This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json) Hash identifier: tvYBP7I6IMzKTzNU0K8Wizyr9k/cvnkR1uDIvqWu9rk= Subject key identifier: 8D:88:F7:D1:2D:97:D3:72:DB:96:E5:EA:6E:80:09:A8:A1:4B:76:F7 Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6 Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6 Certificate serial: 019B38A10CB4F555721FF5101C37459EA4D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft Manifest number: 0DF2 Signing time: Fri 19 Dec 2025 22:00:36 +0000 Manifest this update: Fri 19 Dec 2025 22:00:36 +0000 Manifest next update: Sat 20 Dec 2025 22:00:36 +0000 Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: 11kMFSs3brlIxZJwZ8XpZlLEU4ip2jRmqMNZlc2z0jY=) 2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:0c:b4:f5:55:72:1f:f5:10:1c:37:45:9e:a4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6 Validity Not Before: Dec 19 22:00:36 2025 GMT Not After : Dec 20 22:00:36 2025 GMT Subject: CN=8d88f7d12d97d372db96e5ea6e8009a8a14b76f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:bb:f5:5d:eb:b3:0a:35:9a:aa:6d:8a:3e: 03:8b:78:c4:a6:7a:77:05:10:52:dc:f6:23:ed:a5: 6e:1b:68:2e:27:fd:45:07:ec:aa:59:e0:db:74:da: b7:fe:ee:d1:ca:1a:bd:72:21:bd:96:90:cb:8b:a9: 92:b9:ce:7d:25:c1:ef:60:1d:36:9e:47:f7:7b:b7: e9:26:f4:0d:0a:bb:34:65:ff:87:10:dc:68:c7:a0: 01:15:68:23:04:3a:2f:3b:ab:fa:a5:be:d5:cd:09: f9:0a:aa:80:73:22:07:3e:2c:21:57:fb:5a:85:1f: c8:bd:fb:7b:ff:3d:f3:c7:a7:fc:d4:82:5f:4f:f4: 3c:52:95:26:2c:2b:4b:98:5b:68:54:a4:77:f8:08: 6d:ff:36:3c:c7:20:88:ce:e2:af:75:55:46:cc:10: 43:29:7a:93:c2:0d:c0:21:a0:cf:18:4e:c7:18:a0: 76:83:5a:17:64:04:ac:ad:50:0b:a3:18:bf:19:14: 6c:1a:b3:c8:21:2a:a5:12:82:07:44:90:82:92:67: 0f:4a:42:f1:e7:e1:73:fc:c1:e0:e0:0b:cf:ad:c6: a1:98:00:47:d0:d2:f3:6b:9d:0e:25:6a:12:cc:0c: 0b:48:80:74:32:8a:00:e2:18:67:3a:74:c1:87:86: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:F7:D1:2D:97:D3:72:DB:96:E5:EA:6E:80:09:A8:A1:4B:76:F7 X509v3 Authority Key Identifier: keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9c:00:b9:6e:53:b6:94:36:e0:2b:d7:c0:28:78:5c:ec:d1: f2:d5:5f:f6:16:d1:f7:d9:c2:ad:5b:c8:f5:b6:57:46:4b:47: a0:5f:b7:4c:fe:fb:cf:d3:01:2f:d2:3c:52:7c:3a:cb:7e:72: 37:0f:26:c0:06:25:a4:20:a0:d1:cc:88:4f:2b:8c:34:7b:c5: 18:8a:7b:aa:ee:ed:ba:a2:1f:4f:85:b2:07:8a:b5:58:a1:e3: 16:88:25:5f:37:1c:3c:be:7c:a0:e8:18:e3:06:3e:f4:b6:4b: 9c:45:43:7c:b9:37:b7:91:8b:10:62:c4:7d:da:d4:c5:5c:1b: 81:ba:7b:fc:19:d6:2d:b3:21:c1:be:ee:c0:53:58:e7:6e:66: 5a:3a:a4:37:be:91:79:f7:ea:f7:ea:83:c6:50:ba:62:b7:b9: 7a:2a:96:ec:54:2f:5b:d6:40:f6:99:d2:5a:b0:06:5d:1f:1a: 95:db:70:1a:cb:24:c4:93:0f:19:74:2b:42:62:dc:fb:2b:54: 09:64:e2:f1:56:fb:7c:af:3e:03:35:d4:36:85:d4:18:2d:dd: 47:a8:bd:e0:75:58:5b:36:1a:6b:25:0a:db:fc:b9:71:38:6a: 50:d1:21:f8:ff:46:5f:2c:fb:52:e3:f0:00:d3:08:ec:78:61: 61:38:11:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oQy09VVyH/UQHDdFnqTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2 NTViZTYwHhcNMjUxMjE5MjIwMDM2WhcNMjUxMjIwMjIwMDM2WjAzMTEwLwYDVQQD Eyg4ZDg4ZjdkMTJkOTdkMzcyZGI5NmU1ZWE2ZTgwMDlhOGExNGI3NmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrK79V3rswo1mqptij4Di3jEpnp3 BRBS3PYj7aVuG2guJ/1FB+yqWeDbdNq3/u7Ryhq9ciG9lpDLi6mSuc59JcHvYB02 nkf3e7fpJvQNCrs0Zf+HENxox6ABFWgjBDovO6v6pb7VzQn5CqqAcyIHPiwhV/ta hR/Ivft7/z3zx6f81IJfT/Q8UpUmLCtLmFtoVKR3+Aht/zY8xyCIzuKvdVVGzBBD KXqTwg3AIaDPGE7HGKB2g1oXZASsrVALoxi/GRRsGrPIISqlEoIHRJCCkmcPSkLx 5+Fz/MHg4AvPrcahmABH0NLza50OJWoSzAwLSIB0MooA4hhnOnTBh4aEEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2I99Etl9Ny25bl6m6ACaihS3b3MB8GA1UdIwQY MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3 LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpwAuW5T tpQ24CvXwCh4XOzR8tVf9hbR99nCrVvI9bZXRktHoF+3TP77z9MBL9I8Unw6y35y Nw8mwAYlpCCg0cyITyuMNHvFGIp7qu7tuqIfT4WyB4q1WKHjFoglXzccPL58oOgY 4wY+9LZLnEVDfLk3t5GLEGLEfdrUxVwbgbp7/BnWLbMhwb7uwFNY525mWjqkN76R effq9+qDxlC6Yre5eiqW7FQvW9ZA9pnSWrAGXR8aldtwGsskxJMPGXQrQmLc+ytU CWTi8Vb7fK8+AzXUNoXUGC3dR6i94HVYWzYaayUK2/y5cThqUNEh+P9GXyz7UuPw ANMI7HhhYTgR1g== -----END CERTIFICATE-----Generated at Sat Dec 20 03:23:01 2025 by rpki-client