA1UdIwQY MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8FFY0Gd gi1S/gYXX15/qdIJi2elBFFD/EPolkxsfbaqGJ/XKHWlfjnqD3zFu++r+4eD5GM1 S8vOXhYi22YzQ8a4huYkVLh2yw240sBVZIus1540bzOBmVm+UDfoG3MFI3NcqZcQ vXSjgxNkpRAQ0bTj05pGNQSVDFDJ/7BYiIgWe0lCjl3JrXqcsjYaYO8AcHKSXngK mxeZ+VGbohoWTItL5/svVrLkJM7dkbUG8UZG+w/5bODrG7Q12ZhsTWOXAOH18aJd xX3QuN5gu9WzeeXwjGtew7ah4/13bwePJyEYx5ycbxeC+eYnze/nfBOKQiTXS9Qe B1rdFwfClB5Yuw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:01:57 2025 by rpki-client