This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json) Hash identifier: LQvH5pAXYV21UpJvQmDiPwFQSW+EFEaQxJ/EaF+p8A4= Subject key identifier: 5F:BC:0B:49:3D:BE:2A:D0:B0:AE:88:7D:ED:F9:83:62:56:DD:B0:E7 Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Certificate serial: 019B25BFA8D1F5806E2EC9C8927E0C9FE724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft Manifest number: 134C Signing time: Tue 16 Dec 2025 06:01:16 +0000 Manifest this update: Tue 16 Dec 2025 06:01:16 +0000 Manifest next update: Wed 17 Dec 2025 06:01:16 +0000 Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: WWyuuUwiNOE6EPbrcRs1TayEBAj71SNzrHsXx+Hmp9E=) 2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:a8:d1:f5:80:6e:2e:c9:c8:92:7e:0c:9f:e7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Validity Not Before: Dec 16 06:01:16 2025 GMT Not After : Dec 17 06:01:16 2025 GMT Subject: CN=5fbc0b493dbe2ad0b0ae887dedf9836256ddb0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:6e:8e:d5:93:66:6c:95:79:a7:85:3c:dc: 5b:3f:18:1d:95:1d:39:b1:fb:b9:a3:3a:62:ff:4f: 8c:e5:53:e6:77:85:82:b6:d9:f2:38:7c:a2:d1:7a: 8d:ad:26:3a:2e:63:11:05:ac:27:1d:d7:92:51:a3: 35:ad:7f:ca:66:62:2b:f4:72:fd:d1:c1:8c:0e:0a: 20:e7:d1:c3:8a:9e:25:1d:63:fd:88:84:a3:95:21: 50:f3:b7:78:1b:ca:e3:d3:b7:ee:a6:bc:f2:95:b2: a6:d0:a1:9d:18:71:ae:02:2c:40:c0:09:23:28:f3: b1:1c:00:0a:cc:12:be:54:30:0f:93:57:92:87:66: 99:12:cf:33:3f:69:14:86:f6:ce:4d:10:ff:ca:d9: 94:d0:61:6d:7f:9b:7c:df:3e:d3:dc:5f:99:ba:a2: 57:7a:b5:f9:51:2b:c7:90:3e:ca:60:b1:e5:bb:0e: 9b:a6:b9:8f:8c:7c:98:d0:4d:1e:e8:f1:02:0b:29: de:41:4e:32:8f:b9:ef:ec:15:fa:f8:f2:11:22:a9: f3:90:43:88:a1:b5:21:13:d6:14:b1:f9:9d:f9:4b: dc:ca:a1:35:49:26:00:79:26:b4:24:f7:a0:c0:cd: 6b:f6:15:3a:f6:03:07:e4:58:71:38:43:18:c9:eb: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BC:0B:49:3D:BE:2A:D0:B0:AE:88:7D:ED:F9:83:62:56:DD:B0:E7 X509v3 Authority Key Identifier: keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8f:7c:05:58:21:3a:4e:f0:20:c8:48:d1:2c:cd:96:ea:00: 6b:cd:44:88:57:fd:c5:8e:59:2c:31:1c:aa:97:d5:49:fe:3d: 46:1f:a1:5c:fd:87:ef:41:7e:df:cd:f0:5e:b7:c7:75:ee:5d: 6c:15:c2:26:b4:b8:38:26:86:29:5f:0c:57:2f:c1:d0:82:f1: 13:d9:56:ba:78:aa:87:7c:dc:89:c1:3c:f0:b3:a8:62:54:4c: 90:57:6e:0c:23:d9:d9:c2:47:15:0a:cf:0b:e8:39:e3:e5:9c: 73:cd:fc:00:5d:21:1e:5c:a1:e9:34:2c:a3:c3:3e:ba:23:ec: 5e:e3:74:5e:3a:20:27:07:4d:a2:bd:f6:c9:00:75:a3:84:fd: 72:e9:11:4b:25:3e:6a:b0:3d:50:3a:d6:df:12:08:56:58:7d: 37:26:d1:36:47:db:7a:82:88:1b:58:8f:13:67:ac:e7:22:6f: 23:b5:ab:bd:12:17:ed:8e:49:4d:ea:c8:b0:a9:83:01:fe:81: 41:9d:96:44:5d:59:bd:b0:33:f7:0a:d1:29:9a:84:86:ff:ad: 9a:ed:63:7e:b9:de:2c:3a:4a:af:fd:b5:47:f1:e0:ea:b2:bc: d6:fa:8c:b4:08:32:d5:7b:35:30:c0:67:b7:98:e4:e2:ee:0c: 82:31:b6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv6jR9YBuLsnIkn4Mn+ckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh ZWYzY2MwHhcNMjUxMjE2MDYwMTE2WhcNMjUxMjE3MDYwMTE2WjAzMTEwLwYDVQQD Eyg1ZmJjMGI0OTNkYmUyYWQwYjBhZTg4N2RlZGY5ODM2MjU2ZGRiMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE1ujtWTZmyVeaeFPNxbPxgdlR05 sfu5ozpi/0+M5VPmd4WCttnyOHyi0XqNrSY6LmMRBawnHdeSUaM1rX/KZmIr9HL9 0cGMDgog59HDip4lHWP9iISjlSFQ87d4G8rj07fuprzylbKm0KGdGHGuAixAwAkj KPOxHAAKzBK+VDAPk1eSh2aZEs8zP2kUhvbOTRD/ytmU0GFtf5t83z7T3F+ZuqJX erX5USvHkD7KYLHluw6bprmPjHyY0E0e6PECCyneQU4yj7nv7BX6+PIRIqnzkEOI obUhE9YUsfmd+UvcyqE1SSYAeSa0JPegwM1r9hU69gMH5FhxOEMYyesFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+8C0k9virQsK6Ife35g2JW3bDnMB8GA1UdIwQY MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI498BVgh Ok7wIMhI0SzNluoAa81EiFf9xY5ZLDEcqpfVSf49Rh+hXP2H70F+383wXrfHde5d bBXCJrS4OCaGKV8MVy/B0ILxE9lWuniqh3zcicE88LOoYlRMkFduDCPZ2cJHFQrP C+g54+Wcc838AF0hHlyh6TQso8M+uiPsXuN0XjogJwdNor32yQB1o4T9cukRSyU+ arA9UDrW3xIIVlh9NybRNkfbeoKIG1iPE2es5yJvI7WrvRIX7Y5JTerIsKmDAf6B QZ2WRF1ZvbAz9wrRKZqEhv+tmu1jfrneLDpKr/21R/Hg6rK81vqMtAgy1Xs1MMBn t5jk4u4MgjG2Jg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:47:22 2025 by rpki-client