This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json) Hash identifier: b1EdPxj6Qw4op4359SOep5sTp4y1VCZh0iwAggT2BZM= Subject key identifier: 83:9E:A4:36:3F:C8:E0:26:7A:77:EB:2F:8F:AA:29:9D:BC:E5:6E:36 Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Certificate serial: 019B11258BE4ED2193D63670B57E10EC61D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 06:00:31 +0000 Manifest this update: Fri 12 Dec 2025 06:00:31 +0000 Manifest next update: Sat 13 Dec 2025 06:00:31 +0000 Files and hashes: 1: 56nNsQD5fhmKgW9wsztaFH2HQR0.roa (hash: ELMB3ISOh5rAiJ3WjaKpUk69zbZHQWDxYkfbd0e3MbM=) 2: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: 96tkPXNme5kZK/CptU2IrmeSzLIxEzgeXXxvFyVVZ9U=) 3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:8b:e4:ed:21:93:d6:36:70:b5:7e:10:ec:61:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Validity Not Before: Dec 12 06:00:31 2025 GMT Not After : Dec 13 06:00:31 2025 GMT Subject: CN=839ea4363fc8e0267a77eb2f8faa299dbce56e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:26:46:29:d4:87:8f:0b:5e:b5:d0:12:0f: b1:51:71:f1:81:50:ae:97:aa:e5:46:9c:94:56:dc: 85:40:b0:e2:62:5a:f0:54:e5:34:ea:7d:74:f3:43: 00:a5:02:b8:29:51:f8:65:b4:6b:df:ee:58:bc:02: 9c:ff:59:4e:4f:4a:2d:18:ae:11:6e:6a:a9:21:7a: e1:4c:7d:74:1a:38:cb:f1:48:d7:4e:a6:22:e3:42: b9:1f:5b:7a:5f:48:9f:26:b3:1c:b5:de:5f:00:09: 0d:5f:f4:41:ff:14:a3:ba:23:90:ea:e2:1a:e5:13: 29:c0:1c:39:04:bb:73:ad:e0:7e:17:12:82:8b:07: db:80:6f:20:1a:5b:43:a0:59:f9:44:96:ac:49:5b: 0b:30:e5:28:41:69:49:b9:e3:68:77:43:96:e1:9f: 45:19:8e:64:a3:c3:33:e2:49:34:fe:c4:a9:5a:09: eb:06:8a:7b:67:fd:9a:c3:10:10:d3:67:60:ab:55: d0:c6:00:90:a2:fb:d3:a5:a4:9b:bf:0a:27:1f:49: 5f:64:09:f3:28:28:3b:16:10:52:a7:be:b2:d2:fa: 24:d3:2b:2c:bf:6b:8d:00:82:f6:10:00:ca:21:ae: 5e:77:69:06:aa:17:62:7b:18:2a:cc:dc:3b:93:fc: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9E:A4:36:3F:C8:E0:26:7A:77:EB:2F:8F:AA:29:9D:BC:E5:6E:36 X509v3 Authority Key Identifier: keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:15:54:50:ab:58:30:b8:b6:a4:f1:5b:b6:a3:2c:d9:55:cf: 64:36:c7:71:9a:9a:e9:8c:01:ce:b0:52:81:a1:af:32:8c:46: 65:c0:03:33:8f:81:30:02:67:c7:e4:82:b6:d6:69:09:a1:8c: db:d1:b8:81:c8:07:04:32:6b:75:f2:bb:cb:42:8e:a3:5f:75: 68:7b:76:46:90:7f:45:05:6e:ac:8b:54:d7:f1:19:ff:e7:0a: a2:22:c2:c1:55:98:4d:97:92:a5:6d:1f:8a:04:c2:14:e4:c1: 01:e5:de:b2:00:81:d6:1f:a8:d6:e8:6a:38:5c:6d:4d:a9:4f: 6a:bc:0c:4e:10:3e:3d:f8:be:29:ce:82:87:f5:ca:b3:f6:61: 12:0b:36:92:e9:0b:87:ad:25:d8:c9:7b:76:cc:e1:a7:d3:c5: d7:a7:47:5f:4a:6c:a0:9a:e3:46:14:d1:56:da:da:6d:18:37: e3:fa:91:a1:94:f4:d3:02:1f:bc:89:9e:4f:58:9d:44:2b:71: d1:49:27:4e:de:4a:b5:3e:72:55:d9:60:14:a2:7a:2d:50:8f: 54:95:97:ea:eb:09:81:71:03:b6:0e:22:14:fa:9f:24:ee:9c: 2e:57:49:1b:9b:d5:15:a6:4f:fb:15:2e:a1:0f:f4:d4:87:45: da:99:1f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJYvk7SGT1jZwtX4Q7GHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1 ZDY0MGMwHhcNMjUxMjEyMDYwMDMxWhcNMjUxMjEzMDYwMDMxWjAzMTEwLwYDVQQD Eyg4MzllYTQzNjNmYzhlMDI2N2E3N2ViMmY4ZmFhMjk5ZGJjZTU2ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAEmRinUh48LXrXQEg+xUXHxgVCu l6rlRpyUVtyFQLDiYlrwVOU06n1080MApQK4KVH4ZbRr3+5YvAKc/1lOT0otGK4R bmqpIXrhTH10GjjL8UjXTqYi40K5H1t6X0ifJrMctd5fAAkNX/RB/xSjuiOQ6uIa 5RMpwBw5BLtzreB+FxKCiwfbgG8gGltDoFn5RJasSVsLMOUoQWlJueNod0OW4Z9F GY5ko8Mz4kk0/sSpWgnrBop7Z/2awxAQ02dgq1XQxgCQovvTpaSbvwonH0lfZAnz KCg7FhBSp76y0vok0yssv2uNAIL2EADKIa5ed2kGqhdiexgqzNw7k/xbawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOepDY/yOAmenfrL4+qKZ285W42MB8GA1UdIwQY MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBVUUKtY MLi2pPFbtqMs2VXPZDbHcZqa6YwBzrBSgaGvMoxGZcADM4+BMAJnx+SCttZpCaGM 29G4gcgHBDJrdfK7y0KOo191aHt2RpB/RQVurItU1/EZ/+cKoiLCwVWYTZeSpW0f igTCFOTBAeXesgCB1h+o1uhqOFxtTalParwMThA+Pfi+Kc6Ch/XKs/ZhEgs2kukL h60l2Ml7dszhp9PF16dHX0psoJrjRhTRVtrabRg34/qRoZT00wIfvImeT1idRCtx 0UknTt5KtT5yVdlgFKJ6LVCPVJWX6usJgXEDtg4iFPqfJO6cLldJG5vVFaZP+xUu oQ/01IdF2pkfDQ== -----END CERTIFICATE-----Generated at Fri Dec 12 16:50:38 2025 by rpki-client