This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json) Hash identifier: /A7X/DQgwEObHEdWlu3dH5mTfRRv8lVkZtTHv3tRl5M= Subject key identifier: D6:2C:1C:12:FE:DC:69:26:0F:77:AE:02:3D:0B:21:10:64:26:1D:D0 Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Certificate serial: 019B21755E9D561E97BFACBAD6B3BA10CAAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 10:01:38 +0000 Manifest this update: Mon 15 Dec 2025 10:01:38 +0000 Manifest next update: Tue 16 Dec 2025 10:01:38 +0000 Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: gk7o+AWySYB86fjYFl7hFxabHF8mqlMui0kMea8qty8=) 2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:5e:9d:56:1e:97:bf:ac:ba:d6:b3:ba:10:ca:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Validity Not Before: Dec 15 10:01:38 2025 GMT Not After : Dec 16 10:01:38 2025 GMT Subject: CN=d62c1c12fedc69260f77ae023d0b211064261dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:a6:c8:0a:e1:49:aa:e1:0c:4d:bf:52:cd: 79:78:05:89:20:60:5d:b0:b7:2c:4d:1d:e3:21:15: c6:af:3f:6b:6c:7c:f6:10:8f:75:01:ea:ee:27:25: 22:d0:b6:49:1c:3b:3a:f4:77:78:72:8f:39:fc:91: 29:1e:0d:cb:74:54:32:fe:98:c7:19:50:b7:13:0a: 3a:f1:7b:01:0e:56:3d:a3:9a:66:a6:b8:d3:c0:22: d7:ca:ef:ae:33:66:49:fa:7e:d5:68:9e:74:5d:3f: 4a:99:20:c8:83:47:6b:90:0b:2c:b0:b4:28:51:d9: fb:2e:bf:d6:33:b0:5a:72:da:9d:74:6a:8f:4f:d5: 2d:a9:97:f5:7f:4b:4f:92:33:00:ad:0f:c7:41:c6: e3:c2:6f:0d:4b:cf:c6:04:8d:d1:9b:06:b9:60:f2: fd:11:e0:8b:c5:d2:dd:f1:6e:f0:3f:76:06:bf:d8: 6b:fa:87:1d:de:b2:f4:c6:39:66:c4:06:aa:43:0e: b3:30:59:7f:70:02:c8:4a:b0:9a:98:e1:44:ad:66: d8:37:43:2c:31:b7:1a:be:6d:19:98:11:36:28:48: bb:0e:d9:6c:ab:89:80:ca:01:29:73:0f:77:7a:aa: 31:97:30:a6:bd:a7:70:29:c5:43:16:61:c5:be:fa: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2C:1C:12:FE:DC:69:26:0F:77:AE:02:3D:0B:21:10:64:26:1D:D0 X509v3 Authority Key Identifier: keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:57:de:b2:1f:a0:53:92:e9:4c:9d:8d:2d:83:a8:83:9d:ce: 4a:44:30:6a:16:8e:ed:02:a9:c2:c2:4c:39:f0:fc:eb:eb:9b: d9:53:7f:67:e4:20:cc:ff:f5:be:b9:e4:72:3b:4d:8b:e5:8e: 9e:45:75:41:b6:8f:bf:9a:49:99:14:ba:36:ce:89:85:53:d7: 1e:97:05:39:f3:19:12:c1:b7:84:5f:77:ea:b6:51:e5:82:2c: 4d:57:31:59:6f:01:37:23:ff:db:c2:94:32:c3:bd:b6:9d:f0: 7f:d1:fe:7b:14:e9:a3:26:df:2e:27:d7:2e:cc:13:5a:be:96: b0:fe:ca:18:2a:b1:c1:8b:78:dc:03:ab:9b:a9:ad:2d:8a:27: ad:1e:2c:c7:fc:a6:d8:38:f4:73:63:99:47:05:14:13:18:5c: 36:8c:37:b6:14:9f:d3:a5:a6:c6:01:b0:f3:28:24:27:f4:55: ba:f0:6e:50:cc:13:3d:30:1d:52:f6:ca:06:f0:5f:66:37:ad: 4e:12:10:f4:fb:58:f7:7e:e0:1f:67:80:81:ef:27:3a:69:0e: 1b:0f:88:05:b0:09:96:c3:12:fb:b7:05:74:1e:70:08:74:e6: 32:67:95:fe:f1:37:a3:a5:b9:91:af:fa:d4:4f:ad:3b:a0:93: 89:f4:94:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdV6dVh6Xv6y61rO6EMqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzI0MjdjYjJmYWY4YmQ5YjZkZDlhZTEzN2M0ZDQ5MTRh OGU4MTAwHhcNMjUxMjE1MTAwMTM4WhcNMjUxMjE2MTAwMTM4WjAzMTEwLwYDVQQD EyhkNjJjMWMxMmZlZGM2OTI2MGY3N2FlMDIzZDBiMjExMDY0MjYxZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvySmyArhSarhDE2/Us15eAWJIGBd sLcsTR3jIRXGrz9rbHz2EI91AeruJyUi0LZJHDs69Hd4co85/JEpHg3LdFQy/pjH GVC3Ewo68XsBDlY9o5pmprjTwCLXyu+uM2ZJ+n7VaJ50XT9KmSDIg0drkAsssLQo Udn7Lr/WM7BactqddGqPT9UtqZf1f0tPkjMArQ/HQcbjwm8NS8/GBI3Rmwa5YPL9 EeCLxdLd8W7wP3YGv9hr+ocd3rL0xjlmxAaqQw6zMFl/cALISrCamOFErWbYN0Ms Mbcavm0ZmBE2KEi7Dtlsq4mAygEpcw93eqoxlzCmvadwKcVDFmHFvvqamwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYsHBL+3GkmD3euAj0LIRBkJh3QMB8GA1UdIwQY MBaAFOxyQnyy+vi9m23ZrhN8TUkUqOgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUt NGRmM2RiODA3MzI3LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUtNGRmM2RiODA3MzI3 LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlfesh+g U5LpTJ2NLYOog53OSkQwahaO7QKpwsJMOfD86+ub2VN/Z+QgzP/1vrnkcjtNi+WO nkV1QbaPv5pJmRS6Ns6JhVPXHpcFOfMZEsG3hF936rZR5YIsTVcxWW8BNyP/28KU MsO9tp3wf9H+exTpoybfLifXLswTWr6WsP7KGCqxwYt43AOrm6mtLYonrR4sx/ym 2Dj0c2OZRwUUExhcNow3thSf06WmxgGw8ygkJ/RVuvBuUMwTPTAdUvbKBvBfZjet ThIQ9PtY937gH2eAge8nOmkOGw+IBbAJlsMS+7cFdB5wCHTmMmeV/vE3o6W5ka/6 1E+tO6CTifSU0Q== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:43 2025 by rpki-client