This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json) Hash identifier: 8RsVFOrSAAZLL5mMG+FrIiJ1gNHmspnwRsYZgf1CLl4= Subject key identifier: 56:8F:D5:B9:6B:CA:9C:38:2A:7E:9A:A5:13:A2:FE:00:1B:FD:52:5E Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225 Certificate serial: 019B21E25AABA525079935C892BE36A38495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft Manifest number: 0C72 Signing time: Mon 15 Dec 2025 12:00:41 +0000 Manifest this update: Mon 15 Dec 2025 12:00:41 +0000 Manifest next update: Tue 16 Dec 2025 12:00:41 +0000 Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: X9c9OzXYGKMQ228n5YndgcStpCQlL/TQI7iHram/inc=) 2: YSH0QfgktL4T3PqTj2iClyuBZuc.roa (hash: otGtnOmBuu+IdPmE0dcRqAI5P+FLdodcVi6Fo/18JQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:5a:ab:a5:25:07:99:35:c8:92:be:36:a3:84:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225 Validity Not Before: Dec 15 12:00:41 2025 GMT Not After : Dec 16 12:00:41 2025 GMT Subject: CN=568fd5b96bca9c382a7e9aa513a2fe001bfd525e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:6a:c3:13:06:cb:40:b3:84:a8:05:a0:37: 12:27:a0:a7:b0:bd:e0:3b:9a:7d:cf:4c:33:03:81: 5a:0e:ef:38:61:ae:98:86:52:99:e7:af:81:f9:e9: 0d:6c:eb:a5:c9:5e:17:c7:3d:28:d3:4e:1b:a6:b4: 94:19:d9:2e:03:61:84:ec:be:83:2a:e8:fb:86:09: ca:b2:24:ce:05:c0:f8:b6:fa:f3:ae:02:74:62:e2: b8:e6:6d:18:9f:92:34:37:39:99:60:59:f6:63:fa: 2f:40:80:bd:a2:15:22:1a:5c:11:33:93:1f:67:28: 55:ec:d8:93:0b:d5:28:6a:a8:ac:49:d9:fe:e7:85: c8:5c:d0:ee:45:c5:e3:6a:c2:2f:40:89:0b:e9:1b: 53:d3:bf:a2:71:ac:00:a7:c1:73:5c:93:d7:f3:42: bd:ab:6b:91:8b:d4:b4:e4:f4:31:74:c3:6e:d7:ce: de:74:34:83:b6:7b:f6:3b:18:eb:e7:65:4e:80:b4: 12:6d:18:70:91:99:ab:f9:9d:ea:11:d9:4c:61:7b: 99:fe:f4:70:2f:b0:ee:3a:8e:2e:d4:68:9f:76:5e: e6:99:07:6f:43:1e:0b:e2:d6:14:95:86:36:11:ee: da:05:d1:6c:81:1c:e2:89:00:b2:25:5b:62:76:e0: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:D5:B9:6B:CA:9C:38:2A:7E:9A:A5:13:A2:FE:00:1B:FD:52:5E X509v3 Authority Key Identifier: keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:75:c1:ce:2c:3f:53:5b:a6:50:d6:be:2e:f1:a0:2a:d1:40: e8:92:05:3a:40:cb:70:de:8b:68:30:f7:ff:46:fd:d2:d3:c4: bd:64:71:62:bd:7d:7e:96:b0:09:e6:e7:85:37:b2:24:96:93: e2:91:2b:12:dc:d1:7f:43:1b:63:50:48:7a:12:33:bd:41:35: b7:0e:bd:6b:80:e1:33:56:66:df:23:66:1a:51:db:93:39:95: a0:ff:2a:e6:a0:b7:5b:ff:5a:c8:23:20:7f:e2:fa:73:cd:34: a8:fd:18:35:00:b0:59:ec:e0:ba:59:a2:b1:5c:5a:d0:15:0e: 12:7b:60:2f:b5:d6:fe:92:bf:88:26:e4:6a:79:9b:35:d3:0c: 4e:09:c5:ba:46:83:03:23:49:b9:e0:d2:c5:a9:17:cd:c0:22: 74:7f:f5:c5:8e:5f:7e:05:c5:1b:fd:d9:b7:94:40:94:fb:b8: df:cf:8a:12:5e:f6:c7:78:d5:92:15:2d:62:af:3f:ae:c0:b1: 77:33:a3:54:32:42:d2:78:bc:25:6f:aa:98:e3:2b:50:8c:9d: ef:52:44:db:a7:a0:4c:fd:c8:d6:8a:fe:95:bb:72:06:b5:db: 81:4b:c0:53:b3:f1:9c:a4:b9:f4:97:40:16:58:0e:d1:ad:d7: 4d:4d:31:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4lqrpSUHmTXIkr42o4SVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTI2OTE4NWY2M2RjMzM1NjAzN2Y3MTNjZThhMDkwOWZm MDcyMjUwHhcNMjUxMjE1MTIwMDQxWhcNMjUxMjE2MTIwMDQxWjAzMTEwLwYDVQQD Eyg1NjhmZDViOTZiY2E5YzM4MmE3ZTlhYTUxM2EyZmUwMDFiZmQ1MjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxstqwxMGy0CzhKgFoDcSJ6CnsL3g O5p9z0wzA4FaDu84Ya6YhlKZ56+B+ekNbOulyV4Xxz0o004bprSUGdkuA2GE7L6D Kuj7hgnKsiTOBcD4tvrzrgJ0YuK45m0Yn5I0NzmZYFn2Y/ovQIC9ohUiGlwRM5Mf ZyhV7NiTC9UoaqisSdn+54XIXNDuRcXjasIvQIkL6RtT07+icawAp8FzXJPX80K9 q2uRi9S05PQxdMNu187edDSDtnv2Oxjr52VOgLQSbRhwkZmr+Z3qEdlMYXuZ/vRw L7DuOo4u1Gifdl7mmQdvQx4L4tYUlYY2Ee7aBdFsgRziiQCyJVtiduC9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaP1blrypw4Kn6apROi/gAb/VJeMB8GA1UdIwQY MBaAFOySaRhfY9wzVgN/cTzooJCf8HIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUt YTZjOGJkODc0MmE0LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUtYTZjOGJkODc0MmE0 LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXXBziw/ U1umUNa+LvGgKtFA6JIFOkDLcN6LaDD3/0b90tPEvWRxYr19fpawCebnhTeyJJaT 4pErEtzRf0MbY1BIehIzvUE1tw69a4DhM1Zm3yNmGlHbkzmVoP8q5qC3W/9ayCMg f+L6c800qP0YNQCwWezgulmisVxa0BUOEntgL7XW/pK/iCbkanmbNdMMTgnFukaD AyNJueDSxakXzcAidH/1xY5ffgXFG/3Zt5RAlPu438+KEl72x3jVkhUtYq8/rsCx dzOjVDJC0ni8JW+qmOMrUIyd71JE26egTP3I1or+lbtyBrXbgUvAU7PxnKS59JdA FlgO0a3XTU0xpw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:03 2025 by rpki-client