This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft File: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json) Hash identifier: 1LMTE3v4UOoCRdPwK+71CcO6JOiJ4sV/z176caEQzzc= Subject key identifier: 59:2F:A1:DD:13:80:59:70:9C:DE:44:37:14:41:EC:01:5C:E0:27:9C Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA Certificate issuer: /CN=ec917c0afda449ecc0429c046df50fbc959b4eea Certificate serial: 019B18DF82785A691462A0186C57C6B600F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft Manifest number: 16F0 Signing time: Sat 13 Dec 2025 18:00:59 +0000 Manifest this update: Sat 13 Dec 2025 18:00:59 +0000 Manifest next update: Sun 14 Dec 2025 18:00:59 +0000 Files and hashes: 1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: dvsFOKlDDf2LBvMGL4r3l5U4ZQRmZVESuA6tjxAx2lc=) 2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:82:78:5a:69:14:62:a0:18:6c:57:c6:b6:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea Validity Not Before: Dec 13 18:00:59 2025 GMT Not After : Dec 14 18:00:59 2025 GMT Subject: CN=592fa1dd138059709cde44371441ec015ce0279c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:e0:26:c4:98:c2:04:4e:1a:ef:e4:93:f4: ee:0a:50:1c:5a:c5:6c:96:fe:a9:35:74:8c:32:58: fb:8a:a8:92:d6:3a:3c:19:ae:76:02:81:fb:bd:6a: f6:b6:42:cc:2a:f1:d7:0f:84:df:57:c8:1a:54:8e: 3f:a0:e9:7c:55:05:75:d0:32:f0:7f:cc:1b:08:93: 2a:0a:cd:3a:9c:32:ea:18:ba:1a:37:cf:91:4a:de: a9:2c:f9:75:48:d2:22:d7:f9:c3:a8:ad:76:ae:67: 5a:08:bc:32:5f:e5:14:d2:95:1d:b0:49:39:03:ce: 12:b1:58:53:a8:e0:a8:41:5f:2a:91:84:6b:c7:b2: df:bb:b4:45:8d:5e:24:97:eb:ec:24:1d:d5:cd:5d: fa:53:a2:43:6a:4a:ae:e1:c3:d8:a7:79:95:7b:ad: 4f:5e:cc:a6:01:e6:42:57:50:c4:b9:c8:69:79:b4: 0d:2c:3c:41:fc:95:ca:a5:45:23:70:00:a3:28:3f: 53:23:4b:db:78:26:14:16:ec:98:57:f8:b6:47:c2: 08:58:47:b1:6f:68:3b:64:4a:ce:e8:b7:45:7e:ac: f5:ed:7b:e0:f8:c4:e6:62:22:fa:55:4c:f3:31:e5: d6:d9:4a:93:db:3c:5d:cc:34:e2:37:99:6a:33:d4: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2F:A1:DD:13:80:59:70:9C:DE:44:37:14:41:EC:01:5C:E0:27:9C X509v3 Authority Key Identifier: keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:72:a8:5a:a2:4d:0f:ad:a9:fb:57:2b:b9:b0:52:a6:fa: fd:9d:b0:8b:dd:ff:fc:c6:e7:6f:6f:3c:d1:d1:2e:8c:0d:f7: 14:7f:eb:8f:dd:9c:ff:46:df:5d:c9:eb:4d:60:e3:3d:f1:7d: 69:e1:68:64:fb:56:d4:07:8b:e0:14:3a:82:d3:c4:db:cb:75: 87:14:db:1c:dd:98:64:69:9e:9f:d3:3b:dc:7a:94:1e:d1:f3: 56:fa:1d:e6:46:d8:a1:34:6d:f5:7f:94:b8:e5:ca:21:30:c7: 2e:d9:58:b2:fc:cb:6c:26:d7:d3:ce:b7:de:33:4f:fb:11:5f: 70:7a:22:51:0b:86:71:be:0b:d4:62:dd:5e:96:50:6d:96:e8: df:08:d1:08:34:51:54:2e:b3:39:a5:75:3a:52:5b:00:73:01: b1:02:9b:61:9b:66:cf:b4:5f:4f:57:8e:0a:5d:29:e5:2b:97: f1:49:cb:74:4c:28:59:60:aa:e8:cc:3e:d7:e9:b4:b9:26:20: bb:39:99:fa:1b:e0:e5:ae:73:93:c5:a4:c8:ab:45:49:4b:2d: 68:07:e7:61:b1:74:02:b5:41:81:46:75:84:b0:63:86:67:ab: 0a:d6:e0:bb:44:4b:4d:13:24:aa:d7:fe:ca:a4:7c:01:3a:96: ee:3c:4a:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY34J4WmkUYqAYbFfGtgD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5 YjRlZWEwHhcNMjUxMjEzMTgwMDU5WhcNMjUxMjE0MTgwMDU5WjAzMTEwLwYDVQQD Eyg1OTJmYTFkZDEzODA1OTcwOWNkZTQ0MzcxNDQxZWMwMTVjZTAyNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/gJsSYwgROGu/kk/TuClAcWsVs lv6pNXSMMlj7iqiS1jo8Ga52AoH7vWr2tkLMKvHXD4TfV8gaVI4/oOl8VQV10DLw f8wbCJMqCs06nDLqGLoaN8+RSt6pLPl1SNIi1/nDqK12rmdaCLwyX+UU0pUdsEk5 A84SsVhTqOCoQV8qkYRrx7Lfu7RFjV4kl+vsJB3VzV36U6JDakqu4cPYp3mVe61P XsymAeZCV1DEuchpebQNLDxB/JXKpUUjcACjKD9TI0vbeCYUFuyYV/i2R8IIWEex b2g7ZErO6LdFfqz17Xvg+MTmYiL6VUzzMeXW2UqT2zxdzDTiN5lqM9TBiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkvod0TgFlwnN5ENxRB7AFc4CecMB8GA1UdIwQY MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjItyqFqi TQ+tqftXK7mwUqb6/Z2wi93//Mbnb2880dEujA33FH/rj92c/0bfXcnrTWDjPfF9 aeFoZPtW1AeL4BQ6gtPE28t1hxTbHN2YZGmen9M73HqUHtHzVvod5kbYoTRt9X+U uOXKITDHLtlYsvzLbCbX08633jNP+xFfcHoiUQuGcb4L1GLdXpZQbZbo3wjRCDRR VC6zOaV1OlJbAHMBsQKbYZtmz7RfT1eOCl0p5SuX8UnLdEwoWWCq6Mw+1+m0uSYg uzmZ+hvg5a5zk8WkyKtFSUstaAfnYbF0ArVBgUZ1hLBjhmerCtbgu0RLTRMkqtf+ yqR8ATqW7jxK/w== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:27 2025 by rpki-client