This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json) Hash identifier: UUzknzeTiGYTVvGUeeVs4jQBZ0jJOiBhzgvQA+GKONE= Subject key identifier: 2E:4B:21:36:82:7D:6E:3E:1C:68:EF:47:24:FA:45:1F:9D:A6:BE:9D Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Certificate serial: 019B1C17A912DDEB7C4E17D8668AC10A0C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft Manifest number: 040A Signing time: Sun 14 Dec 2025 09:01:11 +0000 Manifest this update: Sun 14 Dec 2025 09:01:11 +0000 Manifest next update: Mon 15 Dec 2025 09:01:11 +0000 Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: Gt8zccmOP3e9MPq8825BkO6/A3f0qMxrJYmZR8WTLas=) 2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:a9:12:dd:eb:7c:4e:17:d8:66:8a:c1:0a:0c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Validity Not Before: Dec 14 09:01:11 2025 GMT Not After : Dec 15 09:01:11 2025 GMT Subject: CN=2e4b2136827d6e3e1c68ef4724fa451f9da6be9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:00:14:4b:03:fc:e9:d3:96:85:69:35:cb: e0:0a:28:74:15:82:fd:09:81:96:7f:e8:1f:09:fe: 4e:62:78:13:27:21:22:19:cb:06:b6:f3:19:cf:7c: 12:8d:15:27:de:89:c1:ff:b2:43:b8:b9:1e:8b:00: 84:93:11:f1:c5:53:34:46:77:b3:27:6d:d1:eb:24: 5a:aa:f5:ff:b7:4d:e3:d8:f6:f5:fa:cc:3c:e4:4d: d2:0e:a2:7e:f2:14:e9:1c:ba:2d:9e:c6:d5:26:ff: d8:7f:17:4b:bc:6d:0f:df:84:73:7b:7f:d0:01:a3: 5a:6a:34:0f:7e:ac:0e:ee:7e:86:71:27:5a:9e:13: 95:a9:bb:b0:e5:e1:f9:e6:a4:53:a0:f1:ff:39:e0: 5e:16:3f:ca:90:1e:22:ed:d6:7f:6b:bd:02:00:7b: fc:2a:43:f7:d8:56:ba:91:b6:93:a0:73:f4:16:0a: e8:54:35:2b:3a:a1:99:86:42:1a:c6:88:f0:f9:0a: f8:3a:e7:23:ad:5b:a5:94:15:aa:01:98:18:69:fd: e0:9d:ea:cb:d7:f6:53:a9:dc:29:b0:6b:d3:3e:8d: e4:ed:0c:2d:0a:c9:18:e3:96:65:ae:86:31:7e:89: a3:7b:4f:da:dd:9a:06:d8:c4:eb:95:ae:cf:5f:f0: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:21:36:82:7D:6E:3E:1C:68:EF:47:24:FA:45:1F:9D:A6:BE:9D X509v3 Authority Key Identifier: keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:07:c3:60:fa:df:be:4b:a1:2d:49:b3:32:79:19:be:3a:c0: a9:6d:5f:00:11:64:56:3f:10:1b:91:d8:4d:d5:27:00:ae:c3: f5:81:0f:4d:93:58:60:29:90:a5:a8:73:f2:1d:61:c1:02:b3: f7:c7:39:b9:92:a1:5c:f1:80:bd:3b:b9:41:ce:4a:e3:00:0d: 69:3e:55:87:61:bf:ed:cf:77:20:4e:9b:c8:0f:67:1f:e4:6f: 17:e5:5b:49:da:5b:22:f9:cf:1d:21:cd:f3:5e:98:e1:4b:50: c0:a8:04:7b:57:2f:5b:74:3e:d9:58:7a:1d:31:62:b1:d5:fc: 92:85:59:e4:72:82:96:84:f5:de:82:98:84:a5:e3:76:77:a1: 55:78:c0:26:24:6f:ba:b3:3b:0c:ab:71:34:78:b8:66:f9:7f: eb:d6:0a:7a:0d:3c:88:c9:fb:e3:13:c9:ce:e6:76:05:67:99: 78:d8:75:a9:02:df:2e:8b:49:6e:cc:6b:19:10:e6:a9:87:8d: 9c:74:20:b1:81:20:62:b8:20:a8:30:4a:83:36:a5:eb:ac:f2: be:04:2c:8f:8a:5a:e6:b2:3a:4d:25:8e:e2:c0:cc:74:1d:0e: fa:90:f4:0e:68:3e:08:f9:c0:de:2a:7a:86:b3:1d:4a:9f:35: 71:58:91:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF6kS3et8ThfYZorBCgw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk NTQyMTIwHhcNMjUxMjE0MDkwMTExWhcNMjUxMjE1MDkwMTExWjAzMTEwLwYDVQQD EygyZTRiMjEzNjgyN2Q2ZTNlMWM2OGVmNDcyNGZhNDUxZjlkYTZiZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv0AFEsD/OnTloVpNcvgCih0FYL9 CYGWf+gfCf5OYngTJyEiGcsGtvMZz3wSjRUn3onB/7JDuLkeiwCEkxHxxVM0Rnez J23R6yRaqvX/t03j2Pb1+sw85E3SDqJ+8hTpHLotnsbVJv/YfxdLvG0P34Rze3/Q AaNaajQPfqwO7n6GcSdanhOVqbuw5eH55qRToPH/OeBeFj/KkB4i7dZ/a70CAHv8 KkP32Fa6kbaToHP0FgroVDUrOqGZhkIaxojw+Qr4OucjrVullBWqAZgYaf3gnerL 1/ZTqdwpsGvTPo3k7QwtCskY45ZlroYxfomje0/a3ZoG2MTrla7PX/Dj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5LITaCfW4+HGjvRyT6RR+dpr6dMB8GA1UdIwQY MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwfDYPrf vkuhLUmzMnkZvjrAqW1fABFkVj8QG5HYTdUnAK7D9YEPTZNYYCmQpahz8h1hwQKz 98c5uZKhXPGAvTu5Qc5K4wANaT5Vh2G/7c93IE6byA9nH+RvF+VbSdpbIvnPHSHN 816Y4UtQwKgEe1cvW3Q+2Vh6HTFisdX8koVZ5HKCloT13oKYhKXjdnehVXjAJiRv urM7DKtxNHi4Zvl/69YKeg08iMn74xPJzuZ2BWeZeNh1qQLfLotJbsxrGRDmqYeN nHQgsYEgYrggqDBKgzal66zyvgQsj4pa5rI6TSWO4sDMdB0O+pD0Dmg+CPnA3ip6 hrMdSp81cViRsg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:30:10 2025 by rpki-client