This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json) Hash identifier: expnhgKdajzcfON8nl0ARcMO1LCAQoQ4IfgWdpj4GPA= Subject key identifier: 12:C0:7B:15:32:C1:54:BE:74:CD:98:0A:74:F0:85:8F:3E:D3:BB:4A Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Certificate serial: 019B3AFD8B19D30E2F031A2308119BB63D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft Manifest number: 13C7 Signing time: Sat 20 Dec 2025 09:00:53 +0000 Manifest this update: Sat 20 Dec 2025 09:00:53 +0000 Manifest next update: Sun 21 Dec 2025 09:00:53 +0000 Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: 8+74j+6wXV2im4AhP7KArsxgCcv8JtkpxSiQKIqCkiU=) 2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=) 3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:8b:19:d3:0e:2f:03:1a:23:08:11:9b:b6:3d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Validity Not Before: Dec 20 09:00:53 2025 GMT Not After : Dec 21 09:00:53 2025 GMT Subject: CN=12c07b1532c154be74cd980a74f0858f3ed3bb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8c:60:4b:a7:c4:52:db:c5:1c:93:11:51:01: 12:f3:4a:7a:30:8e:72:be:fd:0b:a2:51:1f:05:2c: 46:14:00:3f:79:3a:01:fb:71:d2:e5:98:cc:a0:ef: 25:42:fb:be:1e:ac:4d:89:af:c4:6f:fe:0d:24:02: 59:e9:8f:ff:e8:2b:dc:9f:c6:50:49:a1:0e:ca:eb: cc:c9:24:5a:a7:a3:f7:be:75:93:af:15:c9:69:97: 24:bf:35:e0:09:92:b3:38:96:12:dd:c8:38:ba:d1: 23:d9:a5:12:7b:8c:d9:75:a5:46:18:ea:29:43:b4: 5b:53:6b:4b:3b:01:6a:78:ba:98:69:12:96:33:98: 7a:a9:d1:72:a7:96:e2:3c:7f:67:55:fa:13:3b:fe: 4c:c7:70:e4:e0:aa:1e:bb:05:c7:ed:96:a0:ee:a8: 97:8b:a0:ac:ad:ef:ba:2b:5a:4c:c6:3b:4b:63:fc: bc:f7:29:0e:3a:68:8d:e6:8e:94:ec:b6:a1:e0:2a: d3:f6:20:35:99:14:aa:3c:c3:df:4c:a7:2b:90:4a: 30:c4:73:a9:27:4a:d5:44:3c:59:f3:21:8e:45:e2: 8d:24:ed:36:04:8c:82:65:b8:dc:25:20:31:20:d2: 64:2f:d2:2d:4a:1a:77:ce:10:1c:27:53:13:97:f5: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:7B:15:32:C1:54:BE:74:CD:98:0A:74:F0:85:8F:3E:D3:BB:4A X509v3 Authority Key Identifier: keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5f:be:ea:77:4f:2b:5e:5b:12:05:06:e3:3a:51:8e:f7:fd: fc:2d:f7:4f:2d:21:72:d6:dc:30:b2:39:12:40:1a:94:db:64: 8d:70:7e:a7:bb:8f:1d:f2:ee:08:76:25:eb:80:79:54:ed:7a: e7:23:9e:d6:89:74:0a:f1:ee:03:2f:b3:37:af:2a:03:37:93: b8:12:61:d5:bc:4d:49:bb:5f:08:43:73:2b:1e:2b:2b:64:64: ec:7e:35:03:e9:9d:a1:44:da:b9:be:1a:2f:5c:b0:47:de:ac: 30:57:a8:5d:37:0a:8e:f2:c0:dd:d0:5f:1e:a1:d5:d3:ac:fe: fc:a9:bd:aa:da:f5:a5:1f:aa:c6:5e:57:f3:1d:bc:90:d4:60: 1c:6c:59:20:a4:b3:ed:9e:15:45:fa:95:b5:b3:2c:45:7d:9b: 77:e9:8f:f4:5e:17:4b:c7:66:29:85:a3:0c:9a:34:4b:0a:64: 49:f0:30:4a:b5:ed:f5:39:bd:64:7b:ab:b2:23:fa:eb:cb:3b: 06:de:23:78:35:66:8b:3c:33:c6:16:bb:3b:00:de:3e:a0:48: ff:f6:24:e4:b8:96:ff:dd:1a:3f:1c:9d:cc:91:3e:29:dd:78: 0b:c3:ae:3d:73:1c:be:a2:c9:f8:81:04:34:6c:ad:4a:32:47: 3e:8d:e8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/YsZ0w4vAxojCBGbtj2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4 ODg4YzEwHhcNMjUxMjIwMDkwMDUzWhcNMjUxMjIxMDkwMDUzWjAzMTEwLwYDVQQD EygxMmMwN2IxNTMyYzE1NGJlNzRjZDk4MGE3NGYwODU4ZjNlZDNiYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oxgS6fEUtvFHJMRUQES80p6MI5y vv0LolEfBSxGFAA/eToB+3HS5ZjMoO8lQvu+HqxNia/Eb/4NJAJZ6Y//6Cvcn8ZQ SaEOyuvMySRap6P3vnWTrxXJaZckvzXgCZKzOJYS3cg4utEj2aUSe4zZdaVGGOop Q7RbU2tLOwFqeLqYaRKWM5h6qdFyp5biPH9nVfoTO/5Mx3Dk4KoeuwXH7Zag7qiX i6Csre+6K1pMxjtLY/y89ykOOmiN5o6U7Lah4CrT9iA1mRSqPMPfTKcrkEowxHOp J0rVRDxZ8yGOReKNJO02BIyCZbjcJSAxINJkL9ItShp3zhAcJ1MTl/XL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLAexUywVS+dM2YCnTwhY8+07tKMB8GA1UdIwQY MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt NTZmNmVjYzFjMTIxLzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEtNTZmNmVjYzFjMTIx LzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXl++6ndP K15bEgUG4zpRjvf9/C33Ty0hctbcMLI5EkAalNtkjXB+p7uPHfLuCHYl64B5VO16 5yOe1ol0CvHuAy+zN68qAzeTuBJh1bxNSbtfCENzKx4rK2Rk7H41A+mdoUTaub4a L1ywR96sMFeoXTcKjvLA3dBfHqHV06z+/Km9qtr1pR+qxl5X8x28kNRgHGxZIKSz 7Z4VRfqVtbMsRX2bd+mP9F4XS8dmKYWjDJo0SwpkSfAwSrXt9Tm9ZHursiP668s7 Bt4jeDVmizwzxha7OwDePqBI//Yk5LiW/90aPxydzJE+Kd14C8OuPXMcvqLJ+IEE NGytSjJHPo3oTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:29:17 2025 by rpki-client