This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json) Hash identifier: Nci4nfkohl9mrFyM0zXGetJmtDpoMkN0cPrqkCUIboA= Subject key identifier: E8:35:C2:50:DE:4E:17:AF:C9:D4:7E:E7:F7:1E:F3:DE:B3:72:4F:7D Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Certificate serial: 019B1202C9EAA1511BE334BFDF48A0C86212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft Manifest number: 0605 Signing time: Fri 12 Dec 2025 10:02:11 +0000 Manifest this update: Fri 12 Dec 2025 10:02:11 +0000 Manifest next update: Sat 13 Dec 2025 10:02:11 +0000 Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: PvwXtKXR/UpK3Q1eRNq0cKwqf3V7g104qtaQNUGhEf0=) 2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:c9:ea:a1:51:1b:e3:34:bf:df:48:a0:c8:62:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Validity Not Before: Dec 12 10:02:11 2025 GMT Not After : Dec 13 10:02:11 2025 GMT Subject: CN=e835c250de4e17afc9d47ee7f71ef3deb3724f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:83:d0:5d:61:60:3c:ef:65:68:83:93:5a: db:a8:dc:cf:d7:c6:31:b5:ff:28:86:50:b7:5f:6f: 42:44:12:73:2b:45:71:9d:e6:16:31:48:b7:7b:f6: b8:13:2e:e8:de:59:3f:83:9f:b1:ed:c7:88:fa:13: 47:0d:5c:0f:6f:0b:58:c4:88:8a:4c:eb:99:7f:35: 64:45:3b:9f:86:f5:8f:20:27:13:3c:55:8f:a3:20: 77:b0:c9:1a:95:71:a9:c3:ba:d7:de:8c:b3:d4:31: 4f:cf:41:34:ec:df:b9:73:26:0d:03:b1:57:d4:98: d9:ae:cf:a8:03:0b:35:f0:e3:08:99:fa:b2:1a:ff: d9:34:4d:fc:78:90:b1:76:e8:80:58:be:cd:b4:19: 94:66:b6:6e:83:72:90:7e:fc:07:f6:16:27:60:7e: c2:bf:f8:78:8c:cf:99:d3:fd:e7:d4:75:2f:9f:00: 54:0a:d0:c7:75:41:13:e7:e0:18:1b:26:ec:fe:be: ea:58:ac:25:c8:d0:92:d5:2b:8a:7f:be:41:73:21: b9:72:d5:5c:2e:6c:6e:f0:f3:85:d1:f9:33:fb:14: 84:1f:83:28:86:40:21:e5:e5:0b:6f:67:a0:79:3e: 64:6c:2d:28:73:07:9c:f8:09:66:d5:ad:a3:8c:6a: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:35:C2:50:DE:4E:17:AF:C9:D4:7E:E7:F7:1E:F3:DE:B3:72:4F:7D X509v3 Authority Key Identifier: keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b1:a8:be:c1:b5:8b:4a:fe:41:6a:53:7e:cb:7c:fa:52:9a: 8c:5f:cf:4f:1b:cf:0b:50:5b:55:8a:dd:88:73:f6:50:bb:3a: fc:5c:df:86:ff:a1:78:aa:af:7a:44:25:6c:4d:ac:bf:b3:93: 3a:0d:30:3f:cf:1a:c9:93:01:cd:e8:e6:07:57:31:e5:47:45: 59:d3:07:8e:0d:4c:7e:a1:f2:b8:b8:da:3e:67:84:da:23:69: 15:51:71:73:3d:27:21:20:e0:81:b8:de:e9:7d:21:0d:a5:5f: ce:75:9f:1a:92:bf:87:30:b2:b8:84:8e:dd:e3:40:c1:2a:df: 7f:50:47:86:50:2c:92:92:d1:44:94:f3:1b:d3:db:84:0d:97: 10:db:4a:cd:95:d6:a0:87:02:c8:48:51:42:3f:11:42:96:d5: 33:41:3e:71:30:c4:e4:77:d8:ae:79:20:af:95:02:2b:f3:92: 68:14:06:f6:ee:89:57:fa:a4:c1:cb:68:b6:73:82:5d:2c:03: ff:a9:f5:5f:af:17:de:3b:92:4e:27:94:d0:49:f3:03:d3:84: 6f:df:d9:f0:97:f3:e9:34:bd:76:33:2a:29:80:84:58:13:c1: be:45:53:40:3e:18:0d:19:9e:56:39:12:af:fb:18:e8:4f:9c: 3d:29:57:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAsnqoVEb4zS/30igyGISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzdmMzI2M2ZlMzQ4YWIyYzhkMzY4NDc1ZDZiYzA0N2E2 YTk3NmEwHhcNMjUxMjEyMTAwMjExWhcNMjUxMjEzMTAwMjExWjAzMTEwLwYDVQQD EyhlODM1YzI1MGRlNGUxN2FmYzlkNDdlZTdmNzFlZjNkZWIzNzI0ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEaD0F1hYDzvZWiDk1rbqNzP18Yx tf8ohlC3X29CRBJzK0VxneYWMUi3e/a4Ey7o3lk/g5+x7ceI+hNHDVwPbwtYxIiK TOuZfzVkRTufhvWPICcTPFWPoyB3sMkalXGpw7rX3oyz1DFPz0E07N+5cyYNA7FX 1JjZrs+oAws18OMImfqyGv/ZNE38eJCxduiAWL7NtBmUZrZug3KQfvwH9hYnYH7C v/h4jM+Z0/3n1HUvnwBUCtDHdUET5+AYGybs/r7qWKwlyNCS1SuKf75BcyG5ctVc Lmxu8POF0fkz+xSEH4MohkAh5eULb2egeT5kbC0ocwec+Alm1a2jjGpRzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg1wlDeThevydR+5/ce896zck99MB8GA1UdIwQY MBaAFOx38yY/40irLI02hHXWvAR6apdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQt ZDUxNzI5MzBmOGJmLzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQtZDUxNzI5MzBmOGJm LzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerGovsG1 i0r+QWpTfst8+lKajF/PTxvPC1BbVYrdiHP2ULs6/Fzfhv+heKqvekQlbE2sv7OT Og0wP88ayZMBzejmB1cx5UdFWdMHjg1MfqHyuLjaPmeE2iNpFVFxcz0nISDggbje 6X0hDaVfznWfGpK/hzCyuISO3eNAwSrff1BHhlAskpLRRJTzG9PbhA2XENtKzZXW oIcCyEhRQj8RQpbVM0E+cTDE5HfYrnkgr5UCK/OSaBQG9u6JV/qkwctotnOCXSwD /6n1X68X3juSTieU0EnzA9OEb9/Z8Jfz6TS9djMqKYCEWBPBvkVTQD4YDRmeVjkS r/sY6E+cPSlXJg== -----END CERTIFICATE-----Generated at Fri Dec 12 19:07:23 2025 by rpki-client