This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json) Hash identifier: hNSZkYnK1pLyW5KeUVVFSB18xAoF8R7tNPvUTjUYJmk= Subject key identifier: E7:1D:45:6F:B6:86:43:B8:ED:20:D0:75:52:22:60:85:5A:C4:FB:79 Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f Certificate serial: 019B0FA5BDE4B5A2A8824363A40D38D9EBDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft Manifest number: 0F3E Signing time: Thu 11 Dec 2025 23:01:18 +0000 Manifest this update: Thu 11 Dec 2025 23:01:18 +0000 Manifest next update: Fri 12 Dec 2025 23:01:18 +0000 Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=) 2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: R2XANI/chbQZ8+52jD11nM2/fjb70N4fn2m5VZQrvQs=) 3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:bd:e4:b5:a2:a8:82:43:63:a4:0d:38:d9:eb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f Validity Not Before: Dec 11 23:01:18 2025 GMT Not After : Dec 12 23:01:18 2025 GMT Subject: CN=e71d456fb68643b8ed20d075522260855ac4fb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c7:d8:de:61:4a:20:c2:4c:ba:06:dd:5c:c3: fd:4e:94:e2:25:d5:b0:62:23:04:0f:69:7f:37:56: 73:ca:98:e9:1a:84:6e:a6:e5:7f:73:aa:f0:91:98: 8a:ec:99:9d:88:d4:b8:13:19:39:8f:9b:9c:b1:af: 84:78:97:3b:55:3d:c3:a5:01:98:b5:d6:38:4e:6f: 56:df:68:1f:24:5a:87:94:25:6e:b4:74:0b:45:3f: 94:65:58:fc:cd:c7:1b:b8:9f:63:95:57:69:ee:82: a7:0b:41:11:69:95:d6:2e:56:ef:91:b8:df:61:c9: e8:cc:d2:2e:8d:a2:d3:84:73:50:1b:9b:f9:31:ca: 1c:59:b7:32:c3:7b:fe:ad:d5:68:27:d6:91:08:86: ec:2c:81:d5:6d:be:b5:0d:18:1a:de:23:41:b7:29: 99:35:ae:21:a7:4f:d5:f3:92:5e:5d:1b:c8:a1:51: 6d:b6:de:95:5a:a4:4d:93:a5:9c:b8:74:5a:eb:44: 79:d4:a6:f4:57:80:62:f8:fc:71:c2:94:7b:93:d3: 7a:f1:bc:f3:af:95:cb:8e:4e:04:fd:9f:a3:a7:28: 42:78:a6:11:b2:03:b7:af:99:db:c7:6f:70:fb:1a: e3:04:38:6e:5b:0b:b0:0a:40:18:88:3a:d2:86:c0: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1D:45:6F:B6:86:43:B8:ED:20:D0:75:52:22:60:85:5A:C4:FB:79 X509v3 Authority Key Identifier: keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f1:0a:fa:74:da:10:5f:b2:59:d4:28:71:b5:4b:25:8a:7d: a3:ce:1c:e3:02:e6:15:63:8c:d9:b4:39:e0:3b:03:90:c8:f1: 2d:5e:3c:b3:13:ca:c6:36:22:9e:2a:d5:ba:ca:98:89:c0:2e: 28:bf:ff:d3:e7:c6:f3:a1:93:25:63:65:c8:69:07:9e:5d:dd: fd:72:81:4f:e5:32:2b:58:cf:34:88:1c:67:e8:a7:b1:04:46: 3b:68:3c:63:78:2f:a3:68:9f:6a:1b:58:eb:6d:7f:71:25:b4: 23:70:2d:5a:53:73:dd:1f:8c:68:bd:bb:ec:59:5e:da:a3:a4: 6b:64:8d:f8:fb:b0:f5:66:18:a4:cf:44:4d:35:6f:51:1e:6c: 4a:8e:bc:24:60:79:fb:26:b7:56:96:45:48:ab:86:1e:50:34: 72:58:e1:d5:a5:a4:a7:04:99:f7:af:b2:93:0d:78:aa:53:fd: 37:6f:1e:ce:7b:39:45:9f:b6:98:2e:7a:33:f1:40:f7:e0:38: 3e:b8:b5:9a:77:46:8a:48:b9:7f:5e:9a:29:1c:29:bc:3a:09: 90:76:c6:c3:51:56:c9:83:e2:1e:48:f7:b0:37:d7:fb:ed:0d: 03:7b:23:14:7a:bb:09:e0:46:db:8e:e0:6a:82:37:2c:38:69: b7:1c:29:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpb3ktaKogkNjpA042evaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4 YzEzNGYwHhcNMjUxMjExMjMwMTE4WhcNMjUxMjEyMjMwMTE4WjAzMTEwLwYDVQQD EyhlNzFkNDU2ZmI2ODY0M2I4ZWQyMGQwNzU1MjIyNjA4NTVhYzRmYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sfY3mFKIMJMugbdXMP9TpTiJdWw YiMED2l/N1ZzypjpGoRupuV/c6rwkZiK7JmdiNS4Exk5j5ucsa+EeJc7VT3DpQGY tdY4Tm9W32gfJFqHlCVutHQLRT+UZVj8zccbuJ9jlVdp7oKnC0ERaZXWLlbvkbjf YcnozNIujaLThHNQG5v5McocWbcyw3v+rdVoJ9aRCIbsLIHVbb61DRga3iNBtymZ Na4hp0/V85JeXRvIoVFttt6VWqRNk6WcuHRa60R51Kb0V4Bi+PxxwpR7k9N68bzz r5XLjk4E/Z+jpyhCeKYRsgO3r5nbx29w+xrjBDhuWwuwCkAYiDrShsDBhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcdRW+2hkO47SDQdVIiYIVaxPt5MB8GA1UdIwQY MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/EK+nTa EF+yWdQocbVLJYp9o84c4wLmFWOM2bQ54DsDkMjxLV48sxPKxjYinirVusqYicAu KL//0+fG86GTJWNlyGkHnl3d/XKBT+UyK1jPNIgcZ+insQRGO2g8Y3gvo2ifahtY 621/cSW0I3AtWlNz3R+MaL277Fle2qOka2SN+Puw9WYYpM9ETTVvUR5sSo68JGB5 +ya3VpZFSKuGHlA0cljh1aWkpwSZ96+ykw14qlP9N28ezns5RZ+2mC56M/FA9+A4 Pri1mndGiki5f16aKRwpvDoJkHbGw1FWyYPiHkj3sDfX++0NA3sjFHq7CeBG247g aoI3LDhptxwpwg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:08 2025 by rpki-client