This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft File: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json) Hash identifier: XATAZPm7BPkKr9x2hdVGBBijg5gO96Eq2/Iw4WXVjD8= Subject key identifier: 3C:F0:98:FB:EF:25:A7:46:F3:A2:16:A5:82:9C:14:09:DC:46:6E:34 Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE Certificate issuer: /CN=ecee470bf5109976934f51e7eaef210779a2c4de Certificate serial: 019B48F06183B2277797C7039A65F7014715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 02:01:11 +0000 Manifest this update: Tue 23 Dec 2025 02:01:11 +0000 Manifest next update: Wed 24 Dec 2025 02:01:11 +0000 Files and hashes: 1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: unbOP81NiN1nJG4YPN3bNDmrdluyubyIoclEyXkfomk=) 2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:61:83:b2:27:77:97:c7:03:9a:65:f7:01:47:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de Validity Not Before: Dec 23 02:01:11 2025 GMT Not After : Dec 24 02:01:11 2025 GMT Subject: CN=3cf098fbef25a746f3a216a5829c1409dc466e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:e6:0e:59:f7:f5:71:f3:64:50:37:bf:e9: 9e:03:c2:51:77:5e:b7:8d:a3:53:42:7e:6a:32:83: 44:75:1d:2e:44:6a:ae:be:13:2a:5b:d5:e7:81:67: 55:e5:14:8a:ac:8d:0b:69:2b:47:7b:14:ef:ec:86: 2b:23:e7:2a:7b:a9:a2:33:54:80:32:e4:09:d5:a6: de:ea:ba:00:41:4d:32:8a:9d:cb:81:43:f1:b6:07: 43:cd:2d:cd:c8:b9:65:da:3e:d7:51:41:68:06:9e: 61:a4:6d:55:7d:ca:3b:90:6a:ea:89:bb:af:65:0e: 23:0f:57:32:92:aa:49:94:25:7f:dc:00:b3:49:45: 33:8d:9e:b2:47:eb:67:a4:03:73:29:25:f4:c8:7a: 3a:8f:7c:59:b3:08:5a:d0:04:0a:bd:8e:40:78:80: 42:9b:70:7c:d4:bb:72:f8:e4:a1:1a:7b:37:9c:4d: 8f:2d:99:b0:58:76:df:26:c2:e4:fa:03:01:ca:11: 14:0d:e3:22:86:22:b1:e1:c1:b3:57:68:cc:75:a3: b8:b1:fa:97:f1:d8:e0:dd:cd:68:a9:87:d6:12:5f: c1:4e:8f:aa:43:2a:b9:d4:0e:71:6c:cc:53:17:d0: 32:5b:ab:db:68:5f:87:e5:cc:55:b7:25:8c:7b:5b: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F0:98:FB:EF:25:A7:46:F3:A2:16:A5:82:9C:14:09:DC:46:6E:34 X509v3 Authority Key Identifier: keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:04:e1:8a:7e:3d:b0:7f:b1:94:b0:49:a6:96:70:d1:f0: ab:fa:75:cf:f8:fb:a0:db:b6:49:c6:e0:c5:46:4c:56:c8:58: 2d:95:fb:0d:25:08:06:51:5b:7f:23:77:c8:60:eb:a8:23:31: 48:a4:9f:fa:72:51:31:3f:00:40:09:c3:89:9d:9b:0b:af:5f: 13:7d:2b:40:2b:24:fe:66:ed:11:4b:98:49:5b:ff:91:41:95: 7c:3b:7b:7d:7d:6d:4d:97:94:c7:71:61:5a:23:8d:72:53:7d: e2:f3:88:00:22:36:f8:da:0e:8a:b0:7a:53:d4:e4:a9:5d:9b: c8:4f:0c:9d:d3:74:ad:5c:a4:5c:1b:7d:3d:02:47:4f:a8:3f: 38:0e:b7:2a:10:65:a5:e9:61:2f:57:8d:41:2e:91:45:6c:63: 0a:e8:6a:c8:c6:bc:be:fe:63:1e:61:84:9e:2f:34:67:5c:09: 48:38:4a:6d:d2:82:7c:52:fc:54:54:39:12:1e:f0:01:64:f0: 22:9c:68:92:1f:5b:08:7b:15:4a:d6:c2:a7:bb:dd:03:e5:df: 67:66:f8:ef:12:e1:5b:03:a7:52:f2:bb:9f:bc:c7:84:ce:0c: 40:bf:89:6e:3e:8c:32:43:29:30:22:47:4e:41:dd:cf:8f:d7: d7:70:48:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8GGDsid3l8cDmmX3AUcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZWU0NzBiZjUxMDk5NzY5MzRmNTFlN2VhZWYyMTA3Nzlh MmM0ZGUwHhcNMjUxMjIzMDIwMTExWhcNMjUxMjI0MDIwMTExWjAzMTEwLwYDVQQD EygzY2YwOThmYmVmMjVhNzQ2ZjNhMjE2YTU4MjljMTQwOWRjNDY2ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGLmDln39XHzZFA3v+meA8JRd163 jaNTQn5qMoNEdR0uRGquvhMqW9XngWdV5RSKrI0LaStHexTv7IYrI+cqe6miM1SA MuQJ1abe6roAQU0yip3LgUPxtgdDzS3NyLll2j7XUUFoBp5hpG1Vfco7kGrqibuv ZQ4jD1cykqpJlCV/3ACzSUUzjZ6yR+tnpANzKSX0yHo6j3xZswha0AQKvY5AeIBC m3B81Lty+OShGns3nE2PLZmwWHbfJsLk+gMByhEUDeMihiKx4cGzV2jMdaO4sfqX 8djg3c1oqYfWEl/BTo+qQyq51A5xbMxTF9AyW6vbaF+H5cxVtyWMe1tDOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzwmPvvJadG86IWpYKcFAncRm40MB8GA1UdIwQY MBaAFOzuRwv1EJl2k09R5+rvIQd5osTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZjk1ZDUtYWU2OS00M2JiLWI1MzEt NDE4NGVkMzMxYjc1LzEvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zZjk1ZDUtYWU2OS00M2JiLWI1MzEtNDE4NGVkMzMxYjc1 LzEvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3kE4Yp+ PbB/sZSwSaaWcNHwq/p1z/j7oNu2ScbgxUZMVshYLZX7DSUIBlFbfyN3yGDrqCMx SKSf+nJRMT8AQAnDiZ2bC69fE30rQCsk/mbtEUuYSVv/kUGVfDt7fX1tTZeUx3Fh WiONclN94vOIACI2+NoOirB6U9TkqV2byE8MndN0rVykXBt9PQJHT6g/OA63KhBl pelhL1eNQS6RRWxjCuhqyMa8vv5jHmGEni80Z1wJSDhKbdKCfFL8VFQ5Eh7wAWTw Ipxokh9bCHsVStbCp7vdA+XfZ2b47xLhWwOnUvK7n7zHhM4MQL+Jbj6MMkMpMCJH TkHdz4/X13BIDw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:49:08 2025 by rpki-client