This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json) Hash identifier: 35LluyKDvQ6TVwlVrSkSzeRf9tE9gpid6Kyt6yLw7KE= Subject key identifier: 1A:40:1D:8B:53:B2:04:B9:04:92:45:B6:2A:2F:32:2F:36:2A:44:DD Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Certificate serial: 019B32D6C98F37A345054C0CB777F51785BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 19:01:35 +0000 Manifest this update: Thu 18 Dec 2025 19:01:35 +0000 Manifest next update: Fri 19 Dec 2025 19:01:35 +0000 Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: UQBJcBhOgpensZGgL60U9sPwRT6hmqxf2YB3k8TOKb8=) 2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:c9:8f:37:a3:45:05:4c:0c:b7:77:f5:17:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Validity Not Before: Dec 18 19:01:35 2025 GMT Not After : Dec 19 19:01:35 2025 GMT Subject: CN=1a401d8b53b204b9049245b62a2f322f362a44dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c5:bb:87:a3:ff:4b:3c:68:93:91:92:d3:d9: cf:34:e7:a7:84:cd:bf:2a:a4:5e:f2:4c:8d:b0:7d: 31:d3:03:ec:14:46:25:e5:6f:99:ca:3f:26:c5:2e: 84:9d:95:c2:7f:cd:38:e4:6f:1e:c4:0d:cb:f1:18: e4:b0:fe:e7:96:80:e5:87:f8:bf:72:b1:d4:88:08: d7:6c:f7:69:dc:03:e1:0b:91:16:91:fc:4c:2d:44: a1:9a:ba:07:2e:76:22:64:f8:83:d8:31:e5:b7:20: 46:dd:12:44:c1:77:2e:36:6b:2a:79:66:a1:18:5a: ec:b1:20:99:7f:8c:0d:00:48:b0:98:ec:81:f5:e9: 7a:e1:b8:cb:b2:91:4b:df:52:eb:48:5b:a2:79:2a: f1:0d:0e:be:2d:3f:4a:3a:88:f6:bd:f9:46:8d:f4: 66:f8:08:50:23:9f:af:01:4c:57:19:1f:c0:41:a8: 1d:aa:7f:0a:fd:56:a2:0f:16:0a:12:3e:74:55:33: 33:fd:1a:8d:9f:7d:29:24:dc:ca:16:77:41:c9:93: fc:ef:66:4c:7d:51:aa:f0:11:32:0d:5b:12:4b:a6: 59:bc:28:8f:b9:a5:cc:79:26:46:a7:6a:db:d3:8d: 54:59:95:66:2d:6e:28:36:d2:f7:df:4d:b6:d8:03: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:1D:8B:53:B2:04:B9:04:92:45:B6:2A:2F:32:2F:36:2A:44:DD X509v3 Authority Key Identifier: keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:a9:8e:d9:e3:a5:78:7d:b6:04:a6:03:b5:90:34:78:0d: c8:c4:ce:2b:ef:d4:e5:5a:31:30:bd:3b:c6:5c:79:fb:4f:65: e7:c7:0c:96:97:6f:c0:03:b0:ab:b8:c3:e8:3a:1d:7b:84:21: 41:34:5d:35:a8:c5:b5:6d:51:3f:d7:d5:a7:8b:f7:8e:1d:71: 7e:69:5c:60:2b:fd:cd:20:e9:10:0d:fd:fc:07:f7:ee:b6:7d: df:0e:d8:bd:cb:c4:1a:10:f9:65:35:5e:19:52:5f:03:ca:98: 8e:02:50:be:46:6a:2e:7a:89:59:df:b7:41:a0:cb:3a:36:9d: 0a:e7:01:6d:bb:f2:c2:82:05:76:93:24:91:73:6d:0f:ad:a7: e8:31:be:81:e3:50:9b:a7:8a:88:51:78:b5:56:be:c2:54:c2: 53:b3:f5:0e:c8:11:d6:92:97:65:b4:31:5b:1c:d8:b8:8d:22: b5:80:d3:cb:21:68:d7:2e:ac:13:71:25:43:28:b1:ae:f6:c1: 57:ba:ed:18:53:a7:0b:59:0c:e7:e9:da:21:7c:55:9f:06:36: 72:29:05:54:b8:c3:db:dc:bb:28:29:af:fb:4a:d0:a2:02:e6: 76:90:87:a2:51:31:d6:d3:7c:b8:00:0e:4d:21:56:2f:bd:5b: f0:02:2c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1smPN6NFBUwMt3f1F4W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzI0MjdjYjJmYWY4YmQ5YjZkZDlhZTEzN2M0ZDQ5MTRh OGU4MTAwHhcNMjUxMjE4MTkwMTM1WhcNMjUxMjE5MTkwMTM1WjAzMTEwLwYDVQQD EygxYTQwMWQ4YjUzYjIwNGI5MDQ5MjQ1YjYyYTJmMzIyZjM2MmE0NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MW7h6P/Szxok5GS09nPNOenhM2/ KqRe8kyNsH0x0wPsFEYl5W+Zyj8mxS6EnZXCf8045G8exA3L8RjksP7nloDlh/i/ crHUiAjXbPdp3APhC5EWkfxMLUShmroHLnYiZPiD2DHltyBG3RJEwXcuNmsqeWah GFrssSCZf4wNAEiwmOyB9el64bjLspFL31LrSFuieSrxDQ6+LT9KOoj2vflGjfRm +AhQI5+vAUxXGR/AQagdqn8K/VaiDxYKEj50VTMz/RqNn30pJNzKFndByZP872ZM fVGq8BEyDVsSS6ZZvCiPuaXMeSZGp2rb041UWZVmLW4oNtL330222AONtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpAHYtTsgS5BJJFtiovMi82KkTdMB8GA1UdIwQY MBaAFOxyQnyy+vi9m23ZrhN8TUkUqOgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUt NGRmM2RiODA3MzI3LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUtNGRmM2RiODA3MzI3 LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLSpjtnj pXh9tgSmA7WQNHgNyMTOK+/U5VoxML07xlx5+09l58cMlpdvwAOwq7jD6Dode4Qh QTRdNajFtW1RP9fVp4v3jh1xfmlcYCv9zSDpEA39/Af37rZ93w7YvcvEGhD5ZTVe GVJfA8qYjgJQvkZqLnqJWd+3QaDLOjadCucBbbvywoIFdpMkkXNtD62n6DG+geNQ m6eKiFF4tVa+wlTCU7P1DsgR1pKXZbQxWxzYuI0itYDTyyFo1y6sE3ElQyixrvbB V7rtGFOnC1kM5+naIXxVnwY2cikFVLjD29y7KCmv+0rQogLmdpCHolEx1tN8uAAO TSFWL71b8AIs9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:23 2025 by rpki-client