This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json) Hash identifier: /djZq4ep7irN5PnC2f3mlRhNdRntkRybZ7Ksgjg/yIU= Subject key identifier: 41:9D:FA:FD:6B:78:41:9F:84:8B:FA:F4:0B:C9:2F:DF:78:6A:ED:EC Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0 Certificate serial: 019B23D143EA65B9B3CE63241E0240F26CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 21:01:15 +0000 Manifest this update: Mon 15 Dec 2025 21:01:15 +0000 Manifest next update: Tue 16 Dec 2025 21:01:15 +0000 Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: mhSNk41WxI3Og/Za2KhOzt3N3kDxpGPHadbGNNqqfJs=) 2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:43:ea:65:b9:b3:ce:63:24:1e:02:40:f2:6c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0 Validity Not Before: Dec 15 21:01:15 2025 GMT Not After : Dec 16 21:01:15 2025 GMT Subject: CN=419dfafd6b78419f848bfaf40bc92fdf786aedec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:cb:e0:e4:1c:80:bb:ce:d3:02:6f:71:6c: 92:df:4c:f6:bb:c6:6a:ee:c3:7a:c3:4a:0d:47:4d: 6b:ab:ef:01:cc:c0:b2:ce:d1:a9:d8:9b:2d:ef:7d: dd:bf:43:58:52:f8:8b:3a:79:db:22:67:86:3b:5b: 3f:f5:a5:63:ff:b2:88:dd:62:ad:fc:ef:5e:bc:0d: 63:dd:72:dc:13:76:1c:e2:3d:fe:71:98:ba:a7:92: d9:f0:7c:e7:a0:41:db:3d:c4:37:c0:09:74:6a:dc: e8:39:53:66:85:f6:c8:1b:ca:8e:ea:f1:eb:7c:84: b6:e7:2e:f2:d7:03:e2:3c:df:e6:a2:a3:ed:ea:32: 0d:e3:6b:1b:b1:25:ca:9f:7a:f7:80:4d:80:69:2a: 0f:94:95:61:4e:8f:4e:be:e2:a3:f1:8e:77:db:7f: d4:8b:26:aa:39:5a:33:30:ce:5d:af:98:1a:f7:03: 76:59:2a:a9:10:8c:a0:47:9b:f1:5f:aa:2c:db:8d: 75:40:82:5a:45:d9:01:07:c7:33:8f:d1:65:83:82: 45:d1:8f:5c:6f:26:99:c3:a7:b9:9e:86:f0:56:02: b3:3d:c2:3d:0d:e2:76:94:8c:9e:0f:7a:e7:84:e1: 15:ae:c4:04:6b:18:f1:86:ff:99:05:3f:2e:ec:09: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:FA:FD:6B:78:41:9F:84:8B:FA:F4:0B:C9:2F:DF:78:6A:ED:EC X509v3 Authority Key Identifier: keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2e:4b:7f:7b:9e:af:41:43:d5:d1:c0:cf:02:d0:75:90:4f: 38:d8:9e:02:d5:fe:48:dd:f0:ee:84:03:db:89:3d:4b:14:04: 72:49:ee:52:95:42:e4:80:ca:83:d8:fb:d6:8e:e1:99:c6:d3: f8:bd:34:cb:5e:df:a8:e9:55:1d:cb:3f:35:ac:9d:a9:13:2e: fd:25:78:72:9f:30:66:58:e8:c5:58:e6:16:a2:fe:34:db:d6: 7d:71:cc:e8:33:cb:78:76:31:1f:2d:4b:18:d2:c3:3f:91:ed: 1f:54:c0:ea:d0:89:79:18:aa:48:6d:4b:be:d9:a0:e7:4a:4f: d3:5d:d5:ac:a8:48:38:74:a7:dd:48:3e:17:d8:40:ca:49:b2: e7:71:73:a5:94:26:1d:b5:19:ea:f2:78:71:53:54:88:09:5b: 6c:85:f9:80:40:74:94:01:dc:70:31:5e:18:47:81:03:0e:be: 5c:ba:4a:69:08:f9:66:fa:1f:8e:c4:db:ed:53:ec:f1:3a:bb: 6c:5b:1f:a2:38:e9:aa:6c:66:11:05:cf:c5:1b:0d:4e:47:97: 2f:0e:e8:bf:0e:ec:62:71:47:18:d9:23:17:2e:00:49:66:e4: f9:f3:c6:a9:ac:b6:0e:bf:50:f7:4e:1e:e8:19:60:2b:59:0f: 76:95:fc:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0UPqZbmzzmMkHgJA8mzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz NzU4YzAwHhcNMjUxMjE1MjEwMTE1WhcNMjUxMjE2MjEwMTE1WjAzMTEwLwYDVQQD Eyg0MTlkZmFmZDZiNzg0MTlmODQ4YmZhZjQwYmM5MmZkZjc4NmFlZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjXL4OQcgLvO0wJvcWyS30z2u8Zq 7sN6w0oNR01rq+8BzMCyztGp2Jst733dv0NYUviLOnnbImeGO1s/9aVj/7KI3WKt /O9evA1j3XLcE3Yc4j3+cZi6p5LZ8HznoEHbPcQ3wAl0atzoOVNmhfbIG8qO6vHr fIS25y7y1wPiPN/moqPt6jIN42sbsSXKn3r3gE2AaSoPlJVhTo9OvuKj8Y5323/U iyaqOVozMM5dr5ga9wN2WSqpEIygR5vxX6os2411QIJaRdkBB8czj9Flg4JF0Y9c byaZw6e5nobwVgKzPcI9DeJ2lIyeD3rnhOEVrsQEaxjxhv+ZBT8u7AkLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGd+v1reEGfhIv69AvJL994au3sMB8GA1UdIwQY MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABS5Lf3ue r0FD1dHAzwLQdZBPONieAtX+SN3w7oQD24k9SxQEcknuUpVC5IDKg9j71o7hmcbT +L00y17fqOlVHcs/NaydqRMu/SV4cp8wZljoxVjmFqL+NNvWfXHM6DPLeHYxHy1L GNLDP5HtH1TA6tCJeRiqSG1Lvtmg50pP013VrKhIOHSn3Ug+F9hAykmy53FzpZQm HbUZ6vJ4cVNUiAlbbIX5gEB0lAHccDFeGEeBAw6+XLpKaQj5ZvofjsTb7VPs8Tq7 bFsfojjpqmxmEQXPxRsNTkeXLw7ovw7sYnFHGNkjFy4ASWbk+fPGqay2Dr9Q904e 6BlgK1kPdpX8sQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:22:38 2025 by rpki-client