This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json) Hash identifier: ZHbA17krttR8l6KdExBq1mh6BmNwSjoo7I+dSn9et1A= Subject key identifier: 06:C2:2C:3F:5C:76:14:73:F8:9D:58:C7:59:3D:BE:F3:BD:7C:69:9D Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Certificate serial: 019AF50A3EAFC29B1E28E145E5E8F77F79B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft Manifest number: 05F6 Signing time: Sat 06 Dec 2025 19:01:20 +0000 Manifest this update: Sat 06 Dec 2025 19:01:20 +0000 Manifest next update: Sun 07 Dec 2025 19:01:20 +0000 Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: 6QYWXZ7iKIvLNQ+34RZ5h7yS6dy+NeDfdw4ODkkkHZ8=) 2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3e:af:c2:9b:1e:28:e1:45:e5:e8:f7:7f:79:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Validity Not Before: Dec 6 19:01:20 2025 GMT Not After : Dec 7 19:01:20 2025 GMT Subject: CN=06c22c3f5c761473f89d58c7593dbef3bd7c699d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:e9:ee:33:f9:13:84:b3:b1:99:3f:4e:7f: 3f:79:b8:48:78:35:42:6b:98:3c:69:72:ff:72:9e: 96:b8:04:bd:0c:99:6a:de:a4:c7:71:43:6a:7e:e7: 62:29:f0:f3:82:0c:61:f6:01:d3:e6:64:05:d1:44: e6:5b:cd:86:84:a2:77:7b:80:f2:57:1c:cc:fa:2c: 00:04:2c:f0:8b:5c:84:21:74:d1:ef:5a:7f:84:f6: 04:b8:38:74:34:2b:33:9f:6c:17:57:d3:8b:4b:ae: 07:ea:17:4f:42:18:a0:28:84:97:95:56:22:f4:a8: 53:0c:07:0f:1c:df:fc:e7:f6:6b:9b:07:41:5a:b7: dd:fc:f7:06:ae:72:ed:48:88:82:af:8e:61:8b:93: 9b:5d:e0:af:71:7b:eb:8d:15:a8:fe:69:55:56:13: 5a:b8:e9:d1:db:3c:50:f3:e8:0e:4d:75:20:01:3b: fc:fe:a6:02:f3:02:01:a4:39:48:a4:98:72:f6:8b: 84:db:29:00:ec:8a:5c:fb:29:b6:6b:9b:0c:2f:23: 9f:86:73:81:59:37:35:86:66:c6:4a:dd:34:58:4c: ce:24:98:ae:8f:9e:27:8a:60:fd:7b:a5:36:89:69: 89:1e:26:9c:a3:ea:f0:41:10:af:08:20:18:36:71: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:2C:3F:5C:76:14:73:F8:9D:58:C7:59:3D:BE:F3:BD:7C:69:9D X509v3 Authority Key Identifier: keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1f:94:2d:38:9f:06:e3:f2:d8:e7:0e:5a:80:27:4e:cb:56: 8a:85:7a:b2:87:1f:b4:de:51:f9:bb:22:55:c6:8e:0c:be:27: 45:da:58:f2:0f:37:32:65:8d:44:43:ff:ff:09:68:3b:d2:26: cf:56:b2:b5:ad:f9:a2:07:2e:b5:69:c7:c9:1e:80:52:6b:aa: 14:ab:f5:69:62:6d:0f:92:b0:57:d8:d1:d7:5d:ba:f2:77:a7: e6:18:93:3a:19:d4:79:c5:6e:95:2c:20:21:30:f1:b8:df:03: 7c:4d:65:49:8f:e1:e0:ef:dd:c2:cc:70:32:41:30:1d:33:e4: c5:af:e4:a1:79:e1:1c:a7:fb:4f:71:54:c5:7b:d8:c8:73:c0: fd:dd:89:1d:bb:17:0a:4f:b2:5d:cf:21:2d:d9:be:3c:98:e9: af:cd:f2:ac:f0:f8:77:87:7d:2b:55:54:06:84:71:b3:95:cf: 6d:d9:bd:ba:6c:5e:5a:bf:55:93:65:da:e2:cf:0a:f3:76:35: 23:8e:67:df:1f:0e:7a:0a:29:cb:11:44:9f:f2:62:6a:d5:01: c8:79:50:9c:73:bf:98:19:8f:89:f7:60:8c:89:c3:92:1d:0d: 9b:17:60:0e:aa:8b:dd:aa:d6:4a:c6:b2:87:63:16:ea:41:ba: 17:82:10:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cj6vwpseKOFF5ej3f3mxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzdmMzI2M2ZlMzQ4YWIyYzhkMzY4NDc1ZDZiYzA0N2E2 YTk3NmEwHhcNMjUxMjA2MTkwMTIwWhcNMjUxMjA3MTkwMTIwWjAzMTEwLwYDVQQD EygwNmMyMmMzZjVjNzYxNDczZjg5ZDU4Yzc1OTNkYmVmM2JkN2M2OTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQLp7jP5E4SzsZk/Tn8/ebhIeDVC a5g8aXL/cp6WuAS9DJlq3qTHcUNqfudiKfDzggxh9gHT5mQF0UTmW82GhKJ3e4Dy VxzM+iwABCzwi1yEIXTR71p/hPYEuDh0NCszn2wXV9OLS64H6hdPQhigKISXlVYi 9KhTDAcPHN/85/ZrmwdBWrfd/PcGrnLtSIiCr45hi5ObXeCvcXvrjRWo/mlVVhNa uOnR2zxQ8+gOTXUgATv8/qYC8wIBpDlIpJhy9ouE2ykA7Ipc+ym2a5sMLyOfhnOB WTc1hmbGSt00WEzOJJiuj54nimD9e6U2iWmJHiaco+rwQRCvCCAYNnFYeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbCLD9cdhRz+J1Yx1k9vvO9fGmdMB8GA1UdIwQY MBaAFOx38yY/40irLI02hHXWvAR6apdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQt ZDUxNzI5MzBmOGJmLzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQtZDUxNzI5MzBmOGJm LzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB+ULTif BuPy2OcOWoAnTstWioV6socftN5R+bsiVcaODL4nRdpY8g83MmWNREP//wloO9Im z1ayta35ogcutWnHyR6AUmuqFKv1aWJtD5KwV9jR11268nen5hiTOhnUecVulSwg ITDxuN8DfE1lSY/h4O/dwsxwMkEwHTPkxa/koXnhHKf7T3FUxXvYyHPA/d2JHbsX Ck+yXc8hLdm+PJjpr83yrPD4d4d9K1VUBoRxs5XPbdm9umxeWr9Vk2Xa4s8K83Y1 I45n3x8OegopyxFEn/JiatUByHlQnHO/mBmPifdgjInDkh0NmxdgDqqL3arWSsay h2MW6kG6F4IQHA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:03 2025 by rpki-client