This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json) Hash identifier: yybnIg5TRgsY+05+a8ld/9cJY7cWrGkNW1uL3NiT7UY= Subject key identifier: D4:AB:06:9F:D3:87:4E:B3:1F:21:B4:42:B7:F2:9A:F5:D8:C3:DC:99 Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Certificate serial: 019B37211C5804EEAFFBFD5515F067873B39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 15:01:15 +0000 Manifest this update: Fri 19 Dec 2025 15:01:15 +0000 Manifest next update: Sat 20 Dec 2025 15:01:15 +0000 Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=) 2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: sHsQMfU/ir5cDcVl5KaD84ILrrGtKlXxf5oYr/iZiyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:1c:58:04:ee:af:fb:fd:55:15:f0:67:87:3b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Validity Not Before: Dec 19 15:01:15 2025 GMT Not After : Dec 20 15:01:15 2025 GMT Subject: CN=d4ab069fd3874eb31f21b442b7f29af5d8c3dc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:39:78:48:0a:f7:3d:92:68:96:03:40:ae: 13:89:50:b5:10:fe:d7:27:02:a4:a9:22:39:61:0d: 80:2f:90:9b:08:e8:f1:88:37:4e:34:d5:13:d8:6a: cb:e2:70:d8:73:75:a0:dc:71:51:e9:50:9b:a7:38: 87:bd:f5:9b:1d:cf:57:af:8a:af:8c:22:ef:14:bb: 09:c1:74:71:77:d1:d4:c9:23:75:40:a7:ea:e0:4f: 3a:48:6b:f4:4b:5f:34:00:00:f8:eb:d2:81:eb:fb: f4:c6:ae:85:c7:0b:3d:ec:52:db:71:21:60:b9:74: 73:da:bf:f4:bf:87:f6:5a:59:b3:0e:84:f1:81:3e: 10:6e:ce:1d:01:35:02:dd:d6:fb:5f:9c:45:49:57: 3f:05:ff:c9:e6:d6:c6:6a:2d:ff:4a:e6:71:42:23: 0c:a0:24:b3:f2:33:ea:2a:f5:97:0d:17:bd:8b:c3: d9:e1:ef:71:82:b5:ae:9a:b3:e4:a6:8f:85:61:0f: 13:5f:75:17:af:39:50:7b:b5:69:40:b9:e6:b1:3b: 59:f5:78:a8:89:76:98:22:5f:54:dc:91:86:7f:f7: 64:db:8b:a5:bc:6b:0d:71:16:9d:5a:7f:0c:08:b4: 4a:23:f2:fe:f8:91:cf:23:d9:23:5f:71:6c:aa:4c: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AB:06:9F:D3:87:4E:B3:1F:21:B4:42:B7:F2:9A:F5:D8:C3:DC:99 X509v3 Authority Key Identifier: keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:75:be:57:7b:9e:22:90:fd:75:df:94:0a:64:85:c1:85:2b: 42:4c:d1:4e:55:68:64:8e:25:ac:de:b7:df:f1:d6:79:a5:0e: 74:e8:84:0f:e9:cb:1d:c7:44:1b:f7:94:8d:3b:96:88:10:38: be:e5:f7:93:10:db:03:3e:01:86:14:92:b0:3f:d6:a9:36:93: f4:12:67:c6:80:ca:06:de:97:d1:b1:0d:4c:9a:f3:4c:ff:a8: 6f:4b:ec:d0:23:af:08:cd:c1:27:11:c2:da:b8:3a:21:c0:06: b6:40:e7:98:72:8d:18:3e:a7:3c:3f:ab:ef:fa:0c:b7:58:55: 14:40:af:f7:e3:96:8e:ed:b6:2e:3b:9e:51:87:58:a2:a4:b3: 20:cd:84:c3:9a:4b:0d:b5:23:1c:ce:0d:ff:40:d9:2d:e4:8a: 19:68:2d:29:f9:61:e3:41:3e:ca:82:b8:4c:df:61:66:cf:47: 5f:a8:77:e0:01:61:49:4b:09:d1:d2:4f:09:8d:8e:be:8e:c0: b0:58:ef:a1:91:36:c2:9c:20:b9:9b:58:46:ed:4e:a4:01:c5: 73:42:cc:52:36:18:e1:ab:44:fe:26:47:d2:50:69:e0:f4:ca: 99:bb:78:8a:34:22:46:77:ef:84:53:f7:cb:bd:20:f1:bd:20: 02:52:68:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IRxYBO6v+/1VFfBnhzs5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk NDBlMWQwHhcNMjUxMjE5MTUwMTE1WhcNMjUxMjIwMTUwMTE1WjAzMTEwLwYDVQQD EyhkNGFiMDY5ZmQzODc0ZWIzMWYyMWI0NDJiN2YyOWFmNWQ4YzNkYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrc5eEgK9z2SaJYDQK4TiVC1EP7X JwKkqSI5YQ2AL5CbCOjxiDdONNUT2GrL4nDYc3Wg3HFR6VCbpziHvfWbHc9Xr4qv jCLvFLsJwXRxd9HUySN1QKfq4E86SGv0S180AAD469KB6/v0xq6Fxws97FLbcSFg uXRz2r/0v4f2WlmzDoTxgT4Qbs4dATUC3db7X5xFSVc/Bf/J5tbGai3/SuZxQiMM oCSz8jPqKvWXDRe9i8PZ4e9xgrWumrPkpo+FYQ8TX3UXrzlQe7VpQLnmsTtZ9Xio iXaYIl9U3JGGf/dk24ulvGsNcRadWn8MCLRKI/L++JHPI9kjX3FsqkzHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSrBp/Th06zHyG0QrfymvXYw9yZMB8GA1UdIwQY MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHW+V3ue IpD9dd+UCmSFwYUrQkzRTlVoZI4lrN633/HWeaUOdOiED+nLHcdEG/eUjTuWiBA4 vuX3kxDbAz4BhhSSsD/WqTaT9BJnxoDKBt6X0bENTJrzTP+ob0vs0COvCM3BJxHC 2rg6IcAGtkDnmHKNGD6nPD+r7/oMt1hVFECv9+OWju22LjueUYdYoqSzIM2Ew5pL DbUjHM4N/0DZLeSKGWgtKflh40E+yoK4TN9hZs9HX6h34AFhSUsJ0dJPCY2Ovo7A sFjvoZE2wpwguZtYRu1OpAHFc0LMUjYY4atE/iZH0lBp4PTKmbt4ijQiRnfvhFP3 y70g8b0gAlJogQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:06 2025 by rpki-client