This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json) Hash identifier: Cdggqyg1oaJDSUnAeapS8IU912xC6AxCZ6/Y1DHyTJ0= Subject key identifier: 4A:B9:EA:DD:8C:4E:A4:A5:F2:3C:3E:39:AF:F8:6D:D0:DB:40:9E:E1 Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13 Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213 Certificate serial: 019B35A09387BE7ADD94365F5A1D9003F40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft Manifest number: 04C7 Signing time: Fri 19 Dec 2025 08:01:14 +0000 Manifest this update: Fri 19 Dec 2025 08:01:14 +0000 Manifest next update: Sat 20 Dec 2025 08:01:14 +0000 Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: 6+AWnB9YO6OosPezjDhCv8uPRa50toTE1bjyRUOeiOY=) 2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:93:87:be:7a:dd:94:36:5f:5a:1d:90:03:f4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213 Validity Not Before: Dec 19 08:01:14 2025 GMT Not After : Dec 20 08:01:14 2025 GMT Subject: CN=4ab9eadd8c4ea4a5f23c3e39aff86dd0db409ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:52:d3:1d:13:40:89:2c:2d:f9:8f:07:11: bb:dd:6b:49:59:12:6f:43:fa:88:35:c9:e8:21:01: d1:37:f6:87:44:9c:be:87:e5:c5:ec:df:8f:12:b2: a2:6c:6c:6c:c5:ba:e3:9e:21:5b:9c:bd:32:77:35: 46:d6:94:b6:47:11:12:87:99:83:a5:69:73:c6:36: 35:0a:9c:22:5c:a7:42:e1:b7:8e:3f:40:6b:e5:35: c4:6c:ce:67:ee:11:13:d0:57:a0:ff:51:4a:24:5a: 9a:dd:39:cb:69:69:85:a8:09:49:75:a1:39:94:65: b9:ed:5d:b8:6a:f7:37:97:63:2d:9c:86:98:4e:7c: 6d:56:52:c3:ad:cb:8f:6c:3a:15:9e:62:d1:3c:4b: c0:a5:98:5b:0e:bf:45:ab:a4:19:67:ba:ed:70:ef: 85:16:23:4d:b4:78:6f:de:28:49:b9:a9:9e:ce:ce: be:69:22:26:84:86:e4:28:a2:c3:3f:7c:46:ed:ab: d2:0a:73:25:d5:d4:d3:a7:6e:c3:b2:68:2d:3d:60: bb:d0:ce:62:40:e8:95:cd:9a:1b:ae:f4:49:34:dd: 94:a0:6a:33:bc:58:48:53:52:eb:ec:5f:3e:ac:3f: 29:ee:51:1d:71:1c:69:e1:c6:e8:b3:06:a4:4c:92: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:EA:DD:8C:4E:A4:A5:F2:3C:3E:39:AF:F8:6D:D0:DB:40:9E:E1 X509v3 Authority Key Identifier: keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:a8:68:41:a9:ac:fb:58:bd:71:ab:79:54:7b:2d:cc:cb: c7:10:df:7e:17:bd:d3:28:d8:26:fd:c1:2d:bb:d1:09:6e:a6: 97:c1:d1:25:fb:ec:2f:54:5c:ad:f6:02:d6:63:ed:c7:79:26: 01:2b:32:d7:64:ab:01:c4:96:5b:0e:48:29:ae:70:6c:5b:58: ae:da:28:5e:06:1a:55:37:2d:b3:fc:8c:cd:1d:d3:62:19:b8: 5a:76:c8:01:31:ec:67:0f:82:90:68:ce:55:c5:ec:52:f8:f2: af:02:69:19:76:de:41:0c:64:54:9a:b2:32:0d:ff:ef:15:88: ad:d6:74:ae:dc:d6:e2:d1:0a:92:67:1e:fa:39:1e:de:46:bd: 2c:f6:71:7d:6e:dd:f0:36:59:7f:fb:8a:46:15:0d:79:e1:d4: c1:91:64:6c:fa:36:2e:2d:c5:48:84:51:8d:98:48:0f:ba:3f: 57:5d:31:44:93:cf:61:ad:df:f5:c6:28:07:ee:13:eb:8a:7a: 9c:1e:7d:bc:93:35:68:f6:73:16:01:85:1e:84:cc:3f:85:02: 65:52:d9:df:66:44:fa:93:5a:4b:f6:9f:db:33:f3:d6:84:5d: cf:22:ac:d8:03:e9:a0:95:5d:00:0a:c3:76:0b:61:2c:67:2c: f4:0f:dc:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oJOHvnrdlDZfWh2QA/QPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjdiYjc1ODhiODJkNzBkOGNiNzNkNGU0NTE3N2Y2N2Vj ZWYyMTMwHhcNMjUxMjE5MDgwMTE0WhcNMjUxMjIwMDgwMTE0WjAzMTEwLwYDVQQD Eyg0YWI5ZWFkZDhjNGVhNGE1ZjIzYzNlMzlhZmY4NmRkMGRiNDA5ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjpS0x0TQIksLfmPBxG73WtJWRJv Q/qINcnoIQHRN/aHRJy+h+XF7N+PErKibGxsxbrjniFbnL0ydzVG1pS2RxESh5mD pWlzxjY1CpwiXKdC4beOP0Br5TXEbM5n7hET0Feg/1FKJFqa3TnLaWmFqAlJdaE5 lGW57V24avc3l2MtnIaYTnxtVlLDrcuPbDoVnmLRPEvApZhbDr9Fq6QZZ7rtcO+F FiNNtHhv3ihJuamezs6+aSImhIbkKKLDP3xG7avSCnMl1dTTp27DsmgtPWC70M5i QOiVzZobrvRJNN2UoGozvFhIU1Lr7F8+rD8p7lEdcRxp4cboswakTJKz8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq56t2MTqSl8jw+Oa/4bdDbQJ7hMB8GA1UdIwQY MBaAFO1nu3WIuC1w2Mtz1ORRd/Z+zvITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5Yjkt MWI2MGRmMjUyY2E3LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5YjktMWI2MGRmMjUyY2E3 LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXyoaEGp rPtYvXGreVR7LczLxxDffhe90yjYJv3BLbvRCW6ml8HRJfvsL1RcrfYC1mPtx3km ASsy12SrAcSWWw5IKa5wbFtYrtooXgYaVTcts/yMzR3TYhm4WnbIATHsZw+CkGjO VcXsUvjyrwJpGXbeQQxkVJqyMg3/7xWIrdZ0rtzW4tEKkmce+jke3ka9LPZxfW7d 8DZZf/uKRhUNeeHUwZFkbPo2Li3FSIRRjZhID7o/V10xRJPPYa3f9cYoB+4T64p6 nB59vJM1aPZzFgGFHoTMP4UCZVLZ32ZE+pNaS/af2zPz1oRdzyKs2APpoJVdAArD dgthLGcs9A/cVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:27 2025 by rpki-client