This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json) Hash identifier: BKLRwVM0gVjNI12dCEQYBcSMY9xGSX+nYftVXuHtRoE= Subject key identifier: 7B:5F:25:0C:26:71:F6:E9:FC:30:4B:AA:62:EE:FD:FE:B7:07:14:62 Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Certificate serial: 019B0F0123D3955A589398CD731212FE49FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft Manifest number: D8 Signing time: Thu 11 Dec 2025 20:01:31 +0000 Manifest this update: Thu 11 Dec 2025 20:01:31 +0000 Manifest next update: Fri 12 Dec 2025 20:01:31 +0000 Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: DBAo72Yqa6yr45CXP8bnzjOdk1KTknSnI04Y5BGpdK8=) 2: QXgU6iZ9eTA61-_lrp-WFw2wrio.roa (hash: pI7i4CdNQU0hsPQOTDHwQvTJeIPilN2xVeBBH/PkqDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:23:d3:95:5a:58:93:98:cd:73:12:12:fe:49:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Validity Not Before: Dec 11 20:01:31 2025 GMT Not After : Dec 12 20:01:31 2025 GMT Subject: CN=7b5f250c2671f6e9fc304baa62eefdfeb7071462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:d1:85:40:d3:06:df:da:50:9a:9f:bf:a1: 82:98:89:f8:50:dc:3b:dd:7b:ad:01:79:39:7d:a8: a6:9b:c9:85:b6:88:a5:ae:db:39:9a:7f:d9:f8:16: b8:48:f7:8f:8a:12:26:91:eb:aa:4e:e4:5f:0a:54: bd:78:53:e6:22:4a:87:da:a8:69:62:0f:9f:ec:08: 48:c5:af:22:64:79:b7:c3:12:11:18:43:c7:73:85: 63:99:e3:6c:58:b1:5e:98:f1:ee:10:14:e8:15:63: 22:bb:24:bf:30:7d:74:58:c8:77:ae:75:c1:2f:48: 6e:50:07:96:01:f9:65:a1:59:21:15:8a:d2:3b:ba: 35:54:58:13:6c:df:d9:2b:a2:43:31:3a:10:68:c0: 8f:dd:aa:63:88:37:46:1a:18:2a:53:95:3a:7e:65: 93:d2:6e:93:cb:49:d2:4d:cc:47:87:3e:1c:06:c0: 00:de:fb:fb:57:42:98:0e:35:67:8f:34:f6:1d:e5: 12:db:9a:41:f6:55:d6:89:96:0f:3a:b8:77:bd:66: f4:4b:46:cd:31:76:ee:3a:2a:56:bb:0d:91:1f:a4: f6:f9:32:c2:be:4b:87:e8:cf:88:92:6c:a3:6b:2f: 0e:81:4e:18:72:24:8b:4e:8f:b4:81:76:aa:77:05: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5F:25:0C:26:71:F6:E9:FC:30:4B:AA:62:EE:FD:FE:B7:07:14:62 X509v3 Authority Key Identifier: keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:89:8e:83:61:35:25:77:bf:f3:22:bd:b7:25:b3:88:4e:81: 2a:87:ec:a7:12:00:3d:0d:ce:7f:8a:d4:d0:14:e5:b2:29:59: 36:a1:37:f0:38:6b:19:20:66:de:95:2f:49:9a:e5:0d:b1:52: e1:8b:e7:33:fa:f9:8b:48:e9:74:59:e1:2f:08:3a:93:65:66: cf:91:c9:f3:95:bb:36:fc:ff:7d:4b:77:9b:e7:00:a1:c3:e0: 76:c0:4a:be:7b:91:98:02:bc:07:c3:ee:c9:af:65:9b:b4:bf: 63:49:89:78:ba:8b:dc:d7:89:dd:df:6c:a2:4b:2c:49:c5:dd: e9:be:74:d6:3f:7e:01:d7:0f:a6:7e:c2:36:b8:dc:71:3d:c3: 0a:f3:82:92:35:30:c6:1c:e5:93:9d:29:9a:1e:5a:e6:d3:2a: f9:9c:59:21:e1:99:5b:6b:c2:61:4e:22:e8:27:3b:ef:33:64: b2:4e:1c:77:db:2a:8f:5c:2a:bc:b8:d4:4e:69:0c:5d:ef:04: b0:95:ff:20:c5:86:f6:81:84:9f:38:d5:55:24:4c:c8:3b:ba: 26:0b:67:fd:de:56:bc:f6:80:2d:8c:f7:3c:54:6e:d3:f5:ab: 39:a3:28:0b:c0:cf:76:5c:cb:23:04:7b:20:4c:a2:4e:20:80: bf:1b:6d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPASPTlVpYk5jNcxIS/kn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjM0MjgzNzNkY2U4YTVmOTdmNDVlZmM2YzI4YjlmYmU3 Y2Q1NGQwHhcNMjUxMjExMjAwMTMxWhcNMjUxMjEyMjAwMTMxWjAzMTEwLwYDVQQD Eyg3YjVmMjUwYzI2NzFmNmU5ZmMzMDRiYWE2MmVlZmRmZWI3MDcxNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTRhUDTBt/aUJqfv6GCmIn4UNw7 3XutAXk5faimm8mFtoilrts5mn/Z+Ba4SPePihImkeuqTuRfClS9eFPmIkqH2qhp Yg+f7AhIxa8iZHm3wxIRGEPHc4VjmeNsWLFemPHuEBToFWMiuyS/MH10WMh3rnXB L0huUAeWAflloVkhFYrSO7o1VFgTbN/ZK6JDMToQaMCP3apjiDdGGhgqU5U6fmWT 0m6Ty0nSTcxHhz4cBsAA3vv7V0KYDjVnjzT2HeUS25pB9lXWiZYPOrh3vWb0S0bN MXbuOipWuw2RH6T2+TLCvkuH6M+Ikmyjay8OgU4YciSLTo+0gXaqdwVRlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtfJQwmcfbp/DBLqmLu/f63BxRiMB8GA1UdIwQY MBaAFO4jQoNz3Oil+X9F78bCi5++fNVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUt M2Y3N2ZkNDI3OTlhLzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUtM2Y3N2ZkNDI3OTlh LzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHomOg2E1 JXe/8yK9tyWziE6BKofspxIAPQ3Of4rU0BTlsilZNqE38DhrGSBm3pUvSZrlDbFS 4YvnM/r5i0jpdFnhLwg6k2Vmz5HJ85W7Nvz/fUt3m+cAocPgdsBKvnuRmAK8B8Pu ya9lm7S/Y0mJeLqL3NeJ3d9sokssScXd6b501j9+AdcPpn7CNrjccT3DCvOCkjUw xhzlk50pmh5a5tMq+ZxZIeGZW2vCYU4i6Cc77zNksk4cd9sqj1wqvLjUTmkMXe8E sJX/IMWG9oGEnzjVVSRMyDu6Jgtn/d5WvPaALYz3PFRu0/WrOaMoC8DPdlzLIwR7 IEyiTiCAvxttMw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:12:57 2025 by rpki-client