This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json) Hash identifier: 3PUxwUHq3jnOLSzPX0rE3jv+1djLjCh49dNfOy/NQHA= Subject key identifier: 25:1C:58:13:60:F3:B2:FB:50:02:0D:42:79:66:53:36:1F:00:B7:51 Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1 Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1 Certificate serial: 019AF2772F2DD97353F67DEFAC50880E71DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft Manifest number: 0FA4 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: HAdWXYceaYiYv7kJQqLRoMApN68BdpNYTntYvBHjHOA=) 2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2f:2d:d9:73:53:f6:7d:ef:ac:50:88:0e:71:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=251c581360f3b2fb50020d42796653361f00b751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:bf:1d:64:63:02:e7:dc:df:85:b4:5d:b6: 89:f7:d2:c6:5d:d4:de:a4:12:dc:9d:ef:4a:71:f1: 31:23:2f:a7:6c:97:48:3f:09:c2:ba:f3:66:87:cc: 3c:f4:4a:39:be:f1:6f:6d:f0:be:02:16:f5:cd:f7: 49:ed:ce:ed:7e:07:95:31:d9:b5:69:6b:5a:1a:3f: 3d:75:ad:7e:d3:d5:8b:65:26:97:e4:06:51:9a:2d: 99:3c:90:d6:b0:8c:ad:06:57:d6:ec:0c:c4:c9:cd: ed:7f:6d:ef:f1:f4:1a:8f:1c:7c:ee:53:e6:35:8d: 6e:21:b9:29:9b:6e:cb:a3:bb:b8:7f:c7:1c:2c:43: 9b:2a:31:41:d2:a7:b5:92:04:ba:cd:d6:1b:91:7d: 7c:43:50:20:86:51:4f:ef:c6:a1:da:13:eb:c8:79: 01:9e:21:bd:92:c1:fb:60:1f:35:72:0e:73:58:3e: d0:58:cb:0e:55:21:5f:d3:49:fe:ae:1a:42:24:51: b0:0d:5c:a0:3b:59:8a:ba:6f:8f:3a:2b:38:63:b5: fc:e5:2b:b6:b9:a4:4b:4c:39:cb:43:f5:b0:ef:b6: 7c:39:a0:e4:a2:4d:70:df:8d:18:2e:b3:bf:40:ba: bd:a6:ff:1a:22:f6:41:5f:83:9d:73:3d:53:c4:ef: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1C:58:13:60:F3:B2:FB:50:02:0D:42:79:66:53:36:1F:00:B7:51 X509v3 Authority Key Identifier: keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8f:c3:db:49:62:53:ed:04:2c:2d:cc:2f:a7:0a:36:d2:5f: 75:5a:7e:af:98:14:ad:21:d3:50:2c:73:20:d7:27:77:d1:84: a5:18:e5:e4:8b:9b:20:15:bc:31:ff:4a:6d:ec:82:3d:13:23: bc:9f:11:15:3f:ad:78:66:26:14:0d:f0:f3:21:7b:6b:d8:9a: 4f:9f:22:da:7c:55:2b:45:03:3b:23:11:7a:37:04:9e:d7:1d: 13:d4:7b:e2:fd:56:b1:31:79:32:b7:21:8d:34:10:91:27:cd: aa:62:fe:96:4a:a3:17:c0:a9:7c:c2:da:20:a4:b0:d1:ef:61: 16:44:60:de:6e:01:56:93:5c:87:48:4b:0c:84:b4:37:76:8e: ce:6e:0f:10:c5:57:7d:ea:2c:ff:02:eb:6f:1d:28:13:65:e6: d2:a7:b2:cd:9f:92:cd:3a:25:49:80:07:36:4b:a2:f9:f9:ce: 49:8a:06:58:f9:29:41:5f:bb:cd:0a:2c:7c:68:a4:bd:e5:47: ff:46:d5:22:39:69:0e:a1:d9:9c:92:f5:87:27:46:93:89:2e: be:9d:11:52:c0:03:c7:6a:6a:3f:89:19:40:76:c2:72:f4:90: 97:ad:75:50:6d:88:ce:f3:80:b6:cd:5c:12:f6:d4:9d:73:d6: 87:1c:57:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy8t2XNT9n3vrFCIDnHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYzQ1ZmNhZGM0YzkzM2FjOGZmNGUwYjQzNGE1YmZiNTY3 YjY1YTEwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EygyNTFjNTgxMzYwZjNiMmZiNTAwMjBkNDI3OTY2NTMzNjFmMDBiNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYy/HWRjAufc34W0XbaJ99LGXdTe pBLcne9KcfExIy+nbJdIPwnCuvNmh8w89Eo5vvFvbfC+Ahb1zfdJ7c7tfgeVMdm1 aWtaGj89da1+09WLZSaX5AZRmi2ZPJDWsIytBlfW7AzEyc3tf23v8fQajxx87lPm NY1uIbkpm27Lo7u4f8ccLEObKjFB0qe1kgS6zdYbkX18Q1AghlFP78ah2hPryHkB niG9ksH7YB81cg5zWD7QWMsOVSFf00n+rhpCJFGwDVygO1mKum+POis4Y7X85Su2 uaRLTDnLQ/Ww77Z8OaDkok1w340YLrO/QLq9pv8aIvZBX4Odcz1TxO+UCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUcWBNg87L7UAINQnlmUzYfALdRMB8GA1UdIwQY MBaAFOzEX8rcTJM6yP9OC0NKW/tWe2WhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQt ZTA3NmY4Y2NiOGI5LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQtZTA3NmY4Y2NiOGI5 LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATI/D20li U+0ELC3ML6cKNtJfdVp+r5gUrSHTUCxzINcnd9GEpRjl5IubIBW8Mf9KbeyCPRMj vJ8RFT+teGYmFA3w8yF7a9iaT58i2nxVK0UDOyMRejcEntcdE9R74v1WsTF5Mrch jTQQkSfNqmL+lkqjF8CpfMLaIKSw0e9hFkRg3m4BVpNch0hLDIS0N3aOzm4PEMVX feos/wLrbx0oE2Xm0qeyzZ+SzTolSYAHNkui+fnOSYoGWPkpQV+7zQosfGikveVH /0bVIjlpDqHZnJL1hydGk4kuvp0RUsADx2pqP4kZQHbCcvSQl611UG2IzvOAts1c EvbUnXPWhxxX2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:40 2025 by rpki-client