This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json) Hash identifier: +judQaPv2bus4I0t46c+XzhdQRX8KRt3GnIn8WbuRuI= Subject key identifier: 84:BE:DF:BE:06:05:4D:98:A9:C9:F1:1A:2B:EC:FC:A9:E2:67:28:9E Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b Certificate serial: 019B2E544BC22C9E3B3A8205400D1BC72C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft Manifest number: 0EF0 Signing time: Wed 17 Dec 2025 22:00:34 +0000 Manifest this update: Wed 17 Dec 2025 22:00:34 +0000 Manifest next update: Thu 18 Dec 2025 22:00:34 +0000 Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: EzxI74nFxvxUmcMJ2eTe5dgKEmEPO7f8voZz3IRPiPQ=) 2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:4b:c2:2c:9e:3b:3a:82:05:40:0d:1b:c7:2c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b Validity Not Before: Dec 17 22:00:34 2025 GMT Not After : Dec 18 22:00:34 2025 GMT Subject: CN=84bedfbe06054d98a9c9f11a2becfca9e267289e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:de:61:7c:47:f4:9f:52:28:65:03:72:27: 74:4b:b2:dc:49:a7:3d:01:6c:db:ee:c9:81:c8:48: 56:a1:a8:7f:cd:c0:69:58:2a:3a:63:e9:16:f1:74: 37:e0:52:88:ed:85:70:2d:51:86:29:80:e3:34:9f: 0d:52:e7:9d:db:55:af:56:59:dd:0a:7a:c1:16:df: 4b:11:b6:d5:83:87:70:38:12:1d:33:69:d1:5f:69: da:ac:6a:b7:f9:7d:0a:4e:bc:cd:1d:8d:12:6a:34: eb:c9:da:ba:c6:8d:19:71:6b:39:f4:c4:14:e9:7b: d2:e0:61:a5:fe:29:1f:57:e2:4d:dc:42:1d:22:a9: 6b:8c:17:13:05:6e:0e:bd:ae:9f:36:ae:3c:b7:24: 8c:09:4a:00:5c:cf:2b:f9:eb:a1:fd:1f:5c:73:13: ba:2a:93:4d:16:9f:45:11:06:eb:7e:54:e3:2d:75: b3:2d:30:89:5e:1a:32:f3:5a:e3:98:97:b0:06:2d: a2:f1:2a:6d:a1:42:a6:b9:23:20:64:8a:f7:72:00: f0:5c:05:d3:98:9c:f9:60:db:76:c3:da:4f:25:ed: f1:05:e8:90:a6:85:53:8b:12:99:af:1b:b2:e6:18: da:46:f6:3f:fc:03:f0:de:40:78:33:1c:78:37:d2: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:DF:BE:06:05:4D:98:A9:C9:F1:1A:2B:EC:FC:A9:E2:67:28:9E X509v3 Authority Key Identifier: keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:48:a9:72:b6:bb:08:19:54:d4:aa:0c:a3:b2:cd:10:17:da: 1b:54:4e:35:14:12:f7:40:9f:b7:3b:4f:70:31:b8:2e:4a:b7: e7:52:f4:ba:bc:0f:c4:be:41:a8:82:67:11:9d:da:6a:13:0a: 18:f7:38:2f:7c:a9:3d:55:d2:ee:db:81:a0:00:58:d3:9c:1e: b4:ac:08:77:c5:e0:6c:e4:e5:ab:8e:c0:c1:79:1d:11:e2:7f: 7a:17:e1:65:d1:79:10:89:71:34:ce:dc:5c:58:0f:36:46:b0: 13:66:f2:4e:aa:92:ff:85:3a:04:7c:44:e1:80:c3:e2:9d:a0: 30:ea:48:9a:7c:92:77:97:44:80:3e:a6:1d:2b:75:07:d7:73: 0b:f8:19:f7:74:4c:be:5d:b1:62:1a:cf:da:67:a0:1a:9e:67: bb:b6:4a:e0:5c:a0:a8:87:80:84:1a:b7:bc:d3:99:15:c9:4b: b0:4f:e0:a4:1b:51:a5:77:bc:12:8a:c2:12:75:56:e0:40:44: 3b:92:b6:7b:2d:31:f1:28:19:09:33:e5:f0:53:1f:09:20:0a: ee:30:b6:67:cd:60:5a:f1:16:d2:e4:71:a5:0e:d4:ac:63:ee: 05:bf:f7:4a:77:29:13:95:c4:a8:f0:ec:ce:32:28:f3:0c:3c: 0d:73:7a:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVEvCLJ47OoIFQA0bxyx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzNkZjA0NmUxZTFkNWJmMDUyMmJiOTEzZjI5NTcyODdh NDliNGIwHhcNMjUxMjE3MjIwMDM0WhcNMjUxMjE4MjIwMDM0WjAzMTEwLwYDVQQD Eyg4NGJlZGZiZTA2MDU0ZDk4YTljOWYxMWEyYmVjZmNhOWUyNjcyODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U3eYXxH9J9SKGUDcid0S7LcSac9 AWzb7smByEhWoah/zcBpWCo6Y+kW8XQ34FKI7YVwLVGGKYDjNJ8NUued21WvVlnd CnrBFt9LEbbVg4dwOBIdM2nRX2narGq3+X0KTrzNHY0SajTrydq6xo0ZcWs59MQU 6XvS4GGl/ikfV+JN3EIdIqlrjBcTBW4Ova6fNq48tySMCUoAXM8r+euh/R9ccxO6 KpNNFp9FEQbrflTjLXWzLTCJXhoy81rjmJewBi2i8SptoUKmuSMgZIr3cgDwXAXT mJz5YNt2w9pPJe3xBeiQpoVTixKZrxuy5hjaRvY//APw3kB4Mxx4N9LmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS+374GBU2YqcnxGivs/KniZyieMB8GA1UdIwQY MBaAFO3D3wRuHh1b8FIruRPylXKHpJtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQt NTIzZTQ0NWY5MGRjLzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQtNTIzZTQ0NWY5MGRj LzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUipcra7 CBlU1KoMo7LNEBfaG1RONRQS90CftztPcDG4Lkq351L0urwPxL5BqIJnEZ3aahMK GPc4L3ypPVXS7tuBoABY05wetKwId8XgbOTlq47AwXkdEeJ/ehfhZdF5EIlxNM7c XFgPNkawE2byTqqS/4U6BHxE4YDD4p2gMOpImnySd5dEgD6mHSt1B9dzC/gZ93RM vl2xYhrP2megGp5nu7ZK4FygqIeAhBq3vNOZFclLsE/gpBtRpXe8EorCEnVW4EBE O5K2ey0x8SgZCTPl8FMfCSAK7jC2Z81gWvEW0uRxpQ7UrGPuBb/3SncpE5XEqPDs zjIo8ww8DXN6SA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:30 2025 by rpki-client