This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json) Hash identifier: aYrat6p2XCxRgbTlhT0psv1liK+mqy5wtszMNKLksWc= Subject key identifier: 59:F3:1F:11:1D:D8:C4:CA:3E:D3:59:63:DE:2E:12:5C:D1:95:35:43 Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf Certificate serial: 019B0EC9C3C21EE7195FA1D87216BB8E3014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft Manifest number: 153A Signing time: Thu 11 Dec 2025 19:01:02 +0000 Manifest this update: Thu 11 Dec 2025 19:01:02 +0000 Manifest next update: Fri 12 Dec 2025 19:01:02 +0000 Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: kDS4tIc5GvRd1Xx6QFu5mRWNAHZqTN364Lwz1wG992s=) 2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=) 3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:c3:c2:1e:e7:19:5f:a1:d8:72:16:bb:8e:30:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf Validity Not Before: Dec 11 19:01:02 2025 GMT Not After : Dec 12 19:01:02 2025 GMT Subject: CN=59f31f111dd8c4ca3ed35963de2e125cd1953543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:06:11:80:1c:f0:6f:63:33:e1:0a:ea:94: dd:01:12:7c:0a:3e:ac:38:df:c4:bd:fb:07:0a:4a: a6:ae:72:a4:19:01:54:85:d7:60:a2:7e:95:ef:e8: 40:c9:a6:00:38:9f:30:cb:65:7c:a6:78:97:2c:ed: 14:d4:72:1a:b2:82:6b:8b:d5:1a:57:1d:93:17:38: fa:eb:91:2b:29:c7:0d:1d:d3:64:fc:09:88:20:00: 5a:42:3d:61:5c:0b:bf:86:af:5c:87:b8:a5:1d:df: 58:b9:a7:ab:63:d4:8b:b8:8e:12:af:5f:e9:31:89: 50:23:fa:0a:15:7c:46:1f:55:da:4e:d1:ff:8b:4f: 16:82:8d:bf:5e:39:c8:25:d2:1f:9b:cc:f2:27:8c: 40:1f:d3:7d:75:a4:55:5e:c8:d5:f4:79:02:de:b4: ca:b1:bd:a4:89:14:8b:3e:dc:a2:9f:21:9f:9c:60: 5c:23:79:55:8d:80:81:70:c2:da:09:56:75:43:e8: 22:8c:1d:29:d6:7d:ae:da:79:eb:e8:e0:b5:52:1d: 7f:b8:7b:d5:ed:01:8d:fd:bb:8f:fd:79:ef:b3:16: 10:f2:3d:1f:01:08:a9:37:45:3e:42:15:07:88:eb: 39:85:9f:16:f1:7d:82:b9:52:89:45:58:2b:0a:4a: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F3:1F:11:1D:D8:C4:CA:3E:D3:59:63:DE:2E:12:5C:D1:95:35:43 X509v3 Authority Key Identifier: keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:56:00:95:2c:60:d9:f7:85:a5:d1:a3:b5:09:f0:0c:a1:46: a3:e1:67:bc:7b:f1:29:7b:e1:ad:47:1a:ba:93:d5:fe:b0:8e: 78:93:60:ae:fc:a5:6d:0f:ef:6d:6e:b2:77:2a:e7:4a:5d:a2: 62:c6:20:3b:29:d1:d1:76:0f:55:6e:ea:9a:e9:0f:f9:63:5d: 06:cc:9a:15:be:d0:1c:ae:cc:5a:76:35:93:91:42:10:f0:76: ec:2d:c4:ba:1a:c4:28:13:13:a3:44:a7:b6:ea:44:e7:1f:77: cc:0d:b8:da:ba:9a:c4:fa:a5:7a:9d:7d:2c:46:78:05:db:0f: 04:f8:36:29:a9:56:8c:57:25:76:fb:d4:7e:c3:44:5f:0f:8b: e4:ba:64:0a:51:d2:16:22:ab:8e:e0:34:71:10:eb:ba:a9:fe: be:10:c6:5f:ee:fa:64:3e:b5:f2:ee:0f:80:8e:ab:a4:30:dd: 41:7c:e9:bc:11:68:fc:3c:7b:48:a3:65:db:02:7f:c8:a5:4b: 24:91:7f:cc:12:a3:5a:cb:16:6d:ac:b0:9a:44:92:77:39:7d: a0:cb:b8:3b:76:c3:c5:45:2a:7d:26:93:ae:57:f6:87:34:23: 60:2c:37:96:d6:6a:41:01:01:c8:70:fa:a6:a0:b0:ca:ea:01: 52:78:73:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOycPCHucZX6HYcha7jjAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi OWViY2YwHhcNMjUxMjExMTkwMTAyWhcNMjUxMjEyMTkwMTAyWjAzMTEwLwYDVQQD Eyg1OWYzMWYxMTFkZDhjNGNhM2VkMzU5NjNkZTJlMTI1Y2QxOTUzNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S8GEYAc8G9jM+EK6pTdARJ8Cj6s ON/EvfsHCkqmrnKkGQFUhddgon6V7+hAyaYAOJ8wy2V8pniXLO0U1HIasoJri9Ua Vx2TFzj665ErKccNHdNk/AmIIABaQj1hXAu/hq9ch7ilHd9YuaerY9SLuI4Sr1/p MYlQI/oKFXxGH1XaTtH/i08Wgo2/XjnIJdIfm8zyJ4xAH9N9daRVXsjV9HkC3rTK sb2kiRSLPtyinyGfnGBcI3lVjYCBcMLaCVZ1Q+gijB0p1n2u2nnr6OC1Uh1/uHvV 7QGN/buP/XnvsxYQ8j0fAQipN0U+QhUHiOs5hZ8W8X2CuVKJRVgrCkqwZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnzHxEd2MTKPtNZY94uElzRlTVDMB8GA1UdIwQY MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt ZGZhMGI4MDUyNjE0LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0 LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclYAlSxg 2feFpdGjtQnwDKFGo+FnvHvxKXvhrUcaupPV/rCOeJNgrvylbQ/vbW6ydyrnSl2i YsYgOynR0XYPVW7qmukP+WNdBsyaFb7QHK7MWnY1k5FCEPB27C3EuhrEKBMTo0Sn tupE5x93zA242rqaxPqlep19LEZ4BdsPBPg2KalWjFcldvvUfsNEXw+L5LpkClHS FiKrjuA0cRDruqn+vhDGX+76ZD618u4PgI6rpDDdQXzpvBFo/Dx7SKNl2wJ/yKVL JJF/zBKjWssWbaywmkSSdzl9oMu4O3bDxUUqfSaTrlf2hzQjYCw3ltZqQQEByHD6 pqCwyuoBUnhzHg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:33:29 2025 by rpki-client