This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft File: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft (raw, json) Hash identifier: gLjJPyXB6LEXLtW4QxeuKp+esT3JzTUNdPMqiNtx/cQ= Subject key identifier: 63:93:2D:D9:7C:68:51:30:EB:06:D5:36:3C:68:F0:93:B7:AE:84:19 Authority key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2 Certificate issuer: /CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2 Certificate serial: 019AF2767A1576B91B63C19B2A9DA2C2E031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft Manifest number: 7F Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl (hash: TBLV3LRKt38Rg6QZDnDU27j4YHZARHvB7kjG+2YNGpE=) 2: Kipa3kLLXBexBMJFIr2nzsJGfAQ.roa (hash: MEzxz1fu8r8OcAfHUpLMgUbApSNH2jwTj14hFHpw51I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7a:15:76:b9:1b:63:c1:9b:2a:9d:a2:c2:e0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=63932dd97c685130eb06d5363c68f093b7ae8419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:d2:5c:27:51:2e:ff:14:c8:c4:d2:b5:ef: 89:64:1b:08:c4:d5:ae:cf:48:f4:1c:d3:9f:d2:1c: bf:ff:02:cf:16:33:12:43:94:48:06:76:f1:bd:4f: c1:5f:5e:07:a4:6c:17:28:7c:b0:4f:85:ea:97:c4: 04:cd:51:70:22:18:ea:36:3f:0e:6c:9d:34:75:9a: 13:81:eb:6f:9d:5b:23:a7:45:0d:a4:ad:8a:6f:f2: cf:1f:00:f5:95:dd:76:81:96:9a:e0:09:08:47:8f: ad:8d:74:4f:15:11:b1:c5:86:4b:e9:48:a1:9c:2c: 28:13:b5:65:24:62:3e:1c:33:2f:4d:0f:d7:6d:3b: 3f:f3:81:ce:ea:34:76:d6:5f:0f:ad:a7:d9:c2:ec: d3:94:e4:6a:52:fd:5d:0b:77:b7:ed:e0:90:2b:b1: a3:cf:3f:b9:18:7d:a0:e8:e6:c6:21:e6:d0:41:3c: 7d:55:60:15:19:a4:4d:22:4f:76:12:6c:82:2b:c3: a6:1a:e9:9e:0e:db:9a:0d:15:d6:ae:92:20:b9:ea: 07:c2:a3:b6:75:71:77:09:a7:73:9d:c4:f2:1d:59: ff:e0:75:6c:a1:fa:65:de:71:6a:f6:78:79:66:6d: d1:94:5e:e3:0c:07:53:c7:f6:af:0d:2e:7d:6e:7f: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:93:2D:D9:7C:68:51:30:EB:06:D5:36:3C:68:F0:93:B7:AE:84:19 X509v3 Authority Key Identifier: keyid:EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7e:0e:42:08:56:c4:8c:bf:2a:91:27:b2:fa:ef:79:7a:93: a9:02:40:ed:a9:84:80:1a:b8:e8:cc:a9:2a:2f:93:61:db:76: ca:07:e1:6b:9f:8c:02:53:c1:10:7d:96:99:49:4c:2d:0e:f6: 87:75:1f:eb:2b:87:6e:9d:57:29:8f:96:d4:ab:39:1d:72:83: 95:a1:c4:1d:76:ca:38:98:d4:0f:27:62:88:b1:d1:c4:2f:b9: b1:80:b7:c2:24:19:cd:9e:2e:ba:7d:3c:a8:d4:1e:55:65:3c: 75:3c:81:7d:62:77:13:c3:7d:e9:6e:86:09:80:b3:ca:ee:01: 0d:1f:f0:fd:88:73:05:70:e0:5c:e3:b0:78:9e:18:51:59:5b: 44:a9:23:ba:9d:0b:da:a8:bc:59:cc:c6:26:6e:79:bf:a1:bb: 75:54:ba:ed:2c:d6:82:e1:99:0d:50:39:2b:f1:62:5b:cf:52: 80:9a:20:11:0b:aa:bc:55:61:75:1f:71:2c:da:03:27:50:2e: 78:9c:b4:88:f1:33:31:b0:94:ea:b5:7d:a9:30:5f:72:2f:45: e3:12:28:d8:f1:d7:ab:b5:a0:ba:42:e8:86:7c:67:0d:8a:75: 28:12:a4:0c:00:32:3e:03:4d:60:88:b5:5d:7f:20:e7:9f:8f: 19:04:63:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnoVdrkbY8GbKp2iwuAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDlmMGU4ODY2M2Y4M2E1YjZmODRmMWZlZTZiNDJjMzVj MGY4ZjIwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD Eyg2MzkzMmRkOTdjNjg1MTMwZWIwNmQ1MzYzYzY4ZjA5M2I3YWU4NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIvSXCdRLv8UyMTSte+JZBsIxNWu z0j0HNOf0hy//wLPFjMSQ5RIBnbxvU/BX14HpGwXKHywT4Xql8QEzVFwIhjqNj8O bJ00dZoTgetvnVsjp0UNpK2Kb/LPHwD1ld12gZaa4AkIR4+tjXRPFRGxxYZL6Uih nCwoE7VlJGI+HDMvTQ/XbTs/84HO6jR21l8PrafZwuzTlORqUv1dC3e37eCQK7Gj zz+5GH2g6ObGIebQQTx9VWAVGaRNIk92EmyCK8OmGumeDtuaDRXWrpIgueoHwqO2 dXF3CadzncTyHVn/4HVsofpl3nFq9nh5Zm3RlF7jDAdTx/avDS59bn8U9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOTLdl8aFEw6wbVNjxo8JO3roQZMB8GA1UdIwQY MBaAFOwJ8OiGY/g6W2+E8f7mtCw1wPjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQt MzZiNTY4MGFjMzY4LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQtMzZiNTY4MGFjMzY4 LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX4OQghW xIy/KpEnsvrveXqTqQJA7amEgBq46MypKi+TYdt2ygfha5+MAlPBEH2WmUlMLQ72 h3Uf6yuHbp1XKY+W1Ks5HXKDlaHEHXbKOJjUDydiiLHRxC+5sYC3wiQZzZ4uun08 qNQeVWU8dTyBfWJ3E8N96W6GCYCzyu4BDR/w/YhzBXDgXOOweJ4YUVlbRKkjup0L 2qi8WczGJm55v6G7dVS67SzWguGZDVA5K/FiW89SgJogEQuqvFVhdR9xLNoDJ1Au eJy0iPEzMbCU6rV9qTBfci9F4xIo2PHXq7WgukLohnxnDYp1KBKkDAAyPgNNYIi1 XX8g55+PGQRjyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:45 2025 by rpki-client