This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json) Hash identifier: dLGmvOJrS/QsZrFPMIV73+Mf+f1EZ6o+IbiN7F0O/Oo= Subject key identifier: F9:C4:8B:06:DD:B4:D6:1F:07:E0:92:6A:13:A9:57:B1:76:11:C8:47 Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Certificate serial: 019B2BC225AA482D08D23A8385CB8C37D680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 10:01:42 +0000 Manifest this update: Wed 17 Dec 2025 10:01:42 +0000 Manifest next update: Thu 18 Dec 2025 10:01:42 +0000 Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: LDuOoUXaDo+R2V2BGQFINPHQSzong2BveaRwtMgoO1A=) 2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:25:aa:48:2d:08:d2:3a:83:85:cb:8c:37:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Validity Not Before: Dec 17 10:01:42 2025 GMT Not After : Dec 18 10:01:42 2025 GMT Subject: CN=f9c48b06ddb4d61f07e0926a13a957b17611c847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:14:88:64:00:a6:5d:d4:43:cc:43:d5:5f: 80:eb:80:a6:9a:a2:d7:99:7d:a3:2c:02:56:d2:79: a3:99:95:c4:a3:85:23:94:01:d9:c5:62:ff:8d:a8: b7:aa:85:22:9b:d9:f5:7d:d4:7e:9c:d1:f7:d0:26: 9f:aa:c5:76:5a:4d:b2:7c:be:d6:27:11:54:57:ae: 1e:b6:52:1e:ce:25:5f:f5:2f:87:02:eb:ab:dd:fa: 49:ca:73:93:a2:57:99:ee:11:91:0a:5c:48:80:72: d5:3f:a0:3c:f6:7f:39:8c:10:76:f3:f7:80:10:a9: e2:19:a4:3e:20:35:98:8e:bb:97:7a:04:a9:c2:cf: c2:70:80:1c:6f:91:f0:ca:26:2b:32:30:04:73:62: 05:42:84:b1:bf:1b:89:5c:a3:5d:fe:18:32:5c:f6: d9:0d:a8:57:82:65:45:c3:41:bb:3e:b8:ab:cc:cf: db:f0:ad:c7:a3:36:6b:48:8e:b1:1d:2b:5d:9d:82: 5b:52:a9:5b:18:f0:d0:15:16:47:71:19:7f:d7:e2: 70:88:ff:88:bf:3f:ff:1d:fc:24:79:01:96:22:a3: 11:53:2e:d5:33:17:fb:db:df:ed:97:05:6b:5c:14: d9:cd:d5:f4:b9:f6:4c:fa:2a:eb:9a:36:a2:e5:1f: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C4:8B:06:DD:B4:D6:1F:07:E0:92:6A:13:A9:57:B1:76:11:C8:47 X509v3 Authority Key Identifier: keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:94:2b:b3:41:3e:ac:dc:eb:cf:c4:b1:2f:85:63:f7:3a:de: 25:54:29:58:cc:a1:c7:b4:17:42:fd:c4:02:91:a9:10:5d:a2: 10:6f:80:10:35:fe:b8:65:3e:61:56:97:34:4d:d8:38:57:fb: 90:0d:93:68:91:bc:96:ca:68:3d:6e:5c:d4:e8:de:42:48:eb: 46:bd:bd:f9:f9:f2:9e:39:39:ac:8b:c5:ba:00:a7:85:32:52: a1:3e:b8:e5:64:7b:84:83:1f:47:e6:97:1f:37:74:1e:9a:d8: 06:ac:be:28:b0:72:0a:1b:01:d1:52:1f:94:85:1a:56:79:49: af:4e:92:35:57:1e:bb:34:73:24:cb:a7:6a:67:4b:68:14:9e: b7:f7:9c:e4:14:c9:75:94:d4:40:e3:54:70:af:90:96:9e:d6: 93:c8:60:ed:9e:f4:5a:5f:9c:06:7f:37:90:6e:8d:45:51:a7: fe:33:f3:41:4d:d4:aa:fb:d1:ad:56:4d:c7:aa:01:c2:9d:41: c9:17:1f:78:1a:e4:52:0d:ea:eb:8e:75:fa:58:2c:02:82:95: a3:99:bc:00:b3:8d:4d:5a:b4:4e:4a:f7:50:2e:8a:52:ac:1b: 81:b5:35:46:14:15:6d:49:eb:57:3f:99:79:50:1a:66:e4:31: 44:f4:cc:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwiWqSC0I0jqDhcuMN9aAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli MjA4ODcwHhcNMjUxMjE3MTAwMTQyWhcNMjUxMjE4MTAwMTQyWjAzMTEwLwYDVQQD EyhmOWM0OGIwNmRkYjRkNjFmMDdlMDkyNmExM2E5NTdiMTc2MTFjODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3IUiGQApl3UQ8xD1V+A64CmmqLX mX2jLAJW0nmjmZXEo4UjlAHZxWL/jai3qoUim9n1fdR+nNH30CafqsV2Wk2yfL7W JxFUV64etlIeziVf9S+HAuur3fpJynOToleZ7hGRClxIgHLVP6A89n85jBB28/eA EKniGaQ+IDWYjruXegSpws/CcIAcb5HwyiYrMjAEc2IFQoSxvxuJXKNd/hgyXPbZ DahXgmVFw0G7PrirzM/b8K3HozZrSI6xHStdnYJbUqlbGPDQFRZHcRl/1+JwiP+I vz//HfwkeQGWIqMRUy7VMxf729/tlwVrXBTZzdX0ufZM+irrmjai5R8HyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnEiwbdtNYfB+CSahOpV7F2EchHMB8GA1UdIwQY MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt ZjUzYWQ0NmNhZjNjLzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpQrs0E+ rNzrz8SxL4Vj9zreJVQpWMyhx7QXQv3EApGpEF2iEG+AEDX+uGU+YVaXNE3YOFf7 kA2TaJG8lspoPW5c1OjeQkjrRr29+fnynjk5rIvFugCnhTJSoT645WR7hIMfR+aX Hzd0HprYBqy+KLByChsB0VIflIUaVnlJr06SNVceuzRzJMunamdLaBSet/ec5BTJ dZTUQONUcK+Qlp7Wk8hg7Z70Wl+cBn83kG6NRVGn/jPzQU3UqvvRrVZNx6oBwp1B yRcfeBrkUg3q6451+lgsAoKVo5m8ALONTVq0Tkr3UC6KUqwbgbU1RhQVbUnrVz+Z eVAaZuQxRPTMdg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:10 2025 by rpki-client