This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json) Hash identifier: 71V0QTaPQuwnFOaVJrT3tzQpMl932J27DobkSPQpcMA= Subject key identifier: 92:04:6A:37:61:BD:20:86:DD:FF:0C:41:B6:2E:1D:BC:A7:CF:29:1E Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Certificate serial: 019B34C571BF698B06655EC8074912E70059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft Manifest number: 0617 Signing time: Fri 19 Dec 2025 04:01:53 +0000 Manifest this update: Fri 19 Dec 2025 04:01:53 +0000 Manifest next update: Sat 20 Dec 2025 04:01:53 +0000 Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: iHU+LldfClNoCpid/Ox9E3FDbdw8EQP1+lmLi0GRvsg=) 2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:71:bf:69:8b:06:65:5e:c8:07:49:12:e7:00:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Validity Not Before: Dec 19 04:01:53 2025 GMT Not After : Dec 20 04:01:53 2025 GMT Subject: CN=92046a3761bd2086ddff0c41b62e1dbca7cf291e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:41:58:aa:c0:3b:b6:86:5b:7f:a7:2d:1a: 2b:f2:c6:29:fe:01:e4:e2:f1:4e:61:65:4c:c9:88: 46:fc:e0:80:8a:f9:e5:f6:94:a3:5d:94:f1:4e:f2: 76:c1:54:57:98:a9:55:20:d8:ec:7b:0a:72:de:98: fc:b2:50:c8:69:31:9c:40:bb:44:78:a1:38:5d:33: 7e:a3:b7:21:fa:a7:80:d2:80:5b:43:66:1f:03:9e: 5c:a9:26:49:6f:ec:06:e6:5c:3f:b5:36:1e:29:ef: 5f:72:8d:f4:5b:d0:22:d8:de:aa:c7:39:dc:39:2b: 5f:a0:36:84:72:4a:9f:85:c4:96:26:19:89:b7:d4: 4f:1b:12:e3:c2:b3:b2:71:82:e5:4d:c7:18:07:2b: a5:79:28:53:f5:47:fd:53:81:6b:be:fa:00:9b:2b: 74:1e:3d:94:c5:03:bf:d3:80:38:ea:1b:1c:39:3f: 12:6f:4f:d7:49:72:1f:10:6e:d5:55:04:31:cd:25: 39:e9:9d:6d:59:0a:51:be:d1:5c:e6:ea:52:cf:5f: d5:d3:4c:d2:98:58:c6:d6:a7:ff:68:2b:10:fd:f3: cd:43:69:02:a0:f1:7d:69:a6:79:a0:de:a2:4a:89: 20:45:a9:22:72:78:94:c7:18:2c:4d:bd:1a:62:1f: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:6A:37:61:BD:20:86:DD:FF:0C:41:B6:2E:1D:BC:A7:CF:29:1E X509v3 Authority Key Identifier: keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d7:6f:7c:7f:d5:b4:a0:6f:22:64:ba:ff:8a:ac:34:96:8c: 92:55:ed:29:96:82:d9:86:f3:91:e3:43:fb:29:c3:94:2a:ee: 11:06:8d:fc:4a:91:e5:94:40:c4:42:58:bc:6b:79:b7:73:8b: f2:89:4f:18:ec:83:93:aa:46:55:82:54:bc:83:bb:ae:76:d8: df:ef:3e:92:09:51:fe:19:23:be:e8:3c:4f:98:38:78:3c:6a: 34:c8:54:0f:6f:96:a2:c5:cb:5f:9c:51:e7:77:c1:e7:78:84: 7f:24:e1:4a:5f:02:25:45:fc:00:1e:67:e4:09:69:0f:1c:1b: e8:26:08:ee:29:08:52:c5:f2:52:fb:da:da:e6:17:d7:d4:3c: 5c:93:48:98:5e:a7:c5:59:d0:3a:60:6d:14:51:46:4e:ee:b5: 9e:1b:a2:0d:b6:04:2e:56:5c:d3:c6:14:9a:04:ab:12:48:dd: d7:f0:f5:1c:a7:2e:21:dd:8b:0e:2e:90:ad:42:ee:ee:5f:65: 1e:97:2e:ff:45:28:c2:34:aa:b1:7a:f4:dd:89:80:7f:b0:98: 96:c1:d8:69:ab:9b:82:17:5f:82:73:79:e0:22:f6:f1:f5:5c: c8:14:80:f9:00:66:47:d8:ac:7d:91:e5:8c:4d:16:f9:e1:1d: 3f:a8:e3:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xXG/aYsGZV7IB0kS5wBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzdmMzI2M2ZlMzQ4YWIyYzhkMzY4NDc1ZDZiYzA0N2E2 YTk3NmEwHhcNMjUxMjE5MDQwMTUzWhcNMjUxMjIwMDQwMTUzWjAzMTEwLwYDVQQD Eyg5MjA0NmEzNzYxYmQyMDg2ZGRmZjBjNDFiNjJlMWRiY2E3Y2YyOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPJBWKrAO7aGW3+nLRor8sYp/gHk 4vFOYWVMyYhG/OCAivnl9pSjXZTxTvJ2wVRXmKlVINjsewpy3pj8slDIaTGcQLtE eKE4XTN+o7ch+qeA0oBbQ2YfA55cqSZJb+wG5lw/tTYeKe9fco30W9Ai2N6qxznc OStfoDaEckqfhcSWJhmJt9RPGxLjwrOycYLlTccYByuleShT9Uf9U4FrvvoAmyt0 Hj2UxQO/04A46hscOT8Sb0/XSXIfEG7VVQQxzSU56Z1tWQpRvtFc5upSz1/V00zS mFjG1qf/aCsQ/fPNQ2kCoPF9aaZ5oN6iSokgRakicniUxxgsTb0aYh/U/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIEajdhvSCG3f8MQbYuHbynzykeMB8GA1UdIwQY MBaAFOx38yY/40irLI02hHXWvAR6apdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQt ZDUxNzI5MzBmOGJmLzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQtZDUxNzI5MzBmOGJm LzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNdvfH/V tKBvImS6/4qsNJaMklXtKZaC2YbzkeND+ynDlCruEQaN/EqR5ZRAxEJYvGt5t3OL 8olPGOyDk6pGVYJUvIO7rnbY3+8+kglR/hkjvug8T5g4eDxqNMhUD2+WosXLX5xR 53fB53iEfyThSl8CJUX8AB5n5AlpDxwb6CYI7ikIUsXyUvva2uYX19Q8XJNImF6n xVnQOmBtFFFGTu61nhuiDbYELlZc08YUmgSrEkjd1/D1HKcuId2LDi6QrULu7l9l Hpcu/0UowjSqsXr03YmAf7CYlsHYaaubghdfgnN54CL28fVcyBSA+QBmR9isfZHl jE0W+eEdP6jjPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:15:37 2025 by rpki-client