This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json) Hash identifier: 9+FsxTY8KYtTF3Tq5TflQ/xQhz6frahM9OtlwtEU2c0= Subject key identifier: A7:58:0B:D9:D3:C6:52:C9:8D:4C:5D:F3:9E:B5:68:72:3E:A8:9A:B5 Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Certificate serial: 019B1C85BC5D65460C953B5066E1E61BE69E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 11:01:24 +0000 Manifest this update: Sun 14 Dec 2025 11:01:24 +0000 Manifest next update: Mon 15 Dec 2025 11:01:24 +0000 Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: 78qwlGqokCqSs3bgWyIU/gbGVAcdFZ65efrlHdYGEYM=) 2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:bc:5d:65:46:0c:95:3b:50:66:e1:e6:1b:e6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Validity Not Before: Dec 14 11:01:24 2025 GMT Not After : Dec 15 11:01:24 2025 GMT Subject: CN=a7580bd9d3c652c98d4c5df39eb568723ea89ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:41:54:24:6c:a6:5c:07:d5:32:b7:56:51: 84:4f:d3:43:6d:4b:0c:6b:30:49:73:0d:2c:a0:29: 3b:a8:8a:7c:2f:54:65:ef:fb:fb:6b:07:43:0e:a3: b9:84:bd:b0:fd:a5:ce:73:5e:99:ed:5f:4d:af:6f: 81:51:b2:52:69:40:62:51:a3:2b:04:2a:12:6a:b6: e0:a4:e7:8f:ef:eb:6a:2b:86:35:ef:8b:6f:6d:8d: 1a:53:6a:5a:ac:d0:e5:c6:65:63:81:b4:57:bb:78: be:a3:26:02:4b:90:0c:0c:e9:60:1c:42:6d:bd:6d: 26:56:7a:39:aa:9f:40:13:c5:4c:da:fb:22:04:a8: 58:99:91:40:17:77:24:4d:2c:16:e6:22:ba:91:f0: 1d:b2:ae:44:a4:55:d0:e6:5e:42:4d:83:d1:6b:c5: 0c:b6:d9:53:ad:d0:a6:2e:4c:d1:14:db:24:35:d0: 2e:5a:87:20:01:0d:fd:77:8e:db:d0:ba:61:67:e2: b7:3b:b8:5c:33:45:40:3f:81:cc:1c:23:ff:6f:f4: 55:64:14:74:0d:78:65:ef:68:25:f2:6f:34:0d:43: 0f:dd:f8:54:a5:00:61:d6:90:d6:a3:ea:92:fc:bc: 67:82:e9:47:ef:f9:8c:b7:cb:04:98:1d:a1:06:6b: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:58:0B:D9:D3:C6:52:C9:8D:4C:5D:F3:9E:B5:68:72:3E:A8:9A:B5 X509v3 Authority Key Identifier: keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c6:b2:21:4f:00:72:bd:6c:42:35:98:05:3d:6e:15:1c:bb: 28:bf:63:08:e7:b5:f8:3b:10:3f:d1:b3:d5:18:ff:91:94:91: e5:29:e8:b6:68:9e:db:1e:ed:49:f1:4d:29:f2:57:03:35:f6: 65:5b:aa:f2:ee:f4:75:da:21:75:2c:63:21:05:3c:7e:ce:f3: 72:1e:ce:a3:b1:4e:bf:5d:2f:ed:ae:d7:0d:12:09:e2:73:41: 15:49:52:74:ae:92:f9:68:bd:fd:2c:3a:46:d7:35:29:cb:ce: 17:9c:73:ec:dc:db:e9:2f:94:8e:5b:9f:1d:4f:65:92:ce:ec: d4:f8:cd:d3:4e:f9:50:c9:06:4e:5c:38:a1:91:ac:22:50:9e: 54:ca:ef:dc:db:c3:69:db:c3:71:51:0b:bb:6e:89:43:de:c0: f3:88:6f:4c:ee:fe:1a:dc:d0:da:10:12:fa:b3:31:49:d4:1b: 40:3f:5f:bd:27:ec:0c:7c:e4:25:db:72:fc:10:52:e9:f4:27: 28:0d:9a:be:11:f9:d4:d5:51:2d:34:6f:f9:05:97:42:ef:fb: 43:ee:d4:c2:de:a2:f4:61:40:e1:eb:08:6e:b6:32:f6:dc:5f: 87:52:f2:13:02:5b:2a:a1:d6:1d:f7:2b:a9:b2:ff:e5:de:e8: bf:1f:3f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschbxdZUYMlTtQZuHmG+aeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk NjEyMjAwHhcNMjUxMjE0MTEwMTI0WhcNMjUxMjE1MTEwMTI0WjAzMTEwLwYDVQQD EyhhNzU4MGJkOWQzYzY1MmM5OGQ0YzVkZjM5ZWI1Njg3MjNlYTg5YWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpRBVCRsplwH1TK3VlGET9NDbUsM azBJcw0soCk7qIp8L1Rl7/v7awdDDqO5hL2w/aXOc16Z7V9Nr2+BUbJSaUBiUaMr BCoSarbgpOeP7+tqK4Y174tvbY0aU2parNDlxmVjgbRXu3i+oyYCS5AMDOlgHEJt vW0mVno5qp9AE8VM2vsiBKhYmZFAF3ckTSwW5iK6kfAdsq5EpFXQ5l5CTYPRa8UM ttlTrdCmLkzRFNskNdAuWocgAQ39d47b0LphZ+K3O7hcM0VAP4HMHCP/b/RVZBR0 DXhl72gl8m80DUMP3fhUpQBh1pDWo+qS/LxngulH7/mMt8sEmB2hBmvITwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdYC9nTxlLJjUxd8561aHI+qJq1MB8GA1UdIwQY MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1 LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMayIU8A cr1sQjWYBT1uFRy7KL9jCOe1+DsQP9Gz1Rj/kZSR5Snotmie2x7tSfFNKfJXAzX2 ZVuq8u70ddohdSxjIQU8fs7zch7Oo7FOv10v7a7XDRIJ4nNBFUlSdK6S+Wi9/Sw6 Rtc1KcvOF5xz7Nzb6S+UjlufHU9lks7s1PjN0075UMkGTlw4oZGsIlCeVMrv3NvD advDcVELu26JQ97A84hvTO7+GtzQ2hAS+rMxSdQbQD9fvSfsDHzkJdty/BBS6fQn KA2avhH51NVRLTRv+QWXQu/7Q+7Uwt6i9GFA4esIbrYy9txfh1LyEwJbKqHWHfcr qbL/5d7ovx8/SA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:30:17 2025 by rpki-client