This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json) Hash identifier: TQlvv6w/7SF955h+kf4fqtaXKLDaVjCny/xZVuy54/E= Subject key identifier: 7B:B5:23:61:AD:91:3F:4A:7E:94:DC:D9:D8:68:C6:A2:AC:CD:28:9B Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Certificate serial: 019B443948582C97E3740F1B3BD9BD21AAE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft Manifest number: 0502 Signing time: Mon 22 Dec 2025 04:02:43 +0000 Manifest this update: Mon 22 Dec 2025 04:02:43 +0000 Manifest next update: Tue 23 Dec 2025 04:02:43 +0000 Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=) 2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: gZIwkvw62iBKKg+fmS1BgmO/HEYrvqCAklcC/G+mXfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:48:58:2c:97:e3:74:0f:1b:3b:d9:bd:21:aa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Validity Not Before: Dec 22 04:02:43 2025 GMT Not After : Dec 23 04:02:43 2025 GMT Subject: CN=7bb52361ad913f4a7e94dcd9d868c6a2accd289b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:da:34:ea:da:87:dd:93:86:22:e9:65:15: 5c:ae:63:a0:81:4d:34:f5:41:47:e4:a7:e8:d7:10: a9:7c:1b:29:26:12:fe:e3:00:e8:b7:d8:b4:ed:ee: 66:e8:a2:d7:df:a3:d3:8d:03:3f:0e:f3:c4:34:36: b2:63:3e:93:0d:26:28:c7:76:03:01:46:1f:5e:1b: 31:9b:eb:9b:10:8e:e9:8d:4a:67:f0:b8:8b:d9:75: 5a:ff:a9:96:54:e1:3f:ae:48:75:5d:7f:d1:3b:ba: 2c:2a:df:da:68:5d:21:a7:cc:cb:bb:b4:ed:3c:24: e4:d2:12:83:9a:81:0c:bf:e3:fd:cd:72:bb:c4:b2: 2e:10:fc:73:f5:06:b2:04:91:ca:eb:c2:e5:0b:bf: b4:e8:37:7b:87:7a:c2:1b:38:d7:47:27:67:06:7b: 18:66:ba:75:65:fe:1b:3b:a5:40:c1:1b:ef:a5:e9: a8:27:87:3b:1b:62:1d:65:8c:a5:61:4e:95:2f:16: c9:20:44:39:a4:e1:13:9d:1c:f8:15:54:cd:d0:40: 1f:9e:49:d7:69:a9:9d:8c:51:69:cc:df:98:7f:87: c8:d5:a9:91:4d:36:f4:2f:92:43:86:86:7e:44:25: ec:b3:92:31:14:91:b7:a2:15:2b:c5:62:da:74:58: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B5:23:61:AD:91:3F:4A:7E:94:DC:D9:D8:68:C6:A2:AC:CD:28:9B X509v3 Authority Key Identifier: keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:43:88:31:78:fb:f3:b2:cd:8b:11:4c:a8:5a:7b:86:42:68: 6d:be:d7:b0:01:5b:a7:7b:df:94:e0:ab:49:b9:a2:fa:c5:c7: 0d:24:7d:ba:56:23:41:9e:40:8c:bd:e3:d1:39:22:d8:0e:4a: ce:68:dd:c9:37:bc:2a:e2:21:48:6b:45:3d:6b:c2:4a:b6:39: 1e:cf:69:de:91:2d:9e:4b:9c:1b:8a:b5:09:b7:9d:4b:92:df: 86:8f:15:0c:81:af:15:29:43:3e:ec:4f:d9:0a:0d:c1:63:66: f6:94:69:81:f4:35:76:68:28:04:3b:5e:e1:00:df:85:04:1b: fa:90:27:d7:5f:c7:a9:2b:0b:21:23:3a:ea:c3:6e:50:25:9a: 96:5e:b3:77:b4:ff:5a:8d:00:44:f3:85:eb:fe:46:74:c2:34: 28:9d:cc:fd:bd:a9:a9:20:bf:74:c3:ad:01:00:f6:d4:2e:67: d3:ed:0a:3f:79:26:8c:a9:3a:50:d0:a6:9f:c4:4a:9a:2e:2a: c4:8c:56:42:f3:b5:86:72:7f:f7:47:e2:22:7b:be:c1:49:a9: eb:59:4e:06:c6:af:16:94:cd:7a:85:7b:fa:97:d7:9c:47:29: ca:e0:86:ff:e4:dc:36:fd:d0:ed:8c:9f:45:79:df:96:84:df: d5:c1:9b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOUhYLJfjdA8bO9m9IarkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1 NTQ2Y2MwHhcNMjUxMjIyMDQwMjQzWhcNMjUxMjIzMDQwMjQzWjAzMTEwLwYDVQQD Eyg3YmI1MjM2MWFkOTEzZjRhN2U5NGRjZDlkODY4YzZhMmFjY2QyODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9baNOrah92ThiLpZRVcrmOggU00 9UFH5Kfo1xCpfBspJhL+4wDot9i07e5m6KLX36PTjQM/DvPENDayYz6TDSYox3YD AUYfXhsxm+ubEI7pjUpn8LiL2XVa/6mWVOE/rkh1XX/RO7osKt/aaF0hp8zLu7Tt PCTk0hKDmoEMv+P9zXK7xLIuEPxz9QayBJHK68LlC7+06Dd7h3rCGzjXRydnBnsY Zrp1Zf4bO6VAwRvvpemoJ4c7G2IdZYylYU6VLxbJIEQ5pOETnRz4FVTN0EAfnknX aamdjFFpzN+Yf4fI1amRTTb0L5JDhoZ+RCXss5IxFJG3ohUrxWLadFgpawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu1I2GtkT9KfpTc2dhoxqKszSibMB8GA1UdIwQY MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1 LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEOIMXj7 87LNixFMqFp7hkJobb7XsAFbp3vflOCrSbmi+sXHDSR9ulYjQZ5AjL3j0Tki2A5K zmjdyTe8KuIhSGtFPWvCSrY5Hs9p3pEtnkucG4q1CbedS5Lfho8VDIGvFSlDPuxP 2QoNwWNm9pRpgfQ1dmgoBDte4QDfhQQb+pAn11/HqSsLISM66sNuUCWall6zd7T/ Wo0ARPOF6/5GdMI0KJ3M/b2pqSC/dMOtAQD21C5n0+0KP3kmjKk6UNCmn8RKmi4q xIxWQvO1hnJ/90fiInu+wUmp61lOBsavFpTNeoV7+pfXnEcpyuCG/+TcNv3Q7Yyf RXnfloTf1cGb3w== -----END CERTIFICATE-----Generated at Mon Dec 22 08:48:01 2025 by rpki-client