This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json) Hash identifier: ZHP4QkvCn5hdHpOFpYwlwr0C5biOb0p3emEtajJmrk0= Subject key identifier: 8E:70:F5:D5:D2:DE:0A:7D:F9:46:62:7E:14:5F:8A:D8:C4:8D:06:F8 Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Certificate serial: 019B1FBD10E29747566E3DC2B2A2A04E453C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft Manifest number: 02D2 Signing time: Mon 15 Dec 2025 02:00:42 +0000 Manifest this update: Mon 15 Dec 2025 02:00:42 +0000 Manifest next update: Tue 16 Dec 2025 02:00:42 +0000 Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: 4lhnfWDieDzscgAYPF+pfvymw6ylfcsni3sO8UvmxTw=) 2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:10:e2:97:47:56:6e:3d:c2:b2:a2:a0:4e:45:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Validity Not Before: Dec 15 02:00:42 2025 GMT Not After : Dec 16 02:00:42 2025 GMT Subject: CN=8e70f5d5d2de0a7df946627e145f8ad8c48d06f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:aa:8b:be:d9:4a:04:71:b7:57:6d:bb:5e: 99:ac:cd:53:9a:1c:40:d7:bf:1d:ef:d8:a7:2e:19: 71:33:b4:6e:96:48:60:49:77:06:6a:17:90:04:68: 42:d8:b3:ff:11:40:58:5f:53:93:2e:3f:e3:7e:bb: a3:48:3c:9f:02:b7:eb:17:2d:e6:c8:dd:75:a1:6c: 8b:ec:08:e1:a4:d7:56:d2:33:75:3b:38:2b:e0:2c: 62:29:4e:90:36:51:34:e5:3f:db:42:41:da:14:fd: 8c:cd:70:65:3f:46:0b:49:74:2e:15:ad:18:6b:4a: e8:5c:33:6f:8b:39:4f:14:e7:ef:03:40:f4:34:77: 17:71:5e:32:6b:58:86:35:b2:b3:f6:0d:f6:f8:4c: c2:01:f2:11:ed:15:a8:77:26:ac:40:cb:a3:30:bd: 5b:66:e1:76:61:74:e4:e7:6e:b3:0d:c7:f6:e3:96: 83:15:b8:17:16:e8:a2:4b:0e:1a:b3:22:ec:c2:ac: fc:b6:36:8f:8f:73:1f:8e:ae:57:28:bd:c1:2a:d3: 28:77:f7:ae:ba:93:09:82:82:c4:f2:47:78:9a:72: d6:24:35:c3:4c:07:79:14:b5:0a:02:f2:3b:22:88: 46:aa:d1:98:a4:ea:a3:3c:2c:1c:61:b8:88:47:f9: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:70:F5:D5:D2:DE:0A:7D:F9:46:62:7E:14:5F:8A:D8:C4:8D:06:F8 X509v3 Authority Key Identifier: keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:94:93:4f:b6:df:3e:f9:f6:ab:bc:0a:37:b9:e4:8a:83:b8: bd:3a:01:44:6e:9b:a4:f6:37:24:2d:18:93:6e:1b:4e:97:3d: 77:c4:2a:52:13:09:fa:e6:0f:57:b1:6c:4a:48:45:5b:6a:76: 6b:70:0c:60:17:1e:ee:fd:4d:0d:02:46:25:25:8f:c7:ce:49: c7:ab:53:11:00:15:5d:4d:71:05:b0:67:08:01:0f:57:0c:c1: 8e:45:57:62:9e:03:37:53:a2:31:cc:55:2e:30:ac:1b:20:0a: b2:30:21:64:1b:4e:d2:85:8f:e6:21:7c:0e:dc:13:cf:90:24: 1f:c1:f7:bb:e6:a3:19:c3:27:96:74:1c:a7:1e:74:99:14:49: 4e:c0:46:5d:3a:41:5e:9b:e8:70:95:29:fe:d9:32:a4:23:af: 9e:66:29:bd:a1:85:d4:58:f3:dc:10:f3:df:33:3e:a2:dc:bf: b5:94:2e:bd:ac:cc:76:95:0c:70:4e:83:5e:b0:98:be:b9:f7: 1a:c2:87:df:a3:68:35:03:2a:ae:9b:7e:b4:38:f1:ff:76:49: cd:d9:b6:b0:71:6c:1a:ca:d3:9f:b8:f7:37:ca:ff:b5:e1:c8: 7e:5a:18:f6:6d:44:76:36:48:4e:7a:aa:8c:67:82:0a:1f:3c: f7:a9:70:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvRDil0dWbj3CsqKgTkU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzYTRhMDVmMzcwNTBmN2MwMzc5ZDM0ZjRmNDgxNGJk MjA5ZGYwHhcNMjUxMjE1MDIwMDQyWhcNMjUxMjE2MDIwMDQyWjAzMTEwLwYDVQQD Eyg4ZTcwZjVkNWQyZGUwYTdkZjk0NjYyN2UxNDVmOGFkOGM0OGQwNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyiqi77ZSgRxt1dtu16ZrM1TmhxA 178d79inLhlxM7RulkhgSXcGaheQBGhC2LP/EUBYX1OTLj/jfrujSDyfArfrFy3m yN11oWyL7AjhpNdW0jN1Ozgr4CxiKU6QNlE05T/bQkHaFP2MzXBlP0YLSXQuFa0Y a0roXDNvizlPFOfvA0D0NHcXcV4ya1iGNbKz9g32+EzCAfIR7RWodyasQMujML1b ZuF2YXTk526zDcf245aDFbgXFuiiSw4asyLswqz8tjaPj3Mfjq5XKL3BKtMod/eu upMJgoLE8kd4mnLWJDXDTAd5FLUKAvI7IohGqtGYpOqjPCwcYbiIR/n51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5w9dXS3gp9+UZifhRfitjEjQb4MB8GA1UdIwQY MBaAFOzfOkoF83BQ98A3nTT09IFL0gnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTkt ZWY4NzQwNWY5YTExLzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTktZWY4NzQwNWY5YTEx LzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5STT7bf Pvn2q7wKN7nkioO4vToBRG6bpPY3JC0Yk24bTpc9d8QqUhMJ+uYPV7FsSkhFW2p2 a3AMYBce7v1NDQJGJSWPx85Jx6tTEQAVXU1xBbBnCAEPVwzBjkVXYp4DN1OiMcxV LjCsGyAKsjAhZBtO0oWP5iF8DtwTz5AkH8H3u+ajGcMnlnQcpx50mRRJTsBGXTpB XpvocJUp/tkypCOvnmYpvaGF1Fjz3BDz3zM+oty/tZQuvazMdpUMcE6DXrCYvrn3 GsKH36NoNQMqrpt+tDjx/3ZJzdm2sHFsGsrTn7j3N8r/teHIfloY9m1EdjZITnqq jGeCCh8896lwtQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:33 2025 by rpki-client