This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json) Hash identifier: cOSwHwOHxbW8ALo3Cgb4pGRx4cszCnRDOvmRUXYkZjc= Subject key identifier: 25:C3:79:CD:26:A2:FC:D1:A3:AA:DD:C3:C3:A3:A5:11:A1:A8:19:D6 Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Certificate serial: 019B1013E071811B76DCF2E0223E65B3758F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 01:01:36 +0000 Manifest this update: Fri 12 Dec 2025 01:01:36 +0000 Manifest next update: Sat 13 Dec 2025 01:01:36 +0000 Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: 1Q/EX4/TMX3S4T7nKNTlFyZhegNgEi82k4QE0RMcI+w=) 2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:e0:71:81:1b:76:dc:f2:e0:22:3e:65:b3:75:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Validity Not Before: Dec 12 01:01:36 2025 GMT Not After : Dec 13 01:01:36 2025 GMT Subject: CN=25c379cd26a2fcd1a3aaddc3c3a3a511a1a819d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:3f:95:d1:3a:20:c5:d4:18:45:80:b6:0d: 72:43:03:a8:4e:0e:33:56:93:bd:8f:51:32:18:25: 80:3f:2d:16:24:18:e3:60:d8:de:f3:1c:7a:4f:78: f9:bc:8e:e9:be:ec:46:a2:a2:de:9a:ab:2d:84:99: b6:44:f5:03:92:37:e3:d0:f2:fb:76:78:73:b8:31: e7:ce:1f:8d:db:85:6e:58:f9:2e:ab:10:55:28:41: 8b:50:42:f3:1a:e0:ab:32:86:c8:4d:3b:8e:51:07: e7:c4:b2:88:e4:d6:27:b0:70:28:fb:22:eb:80:d2: 4c:c4:62:a0:c6:53:21:23:f4:2a:87:65:6b:ba:8b: fc:3d:de:b4:69:dc:9c:86:68:f0:f7:82:13:04:83: 28:4a:47:34:5f:07:28:26:b2:b5:50:93:8f:d0:73: b2:33:06:7e:65:58:65:77:0d:d8:4b:c0:41:3d:df: 4f:1a:6d:2a:81:6d:c6:97:17:4d:64:2c:b7:f3:41: 4b:21:0e:60:33:ce:8c:ac:7a:2f:7e:bb:22:bf:51: ca:ab:ee:44:41:dc:5e:b2:69:91:9b:6e:8c:e0:91: 7a:ab:cc:cb:0b:22:ee:87:f5:01:28:f5:35:80:f2: 67:b9:4b:9b:3b:8c:b8:3f:61:b0:6f:ac:45:b6:26: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:79:CD:26:A2:FC:D1:A3:AA:DD:C3:C3:A3:A5:11:A1:A8:19:D6 X509v3 Authority Key Identifier: keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d3:7b:34:e0:e8:fb:ef:27:94:a2:f5:52:8e:58:f8:74:e8: 98:07:7f:24:49:aa:3e:c3:49:78:d1:58:1f:f1:fe:4b:05:3e: 9c:ed:1a:c3:61:f5:df:4a:99:08:2d:3a:0a:9b:6c:40:60:91: 64:33:4e:7d:51:c7:a4:38:3d:b6:5a:b9:f2:87:f8:48:e0:09: 5b:d1:e9:cd:b9:37:6e:6e:50:03:5e:e1:80:fb:dc:e9:31:f2: 46:a2:95:5f:8d:6d:5a:09:33:01:a7:42:59:a6:56:20:25:c4: 5b:90:88:ba:61:3e:b4:fe:54:73:65:94:88:e2:d1:1b:c6:ff: 2e:d8:bb:f4:2f:ee:6d:29:54:2f:aa:c1:3d:c8:c8:4b:d3:4b: 0f:50:24:21:2a:98:b3:fb:e0:8b:15:6d:e9:49:48:94:a8:db: 51:51:08:a8:aa:31:1e:3b:5a:40:bf:2c:50:ea:83:11:24:a2: 2e:16:b1:e3:85:b6:fd:1f:d8:04:2c:fc:a1:4a:76:cb:66:3b: 99:89:cf:1c:0b:b5:88:46:91:f2:49:8b:dc:83:09:69:2c:9d: eb:d7:5a:59:03:66:f3:4d:2a:fb:63:d9:54:17:46:88:47:90: e8:de:77:79:cb:b5:04:d4:85:3b:9e:5f:d9:1c:e2:f1:29:cd: b1:31:31:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE+BxgRt23PLgIj5ls3WPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzI0MjdjYjJmYWY4YmQ5YjZkZDlhZTEzN2M0ZDQ5MTRh OGU4MTAwHhcNMjUxMjEyMDEwMTM2WhcNMjUxMjEzMDEwMTM2WjAzMTEwLwYDVQQD EygyNWMzNzljZDI2YTJmY2QxYTNhYWRkYzNjM2EzYTUxMWExYTgxOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvE/ldE6IMXUGEWAtg1yQwOoTg4z VpO9j1EyGCWAPy0WJBjjYNje8xx6T3j5vI7pvuxGoqLemqsthJm2RPUDkjfj0PL7 dnhzuDHnzh+N24VuWPkuqxBVKEGLUELzGuCrMobITTuOUQfnxLKI5NYnsHAo+yLr gNJMxGKgxlMhI/Qqh2Vruov8Pd60adychmjw94ITBIMoSkc0XwcoJrK1UJOP0HOy MwZ+ZVhldw3YS8BBPd9PGm0qgW3GlxdNZCy380FLIQ5gM86MrHovfrsiv1HKq+5E QdxesmmRm26M4JF6q8zLCyLuh/UBKPU1gPJnuUubO4y4P2Gwb6xFtibpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXDec0movzRo6rdw8OjpRGhqBnWMB8GA1UdIwQY MBaAFOxyQnyy+vi9m23ZrhN8TUkUqOgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUt NGRmM2RiODA3MzI3LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUtNGRmM2RiODA3MzI3 LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9N7NODo ++8nlKL1Uo5Y+HTomAd/JEmqPsNJeNFYH/H+SwU+nO0aw2H130qZCC06CptsQGCR ZDNOfVHHpDg9tlq58of4SOAJW9Hpzbk3bm5QA17hgPvc6THyRqKVX41tWgkzAadC WaZWICXEW5CIumE+tP5Uc2WUiOLRG8b/Lti79C/ubSlUL6rBPcjIS9NLD1AkISqY s/vgixVt6UlIlKjbUVEIqKoxHjtaQL8sUOqDESSiLhax44W2/R/YBCz8oUp2y2Y7 mYnPHAu1iEaR8kmL3IMJaSyd69daWQNm800q+2PZVBdGiEeQ6N53ecu1BNSFO55f 2Rzi8SnNsTExFQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:28:57 2025 by rpki-client