This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json) Hash identifier: N97vGqZTWcUOUai7kv4RyjcKvYcSJtM61G65IfXMT0Y= Subject key identifier: 46:20:19:67:34:8C:22:F4:0C:F4:28:B7:6D:50:DB:67:3A:44:A4:D0 Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Certificate serial: 019B06D97649D908BA8BDBFBAE00D4121DE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 06:01:13 +0000 Manifest this update: Wed 10 Dec 2025 06:01:13 +0000 Manifest next update: Thu 11 Dec 2025 06:01:13 +0000 Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=) 2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: TOzh/nS9IKIHFc6MXmRHbwps8MqkKyxdisNwx0sV1o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:76:49:d9:08:ba:8b:db:fb:ae:00:d4:12:1d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Validity Not Before: Dec 10 06:01:13 2025 GMT Not After : Dec 11 06:01:13 2025 GMT Subject: CN=46201967348c22f40cf428b76d50db673a44a4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:72:6e:7b:71:85:02:c7:57:8e:b3:4e:79: a7:e2:25:25:dc:30:6a:55:5d:5d:ba:61:82:3b:e3: 45:46:c0:b6:db:04:ef:5d:d7:59:1c:54:b8:c8:52: 24:c1:32:ec:1a:31:29:29:e2:28:85:a0:c6:8b:8b: f8:19:4a:db:4a:59:34:82:98:80:5f:38:b2:12:a1: f4:24:58:32:27:9a:1f:65:8d:5b:df:7e:60:59:7a: 6d:27:41:d4:bd:fc:b4:23:d1:74:24:09:f4:e4:0f: 94:cf:c6:ce:de:5d:33:b0:6c:a7:99:06:a6:5a:70: 75:e6:d8:02:cd:de:7c:8a:01:9c:24:31:b5:1d:6b: 69:57:e2:24:46:52:bf:24:b3:7a:e7:fa:db:6c:eb: 42:65:b0:0e:a2:cf:de:ae:a3:92:b5:fd:27:0f:60: 55:9f:30:8f:09:4f:eb:76:18:f1:fa:21:0a:8e:1d: 53:a0:f7:f7:b7:54:b4:ff:d0:06:3b:31:b1:e4:8e: 36:d8:a8:bc:01:96:70:c5:ab:5e:8c:fa:c9:d1:e8: 7b:40:ca:68:1a:df:d6:7e:27:f0:af:57:f6:2e:0e: 43:43:4c:d3:3f:fe:b7:a2:4d:4d:05:00:ee:4c:6d: b9:81:4a:82:d8:22:f8:d2:df:bb:1d:9e:68:e5:d6: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:19:67:34:8C:22:F4:0C:F4:28:B7:6D:50:DB:67:3A:44:A4:D0 X509v3 Authority Key Identifier: keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:40:4b:20:c9:f4:cb:0e:38:e9:fa:2c:bc:49:46:fa:4a:99: 72:3a:87:de:51:36:3f:99:26:44:5d:22:9e:59:4c:9a:4b:34: 4b:ad:01:01:00:f1:d6:9c:65:da:7a:af:02:0a:fb:af:56:6f: 38:33:cb:b9:9e:0c:b7:6a:a0:f4:36:a6:a1:5b:29:f0:eb:40: c5:11:ca:52:23:a5:9f:1b:c9:30:bc:5b:42:0a:9d:3d:52:30: 86:cd:ad:da:58:2e:32:03:f3:02:14:9c:3e:67:f1:25:cb:ab: 34:28:11:96:b7:fc:9b:ed:e7:09:82:90:40:a1:3c:1c:15:ab: 07:7b:de:f6:10:9a:f4:9e:eb:e9:ca:ed:b8:5e:41:83:32:64: b1:46:10:5d:17:53:9e:be:85:a0:e6:84:4d:57:d2:f2:18:a7: 75:46:16:b2:d6:a6:58:0c:f3:0a:14:41:bc:67:db:af:c0:78: a7:52:b9:7f:65:13:b0:cd:6a:c0:f0:2d:90:ca:7f:3c:e3:cd: ec:03:9c:63:74:f5:03:ff:d6:82:b8:58:66:93:f9:37:18:26: 92:ee:05:5c:a7:a9:37:60:20:de:d8:0d:9a:04:58:34:0f:39: 74:8f:aa:bb:20:f7:fd:b8:94:4c:8d:15:69:54:1a:fb:e1:49: 7e:06:dc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2XZJ2Qi6i9v7rgDUEh3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk NDBlMWQwHhcNMjUxMjEwMDYwMTEzWhcNMjUxMjExMDYwMTEzWjAzMTEwLwYDVQQD Eyg0NjIwMTk2NzM0OGMyMmY0MGNmNDI4Yjc2ZDUwZGI2NzNhNDRhNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0FybntxhQLHV46zTnmn4iUl3DBq VV1dumGCO+NFRsC22wTvXddZHFS4yFIkwTLsGjEpKeIohaDGi4v4GUrbSlk0gpiA XziyEqH0JFgyJ5ofZY1b335gWXptJ0HUvfy0I9F0JAn05A+Uz8bO3l0zsGynmQam WnB15tgCzd58igGcJDG1HWtpV+IkRlK/JLN65/rbbOtCZbAOos/erqOStf0nD2BV nzCPCU/rdhjx+iEKjh1ToPf3t1S0/9AGOzGx5I422Ki8AZZwxatejPrJ0eh7QMpo Gt/Wfifwr1f2Lg5DQ0zTP/63ok1NBQDuTG25gUqC2CL40t+7HZ5o5db03wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYgGWc0jCL0DPQot21Q22c6RKTQMB8GA1UdIwQY MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0BLIMn0 yw446fosvElG+kqZcjqH3lE2P5kmRF0inllMmks0S60BAQDx1pxl2nqvAgr7r1Zv ODPLuZ4Mt2qg9DamoVsp8OtAxRHKUiOlnxvJMLxbQgqdPVIwhs2t2lguMgPzAhSc PmfxJcurNCgRlrf8m+3nCYKQQKE8HBWrB3ve9hCa9J7r6crtuF5BgzJksUYQXRdT nr6FoOaETVfS8hindUYWstamWAzzChRBvGfbr8B4p1K5f2UTsM1qwPAtkMp/POPN 7AOcY3T1A//WgrhYZpP5Nxgmku4FXKepN2Ag3tgNmgRYNA85dI+quyD3/biUTI0V aVQa++FJfgbcGA== -----END CERTIFICATE-----Generated at Wed Dec 10 12:55:46 2025 by rpki-client