This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json) Hash identifier: F1Aep+wrSsr7V17PIQiWLmTk9SQ4whz2Nrb8l6KgqOU= Subject key identifier: 82:E9:C9:40:C1:F0:BB:BE:30:1E:24:72:CF:BB:EE:EA:CB:D4:8F:26 Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2 Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2 Certificate serial: 019AF50A63DC05144809475D0C0F8060DCEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 19:01:30 +0000 Manifest this update: Sat 06 Dec 2025 19:01:30 +0000 Manifest next update: Sun 07 Dec 2025 19:01:30 +0000 Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: w8+vEwrlHSCQkwrwMItXdWI+MI7JNNV5TRVEiH/euCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:63:dc:05:14:48:09:47:5d:0c:0f:80:60:dc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2 Validity Not Before: Dec 6 19:01:30 2025 GMT Not After : Dec 7 19:01:30 2025 GMT Subject: CN=82e9c940c1f0bbbe301e2472cfbbeeeacbd48f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:1c:f4:d6:48:d5:cf:97:ad:24:03:e6:93: 01:1d:4b:82:fa:54:92:91:80:41:bc:e6:71:66:c3: 88:2a:a7:e0:ad:93:64:87:a9:f4:62:10:7d:c7:35: 95:80:50:55:06:a9:2c:da:f3:42:4a:49:f4:d6:13: 9b:3e:51:f1:23:3d:d2:41:89:c9:d1:fb:89:66:86: fe:f7:47:df:d3:df:ee:63:29:9b:e3:5a:b3:69:ad: 90:cc:8a:82:43:11:67:21:34:f9:1f:3b:23:a9:f0: 29:06:35:35:08:1e:24:f1:b2:99:03:24:b4:3d:04: 9b:0c:a8:e7:1c:a2:4e:da:34:7a:84:31:cc:62:78: 3c:ff:c9:0f:bd:c5:5c:82:24:ec:90:37:68:0f:42: af:3a:26:4e:f6:8e:3d:61:1a:b8:bb:f9:2a:3e:d7: c1:de:be:86:b5:26:07:0f:c8:12:a2:77:72:b8:ab: c4:50:ce:17:d9:74:39:0e:e8:ac:d3:7c:ec:b6:8c: b8:56:d0:ef:98:3b:a9:c1:19:a8:22:6a:04:f7:ec: b2:aa:08:e5:10:c6:35:5a:9e:8b:bc:f4:38:8a:75: 96:f0:f7:2f:dc:cc:ba:23:0d:8d:bc:e4:cb:a6:f6: 41:0b:74:26:98:71:52:63:fe:92:2c:b7:37:2a:06: d3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:C9:40:C1:F0:BB:BE:30:1E:24:72:CF:BB:EE:EA:CB:D4:8F:26 X509v3 Authority Key Identifier: keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:31:55:d0:89:b1:73:85:a4:1d:c3:1b:17:8a:76:fc:00:25: 42:0d:94:6b:0e:a1:17:62:36:44:20:66:ad:b3:d5:c4:24:c7: ec:d3:0f:71:32:78:d1:d6:37:e9:71:52:8d:6b:c7:3e:fc:24: f9:de:36:d8:bc:10:39:30:9c:72:e1:30:82:11:71:d5:28:03: d4:89:2f:5f:46:8f:7a:43:44:26:cb:f8:31:3a:71:bf:17:5d: 37:42:f5:cb:26:ea:db:96:aa:cf:d9:a0:85:02:36:47:10:45: f8:6a:48:f3:d9:0f:29:f0:73:9b:e5:15:28:b2:99:d8:35:8e: ce:34:a8:fe:91:47:16:fa:f0:26:ec:46:29:be:80:ac:ca:b9: 8f:5c:4a:98:6b:48:cc:1a:fb:cf:e8:2e:33:c9:7b:b0:ee:75: 32:7e:ec:8f:6b:b7:7f:2e:89:98:ae:40:54:bc:98:2f:00:0d: e1:f2:7c:c2:02:ba:90:57:6f:89:2e:cc:93:50:7c:9f:f1:b3: 7a:04:c5:da:83:45:af:c3:6e:69:ea:3f:83:e7:a3:6d:00:d2: dc:ca:e5:34:34:3f:a7:de:2f:31:2c:cd:ac:7a:32:d8:89:29: 0f:81:5d:a0:44:5b:c6:96:c7:03:ed:42:4b:5b:7e:64:d7:3c: 92:f6:7f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmPcBRRICUddDA+AYNzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGQyMmExZTBjNWJiMDAyODBmMTkzM2VlZWNmODFjZDhh MGU2YjIwHhcNMjUxMjA2MTkwMTMwWhcNMjUxMjA3MTkwMTMwWjAzMTEwLwYDVQQD Eyg4MmU5Yzk0MGMxZjBiYmJlMzAxZTI0NzJjZmJiZWVlYWNiZDQ4ZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpAc9NZI1c+XrSQD5pMBHUuC+lSS kYBBvOZxZsOIKqfgrZNkh6n0YhB9xzWVgFBVBqks2vNCSkn01hObPlHxIz3SQYnJ 0fuJZob+90ff09/uYymb41qzaa2QzIqCQxFnITT5HzsjqfApBjU1CB4k8bKZAyS0 PQSbDKjnHKJO2jR6hDHMYng8/8kPvcVcgiTskDdoD0KvOiZO9o49YRq4u/kqPtfB 3r6GtSYHD8gSondyuKvEUM4X2XQ5Duis03zstoy4VtDvmDupwRmoImoE9+yyqgjl EMY1Wp6LvPQ4inWW8Pcv3My6Iw2NvOTLpvZBC3QmmHFSY/6SLLc3KgbTswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILpyUDB8Lu+MB4kcs+77urL1I8mMB8GA1UdIwQY MBaAFOzdIqHgxbsAKA8ZM+7s+BzYoOayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MTc2NDgtNTVjMC00MDdhLTgxMWUt NTk2MTY1NWMzNGQ5LzEvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83MTc2NDgtNTVjMC00MDdhLTgxMWUtNTk2MTY1NWMzNGQ5 LzEvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjFV0Imx c4WkHcMbF4p2/AAlQg2Uaw6hF2I2RCBmrbPVxCTH7NMPcTJ40dY36XFSjWvHPvwk +d422LwQOTCccuEwghFx1SgD1IkvX0aPekNEJsv4MTpxvxddN0L1yybq25aqz9mg hQI2RxBF+GpI89kPKfBzm+UVKLKZ2DWOzjSo/pFHFvrwJuxGKb6ArMq5j1xKmGtI zBr7z+guM8l7sO51Mn7sj2u3fy6JmK5AVLyYLwAN4fJ8wgK6kFdviS7Mk1B8n/Gz egTF2oNFr8Nuaeo/g+ejbQDS3MrlNDQ/p94vMSzNrHoy2IkpD4FdoERbxpbHA+1C S1t+ZNc8kvZ/gA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:08 2025 by rpki-client