This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json) Hash identifier: YTKCAShdhVAr3SWjhpynvCNS5bKGYI4NzdCvJQU5sjo= Subject key identifier: 16:22:A3:83:9D:77:C7:11:77:8B:32:65:FC:BD:4B:41:BC:E5:DB:C3 Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13 Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213 Certificate serial: 019B5908115B12A4586CBE888FCF71A7F954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft Manifest number: 0E63 Signing time: Fri 26 Dec 2025 05:00:59 +0000 Manifest this update: Fri 26 Dec 2025 05:00:59 +0000 Manifest next update: Sat 27 Dec 2025 05:00:59 +0000 Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=) 2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: 7wA3AnYFcDcWdgVS1MBvmALPjkmC7b1N2nKJQnclRNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:11:5b:12:a4:58:6c:be:88:8f:cf:71:a7:f9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213 Validity Not Before: Dec 26 05:00:59 2025 GMT Not After : Dec 27 05:00:59 2025 GMT Subject: CN=1622a3839d77c711778b3265fcbd4b41bce5dbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:07:fc:24:cf:65:db:08:b4:2e:79:94:b4: 76:cc:03:9d:5d:59:25:af:5c:4f:97:12:56:f3:65: 9b:17:f4:b1:c1:58:a6:63:05:b8:7a:82:3f:72:9c: 01:6b:22:86:9a:0a:87:67:60:b9:16:b2:d8:20:c9: c5:3b:02:e4:0f:f0:8d:c7:49:e6:9d:69:1e:61:7d: be:67:13:90:34:c5:77:d8:35:08:81:fc:9b:9e:19: f7:17:bd:ef:78:b8:7a:21:b3:1a:fa:5f:9e:9d:28: 2b:9d:42:f8:6c:e1:1c:e2:46:a2:e5:61:98:d5:20: 57:53:78:f7:b8:aa:fc:56:0f:3d:85:b4:35:48:3f: 3d:10:20:57:3d:dc:d3:3d:7b:09:2e:5d:1b:8e:52: 3a:8d:39:2b:c3:7f:d3:8e:83:63:22:a0:e8:78:77: 00:f5:79:86:7b:ac:d6:a0:fc:18:6a:93:f6:7c:ab: 13:31:f6:19:2f:2b:45:9c:c2:df:e0:05:64:26:a9: 23:45:47:4b:4a:eb:2f:b3:4b:b7:f6:0c:cc:65:d7: 85:83:48:9c:17:e6:a7:a2:97:15:01:ab:16:3d:0a: c7:9c:36:76:61:bb:ea:b0:57:e6:08:52:ff:45:37: 30:f5:99:12:b7:36:96:9f:71:22:ba:5e:75:60:d1: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:22:A3:83:9D:77:C7:11:77:8B:32:65:FC:BD:4B:41:BC:E5:DB:C3 X509v3 Authority Key Identifier: keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:2d:32:6a:96:94:26:78:99:46:ac:eb:fd:ca:33:51:d9:b2: 12:11:52:b4:1b:e5:09:e2:14:f4:4f:38:78:55:b8:62:c1:23: 61:aa:86:76:9c:b4:3e:11:17:73:70:7f:8d:6b:b0:95:b9:eb: 0b:bc:8b:9d:ac:0c:59:42:9c:ff:7a:09:8a:ad:c7:a0:ac:48: 4a:59:89:58:8f:e0:1a:c2:4a:aa:63:e6:ed:52:f3:b6:8e:da: 59:fb:61:ba:d2:60:e1:26:f4:d8:8e:0d:f6:96:d0:31:a3:57: 44:ef:04:b5:88:42:99:14:db:1a:78:0a:5e:0b:2d:e1:ff:c7: 93:e0:6b:26:d1:f4:cc:ad:39:e1:c2:0f:ec:d0:6d:d8:9f:ab: 25:ec:87:28:c5:b0:29:63:d8:e5:bb:7e:60:8b:e0:70:0f:8f: 11:f3:61:58:27:67:14:6e:6f:d2:3d:1a:07:3a:6e:a0:e7:7b: 98:b6:27:9a:c2:cb:a0:f7:fb:65:35:a9:7b:f5:58:c9:30:f4: f8:1b:90:bd:f5:a0:23:95:ad:ba:5a:47:18:c8:f1:1f:c7:a7: 95:4b:27:3e:18:b1:28:31:1b:78:f0:b1:08:27:6f:5c:b5:70: 89:ef:14:d3:3c:b3:31:bd:83:06:86:c6:96:02:fa:01:d5:77: f5:10:8a:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCBFbEqRYbL6Ij89xp/lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz OTcyMTMwHhcNMjUxMjI2MDUwMDU5WhcNMjUxMjI3MDUwMDU5WjAzMTEwLwYDVQQD EygxNjIyYTM4MzlkNzdjNzExNzc4YjMyNjVmY2JkNGI0MWJjZTVkYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmQH/CTPZdsItC55lLR2zAOdXVkl r1xPlxJW82WbF/SxwVimYwW4eoI/cpwBayKGmgqHZ2C5FrLYIMnFOwLkD/CNx0nm nWkeYX2+ZxOQNMV32DUIgfybnhn3F73veLh6IbMa+l+enSgrnUL4bOEc4kai5WGY 1SBXU3j3uKr8Vg89hbQ1SD89ECBXPdzTPXsJLl0bjlI6jTkrw3/TjoNjIqDoeHcA 9XmGe6zWoPwYapP2fKsTMfYZLytFnMLf4AVkJqkjRUdLSusvs0u39gzMZdeFg0ic F+anopcVAasWPQrHnDZ2YbvqsFfmCFL/RTcw9ZkStzaWn3Eiul51YNHaZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYio4Odd8cRd4syZfy9S0G85dvDMB8GA1UdIwQY MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt NGYzYzMzYzA4ODg0LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0 LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyi0yapaU JniZRqzr/cozUdmyEhFStBvlCeIU9E84eFW4YsEjYaqGdpy0PhEXc3B/jWuwlbnr C7yLnawMWUKc/3oJiq3HoKxISlmJWI/gGsJKqmPm7VLzto7aWfthutJg4Sb02I4N 9pbQMaNXRO8EtYhCmRTbGngKXgst4f/Hk+BrJtH0zK054cIP7NBt2J+rJeyHKMWw KWPY5bt+YIvgcA+PEfNhWCdnFG5v0j0aBzpuoOd7mLYnmsLLoPf7ZTWpe/VYyTD0 +BuQvfWgI5WtulpHGMjxH8enlUsnPhixKDEbePCxCCdvXLVwie8U0zyzMb2DBobG lgL6AdV39RCKrg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:51 2025 by rpki-client