This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json) Hash identifier: hcSeIHhfbPejUFpmPgnbp4sEwKqNIr20kbF9jmD4K1c= Subject key identifier: 99:5D:44:13:94:3B:71:D6:DD:CA:73:DC:B8:F1:94:E1:D6:66:2C:D6 Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96 Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796 Certificate serial: 019B34FBCAD020331A6F089CD056E299AD80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 05:01:15 +0000 Manifest this update: Fri 19 Dec 2025 05:01:15 +0000 Manifest next update: Sat 20 Dec 2025 05:01:15 +0000 Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=) 2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: gwFIqOpKS02E6+ARSOEaMKf/l5ggwfk+gTqTowO4u2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:ca:d0:20:33:1a:6f:08:9c:d0:56:e2:99:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796 Validity Not Before: Dec 19 05:01:15 2025 GMT Not After : Dec 20 05:01:15 2025 GMT Subject: CN=995d4413943b71d6ddca73dcb8f194e1d6662cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:23:6b:54:28:b5:34:9d:84:b7:ab:2a:4c: 13:9e:7d:db:2c:ff:95:4c:0b:89:e4:09:59:c5:4c: 32:92:8b:eb:68:ab:2f:77:8f:6e:f7:79:44:d6:db: f7:35:08:74:09:9f:10:55:2d:ff:d1:cc:23:0d:06: 48:93:f5:bd:ed:1c:2c:a6:6f:3b:f5:e2:62:70:92: 94:9f:4a:8b:6e:1e:a8:78:59:b1:7f:01:61:60:10: 34:3e:e1:f6:f0:5e:22:93:16:9b:55:e1:0c:eb:3f: dc:0f:ee:a0:19:2b:c1:bb:90:34:69:dc:e4:c3:1c: 57:aa:fd:a2:8e:24:2c:b2:a9:a5:b5:56:5c:92:cf: 7e:90:0c:c4:94:d1:65:8f:7d:27:5e:91:d9:08:68: 79:43:67:7b:17:5f:98:e3:f1:58:5b:89:4e:74:da: 07:92:d4:1e:be:26:01:79:00:d9:b3:0d:0f:e9:34: 2c:fa:0c:a6:89:5e:06:19:77:bb:cf:4e:26:81:fe: 0c:d8:7a:e4:d2:bb:e7:dd:2e:af:03:08:d8:5f:65: d9:67:e6:fc:6b:da:a7:f2:a3:26:27:f6:aa:03:c1: 3e:61:a3:56:48:aa:a6:dd:e2:7a:9b:7e:c4:19:10: ce:f1:ff:fb:d1:86:81:64:bc:b9:dd:aa:9e:cb:83: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:44:13:94:3B:71:D6:DD:CA:73:DC:B8:F1:94:E1:D6:66:2C:D6 X509v3 Authority Key Identifier: keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8d:9a:86:74:a5:69:62:1b:9c:6e:c5:8c:13:2d:47:d1:cb: 12:14:51:63:56:a3:b7:1a:bd:b6:49:d2:05:08:a9:5d:bc:6d: af:e5:2b:20:f4:57:b5:c5:4c:c2:ff:84:75:3d:73:ec:af:6d: 5a:e5:b9:b9:d5:78:62:c9:1e:23:a5:ef:4e:59:fc:1d:f7:9f: d1:42:57:64:8b:d7:7d:0e:4c:7b:bd:6a:e5:20:f0:ce:80:11: 7f:6c:b1:fd:b5:b6:04:dd:d0:52:75:c7:2d:22:bc:94:96:47: 60:cf:ca:c1:50:b1:ce:68:aa:c2:ea:8d:7e:55:0a:db:3b:93: b1:42:fd:f6:10:8c:fd:55:4a:40:b5:e4:71:2a:96:dc:a0:9f: a7:7a:a7:e6:5a:75:43:44:86:4c:34:de:22:ba:5a:2e:36:72: 3b:fb:d2:32:ae:6b:f0:0e:a7:ab:f2:fb:8c:50:6e:35:3b:85: 56:30:bd:c9:50:36:17:b3:3b:90:85:2f:b8:31:3f:a3:55:51: 6d:1f:8f:59:23:4e:c3:9b:21:15:de:0a:c7:83:8f:7b:52:7f: e5:7a:d6:cb:78:3a:82:4c:77:dc:bf:ef:11:7c:82:f9:de:11: cc:86:8a:85:95:a5:40:d6:0b:b9:2d:98:d8:85:5b:a9:6d:0d: 27:4e:e7:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+8rQIDMabwic0Fbima2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw NTQ3OTYwHhcNMjUxMjE5MDUwMTE1WhcNMjUxMjIwMDUwMTE1WjAzMTEwLwYDVQQD Eyg5OTVkNDQxMzk0M2I3MWQ2ZGRjYTczZGNiOGYxOTRlMWQ2NjYyY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCEja1QotTSdhLerKkwTnn3bLP+V TAuJ5AlZxUwykovraKsvd49u93lE1tv3NQh0CZ8QVS3/0cwjDQZIk/W97Rwspm87 9eJicJKUn0qLbh6oeFmxfwFhYBA0PuH28F4ikxabVeEM6z/cD+6gGSvBu5A0adzk wxxXqv2ijiQssqmltVZcks9+kAzElNFlj30nXpHZCGh5Q2d7F1+Y4/FYW4lOdNoH ktQeviYBeQDZsw0P6TQs+gymiV4GGXe7z04mgf4M2Hrk0rvn3S6vAwjYX2XZZ+b8 a9qn8qMmJ/aqA8E+YaNWSKqm3eJ6m37EGRDO8f/70YaBZLy53aqey4O/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJldRBOUO3HW3cpz3LjxlOHWZizWMB8GA1UdIwQY MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI42ahnSl aWIbnG7FjBMtR9HLEhRRY1ajtxq9tknSBQipXbxtr+UrIPRXtcVMwv+EdT1z7K9t WuW5udV4YskeI6XvTln8Hfef0UJXZIvXfQ5Me71q5SDwzoARf2yx/bW2BN3QUnXH LSK8lJZHYM/KwVCxzmiqwuqNflUK2zuTsUL99hCM/VVKQLXkcSqW3KCfp3qn5lp1 Q0SGTDTeIrpaLjZyO/vSMq5r8A6nq/L7jFBuNTuFVjC9yVA2F7M7kIUvuDE/o1VR bR+PWSNOw5shFd4Kx4OPe1J/5XrWy3g6gkx33L/vEXyC+d4RzIaKhZWlQNYLuS2Y 2IVbqW0NJ07nNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:50:31 2025 by rpki-client