This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json) Hash identifier: kAkwO4cvLZ0ke3Sbed+1jV1svivB6eLRNCmTkSp2/Iw= Subject key identifier: 32:98:26:CB:15:73:D5:28:F7:FA:5A:CA:AF:18:E4:C2:10:86:DB:E8 Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Certificate serial: 019B3569662DD75C2B4C13676F37942AD7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft Manifest number: 043C Signing time: Fri 19 Dec 2025 07:00:58 +0000 Manifest this update: Fri 19 Dec 2025 07:00:58 +0000 Manifest next update: Sat 20 Dec 2025 07:00:58 +0000 Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: YOSe/pzYT8rsZMhggGIvW7U8z5D437m3yBg/n/FKOUc=) 2: C6x_6w-E774Ctv2tM-pwvlDis4g.roa (hash: INLpD3Xn2Y08yhQMCV4sfvThKHmVJ+/cWpnVIk0AjIY=) 3: Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa (hash: wx/H0ps5Y+S8LfFB+UMWHcMD/ey9o03wwXXZ26Kx9zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:66:2d:d7:5c:2b:4c:13:67:6f:37:94:2a:d7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Validity Not Before: Dec 19 07:00:58 2025 GMT Not After : Dec 20 07:00:58 2025 GMT Subject: CN=329826cb1573d528f7fa5acaaf18e4c21086dbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:1e:98:ee:de:11:8d:98:93:3d:80:ef:a6: e9:fb:77:cd:65:ee:c6:93:ec:bf:cc:3b:05:96:e7: 7e:d8:6d:5f:bb:b9:e3:44:8e:c2:f3:d4:4c:1d:e0: 16:9c:91:45:0b:10:95:09:db:8b:29:3f:79:b0:5b: 57:f9:96:2b:24:8e:48:e8:5e:07:a5:a2:f3:67:a9: 76:f6:cd:6b:f4:22:cb:88:b0:c9:03:2b:c1:db:5a: 9e:b5:89:d2:5b:fe:a2:c4:88:f2:98:7c:fc:37:8d: 49:0b:f7:96:3c:ac:8a:62:03:0d:71:e9:4a:00:75: e2:f5:15:30:4d:1f:27:02:da:4a:03:58:55:3f:b8: 23:67:5e:28:08:b2:82:e2:13:f4:09:1f:bd:d1:6d: a2:19:55:99:e4:28:4a:66:25:19:bf:c7:a9:e9:1a: 82:08:f3:69:47:56:26:b4:fe:b6:dd:52:70:1c:bc: 04:ef:b6:af:50:03:3d:50:74:70:9f:bd:d9:e3:98: f1:4e:14:f9:3d:d1:f7:9e:1a:8e:4d:d8:b9:0a:8f: b5:ee:4b:22:4d:cc:16:87:b4:f2:cb:75:1d:65:72: 44:06:7e:e5:f9:06:be:31:b0:a2:34:9b:28:ac:b6: 3a:fa:8a:84:2f:7e:3f:82:bf:cf:7a:74:2b:7a:85: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:26:CB:15:73:D5:28:F7:FA:5A:CA:AF:18:E4:C2:10:86:DB:E8 X509v3 Authority Key Identifier: keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c1:5a:d4:0b:cb:9b:ce:f3:64:52:17:6b:c0:d0:2e:7f:93: df:7a:97:11:3e:42:65:15:c2:ae:22:21:3f:0b:7c:78:c8:ed: 49:e3:e2:53:a0:a3:4e:14:3e:b0:43:5e:63:0f:66:5c:e4:86: 52:7f:fc:b2:d6:9a:6a:c0:92:48:98:5d:94:50:5b:3d:49:cc: 03:4c:f1:8c:b2:1a:a6:e2:f8:35:20:46:7d:9c:d5:60:48:29: a0:3f:7f:52:ba:18:b5:2a:f3:e2:9b:d3:64:99:c0:da:09:63: 54:51:5e:7b:67:c5:9d:63:76:00:a7:40:20:ec:74:c4:0b:03: d3:f4:eb:ca:69:b2:d8:d7:7b:32:a0:66:24:9d:4c:96:5d:60: 5e:ef:04:db:f6:fe:10:d3:2e:af:2e:00:cd:45:03:80:73:6b: 39:a7:a7:e6:72:a8:c1:7f:b8:1a:7c:75:ef:2a:58:c3:75:c6: b7:b6:5a:a7:78:b7:09:a5:86:58:c4:4f:78:ca:e0:3c:db:76: 86:73:06:8d:1e:6b:31:ac:9d:27:40:86:5a:1c:51:bf:80:c1: b3:91:b8:3e:68:55:74:ff:f7:66:a0:d5:67:8b:cd:de:cd:65: fe:57:2a:fe:7b:44:1b:81:44:66:3e:88:2e:44:26:d0:b1:f9: f7:33:82:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aWYt11wrTBNnbzeUKteoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZTY0OThkMTc0YWRmNWM4OWEzNjVjMmQxZTQ3N2RjZjI0 Zjk4MmUwHhcNMjUxMjE5MDcwMDU4WhcNMjUxMjIwMDcwMDU4WjAzMTEwLwYDVQQD EygzMjk4MjZjYjE1NzNkNTI4ZjdmYTVhY2FhZjE4ZTRjMjEwODZkYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRAemO7eEY2Ykz2A76bp+3fNZe7G k+y/zDsFlud+2G1fu7njRI7C89RMHeAWnJFFCxCVCduLKT95sFtX+ZYrJI5I6F4H paLzZ6l29s1r9CLLiLDJAyvB21qetYnSW/6ixIjymHz8N41JC/eWPKyKYgMNcelK AHXi9RUwTR8nAtpKA1hVP7gjZ14oCLKC4hP0CR+90W2iGVWZ5ChKZiUZv8ep6RqC CPNpR1YmtP623VJwHLwE77avUAM9UHRwn73Z45jxThT5PdH3nhqOTdi5Co+17ksi TcwWh7Tyy3UdZXJEBn7l+Qa+MbCiNJsorLY6+oqEL34/gr/PenQreoVgCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKYJssVc9Uo9/payq8Y5MIQhtvoMB8GA1UdIwQY MBaAFOzmSY0XSt9ciaNlwtHkd9zyT5guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTIt OWJlY2MxMzZjYzcxLzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTItOWJlY2MxMzZjYzcx LzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMFa1AvL m87zZFIXa8DQLn+T33qXET5CZRXCriIhPwt8eMjtSePiU6CjThQ+sENeYw9mXOSG Un/8staaasCSSJhdlFBbPUnMA0zxjLIapuL4NSBGfZzVYEgpoD9/UroYtSrz4pvT ZJnA2gljVFFee2fFnWN2AKdAIOx0xAsD0/Trymmy2Nd7MqBmJJ1Mll1gXu8E2/b+ ENMury4AzUUDgHNrOaen5nKowX+4Gnx17ypYw3XGt7Zap3i3CaWGWMRPeMrgPNt2 hnMGjR5rMaydJ0CGWhxRv4DBs5G4PmhVdP/3ZqDVZ4vN3s1l/lcq/ntEG4FEZj6I LkQm0LH59zOCAg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:21:54 2025 by rpki-client