This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json) Hash identifier: gSxKxBr5bnswYHNdbKt3y8v/BY6t/RQzHppd+L6S8vg= Subject key identifier: 3C:FB:76:25:09:0C:11:D0:22:8C:13:1B:E3:FC:2D:DC:5E:4E:84:13 Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Certificate serial: 019B0E5BBFBCC364712E6B9BB1370F77460B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 17:00:52 +0000 Manifest this update: Thu 11 Dec 2025 17:00:52 +0000 Manifest next update: Fri 12 Dec 2025 17:00:52 +0000 Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: b3H7/tQICjtl7bGOpYHiQmYT9d7K4jqcuAFU3AWi2OM=) 2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=) 3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:bf:bc:c3:64:71:2e:6b:9b:b1:37:0f:77:46:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14 Validity Not Before: Dec 11 17:00:52 2025 GMT Not After : Dec 12 17:00:52 2025 GMT Subject: CN=3cfb7625090c11d0228c131be3fc2ddc5e4e8413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:75:ca:42:3e:03:21:20:61:13:5c:ea:ce: 0a:b9:2d:ee:0d:60:d8:5c:62:11:08:26:07:4c:8e: 0a:a1:d8:07:45:58:b3:78:24:0b:d5:76:88:bb:e2: fe:ae:38:f0:fa:fa:6a:16:0b:be:9b:cf:49:cf:89: 68:ad:51:9f:67:17:37:2a:00:37:8a:85:c2:b1:29: 7c:a3:6c:9a:57:e4:51:da:2a:37:e6:d0:3d:d7:93: ec:ab:f0:5e:52:90:6b:f7:41:e8:bd:57:06:d3:b4: 33:52:49:a6:b2:ba:c7:04:5b:65:a8:9f:9a:d8:ee: 78:23:e2:1a:1c:f9:2f:b9:44:9a:c3:41:d1:56:87: 9a:d3:06:88:81:d0:1c:c2:69:35:d7:6a:72:dc:3c: e5:20:85:98:b8:8e:a4:91:ac:77:27:fe:a4:39:f4: 43:72:57:69:fc:b5:31:06:11:e2:d1:ab:43:eb:09: 7e:8c:ba:b0:c8:27:43:b6:47:79:ea:2c:8e:c8:85: f8:ae:a8:a9:d7:cb:87:26:60:37:1a:ad:44:fa:da: 29:76:0f:99:e8:ab:26:72:5c:b5:fc:ed:c5:c2:91: c5:44:bb:57:b5:21:58:47:c2:c5:30:0e:0f:c7:72: 1f:e4:c7:d1:28:0b:26:ac:22:1f:ee:f2:f9:29:53: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FB:76:25:09:0C:11:D0:22:8C:13:1B:E3:FC:2D:DC:5E:4E:84:13 X509v3 Authority Key Identifier: keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fd:7e:a2:c3:64:a2:0a:3e:c4:86:5c:2d:cf:fd:76:34:30: cb:e0:fe:04:a8:4c:65:3c:2f:6b:21:3b:4a:47:14:31:00:b3: 19:73:e6:0d:02:87:18:aa:d3:5a:b8:fa:e9:ee:45:74:fe:58: f9:71:ec:79:2f:31:fe:74:fb:83:a2:f8:5e:9c:03:f8:6c:12: 1c:76:21:96:e3:d7:c6:85:f9:39:56:d8:a5:36:6b:cd:4d:2d: 07:97:53:01:a6:0e:53:85:3d:30:4b:28:a6:b6:0a:6c:c5:7a: 92:d4:dd:e9:93:30:cf:89:c7:e0:96:a8:d9:cb:0e:4b:8f:26: 37:27:87:47:09:45:cf:cc:d6:9a:3e:ea:04:49:3b:2c:b3:d3: 2f:35:21:0d:51:5f:60:ab:5c:fb:ae:52:10:10:95:bb:5c:d8: 2c:98:2d:60:f1:b1:c1:88:70:77:bc:3a:38:73:85:05:9e:7b: a6:be:4a:67:b8:0e:ab:69:44:4c:e1:7f:ed:a8:75:45:30:e1: 36:c9:13:cd:ee:9e:5b:13:48:2e:fb:03:f0:a4:49:dd:da:5f: 02:27:41:d4:17:ca:aa:5c:60:e9:af:31:e2:6a:9d:f9:6b:e4: 7c:a3:33:a7:bd:7b:b3:80:2d:3a:79:4d:9f:a7:e7:da:13:6f: d3:1a:b1:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7+8w2RxLmubsTcPd0YLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1 NTlkMTQwHhcNMjUxMjExMTcwMDUyWhcNMjUxMjEyMTcwMDUyWjAzMTEwLwYDVQQD EygzY2ZiNzYyNTA5MGMxMWQwMjI4YzEzMWJlM2ZjMmRkYzVlNGU4NDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5t1ykI+AyEgYRNc6s4KuS3uDWDY XGIRCCYHTI4KodgHRVizeCQL1XaIu+L+rjjw+vpqFgu+m89Jz4lorVGfZxc3KgA3 ioXCsSl8o2yaV+RR2io35tA915Psq/BeUpBr90HovVcG07QzUkmmsrrHBFtlqJ+a 2O54I+IaHPkvuUSaw0HRVoea0waIgdAcwmk112py3DzlIIWYuI6kkax3J/6kOfRD cldp/LUxBhHi0atD6wl+jLqwyCdDtkd56iyOyIX4rqip18uHJmA3Gq1E+topdg+Z 6Ksmcly1/O3FwpHFRLtXtSFYR8LFMA4Px3If5MfRKAsmrCIf7vL5KVMX6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz7diUJDBHQIowTG+P8LdxeToQTMB8GA1UdIwQY MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt MzQ5N2NlMWI3MWJmLzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv1+osNk ogo+xIZcLc/9djQwy+D+BKhMZTwvayE7SkcUMQCzGXPmDQKHGKrTWrj66e5FdP5Y +XHseS8x/nT7g6L4XpwD+GwSHHYhluPXxoX5OVbYpTZrzU0tB5dTAaYOU4U9MEso prYKbMV6ktTd6ZMwz4nH4Jao2csOS48mNyeHRwlFz8zWmj7qBEk7LLPTLzUhDVFf YKtc+65SEBCVu1zYLJgtYPGxwYhwd7w6OHOFBZ57pr5KZ7gOq2lETOF/7ah1RTDh NskTze6eWxNILvsD8KRJ3dpfAidB1BfKqlxg6a8x4mqd+WvkfKMzp717s4AtOnlN n6fn2hNv0xqxig== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:35 2025 by rpki-client