This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json) Hash identifier: I10T/8BlASRCkgr6LA+QwNmFVeqIzubZOqhRgRSrMg0= Subject key identifier: 7C:18:A3:AF:D5:1C:1E:C9:D7:C7:BE:FC:3C:04:61:E9:45:0E:69:1B Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a Certificate serial: 019B1E05E2E66A67D1A7CEEAE262BF75E772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft Manifest number: 116F Signing time: Sun 14 Dec 2025 18:01:00 +0000 Manifest this update: Sun 14 Dec 2025 18:01:00 +0000 Manifest next update: Mon 15 Dec 2025 18:01:00 +0000 Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: Z2TCkj8Ega3SJo2WqcJMIJAnisVdPvRANir/TkwHTo8=) 2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:e2:e6:6a:67:d1:a7:ce:ea:e2:62:bf:75:e7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a Validity Not Before: Dec 14 18:01:00 2025 GMT Not After : Dec 15 18:01:00 2025 GMT Subject: CN=7c18a3afd51c1ec9d7c7befc3c0461e9450e691b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:f2:f6:ea:2a:49:ad:2a:6d:f5:10:34:35: 72:f2:3b:d3:bd:c2:12:10:e1:3e:8a:aa:dd:1c:d3: 5b:59:e9:1c:e5:a3:52:4c:16:35:53:dd:8b:5e:c1: fa:aa:6e:d4:5b:70:88:d6:57:61:a1:d5:6c:42:ab: e8:c3:4d:25:c9:29:7e:5f:f1:83:3c:70:f5:a8:f0: 77:90:f1:67:08:4e:b6:f1:af:0a:5f:08:80:55:d2: 42:69:54:f0:6e:3b:c4:61:b2:ae:ec:0d:cf:4f:40: e7:f6:88:7a:c9:0e:c9:42:21:4c:59:cb:f7:1b:97: f9:c4:ee:b3:8b:9d:96:4c:34:b4:31:2e:07:97:7a: d9:d5:21:96:43:c8:7b:2c:9e:8c:31:05:a4:fe:2c: 95:5e:fc:7c:2e:d4:8d:42:95:05:70:bc:81:57:a7: 6c:ee:6d:f8:e3:59:fd:d7:08:4a:eb:0d:2a:aa:21: 45:37:37:79:34:64:2d:04:a7:c0:2d:74:ef:ef:1e: b1:ef:16:52:3c:36:da:a1:87:91:a7:bb:56:69:9b: 57:bf:65:09:45:69:f0:a0:40:b5:bf:9b:b1:9c:b9: 23:3a:c3:ab:4a:43:69:84:43:ea:ee:f0:5d:9a:41: 4c:1e:d8:ea:d8:01:62:ca:3f:e3:d5:52:12:59:b8: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:18:A3:AF:D5:1C:1E:C9:D7:C7:BE:FC:3C:04:61:E9:45:0E:69:1B X509v3 Authority Key Identifier: keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:89:7c:e4:23:dd:30:13:60:34:c4:7b:79:f6:83:ed:3d:76: 39:3b:d5:bf:48:0f:65:98:9c:b8:f6:4c:b1:2f:14:a0:a5:00: c5:a4:2d:09:63:ad:37:95:c8:8f:f4:57:16:21:a4:18:0c:30: 17:0b:f6:b3:3b:64:90:ce:7d:8c:0d:f6:b3:2f:4c:cd:ab:89: 34:89:66:88:98:a0:7f:61:40:7b:6d:fb:cc:9d:cf:52:f4:bf: 39:ff:e3:55:b3:2a:7d:4d:f5:73:bf:b6:4e:44:a2:3c:7c:cc: a1:e8:80:c3:dc:09:08:49:0e:12:a4:93:19:7e:d7:95:a9:a7: 7c:8f:33:cd:ca:0f:b9:26:06:f8:9e:57:95:e6:20:27:47:83: 31:51:1e:b0:00:25:ec:7c:5e:2b:87:fc:b2:cc:2e:5d:fa:e2: 16:c8:1f:50:0a:18:c2:b2:81:eb:66:23:e3:ff:5f:f3:33:68: cc:ae:96:1c:86:82:16:ad:7b:39:8d:fb:7e:20:c8:7f:9d:28: d0:47:19:40:ca:65:a7:f2:32:e0:39:f6:e2:2d:88:4d:39:6a: 5a:4a:29:b6:76:a6:bc:07:4c:64:11:e0:fd:cf:18:d7:c4:8a: ff:4b:37:3b:e0:7f:5e:28:38:9b:98:2f:9d:e3:ed:28:28:24: 86:c2:54:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBeLmamfRp87q4mK/dedyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYzMxMzE5NzZhZWEyN2QxNzFjNmMyNjdhOThkM2YzODJh NjFhMmEwHhcNMjUxMjE0MTgwMTAwWhcNMjUxMjE1MTgwMTAwWjAzMTEwLwYDVQQD Eyg3YzE4YTNhZmQ1MWMxZWM5ZDdjN2JlZmMzYzA0NjFlOTQ1MGU2OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc7y9uoqSa0qbfUQNDVy8jvTvcIS EOE+iqrdHNNbWekc5aNSTBY1U92LXsH6qm7UW3CI1ldhodVsQqvow00lySl+X/GD PHD1qPB3kPFnCE628a8KXwiAVdJCaVTwbjvEYbKu7A3PT0Dn9oh6yQ7JQiFMWcv3 G5f5xO6zi52WTDS0MS4Hl3rZ1SGWQ8h7LJ6MMQWk/iyVXvx8LtSNQpUFcLyBV6ds 7m3441n91whK6w0qqiFFNzd5NGQtBKfALXTv7x6x7xZSPDbaoYeRp7tWaZtXv2UJ RWnwoEC1v5uxnLkjOsOrSkNphEPq7vBdmkFMHtjq2AFiyj/j1VISWbhCBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwYo6/VHB7J18e+/DwEYelFDmkbMB8GA1UdIwQY MBaAFO7DExl2rqJ9FxxsJnqY0/OCphoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEt NGNkM2U3MzIxNmYxLzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEtNGNkM2U3MzIxNmYx LzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYl85CPd MBNgNMR7efaD7T12OTvVv0gPZZicuPZMsS8UoKUAxaQtCWOtN5XIj/RXFiGkGAww Fwv2sztkkM59jA32sy9MzauJNIlmiJigf2FAe237zJ3PUvS/Of/jVbMqfU31c7+2 TkSiPHzMoeiAw9wJCEkOEqSTGX7XlamnfI8zzcoPuSYG+J5XleYgJ0eDMVEesAAl 7HxeK4f8sswuXfriFsgfUAoYwrKB62Yj4/9f8zNozK6WHIaCFq17OY37fiDIf50o 0EcZQMplp/Iy4Dn24i2ITTlqWkoptnamvAdMZBHg/c8Y18SK/0s3O+B/Xig4m5gv nePtKCgkhsJUig== -----END CERTIFICATE-----Generated at Mon Dec 15 02:15:46 2025 by rpki-client