This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json) Hash identifier: 5UbdpDlMYEHYl4cdEAKv8gJtAG5795JODGNBwRMLqag= Subject key identifier: 3F:13:08:D4:69:D5:99:EC:1E:47:2C:50:35:D4:90:C0:B5:7E:C0:CD Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225 Certificate serial: 019B42B7BF0F4237DF7B2F38B61A7D32C9F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft Manifest number: 0C83 Signing time: Sun 21 Dec 2025 21:01:36 +0000 Manifest this update: Sun 21 Dec 2025 21:01:36 +0000 Manifest next update: Mon 22 Dec 2025 21:01:36 +0000 Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: yZFrYrGtXyIQSv+yybJMpcEMouyIlm5K7CyV2b9xcWY=) 2: YSH0QfgktL4T3PqTj2iClyuBZuc.roa (hash: otGtnOmBuu+IdPmE0dcRqAI5P+FLdodcVi6Fo/18JQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:bf:0f:42:37:df:7b:2f:38:b6:1a:7d:32:c9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225 Validity Not Before: Dec 21 21:01:36 2025 GMT Not After : Dec 22 21:01:36 2025 GMT Subject: CN=3f1308d469d599ec1e472c5035d490c0b57ec0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:9e:ac:0c:85:79:b6:ab:6e:81:43:30:cc: e4:b3:2d:cd:82:e7:da:1a:45:c6:f9:dd:5c:df:df: 38:63:8d:dc:b5:67:a7:63:c8:78:bc:30:04:d8:80: 14:59:66:9a:85:b5:a0:ee:4e:e4:98:41:0a:da:f1: 73:ee:ec:15:1f:fa:be:57:c8:ff:ff:ff:1b:73:97: a0:a8:2a:07:04:ce:f1:ec:4b:54:00:94:d6:a1:cb: d6:b1:63:73:80:dc:56:85:3b:e1:1d:e9:df:21:c6: ff:ce:9c:1f:e8:2d:97:51:d8:36:10:4d:dd:cc:e5: 90:74:9d:11:b3:c3:a4:1b:ad:81:0b:7f:f3:af:dc: b7:bd:f6:a3:e1:74:50:3d:cf:ea:28:c1:fc:21:e6: de:cb:2c:ec:d4:48:6e:a7:ec:34:26:fc:51:be:f1: c7:d8:9d:1c:d3:ee:cc:08:2e:83:f3:d7:7d:f3:57: 64:46:e8:2e:bf:4a:30:32:70:74:3b:b7:83:b0:4c: bf:fb:7b:57:66:0b:44:1e:3b:0b:81:43:4e:58:67: 70:d0:22:14:d5:d1:eb:b1:05:e7:a5:61:f5:2a:87: 7c:c9:4b:01:5b:e0:e3:62:a2:dc:28:a7:f6:6c:2e: c2:7d:23:f2:34:37:1b:b2:b9:d4:dc:17:36:de:d0: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:08:D4:69:D5:99:EC:1E:47:2C:50:35:D4:90:C0:B5:7E:C0:CD X509v3 Authority Key Identifier: keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:99:92:5f:a6:66:63:ac:a3:43:0e:87:7d:ad:ab:2e:69: 48:dd:46:36:f1:64:58:37:dd:ba:5b:2c:ee:11:da:3a:6b:d6: 02:46:54:d2:2b:4c:08:a3:eb:af:3f:3d:d0:81:eb:ad:4c:4e: 48:c6:5e:fa:d8:48:1d:1d:f6:e2:23:b2:3a:3c:cc:21:88:a7: 96:cf:36:b4:8b:91:92:56:8b:1c:31:1d:c0:15:c0:3b:f9:b4: ce:64:1e:7a:62:f9:7b:38:db:d1:6a:51:8c:ca:b8:7d:74:86: c6:e2:73:e8:1e:78:9f:ae:c5:9d:61:a3:4b:71:d4:55:6a:79: af:00:90:33:55:08:81:9d:3f:3e:7e:74:bc:16:87:cd:56:1a: 59:ce:c3:c1:25:a7:84:33:81:5f:80:2a:5c:11:58:bd:72:08: ab:33:25:03:a2:6d:a6:c5:71:ab:01:b6:43:3b:b3:d4:99:ed: 29:c1:ea:de:25:69:cd:f2:2d:d7:f0:54:8d:e0:b4:f1:f6:48: 80:47:1d:fc:fd:f4:43:99:eb:6d:ab:76:f8:92:91:bc:9c:4b: 51:c0:35:36:78:39:bc:14:71:25:87:13:25:87:83:f4:5c:27: 53:42:1e:0a:fe:5c:0c:e7:9f:a4:71:9b:89:6d:be:ab:8c:58: 42:91:6e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt78PQjffey84thp9Msn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTI2OTE4NWY2M2RjMzM1NjAzN2Y3MTNjZThhMDkwOWZm MDcyMjUwHhcNMjUxMjIxMjEwMTM2WhcNMjUxMjIyMjEwMTM2WjAzMTEwLwYDVQQD EygzZjEzMDhkNDY5ZDU5OWVjMWU0NzJjNTAzNWQ0OTBjMGI1N2VjMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmuerAyFebarboFDMMzksy3Ngufa GkXG+d1c3984Y43ctWenY8h4vDAE2IAUWWaahbWg7k7kmEEK2vFz7uwVH/q+V8j/ //8bc5egqCoHBM7x7EtUAJTWocvWsWNzgNxWhTvhHenfIcb/zpwf6C2XUdg2EE3d zOWQdJ0Rs8OkG62BC3/zr9y3vfaj4XRQPc/qKMH8Iebeyyzs1Ehup+w0JvxRvvHH 2J0c0+7MCC6D89d981dkRuguv0owMnB0O7eDsEy/+3tXZgtEHjsLgUNOWGdw0CIU 1dHrsQXnpWH1Kod8yUsBW+DjYqLcKKf2bC7CfSPyNDcbsrnU3Bc23tAyFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8TCNRp1ZnsHkcsUDXUkMC1fsDNMB8GA1UdIwQY MBaAFOySaRhfY9wzVgN/cTzooJCf8HIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUt YTZjOGJkODc0MmE0LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUtYTZjOGJkODc0MmE0 LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpSZkl+m ZmOso0MOh32tqy5pSN1GNvFkWDfdulss7hHaOmvWAkZU0itMCKPrrz890IHrrUxO SMZe+thIHR324iOyOjzMIYinls82tIuRklaLHDEdwBXAO/m0zmQeemL5ezjb0WpR jMq4fXSGxuJz6B54n67FnWGjS3HUVWp5rwCQM1UIgZ0/Pn50vBaHzVYaWc7DwSWn hDOBX4AqXBFYvXIIqzMlA6JtpsVxqwG2Qzuz1JntKcHq3iVpzfIt1/BUjeC08fZI gEcd/P30Q5nrbat2+JKRvJxLUcA1Nng5vBRxJYcTJYeD9FwnU0IeCv5cDOefpHGb iW2+q4xYQpFuaQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:40 2025 by rpki-client