This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json) Hash identifier: UYzunXCaJH4jkn/9R0LLuTq98xVsXHpd274FlEs0qro= Subject key identifier: FE:05:A8:E0:AA:1D:2D:B7:67:3C:A6:C5:E8:3D:DC:C0:BD:CF:16:CF Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1 Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1 Certificate serial: 019AF4651A52E06B18474A6364AEE6136061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft Manifest number: 10CD Signing time: Sat 06 Dec 2025 16:00:57 +0000 Manifest this update: Sat 06 Dec 2025 16:00:57 +0000 Manifest next update: Sun 07 Dec 2025 16:00:57 +0000 Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: fDiSUbD5o5d74q8RexONAcIpo7+fEFrGTGJ33WhnEqM=) 2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:1a:52:e0:6b:18:47:4a:63:64:ae:e6:13:60:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1 Validity Not Before: Dec 6 16:00:57 2025 GMT Not After : Dec 7 16:00:57 2025 GMT Subject: CN=fe05a8e0aa1d2db7673ca6c5e83ddcc0bdcf16cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:50:71:42:4e:3d:de:c6:75:6f:af:d1:30: 76:29:a2:00:13:f0:8d:8c:02:da:db:60:6b:a9:4e: 25:be:94:06:b9:d5:6d:e3:5e:e8:01:f9:55:da:85: d0:11:75:41:d5:ee:4e:15:37:c6:28:c5:ea:a5:be: 03:cf:16:82:cb:cf:17:76:2e:94:89:9b:e5:1b:bf: 74:1f:34:1e:d8:26:1a:4c:91:25:b3:6e:63:89:0a: b9:28:92:c5:5b:6f:32:fe:e0:58:aa:fa:ae:6c:88: d0:a0:37:7b:54:0a:41:ab:a7:98:99:f7:93:41:8c: cd:db:44:83:de:7f:2a:c9:c8:a5:ec:4c:7c:87:3b: e6:99:31:d6:f5:12:a4:a4:1c:ad:2c:82:d7:72:96: 66:2f:de:89:c9:63:61:f0:b5:80:93:94:71:99:b1: a0:08:28:c0:d4:bd:8c:d9:c0:15:08:87:7a:ac:66: 4f:e8:1d:ff:65:2e:16:f7:bc:0b:c3:e5:41:54:45: be:e3:13:18:dd:13:02:a4:a2:5e:8a:2f:70:3b:25: 40:6e:17:64:92:e4:74:64:ba:85:9a:cc:ec:c6:07: 6f:ed:d1:c4:bc:9d:9a:3f:c1:42:9a:71:37:78:4b: 93:eb:0e:6b:ca:dc:17:af:3c:d3:64:af:c9:3f:3f: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:05:A8:E0:AA:1D:2D:B7:67:3C:A6:C5:E8:3D:DC:C0:BD:CF:16:CF X509v3 Authority Key Identifier: keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:72:c2:32:d6:62:68:24:d6:97:99:59:db:b3:f7:b6:3b:35: 28:02:02:bd:c4:61:98:58:67:a9:6e:96:e5:a0:32:d2:3b:9a: 9e:7d:0b:60:ad:5c:f2:25:29:b8:90:7b:51:fa:48:24:b6:fa: 98:aa:fd:9c:65:e2:ef:18:4d:0a:b1:5e:b0:e8:12:0f:cb:35: 01:ed:2a:2d:73:f5:52:2c:e9:e3:b0:fd:99:29:e0:04:0e:bb: ad:ed:e6:f3:5d:8d:52:b1:e1:91:8c:fc:a9:3b:7e:76:39:e1: 61:97:75:49:3c:b4:59:ef:22:52:64:4f:93:99:ad:a8:83:81: d4:3c:37:35:e0:86:a6:c1:bd:54:fa:6f:05:40:30:50:80:fa: 98:77:a7:10:3f:a3:e2:04:71:1a:07:1b:72:0b:6e:ce:e6:5a: ea:f4:28:b0:73:bc:a5:e0:b9:7a:49:39:bb:f6:a7:5c:1c:21: 82:0c:2c:73:45:05:1b:20:79:d9:9b:1e:76:ac:45:98:35:70: a0:7d:d6:6d:37:5e:dd:db:68:9e:a7:f2:d8:2d:62:4d:d6:7a: eb:86:9f:be:87:10:e6:3f:f6:4c:6c:6f:dd:8f:d6:b8:09:e8: 7b:04:1a:62:c0:0b:95:52:d9:43:9d:c7:62:63:39:a9:b1:ff: f1:c0:38:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRpS4GsYR0pjZK7mE2BhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2 ODI0ZjEwHhcNMjUxMjA2MTYwMDU3WhcNMjUxMjA3MTYwMDU3WjAzMTEwLwYDVQQD EyhmZTA1YThlMGFhMWQyZGI3NjczY2E2YzVlODNkZGNjMGJkY2YxNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfhQcUJOPd7GdW+v0TB2KaIAE/CN jALa22BrqU4lvpQGudVt417oAflV2oXQEXVB1e5OFTfGKMXqpb4DzxaCy88Xdi6U iZvlG790HzQe2CYaTJEls25jiQq5KJLFW28y/uBYqvqubIjQoDd7VApBq6eYmfeT QYzN20SD3n8qycil7Ex8hzvmmTHW9RKkpBytLILXcpZmL96JyWNh8LWAk5RxmbGg CCjA1L2M2cAVCId6rGZP6B3/ZS4W97wLw+VBVEW+4xMY3RMCpKJeii9wOyVAbhdk kuR0ZLqFmszsxgdv7dHEvJ2aP8FCmnE3eEuT6w5rytwXrzzTZK/JPz/fwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4FqOCqHS23Zzymxeg93MC9zxbPMB8GA1UdIwQY MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHLCMtZi aCTWl5lZ27P3tjs1KAICvcRhmFhnqW6W5aAy0juann0LYK1c8iUpuJB7UfpIJLb6 mKr9nGXi7xhNCrFesOgSD8s1Ae0qLXP1Uizp47D9mSngBA67re3m812NUrHhkYz8 qTt+djnhYZd1STy0We8iUmRPk5mtqIOB1Dw3NeCGpsG9VPpvBUAwUID6mHenED+j 4gRxGgcbcgtuzuZa6vQosHO8peC5ekk5u/anXBwhggwsc0UFGyB52ZsedqxFmDVw oH3WbTde3dtonqfy2C1iTdZ664afvocQ5j/2TGxv3Y/WuAnoewQaYsALlVLZQ53H YmM5qbH/8cA41w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:37 2025 by rpki-client