This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json) Hash identifier: yB/TbvUrxeWwHFodfF/pWg+hB/iTw9NlFuUMBysOPv0= Subject key identifier: B2:DE:CE:C9:FB:77:9F:3B:55:15:87:7B:37:EC:D1:FC:4B:E5:CA:D5 Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Certificate serial: 019B10B7DD11EAEAD13ADAA8D74D44E49215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft Manifest number: 14F2 Signing time: Fri 12 Dec 2025 04:00:43 +0000 Manifest this update: Fri 12 Dec 2025 04:00:43 +0000 Manifest next update: Sat 13 Dec 2025 04:00:43 +0000 Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: epfReehu9c76557puLJG5nbbak5hPnQEK3LaXjD8ado=) 2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=) 3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:dd:11:ea:ea:d1:3a:da:a8:d7:4d:44:e4:92:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Validity Not Before: Dec 12 04:00:43 2025 GMT Not After : Dec 13 04:00:43 2025 GMT Subject: CN=b2decec9fb779f3b5515877b37ecd1fc4be5cad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:48:38:06:65:64:54:56:38:89:c8:1f:24: f3:3d:2b:8b:9d:2c:a4:d8:c0:62:70:7b:3d:08:2d: 0d:2f:52:ba:ab:52:18:08:91:ad:30:d2:09:5c:a1: 24:77:34:a7:33:2d:52:9d:ef:ac:00:9d:fe:e5:50: 02:75:dc:3f:0e:54:e8:ba:3c:8e:58:bb:df:5e:ea: 2c:cf:1a:ed:db:bc:eb:60:12:f3:58:8e:d1:d9:ca: 68:58:0d:cc:a3:53:57:52:c2:db:48:07:a3:9b:69: 62:c6:63:be:55:60:1b:91:88:31:80:a1:57:3a:cb: 0b:cb:52:57:04:55:b1:cf:0d:da:28:92:79:72:9e: 23:c5:74:ba:91:a8:07:5a:2d:70:db:ed:ba:53:ed: 97:bf:5d:00:88:6c:ba:f9:59:1b:d6:a3:5c:97:43: 25:70:a8:e5:0a:e9:f9:0b:10:b9:4e:c3:e9:b2:fd: b3:70:d9:b9:53:9a:d4:2e:b0:61:69:54:ee:7e:b3: a7:a0:03:be:73:c6:79:46:4f:96:a6:fa:42:ca:ee: dd:e3:1a:b0:72:63:cb:76:ee:ae:d8:07:41:77:48: 56:1b:5f:30:f2:58:7b:56:36:b9:40:db:c1:0d:41: d2:8b:cb:1d:53:b5:73:63:de:85:6c:0b:15:26:1e: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:CE:C9:FB:77:9F:3B:55:15:87:7B:37:EC:D1:FC:4B:E5:CA:D5 X509v3 Authority Key Identifier: keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:29:8c:9a:ba:d3:07:f6:06:d6:19:2e:b0:83:b3:5e:15:8b: 78:17:f9:08:7c:ea:bf:84:79:4b:05:5e:ba:75:28:d7:a4:9b: 25:70:89:1b:1a:13:d6:11:6e:06:e5:77:7e:78:11:60:b2:46: d2:c2:90:f0:ff:62:31:11:b5:59:50:05:bd:a5:6a:1e:84:8c: 23:ba:80:18:11:36:87:fb:57:24:7e:3c:d9:5a:42:f6:e6:56: 71:ce:fc:90:52:32:4a:e9:6a:d1:13:3e:f9:a5:75:3a:ed:42: d2:19:49:c5:ba:58:d1:ad:e1:27:d0:89:76:b5:3e:5b:5c:58: 07:ea:24:99:58:19:f5:e6:9a:4c:48:b3:cd:51:42:1a:a4:0b: 02:c1:49:1a:fa:71:62:56:4d:fa:79:e4:06:49:9a:2a:ff:31: 7e:df:f2:11:2d:ac:9a:7c:a5:37:63:d5:49:25:6a:c2:40:6a: bc:04:f8:31:39:67:5f:02:07:5a:9c:b0:f5:34:41:a6:c2:d6: d9:d1:0b:7c:19:f3:51:dc:0f:31:3c:35:f1:ad:ab:ac:9c:6a: 0a:19:5a:00:ec:47:da:80:8c:d7:8d:cf:8a:bc:a2:2a:06:9e: 0c:ce:ce:d9:b7:00:bb:d4:79:b6:24:d6:26:57:8f:a5:38:40: dd:eb:1d:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt90R6urROtqo101E5JIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh YTE0ODcwHhcNMjUxMjEyMDQwMDQzWhcNMjUxMjEzMDQwMDQzWjAzMTEwLwYDVQQD EyhiMmRlY2VjOWZiNzc5ZjNiNTUxNTg3N2IzN2VjZDFmYzRiZTVjYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNVIOAZlZFRWOInIHyTzPSuLnSyk 2MBicHs9CC0NL1K6q1IYCJGtMNIJXKEkdzSnMy1Sne+sAJ3+5VACddw/DlToujyO WLvfXuoszxrt27zrYBLzWI7R2cpoWA3Mo1NXUsLbSAejm2lixmO+VWAbkYgxgKFX OssLy1JXBFWxzw3aKJJ5cp4jxXS6kagHWi1w2+26U+2Xv10AiGy6+Vkb1qNcl0Ml cKjlCun5CxC5TsPpsv2zcNm5U5rULrBhaVTufrOnoAO+c8Z5Rk+WpvpCyu7d4xqw cmPLdu6u2AdBd0hWG18w8lh7Vja5QNvBDUHSi8sdU7VzY96FbAsVJh4cIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLezsn7d587VRWHezfs0fxL5crVMB8GA1UdIwQY MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3 LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSmMmrrT B/YG1hkusIOzXhWLeBf5CHzqv4R5SwVeunUo16SbJXCJGxoT1hFuBuV3fngRYLJG 0sKQ8P9iMRG1WVAFvaVqHoSMI7qAGBE2h/tXJH482VpC9uZWcc78kFIySulq0RM+ +aV1Ou1C0hlJxbpY0a3hJ9CJdrU+W1xYB+okmVgZ9eaaTEizzVFCGqQLAsFJGvpx YlZN+nnkBkmaKv8xft/yES2smnylN2PVSSVqwkBqvAT4MTlnXwIHWpyw9TRBpsLW 2dELfBnzUdwPMTw18a2rrJxqChlaAOxH2oCM143PiryiKgaeDM7O2bcAu9R5tiTW JlePpThA3esd2g== -----END CERTIFICATE-----Generated at Fri Dec 12 13:19:41 2025 by rpki-client