This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft File: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft (raw, json) Hash identifier: xeVozVVDIpgzM2f4b/mME8+eRM8CiCR+tHdgN4YUwLg= Subject key identifier: AF:02:79:25:E6:A8:A6:80:15:D2:AB:C7:EA:83:03:6C:54:B1:08:37 Authority key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2 Certificate issuer: /CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2 Certificate serial: 019B5ABF6F5CFE3057D1A9049B87465C5900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft Manifest number: B5 Signing time: Fri 26 Dec 2025 13:00:53 +0000 Manifest this update: Fri 26 Dec 2025 13:00:53 +0000 Manifest next update: Sat 27 Dec 2025 13:00:53 +0000 Files and hashes: 1: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl (hash: BJ5/yNlguUjOcxrqRRjBiAuV83XRIKDo6pIVD43/mfM=) 2: Kipa3kLLXBexBMJFIr2nzsJGfAQ.roa (hash: MEzxz1fu8r8OcAfHUpLMgUbApSNH2jwTj14hFHpw51I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:6f:5c:fe:30:57:d1:a9:04:9b:87:46:5c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2 Validity Not Before: Dec 26 13:00:53 2025 GMT Not After : Dec 27 13:00:53 2025 GMT Subject: CN=af027925e6a8a68015d2abc7ea83036c54b10837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:c6:1e:8e:c4:f4:9a:0e:9d:7e:2f:28:94: 90:69:e4:86:2e:db:1d:fe:8d:16:89:f7:e9:1b:59: 4b:3b:80:90:01:65:ef:11:69:3e:93:ff:46:d2:7d: 9b:e9:0c:cf:26:a7:10:8a:02:94:37:56:1d:70:8d: ba:55:af:ee:30:b0:f4:4a:7e:34:b3:e7:4c:09:d2: 76:b9:44:17:7f:95:4e:68:13:7a:f8:61:3d:e3:b1: 63:35:54:98:31:22:0e:2a:87:a7:43:49:49:cf:2c: 80:18:20:cb:8a:71:4c:f4:f5:5d:19:d0:5f:41:f4: 2b:dc:7e:4f:1a:00:54:16:cf:5f:ca:40:9a:f7:61: 5e:b4:94:6a:0e:11:41:be:a9:11:8e:ab:6b:27:53: eb:fd:cf:71:a6:23:91:c8:74:43:b5:df:86:35:48: 2c:72:50:58:0c:61:78:6f:41:21:c6:14:aa:05:45: ae:f6:b1:b6:f2:26:c1:9c:95:20:47:86:da:7b:f8: 85:2a:10:b9:8e:b8:7b:c2:c9:c7:e0:7a:6e:1c:17: ef:ee:4d:e5:a5:aa:aa:d3:a4:90:2b:22:53:23:8e: 51:29:ab:a5:3b:11:71:2a:a0:f8:3a:92:3b:1a:f7: 93:b0:75:d0:69:6d:72:95:6a:71:5b:94:9a:55:b3: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:02:79:25:E6:A8:A6:80:15:D2:AB:C7:EA:83:03:6C:54:B1:08:37 X509v3 Authority Key Identifier: keyid:EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7e:f2:35:7d:85:a8:66:74:cb:a3:44:94:5e:0c:44:91:07: b8:3b:fa:02:9b:de:f3:2b:2d:06:23:c8:03:37:a3:a7:23:3e: 3d:8a:ae:84:22:92:2c:13:83:aa:ce:43:f5:d8:65:55:be:f8: f9:62:a4:16:c2:4e:37:e5:db:b3:69:f2:cf:2d:87:9b:3a:0a: 99:be:d3:1c:3e:9e:af:60:62:54:0a:81:7d:55:95:f4:98:da: fe:f5:34:f4:00:dd:dc:8b:d2:93:cb:4d:e4:5a:a0:16:29:25: 7e:c3:72:d0:ba:e1:12:4b:ad:f6:50:a5:3c:f1:b0:79:33:11: 6e:38:80:57:63:b9:36:80:26:0d:4a:d6:04:31:df:7a:3b:ee: 6f:d6:59:ea:68:36:b9:bb:cf:ed:30:bd:56:b6:b9:bc:fb:9c: 88:e0:00:84:2f:ce:b2:6b:16:64:f8:d9:3a:ca:d2:60:fe:d0: 04:88:c7:54:a7:a6:4b:fc:dd:68:74:58:9a:a7:84:5b:38:75: f3:9d:3e:df:17:75:3a:51:11:d9:31:a6:f3:1c:13:66:bf:7e: 18:3e:d6:92:25:e6:15:fe:38:9b:02:dc:54:b9:de:3e:69:5f: bb:c7:c4:51:3f:74:91:95:00:17:48:5d:b8:45:2d:0e:94:4c: f7:f5:d4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav29c/jBX0akEm4dGXFkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDlmMGU4ODY2M2Y4M2E1YjZmODRmMWZlZTZiNDJjMzVj MGY4ZjIwHhcNMjUxMjI2MTMwMDUzWhcNMjUxMjI3MTMwMDUzWjAzMTEwLwYDVQQD EyhhZjAyNzkyNWU2YThhNjgwMTVkMmFiYzdlYTgzMDM2YzU0YjEwODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1szGHo7E9JoOnX4vKJSQaeSGLtsd /o0WiffpG1lLO4CQAWXvEWk+k/9G0n2b6QzPJqcQigKUN1YdcI26Va/uMLD0Sn40 s+dMCdJ2uUQXf5VOaBN6+GE947FjNVSYMSIOKoenQ0lJzyyAGCDLinFM9PVdGdBf QfQr3H5PGgBUFs9fykCa92FetJRqDhFBvqkRjqtrJ1Pr/c9xpiORyHRDtd+GNUgs clBYDGF4b0EhxhSqBUWu9rG28ibBnJUgR4bae/iFKhC5jrh7wsnH4HpuHBfv7k3l paqq06SQKyJTI45RKaulOxFxKqD4OpI7GveTsHXQaW1ylWpxW5SaVbMvlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8CeSXmqKaAFdKrx+qDA2xUsQg3MB8GA1UdIwQY MBaAFOwJ8OiGY/g6W2+E8f7mtCw1wPjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQt MzZiNTY4MGFjMzY4LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQtMzZiNTY4MGFjMzY4 LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjn7yNX2F qGZ0y6NElF4MRJEHuDv6Apve8ystBiPIAzejpyM+PYquhCKSLBODqs5D9dhlVb74 +WKkFsJON+Xbs2nyzy2HmzoKmb7THD6er2BiVAqBfVWV9Jja/vU09ADd3IvSk8tN 5FqgFiklfsNy0LrhEkut9lClPPGweTMRbjiAV2O5NoAmDUrWBDHfejvub9ZZ6mg2 ubvP7TC9Vra5vPuciOAAhC/OsmsWZPjZOsrSYP7QBIjHVKemS/zdaHRYmqeEWzh1 850+3xd1OlER2TGm8xwTZr9+GD7WkiXmFf44mwLcVLnePmlfu8fEUT90kZUAF0hd uEUtDpRM9/XUJA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client