This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json) Hash identifier: GJOtmWCmMJvAsfvatuJSeOZfiJdz0f2AT3YM+DO4h+g= Subject key identifier: 19:3C:F9:C2:AA:EF:8D:6B:BB:B4:05:56:67:B4:5D:14:64:C9:81:F6 Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Certificate serial: 019B4926E814463381043ECBDF593B37C2EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 03:00:45 +0000 Manifest this update: Tue 23 Dec 2025 03:00:45 +0000 Manifest next update: Wed 24 Dec 2025 03:00:45 +0000 Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: E287EVybXvU6Y9BzFXXEwG/9mwbboMEQMk4lR1fZgcg=) 2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:e8:14:46:33:81:04:3e:cb:df:59:3b:37:c2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Validity Not Before: Dec 23 03:00:45 2025 GMT Not After : Dec 24 03:00:45 2025 GMT Subject: CN=193cf9c2aaef8d6bbbb4055667b45d1464c981f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:f1:55:66:af:a3:ec:03:91:e6:cf:b4:fb: 8f:2c:4e:10:f7:de:26:97:fd:9c:3e:a0:22:4b:27: e8:42:47:9e:c6:79:71:c5:d3:44:64:94:b3:4a:12: 71:38:8e:dc:33:11:37:b7:03:b5:94:53:fa:dc:9e: bb:d7:64:db:cc:5b:2f:e7:5e:3d:77:37:2b:93:9e: 6d:25:9d:0f:98:fc:b8:71:09:24:e1:67:e1:d2:c2: 54:60:98:19:e4:d7:20:3f:ec:dd:d5:a9:46:7a:03: 2a:fb:fb:85:86:e8:6d:25:d3:12:44:45:d2:f0:f1: 06:bc:43:7c:ac:52:5c:42:dd:30:41:8e:47:e2:7e: 80:dd:65:36:06:a1:9b:da:19:20:6c:34:5e:bb:aa: bb:82:d6:90:80:63:22:28:02:34:89:ed:c5:6d:c4: 3c:57:a7:5c:d0:7e:9c:ef:ca:ac:11:dd:16:b3:69: 30:0d:55:af:68:90:28:16:aa:4e:07:71:54:4a:61: de:4f:6c:48:5a:37:6b:7d:58:66:3e:01:bc:48:53: 97:89:0e:d0:cb:60:2e:04:3a:78:fd:e7:d7:73:24: c2:5b:b6:af:8a:bd:a2:cc:b8:61:5f:22:79:62:18: c2:5b:ca:f6:03:80:b4:4a:ea:c0:7d:a9:87:dc:99: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:F9:C2:AA:EF:8D:6B:BB:B4:05:56:67:B4:5D:14:64:C9:81:F6 X509v3 Authority Key Identifier: keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f3:78:e4:12:a0:40:22:d2:6e:30:3f:1e:00:fc:1e:34:68: 06:b4:a1:c9:21:79:5c:55:b0:8b:cf:51:aa:26:9a:ac:27:be: 03:78:f0:9d:07:d2:cf:96:38:8c:14:a4:2b:d9:85:81:ba:15: 8f:f0:5c:ff:57:1d:cc:a7:f0:a8:dc:43:ec:f9:cc:50:96:d8: f2:78:7a:f8:85:6a:f3:b0:34:44:3d:84:f2:3e:a6:0c:86:65: 20:7a:30:db:be:c2:78:a2:48:c5:62:ac:98:c4:4b:f8:eb:3f: f3:3c:44:2b:60:8d:17:e1:4a:db:fd:4f:01:48:d4:4d:42:db: 0a:ca:77:d5:e5:b4:57:4f:d3:3c:02:86:ae:57:a5:7d:a6:26: 47:42:16:4b:1f:19:f5:23:c7:6d:e7:e2:1c:8c:ec:2d:94:e2: 87:89:a9:4e:55:53:f2:83:02:9b:b9:85:f2:81:17:da:0d:b0: 57:6a:f0:a6:e5:5d:0c:7a:15:c5:0c:ea:a8:fe:5f:96:2e:e0: f9:e8:25:ca:f8:f6:2a:18:d7:b3:6f:c0:25:74:a7:8e:30:a0: d8:e1:6d:af:b5:0d:be:fb:a9:3d:70:fd:cd:aa:8f:c4:6c:e8: 7e:60:26:9c:80:af:e8:14:8e:79:89:9a:7d:1a:9c:40:4e:2c: c2:ff:2a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJugURjOBBD7L31k7N8LrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0 NTVhNTYwHhcNMjUxMjIzMDMwMDQ1WhcNMjUxMjI0MDMwMDQ1WjAzMTEwLwYDVQQD EygxOTNjZjljMmFhZWY4ZDZiYmJiNDA1NTY2N2I0NWQxNDY0Yzk4MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DbxVWavo+wDkebPtPuPLE4Q994m l/2cPqAiSyfoQkeexnlxxdNEZJSzShJxOI7cMxE3twO1lFP63J6712TbzFsv5149 dzcrk55tJZ0PmPy4cQkk4Wfh0sJUYJgZ5NcgP+zd1alGegMq+/uFhuhtJdMSREXS 8PEGvEN8rFJcQt0wQY5H4n6A3WU2BqGb2hkgbDReu6q7gtaQgGMiKAI0ie3FbcQ8 V6dc0H6c78qsEd0Ws2kwDVWvaJAoFqpOB3FUSmHeT2xIWjdrfVhmPgG8SFOXiQ7Q y2AuBDp4/efXcyTCW7avir2izLhhXyJ5YhjCW8r2A4C0SurAfamH3JkWywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk8+cKq741ru7QFVme0XRRkyYH2MB8GA1UdIwQY MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1 LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/N45BKg QCLSbjA/HgD8HjRoBrShySF5XFWwi89RqiaarCe+A3jwnQfSz5Y4jBSkK9mFgboV j/Bc/1cdzKfwqNxD7PnMUJbY8nh6+IVq87A0RD2E8j6mDIZlIHow277CeKJIxWKs mMRL+Os/8zxEK2CNF+FK2/1PAUjUTULbCsp31eW0V0/TPAKGrlelfaYmR0IWSx8Z 9SPHbefiHIzsLZTih4mpTlVT8oMCm7mF8oEX2g2wV2rwpuVdDHoVxQzqqP5fli7g +eglyvj2KhjXs2/AJXSnjjCg2OFtr7UNvvupPXD9zaqPxGzofmAmnICv6BSOeYma fRqcQE4swv8qJg== -----END CERTIFICATE-----Generated at Tue Dec 23 13:09:30 2025 by rpki-client