This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json) Hash identifier: Qp6GjaNMW2/NUmfyDbjNoV4Vm654uOHNW9IPZJ/hk4M= Subject key identifier: BB:11:01:49:D1:65:9B:2E:1A:1D:79:AD:6C:01:A5:DA:F0:CF:50:54 Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf Certificate serial: 019B08C8485ECFE6E6C3AB5BDD9F99B587C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft Manifest number: 13BB Signing time: Wed 10 Dec 2025 15:01:41 +0000 Manifest this update: Wed 10 Dec 2025 15:01:41 +0000 Manifest next update: Thu 11 Dec 2025 15:01:41 +0000 Files and hashes: 1: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (hash: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=) 2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: qt/jIBMY1+KSX/9HU7c/QRO4lzC3M49j6dimUPHL4/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:48:5e:cf:e6:e6:c3:ab:5b:dd:9f:99:b5:87:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf Validity Not Before: Dec 10 15:01:41 2025 GMT Not After : Dec 11 15:01:41 2025 GMT Subject: CN=bb110149d1659b2e1a1d79ad6c01a5daf0cf5054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:9f:ef:f1:70:d5:89:58:e6:83:b7:0d:e3: b2:6f:4d:84:ff:10:80:68:64:29:63:cb:5b:59:46: 2e:bd:8f:1f:9a:21:ae:bb:46:f6:1e:85:f7:25:0c: 52:d9:49:40:aa:fb:92:09:b8:cb:c9:9d:e8:7e:1a: 57:76:41:db:50:b5:4f:f8:e5:da:99:f2:62:80:2b: 76:2f:fe:af:96:71:f3:d2:77:b4:4b:06:73:fb:cd: 8e:b4:d6:59:fc:26:77:69:62:90:31:d1:c3:b5:14: 9a:dd:0e:f8:65:35:46:a8:63:e2:ff:e0:c7:e9:fc: aa:92:67:6f:26:6c:fa:ed:e8:fc:c0:3a:21:78:0f: 08:f7:43:93:fa:15:cd:d2:3e:19:aa:96:68:50:cd: ce:30:bb:13:7e:75:6b:08:db:08:e7:0c:b1:89:17: 9c:25:78:cc:c8:10:0b:5a:b7:ea:1c:c0:ad:af:1d: a0:f9:71:9b:a3:98:29:27:9a:c6:72:1b:14:00:91: 19:49:b2:9f:cc:fc:82:95:8b:0b:fa:ba:1d:64:81: 20:4f:ac:b1:12:45:f3:45:32:ca:6d:4e:70:ef:72: aa:a8:60:71:2f:9c:5b:0a:e4:ba:d3:29:57:3b:cc: e9:e8:96:18:77:ba:d3:1c:96:9c:f1:31:67:5c:cc: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:11:01:49:D1:65:9B:2E:1A:1D:79:AD:6C:01:A5:DA:F0:CF:50:54 X509v3 Authority Key Identifier: keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:68:5d:24:02:a3:c5:6b:e1:2a:8b:62:4a:10:9b:a6:bf:70: 22:52:8d:2d:7d:08:72:56:c2:e6:da:bf:62:7e:a2:49:ba:4a: 22:b7:ad:27:f0:47:a3:c4:f3:f5:57:f2:fd:77:a8:a3:ba:d6: 4d:88:76:25:69:3c:31:d8:ea:37:d7:ac:fc:3f:95:f8:3b:09: b3:2e:1e:32:d2:a1:81:d6:1e:d6:3c:ae:a4:3e:40:56:48:38: 97:ac:f8:e8:17:84:96:69:5a:9b:ca:76:61:6e:89:41:bc:99: a9:0a:cb:69:f9:c1:d0:87:5e:79:40:08:b3:ba:78:df:34:b8: ee:28:6d:19:17:16:8f:b7:1f:ae:45:cb:fc:22:a5:46:d4:6b: cc:ce:a3:83:86:10:b5:a4:b0:12:c5:e7:0a:11:c7:d9:73:cf: 25:3e:25:c1:36:94:bc:0d:90:24:8b:b5:f4:71:cb:f5:03:6c: 2c:bb:54:64:5e:f5:cd:34:a8:3f:69:b7:11:c6:51:0b:c3:7b: c4:88:d9:66:26:84:e9:ef:1b:c4:cd:14:e7:87:1d:4d:0d:6e: 15:3f:92:79:28:70:68:a4:76:ae:f2:87:72:03:5d:d7:41:c2: 0a:36:84:91:b3:fd:45:f9:59:5f:8b:ec:23:38:cb:4a:3c:46: ad:bf:07:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyEhez+bmw6tb3Z+ZtYfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDczOWQwNTI4ZGNiNGZjZTU3OGQxMWY3ZWMzNGIwZTM3 NDUyY2YwHhcNMjUxMjEwMTUwMTQxWhcNMjUxMjExMTUwMTQxWjAzMTEwLwYDVQQD EyhiYjExMDE0OWQxNjU5YjJlMWExZDc5YWQ2YzAxYTVkYWYwY2Y1MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuayf7/Fw1YlY5oO3DeOyb02E/xCA aGQpY8tbWUYuvY8fmiGuu0b2HoX3JQxS2UlAqvuSCbjLyZ3ofhpXdkHbULVP+OXa mfJigCt2L/6vlnHz0ne0SwZz+82OtNZZ/CZ3aWKQMdHDtRSa3Q74ZTVGqGPi/+DH 6fyqkmdvJmz67ej8wDoheA8I90OT+hXN0j4ZqpZoUM3OMLsTfnVrCNsI5wyxiRec JXjMyBALWrfqHMCtrx2g+XGbo5gpJ5rGchsUAJEZSbKfzPyClYsL+rodZIEgT6yx EkXzRTLKbU5w73KqqGBxL5xbCuS60ylXO8zp6JYYd7rTHJac8TFnXMyacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsRAUnRZZsuGh15rWwBpdrwz1BUMB8GA1UdIwQY MBaAFO4HOdBSjctPzleNEffsNLDjdFLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGIt YjAzYzJmYmRjNjQ0LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGItYjAzYzJmYmRjNjQ0 LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2hdJAKj xWvhKotiShCbpr9wIlKNLX0IclbC5tq/Yn6iSbpKIretJ/BHo8Tz9Vfy/Xeoo7rW TYh2JWk8MdjqN9es/D+V+DsJsy4eMtKhgdYe1jyupD5AVkg4l6z46BeElmlam8p2 YW6JQbyZqQrLafnB0IdeeUAIs7p43zS47ihtGRcWj7cfrkXL/CKlRtRrzM6jg4YQ taSwEsXnChHH2XPPJT4lwTaUvA2QJIu19HHL9QNsLLtUZF71zTSoP2m3EcZRC8N7 xIjZZiaE6e8bxM0U54cdTQ1uFT+SeShwaKR2rvKHcgNd10HCCjaEkbP9RflZX4vs IzjLSjxGrb8HFA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:27:00 2025 by rpki-client