This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json) Hash identifier: sA4u94nW1PcvpFYgMOHsIiX9LfZcxMu9I+NUr1GqQOs= Subject key identifier: 4B:64:11:0C:88:32:45:DC:26:11:AA:0A:CE:E4:E6:46:93:61:C8:3D Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a Certificate serial: 019B53738FC02F40085D4FF40BA8BEC56FCE Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft Manifest number: 09D2 Signing time: Thu 25 Dec 2025 03:00:29 +0000 Manifest this update: Thu 25 Dec 2025 03:00:29 +0000 Manifest next update: Fri 26 Dec 2025 03:00:29 +0000 Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: ziGPSXwGQRr0kW6ianm57h1kv8EUBMHCK3Jhwer8R+c=) 2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: Atlybf5q/+TdSggNjOtuEpJIxlAyjY1QRXNkDTriBOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:73:8f:c0:2f:40:08:5d:4f:f4:0b:a8:be:c5:6f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a Validity Not Before: Dec 25 03:00:29 2025 GMT Not After : Dec 26 03:00:29 2025 GMT Subject: CN=4b64110c883245dc2611aa0acee4e6469361c83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:d7:e0:7e:79:ab:85:45:12:a9:5a:fd:1f: 62:91:64:d7:2e:b9:e3:b2:4d:82:fc:59:1e:06:66: b2:4e:e0:38:be:c3:62:4e:48:a6:b0:77:34:fc:bb: 75:e5:32:07:57:78:d9:76:28:fc:b8:96:ef:d6:01: 55:04:58:d2:58:79:43:56:a0:96:5c:69:a2:90:66: 0b:91:14:a5:64:67:f6:02:be:64:cd:95:31:c6:6a: 93:38:fe:25:e6:71:e2:ad:3d:4c:6e:75:b3:e8:40: ab:98:4e:8d:2d:ed:89:62:10:11:27:e2:3a:7e:1e: bd:8a:30:d7:d5:6e:f0:b3:e4:4a:e3:87:14:51:78: 2a:18:99:80:9b:e7:57:2a:63:fb:bf:c0:83:5c:ff: b5:95:53:bd:3d:d5:29:71:fd:5b:a2:cd:92:ae:90: 2a:26:4f:40:fb:d7:1a:0e:5b:3f:16:a2:f1:7c:56: 23:85:f4:82:20:e5:23:4e:b6:d8:90:6d:d2:60:66: 10:8b:20:1c:12:2b:1c:56:09:78:b3:91:d1:a6:90: f8:92:e4:bf:04:9b:f9:f7:28:b3:64:1a:22:f2:c8: 68:73:2b:8d:e3:dc:bc:2f:64:97:83:ac:18:1f:78: e8:13:ba:00:7f:fa:53:63:ab:15:38:ee:af:7a:01: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:64:11:0C:88:32:45:DC:26:11:AA:0A:CE:E4:E6:46:93:61:C8:3D X509v3 Authority Key Identifier: keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:83:18:cd:3f:f8:4b:34:87:fb:d5:dd:b7:e2:3a:55:ff:d2: 2c:4d:a6:58:35:79:a8:f1:d2:1d:a1:5b:34:63:1f:7c:15:5a: 9b:0e:e2:fe:ff:04:dc:d6:ab:7d:5d:fc:4e:4c:2a:72:d6:80: 95:cd:53:8f:e6:45:6f:67:39:6c:18:75:cb:e1:ef:bc:66:7c: e9:c8:10:b5:e8:95:52:eb:1f:e7:cb:f9:86:e3:9b:fc:f0:71: 96:12:59:60:00:c6:dd:15:d7:32:27:13:d9:c9:b3:a7:8c:07: f4:f9:40:f1:05:73:4f:1c:db:a9:86:6d:6a:a4:d9:13:7c:04: 7d:ae:0a:ec:81:a9:e3:d4:56:8b:d4:8a:a7:aa:de:ca:0f:3b: be:2f:98:32:6d:00:14:17:1c:80:29:42:90:09:e1:80:cd:a8: dc:55:ab:fb:b4:4b:14:84:88:06:ea:99:e9:51:74:82:94:12: 07:60:39:a1:e0:7b:a4:18:a1:b8:62:29:c2:5b:3b:1e:8c:8d: e9:21:a5:ec:0a:42:c8:e2:a4:7a:23:b5:11:d0:37:78:af:ad: df:4e:73:8c:c6:a7:ad:35:50:c3:6a:78:9b:41:b0:4a:aa:ea: 7b:95:46:9e:c6:0e:fb:df:2a:48:3b:59:ef:85:6f:80:87:76: 9d:32:d0:7e -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgISAZtTc4/AL0AIXU/0C6i+xW/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi MTczMWEwHhcNMjUxMjI1MDMwMDI5WhcNMjUxMjI2MDMwMDI5WjAzMTEwLwYDVQQD Eyg0YjY0MTEwYzg4MzI0NWRjMjYxMWFhMGFjZWU0ZTY0NjkzNjFjODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHTX4H55q4VFEqla/R9ikWTXLrnj sk2C/FkeBmayTuA4vsNiTkimsHc0/Lt15TIHV3jZdij8uJbv1gFVBFjSWHlDVqCW XGmikGYLkRSlZGf2Ar5kzZUxxmqTOP4l5nHirT1MbnWz6ECrmE6NLe2JYhARJ+I6 fh69ijDX1W7ws+RK44cUUXgqGJmAm+dXKmP7v8CDXP+1lVO9PdUpcf1bos2SrpAq Jk9A+9caDls/FqLxfFYjhfSCIOUjTrbYkG3SYGYQiyAcEiscVgl4s5HRppD4kuS/ BJv59yizZBoi8shocyuN49y8L2SXg6wYH3joE7oAf/pTY6sVOO6vegETgQIDAQAB o4IBzDCCAcgwHQYDVR0OBBYEFEtkEQyIMkXcJhGqCs7k5kaTYcg9MB8GA1UdIwQY MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4 by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI6DGM0/+Es0h/vV3bfiOlX/0ixNplg1eajx0h2hWzRjH3wVWpsO4v7/BNzW q31d/E5MKnLWgJXNU4/mRW9nOWwYdcvh77xmfOnIELXolVLrH+fL+Ybjm/zwcZYS WWAAxt0V1zInE9nJs6eMB/T5QPEFc08c26mGbWqk2RN8BH2uCuyBqePUVovUiqeq 3soPO74vmDJtABQXHIApQpAJ4YDNqNxVq/u0SxSEiAbqmelRdIKUEgdgOaHge6QY obhiKcJbOx6MjekhpewKQsjipHojtRHQN3ivrd9Oc4zGp601UMNqeJtBsEqq6nuV Rp7GDvvfKkg7We+Fb4CHdp0y0H4= -----END CERTIFICATE-----Generated at Thu Dec 25 09:49:09 2025 by rpki-client