This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json) Hash identifier: xEXL2+M+ssOkS8f0PLcmLccA86dtrlxx4lrfVK0XePI= Subject key identifier: 8F:7D:F0:E8:43:17:E3:67:75:F5:EF:4C:25:9F:8A:9D:5E:0E:58:04 Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1 Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1 Certificate serial: 019B39EA885BB786731FBCFC375DACDEBFB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft Manifest number: 0FC9 Signing time: Sat 20 Dec 2025 04:00:30 +0000 Manifest this update: Sat 20 Dec 2025 04:00:30 +0000 Manifest next update: Sun 21 Dec 2025 04:00:30 +0000 Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: I6N+Y1GsLN5dTAA2sAkw3v0A26Z7kziTQwBBqsl82wE=) 2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:88:5b:b7:86:73:1f:bc:fc:37:5d:ac:de:bf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1 Validity Not Before: Dec 20 04:00:30 2025 GMT Not After : Dec 21 04:00:30 2025 GMT Subject: CN=8f7df0e84317e36775f5ef4c259f8a9d5e0e5804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:62:a2:b6:2f:83:a0:76:8a:8b:b1:05:43: 0e:8b:56:b7:5b:c2:99:d1:48:65:ac:96:47:85:db: 20:cf:a7:cb:6e:31:8c:8f:40:2a:cd:03:1d:97:bf: 1a:11:3d:cf:35:10:83:25:2c:d7:71:ac:e2:dd:bc: 66:93:b2:5a:ca:03:c4:ad:8b:ae:00:a5:69:bc:2f: bb:da:f7:43:f9:89:4a:b7:4f:a4:50:b8:1f:1e:fd: 61:ad:62:4a:60:d9:f9:68:48:b4:f1:36:1d:66:5d: 55:0b:56:bf:11:2e:55:36:aa:b1:2b:be:fd:44:56: 9e:09:7f:ba:83:2d:1e:48:42:f8:af:ba:e5:32:cb: 5e:ed:8a:23:5e:3a:e3:61:44:14:a7:4c:6a:e5:dd: 77:4d:ac:4b:52:b9:20:09:39:27:6e:1a:01:f5:25: 78:e3:62:5f:23:bf:90:02:d4:53:01:75:2a:2e:9b: 90:2c:f1:3d:9e:dd:f7:0e:98:ba:08:a1:32:ab:eb: 16:9a:77:92:ab:d9:7d:63:10:52:bb:27:5e:89:7c: 88:67:e3:f5:e3:cf:40:bd:c4:3d:ef:c6:3d:ba:2c: 29:1e:45:97:c8:42:7f:a8:80:ac:d4:43:11:a0:21: d1:c8:93:4c:e5:7a:90:9b:28:2c:bd:d3:f0:b7:31: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7D:F0:E8:43:17:E3:67:75:F5:EF:4C:25:9F:8A:9D:5E:0E:58:04 X509v3 Authority Key Identifier: keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b2:b1:7e:35:1f:7e:4e:54:93:7f:2c:85:66:4a:13:d8:19: a1:11:26:0b:6d:d9:cd:10:55:6e:16:09:7f:13:30:b3:8c:4c: 22:72:9a:2d:47:5d:8e:1c:74:57:ab:be:4a:da:cc:d9:bd:3c: 9d:be:be:bf:9a:b4:67:29:fc:71:9c:9d:2a:67:80:ba:a2:42: 2f:98:39:2a:14:e2:13:11:5d:21:03:4d:c9:26:6f:da:67:92: fa:18:6a:a8:f5:94:31:8e:9b:40:f0:ac:2b:62:44:b1:24:90: 92:d0:54:30:c5:de:5a:fc:0b:df:22:f7:85:f1:41:41:30:a5: 17:fc:b8:d3:13:18:09:f4:9e:ae:42:6b:7d:23:a7:d4:45:49: 29:98:a4:83:ba:45:30:66:ed:6a:a2:c8:63:21:ab:1b:8b:ed: 2e:d1:8a:c0:2e:da:34:4f:49:cc:e1:65:ba:67:bf:a8:99:7b: f1:50:2b:93:fc:28:10:cd:5b:d9:f2:44:b2:bf:11:e8:ea:e6: 35:68:47:16:fc:a4:fe:77:61:73:1c:e8:3c:f7:2f:1c:0f:af: a2:5a:c0:64:64:be:90:bf:e0:95:e2:67:e2:22:77:35:27:ed: 9e:b8:42:59:7a:bf:7e:c8:0c:fd:38:31:82:12:d6:98:aa:90: a8:e4:c6:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ohbt4ZzH7z8N12s3r+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYzQ1ZmNhZGM0YzkzM2FjOGZmNGUwYjQzNGE1YmZiNTY3 YjY1YTEwHhcNMjUxMjIwMDQwMDMwWhcNMjUxMjIxMDQwMDMwWjAzMTEwLwYDVQQD Eyg4ZjdkZjBlODQzMTdlMzY3NzVmNWVmNGMyNTlmOGE5ZDVlMGU1ODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEZiorYvg6B2iouxBUMOi1a3W8KZ 0UhlrJZHhdsgz6fLbjGMj0AqzQMdl78aET3PNRCDJSzXcazi3bxmk7JaygPErYuu AKVpvC+72vdD+YlKt0+kULgfHv1hrWJKYNn5aEi08TYdZl1VC1a/ES5VNqqxK779 RFaeCX+6gy0eSEL4r7rlMste7YojXjrjYUQUp0xq5d13TaxLUrkgCTknbhoB9SV4 42JfI7+QAtRTAXUqLpuQLPE9nt33Dpi6CKEyq+sWmneSq9l9YxBSuydeiXyIZ+P1 489AvcQ978Y9uiwpHkWXyEJ/qICs1EMRoCHRyJNM5XqQmygsvdPwtzFH1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI998OhDF+NndfXvTCWfip1eDlgEMB8GA1UdIwQY MBaAFOzEX8rcTJM6yP9OC0NKW/tWe2WhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQt ZTA3NmY4Y2NiOGI5LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQtZTA3NmY4Y2NiOGI5 LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbKxfjUf fk5Uk38shWZKE9gZoREmC23ZzRBVbhYJfxMws4xMInKaLUddjhx0V6u+StrM2b08 nb6+v5q0Zyn8cZydKmeAuqJCL5g5KhTiExFdIQNNySZv2meS+hhqqPWUMY6bQPCs K2JEsSSQktBUMMXeWvwL3yL3hfFBQTClF/y40xMYCfSerkJrfSOn1EVJKZikg7pF MGbtaqLIYyGrG4vtLtGKwC7aNE9JzOFlume/qJl78VArk/woEM1b2fJEsr8R6Orm NWhHFvyk/ndhcxzoPPcvHA+volrAZGS+kL/gleJn4iJ3NSftnrhCWXq/fsgM/Tgx ghLWmKqQqOTGVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:20 2025 by rpki-client