This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json) Hash identifier: UkhpCBii0KbFA6o7eNsXRv02RjKWHcC6aqRynjHE3pU= Subject key identifier: 57:BB:49:80:5C:FC:5A:4B:47:27:69:81:EF:F9:82:29:F5:0E:9E:C0 Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13 Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213 Certificate serial: 019B2250E285D7F55F9C4D14D95D12CB4C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft Manifest number: 04BD Signing time: Mon 15 Dec 2025 14:01:24 +0000 Manifest this update: Mon 15 Dec 2025 14:01:24 +0000 Manifest next update: Tue 16 Dec 2025 14:01:24 +0000 Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: IASlIgWPTz81jPny17xNG4LUlpoa1k/zp/eCh9dPT+s=) 2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:e2:85:d7:f5:5f:9c:4d:14:d9:5d:12:cb:4c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213 Validity Not Before: Dec 15 14:01:24 2025 GMT Not After : Dec 16 14:01:24 2025 GMT Subject: CN=57bb49805cfc5a4b47276981eff98229f50e9ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:0c:32:bb:f8:53:af:7b:b7:7d:74:cf:f5: 92:75:96:0b:ac:33:63:d5:3b:8d:ff:1d:13:20:ab: 31:8f:c4:ca:fb:d3:91:55:a0:85:85:3a:62:b4:2c: 5c:8b:c7:59:f6:da:36:ee:cd:51:67:74:7b:86:38: db:58:35:b6:ed:7f:51:a4:ef:6d:80:3f:d2:3a:15: 6a:44:ae:ef:12:1c:35:38:18:49:03:be:23:71:99: 4a:26:51:30:df:86:d3:17:e7:03:92:ac:d9:7c:60: 16:07:f4:2a:d4:e3:35:0d:c4:3b:df:ca:b9:79:ad: 04:f7:da:c1:02:e0:be:fd:c4:1e:d2:7a:40:1b:c7: a3:98:63:fe:4b:f0:5a:fe:c1:92:de:65:7f:1f:d6: f0:13:b9:80:06:bc:9e:c9:10:47:bd:f6:a2:ea:64: 41:dd:93:a3:27:34:5f:55:27:fe:45:d2:b4:74:78: fa:d7:e7:78:7f:33:22:88:e5:ce:10:4d:a8:27:ef: 11:28:9d:a0:c6:81:37:83:19:7a:60:0a:38:8a:94: 8e:92:e9:86:e8:76:2f:24:03:21:7a:d0:0c:48:84: 09:4a:7c:2d:77:2b:b9:e2:91:43:4e:9f:84:ca:35: 69:31:af:67:32:64:53:a8:2e:e7:8b:41:13:bc:c5: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BB:49:80:5C:FC:5A:4B:47:27:69:81:EF:F9:82:29:F5:0E:9E:C0 X509v3 Authority Key Identifier: keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:33:5d:02:f7:2e:76:4b:64:d2:cd:e7:45:64:33:71:43:41: 41:7f:30:db:6c:0a:94:81:3f:c9:91:12:f3:5a:b8:4b:cc:fa: 4f:b6:4f:b6:0c:bc:2e:42:a1:fa:90:2a:b2:07:7d:26:6b:b8: b0:7b:6e:10:c9:3e:4b:37:43:7d:0d:11:54:b3:c1:13:41:3a: 8c:f5:54:83:93:05:db:3c:b2:f0:9f:2c:7b:cd:45:7b:b6:7a: 31:6b:fd:a4:04:d2:5e:58:f4:d6:bd:07:6d:09:4c:e6:cf:16: e1:c7:e9:47:8a:2c:26:61:6d:b7:54:b9:92:13:55:1b:f8:98: d2:5d:14:98:92:6c:54:05:20:1b:a9:b5:02:4c:0c:75:10:33: 10:5c:b8:fa:db:c5:a6:84:48:0a:5b:be:0d:0c:98:4d:e0:cb: 70:4e:60:db:0a:0f:c8:83:4b:1a:0d:eb:d1:7a:f1:fc:d3:94: 36:44:f6:78:ba:87:9f:7d:2c:f5:90:89:f2:ae:19:07:1d:59: ad:06:fd:65:8c:06:a4:e3:91:54:13:e2:78:70:76:06:ff:26: 2d:0a:7b:02:bd:f7:cd:b4:3c:b2:c9:f8:d5:e2:0a:d6:c6:88: bb:99:2e:a4:41:b8:d1:87:89:ad:3a:64:ab:05:9c:33:12:6e: 00:d8:64:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUOKF1/VfnE0U2V0Sy0wqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjdiYjc1ODhiODJkNzBkOGNiNzNkNGU0NTE3N2Y2N2Vj ZWYyMTMwHhcNMjUxMjE1MTQwMTI0WhcNMjUxMjE2MTQwMTI0WjAzMTEwLwYDVQQD Eyg1N2JiNDk4MDVjZmM1YTRiNDcyNzY5ODFlZmY5ODIyOWY1MGU5ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4sMMrv4U697t310z/WSdZYLrDNj 1TuN/x0TIKsxj8TK+9ORVaCFhTpitCxci8dZ9to27s1RZ3R7hjjbWDW27X9RpO9t gD/SOhVqRK7vEhw1OBhJA74jcZlKJlEw34bTF+cDkqzZfGAWB/Qq1OM1DcQ738q5 ea0E99rBAuC+/cQe0npAG8ejmGP+S/Ba/sGS3mV/H9bwE7mABryeyRBHvfai6mRB 3ZOjJzRfVSf+RdK0dHj61+d4fzMiiOXOEE2oJ+8RKJ2gxoE3gxl6YAo4ipSOkumG 6HYvJAMhetAMSIQJSnwtdyu54pFDTp+EyjVpMa9nMmRTqC7ni0ETvMW/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe7SYBc/FpLRydpge/5gin1Dp7AMB8GA1UdIwQY MBaAFO1nu3WIuC1w2Mtz1ORRd/Z+zvITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5Yjkt MWI2MGRmMjUyY2E3LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5YjktMWI2MGRmMjUyY2E3 LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTNdAvcu dktk0s3nRWQzcUNBQX8w22wKlIE/yZES81q4S8z6T7ZPtgy8LkKh+pAqsgd9Jmu4 sHtuEMk+SzdDfQ0RVLPBE0E6jPVUg5MF2zyy8J8se81Fe7Z6MWv9pATSXlj01r0H bQlM5s8W4cfpR4osJmFtt1S5khNVG/iY0l0UmJJsVAUgG6m1AkwMdRAzEFy4+tvF poRIClu+DQyYTeDLcE5g2woPyINLGg3r0Xrx/NOUNkT2eLqHn30s9ZCJ8q4ZBx1Z rQb9ZYwGpOORVBPieHB2Bv8mLQp7Ar33zbQ8ssn41eIK1saIu5kupEG40YeJrTpk qwWcMxJuANhk3Q== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:12 2025 by rpki-client