This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json) Hash identifier: gzd2CKyFJhNVNZ40mr08Zx/6FGtzqYiLRJQhgrwf3sc= Subject key identifier: 2C:3E:C6:88:A6:2F:E7:74:C9:76:3E:D4:45:60:15:47:40:D9:5F:22 Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Certificate serial: 019B175F9BE49DFC0732124061A648401572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft Manifest number: 0B6D Signing time: Sat 13 Dec 2025 11:01:40 +0000 Manifest this update: Sat 13 Dec 2025 11:01:40 +0000 Manifest next update: Sun 14 Dec 2025 11:01:40 +0000 Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: NME7PzB4hwRuM4tG4+icssn88R2tnyNhfPIZifOajtc=) 2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=) 3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:9b:e4:9d:fc:07:32:12:40:61:a6:48:40:15:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Validity Not Before: Dec 13 11:01:40 2025 GMT Not After : Dec 14 11:01:40 2025 GMT Subject: CN=2c3ec688a62fe774c9763ed44560154740d95f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:4f:db:8f:39:f7:cf:06:2c:dc:64:c8:44: ae:35:33:53:7b:20:75:da:d3:94:df:91:3c:92:56: 74:0f:cc:e0:96:e5:71:33:90:69:58:c4:42:61:27: d6:55:3e:75:59:28:08:66:28:14:07:51:55:e7:6b: f5:00:89:1e:8a:d0:fa:d7:44:fb:77:0b:c8:02:a9: ad:37:ce:34:17:8f:ae:de:04:06:20:34:23:eb:34: 19:35:61:34:3e:c6:4e:cf:44:49:ed:99:71:e2:7c: ca:9e:c8:42:9f:39:4f:4f:c4:93:89:84:c6:e3:89: 1f:15:3e:b7:3c:23:a4:04:14:56:66:ef:da:d9:af: 9b:3b:19:b3:01:a3:65:6c:9e:24:45:57:96:d6:09: ec:17:86:16:ce:fc:be:46:71:dc:ba:36:34:f7:56: 36:9d:b3:df:6d:fb:ec:44:9c:7f:88:2c:bc:07:fc: 23:89:5a:33:6d:45:95:c8:db:4f:97:b1:16:f0:3d: 71:4b:8f:4d:da:eb:6b:af:6a:36:92:31:9a:40:ef: ee:da:79:a7:8d:45:01:c2:d9:0d:b9:63:c1:ea:87: 4d:aa:c0:70:42:98:ff:ff:ef:58:2a:8c:2e:9e:c0: 83:fb:2b:e7:e6:8f:61:19:c2:0f:5f:3d:19:7c:9c: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:C6:88:A6:2F:E7:74:C9:76:3E:D4:45:60:15:47:40:D9:5F:22 X509v3 Authority Key Identifier: keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0c:12:ae:65:6b:ee:de:42:02:04:d5:1b:69:31:e6:fc:a1: 06:f9:3d:66:19:8f:05:99:9e:12:59:c9:58:c0:05:4f:ea:a7: 34:6e:5d:3c:72:5d:eb:e2:f8:8b:c9:37:d9:0d:98:90:e7:fa: 85:f2:94:a1:95:f6:12:02:b6:b3:b6:28:7a:36:44:f1:30:df: 55:3c:6e:b3:64:4a:52:be:d8:a1:34:49:54:11:da:13:39:0d: d2:11:de:ee:69:2b:3f:d2:c7:83:30:08:3b:04:ec:fc:30:01: f5:97:b7:1e:c1:8d:7a:30:fc:f9:68:2f:f1:d8:b1:42:92:ee: 0c:c8:50:ae:c0:2a:80:33:62:a3:59:71:95:6f:b4:63:31:ee: 12:1d:fd:7c:1c:c5:34:5e:ca:ba:ed:b1:e5:46:e8:36:52:a8: 6e:fa:57:50:1f:52:f5:55:3d:b7:81:a7:a5:82:f9:ce:30:1a: e9:16:b5:d0:0e:28:b3:54:5f:0c:41:c5:6d:49:6b:88:24:ab: 4c:9a:85:28:d0:9f:b9:ff:55:b8:a8:04:23:5b:87:6e:8b:79: bb:b3:1c:5c:51:03:e9:8d:70:a0:4a:c1:cd:93:f3:0b:1b:25: d4:13:81:ea:23:13:8b:f3:de:df:c5:05:d2:fe:f7:07:f3:76: bc:6f:19:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXX5vknfwHMhJAYaZIQBVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2 YTcxNzQwHhcNMjUxMjEzMTEwMTQwWhcNMjUxMjE0MTEwMTQwWjAzMTEwLwYDVQQD EygyYzNlYzY4OGE2MmZlNzc0Yzk3NjNlZDQ0NTYwMTU0NzQwZDk1ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5P2485988GLNxkyESuNTNTeyB1 2tOU35E8klZ0D8zgluVxM5BpWMRCYSfWVT51WSgIZigUB1FV52v1AIkeitD610T7 dwvIAqmtN840F4+u3gQGIDQj6zQZNWE0PsZOz0RJ7Zlx4nzKnshCnzlPT8STiYTG 44kfFT63PCOkBBRWZu/a2a+bOxmzAaNlbJ4kRVeW1gnsF4YWzvy+RnHcujY091Y2 nbPfbfvsRJx/iCy8B/wjiVozbUWVyNtPl7EW8D1xS49N2utrr2o2kjGaQO/u2nmn jUUBwtkNuWPB6odNqsBwQpj//+9YKowunsCD+yvn5o9hGcIPXz0ZfJzq/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw+xoimL+d0yXY+1EVgFUdA2V8iMB8GA1UdIwQY MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt YzA2YzYyYWY5ZGE1LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1 LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAwSrmVr 7t5CAgTVG2kx5vyhBvk9ZhmPBZmeElnJWMAFT+qnNG5dPHJd6+L4i8k32Q2YkOf6 hfKUoZX2EgK2s7YoejZE8TDfVTxus2RKUr7YoTRJVBHaEzkN0hHe7mkrP9LHgzAI OwTs/DAB9Ze3HsGNejD8+Wgv8dixQpLuDMhQrsAqgDNio1lxlW+0YzHuEh39fBzF NF7Kuu2x5UboNlKobvpXUB9S9VU9t4GnpYL5zjAa6Ra10A4os1RfDEHFbUlriCSr TJqFKNCfuf9VuKgEI1uHbot5u7McXFED6Y1woErBzZPzCxsl1BOB6iMTi/Pe38UF 0v73B/N2vG8ZIw== -----END CERTIFICATE-----Generated at Sat Dec 13 12:45:02 2025 by rpki-client