This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json) Hash identifier: jcxwk8V7yK5lBN+8Rn4J7P9cRQjkFRwi/Dlt1UQJguw= Subject key identifier: 58:A6:DF:D5:40:D4:E0:7F:AE:47:8C:FC:0E:23:F0:8E:3C:9D:A9:85 Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69 Certificate serial: 019B21AB8499C26BC00B5286FB416D78D1BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 11:00:47 +0000 Manifest this update: Mon 15 Dec 2025 11:00:47 +0000 Manifest next update: Tue 16 Dec 2025 11:00:47 +0000 Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: LVublpkt4s3bHSKcGatS1o/6e3ejnmmCVY+g9P5uzQ0=) 2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:84:99:c2:6b:c0:0b:52:86:fb:41:6d:78:d1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edff0ab25662757afb831675319296f63d989b69 Validity Not Before: Dec 15 11:00:47 2025 GMT Not After : Dec 16 11:00:47 2025 GMT Subject: CN=58a6dfd540d4e07fae478cfc0e23f08e3c9da985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1c:65:30:bc:20:8e:83:f2:b8:b7:d2:fa:3c: 25:ef:86:9c:69:ea:8d:11:19:a5:d6:41:b5:bb:ae: 12:8f:7e:9f:b2:73:4d:74:11:f8:5f:b9:8c:8b:0b: 65:6a:c2:93:e4:8f:d4:b9:84:d0:31:90:65:03:f2: 58:f8:38:53:a6:4b:f4:2b:7a:4d:05:9a:c4:68:0e: cb:9d:ff:c9:f7:5f:49:81:b5:f9:d1:a6:e8:6a:68: 8f:b8:93:39:42:17:58:3b:0d:f8:5b:3f:f9:fb:c2: e6:6d:41:97:22:8b:be:74:1e:7d:33:a4:2f:4e:ec: 65:b9:94:f7:22:29:dd:5e:c0:ac:83:1c:87:2f:6b: 59:a1:bb:28:e3:91:c7:6f:39:ad:c6:29:3c:e1:a9: 27:44:5d:6f:83:95:08:08:f0:81:bd:55:30:ff:ad: 19:a7:95:13:f7:b6:3e:55:a1:b0:a7:dc:d1:4b:60: aa:ad:0a:f2:d9:63:d6:aa:6a:ce:51:8a:c3:de:59: 98:2d:ee:c8:2d:7e:ba:0a:5d:bb:a0:16:a8:7f:28: 48:20:87:b4:fb:96:84:f6:c4:74:db:24:42:79:40: d9:ab:b6:1a:ce:57:a0:90:bb:74:5f:0e:b0:31:01: 20:8d:7a:40:9c:0a:aa:4f:f8:ee:9e:95:21:28:75: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:DF:D5:40:D4:E0:7F:AE:47:8C:FC:0E:23:F0:8E:3C:9D:A9:85 X509v3 Authority Key Identifier: keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6d:07:34:67:56:a5:7d:5b:15:ac:f9:db:bc:cf:98:96:fb: 98:e0:f1:a5:78:b4:34:73:e6:97:00:76:b8:5c:51:8f:e3:6a: 2c:d9:11:8d:a4:74:47:ed:a8:66:a2:ea:35:13:d2:7c:a8:d6: 23:0d:ad:f5:5a:7e:a5:6e:80:fd:7d:d1:7a:c8:e1:97:a8:13: da:a3:41:88:ca:db:7f:af:47:6e:a9:01:cb:b9:53:28:07:c1: e0:ba:1a:6e:a3:66:75:e6:42:c1:d5:76:ea:e3:ae:bf:ec:f1: f2:9d:ce:24:4b:88:b7:62:31:39:62:9e:34:4d:d0:70:fe:87: 4e:a9:d9:b3:a8:95:50:db:3f:d4:e0:95:7d:52:69:63:f3:84: 84:3e:43:f5:d6:9f:63:36:44:f0:03:57:20:e6:c6:e4:87:4d: 73:fc:25:f9:86:14:79:65:4f:a5:6d:fb:59:88:bd:ee:bf:3d: af:12:19:bb:3a:c2:fd:7d:85:a1:64:77:17:42:50:a4:71:c1: 0a:da:60:3a:16:89:73:83:e5:9d:e2:f2:5e:30:1f:51:ba:5c: d6:71:f2:9e:30:81:8f:78:9e:b5:67:69:b2:66:ae:38:e0:42: 2b:dd:a7:72:1e:a3:c4:38:c0:f9:44:d4:bc:3e:8d:b3:00:6e: ae:4a:65:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq4SZwmvAC1KG+0FteNG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5 ODliNjkwHhcNMjUxMjE1MTEwMDQ3WhcNMjUxMjE2MTEwMDQ3WjAzMTEwLwYDVQQD Eyg1OGE2ZGZkNTQwZDRlMDdmYWU0NzhjZmMwZTIzZjA4ZTNjOWRhOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BxlMLwgjoPyuLfS+jwl74acaeqN ERml1kG1u64Sj36fsnNNdBH4X7mMiwtlasKT5I/UuYTQMZBlA/JY+DhTpkv0K3pN BZrEaA7Lnf/J919JgbX50aboamiPuJM5QhdYOw34Wz/5+8LmbUGXIou+dB59M6Qv TuxluZT3IindXsCsgxyHL2tZobso45HHbzmtxik84aknRF1vg5UICPCBvVUw/60Z p5UT97Y+VaGwp9zRS2CqrQry2WPWqmrOUYrD3lmYLe7ILX66Cl27oBaofyhIIIe0 +5aE9sR02yRCeUDZq7YazlegkLt0Xw6wMQEgjXpAnAqqT/junpUhKHUUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFim39VA1OB/rkeM/A4j8I48namFMB8GA1UdIwQY MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt NjQ0YmZkY2ViOWY2LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2 LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnm0HNGdW pX1bFaz527zPmJb7mODxpXi0NHPmlwB2uFxRj+NqLNkRjaR0R+2oZqLqNRPSfKjW Iw2t9Vp+pW6A/X3Resjhl6gT2qNBiMrbf69HbqkBy7lTKAfB4LoabqNmdeZCwdV2 6uOuv+zx8p3OJEuIt2IxOWKeNE3QcP6HTqnZs6iVUNs/1OCVfVJpY/OEhD5D9daf YzZE8ANXIObG5IdNc/wl+YYUeWVPpW37WYi97r89rxIZuzrC/X2FoWR3F0JQpHHB CtpgOhaJc4PlneLyXjAfUbpc1nHynjCBj3ietWdpsmauOOBCK92nch6jxDjA+UTU vD6NswBurkpleQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:37:31 2025 by rpki-client