This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json) Hash identifier: KWDF5REX2/feK7JjTJd4KInJlmbgjGTTZAQnYmkjp6U= Subject key identifier: EB:E6:D3:CE:02:C8:04:64:EF:20:6B:3A:3F:40:69:53:6E:8C:ED:86 Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b Certificate serial: 019AF2771067B95941667C80C9A2AF4EC940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft Manifest number: 0ED1 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: Seid0BoQcVTRwGqSHfudhqHbnLLWHgJ/PiBVyd61cn4=) 2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:10:67:b9:59:41:66:7c:80:c9:a2:af:4e:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=ebe6d3ce02c80464ef206b3a3f4069536e8ced86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:77:62:a5:7f:73:26:3c:54:43:3b:c7:0b: 6c:c7:98:22:91:96:40:53:e1:af:d5:a3:15:97:b2: c2:97:d1:9a:92:eb:31:ee:02:9d:89:7f:93:d3:c6: be:08:7b:7f:54:f5:3b:6d:cb:d8:29:fa:1e:6a:69: 0c:a9:c5:13:4e:84:ce:0d:ec:d5:59:7a:fd:b5:3a: 43:6f:be:9d:90:aa:ba:26:7d:0c:43:2b:34:98:6a: 8d:08:08:3b:64:7a:82:f0:6c:2a:e2:cb:a9:45:e3: 41:e5:32:27:f0:05:45:f2:09:94:a7:ff:28:c1:fb: b6:02:7b:47:74:f3:ab:33:6c:b5:40:27:c1:54:2b: e3:eb:44:01:4f:c6:00:9a:24:54:9c:04:cb:db:48: 7c:2d:83:f0:39:1b:cb:9f:06:f0:28:ab:da:65:56: e4:2a:bf:9d:17:6d:7d:6f:f3:64:fb:ae:c7:dd:06: a5:f5:40:36:89:89:66:a0:64:db:4c:1f:0d:5e:86: cf:43:f1:7d:b6:2a:20:1a:fc:fa:03:1c:76:39:41: cb:5e:d5:d0:2b:c9:f1:ab:f0:bc:4d:b0:5b:79:2a: 57:25:d6:e4:f8:10:17:c0:88:d8:c8:73:3f:b7:71: fc:c0:96:d7:b7:d8:e8:75:6f:47:8c:a3:60:3f:19: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E6:D3:CE:02:C8:04:64:EF:20:6B:3A:3F:40:69:53:6E:8C:ED:86 X509v3 Authority Key Identifier: keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3f:89:55:55:5b:bb:46:df:31:2c:5f:f5:7e:12:7b:85:d0: 96:eb:c3:2e:16:91:52:b7:e9:1d:89:95:f8:5e:ab:4c:60:ef: f5:a0:ea:2c:f1:c1:e0:a7:29:18:31:a3:5c:a6:2d:2c:94:8f: 3e:6f:eb:7f:2f:a0:18:83:04:4f:25:a4:25:b6:d5:1f:55:5b: 2c:1b:ae:af:20:af:06:67:07:7d:95:62:04:c7:a1:ae:16:cb: c6:1a:5f:42:1e:93:33:bc:a7:9c:5a:2a:d9:74:3e:9b:b6:4f: c6:44:5e:05:85:37:7a:68:99:91:dd:d1:50:34:ea:aa:0d:83: a1:8b:b8:58:b5:b8:6d:47:5b:71:8f:10:91:e2:5a:c3:30:1e: 2e:d1:9a:22:bd:f0:be:b3:97:2a:fa:92:02:35:53:61:f6:62: 6e:1f:2f:c5:14:64:05:f5:45:74:93:af:69:a9:94:48:76:11: 61:59:c0:dd:a0:e2:4a:a3:61:a5:47:b2:3b:89:4b:e0:98:b1: 76:ea:13:07:3c:01:5b:2a:14:8c:33:fa:03:1e:92:07:ab:97: 5f:f6:a1:ae:f0:a0:19:41:8e:99:66:25:31:93:73:75:aa:e9: 74:d1:6e:58:39:33:ba:dd:a0:14:0a:e6:84:3a:35:ee:27:6c: 61:3c:c7:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxBnuVlBZnyAyaKvTslAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzNkZjA0NmUxZTFkNWJmMDUyMmJiOTEzZjI5NTcyODdh NDliNGIwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhlYmU2ZDNjZTAyYzgwNDY0ZWYyMDZiM2EzZjQwNjk1MzZlOGNlZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwix3YqV/cyY8VEM7xwtsx5gikZZA U+Gv1aMVl7LCl9Gakusx7gKdiX+T08a+CHt/VPU7bcvYKfoeamkMqcUTToTODezV WXr9tTpDb76dkKq6Jn0MQys0mGqNCAg7ZHqC8Gwq4supReNB5TIn8AVF8gmUp/8o wfu2AntHdPOrM2y1QCfBVCvj60QBT8YAmiRUnATL20h8LYPwORvLnwbwKKvaZVbk Kr+dF219b/Nk+67H3Qal9UA2iYlmoGTbTB8NXobPQ/F9tiogGvz6Axx2OUHLXtXQ K8nxq/C8TbBbeSpXJdbk+BAXwIjYyHM/t3H8wJbXt9jodW9HjKNgPxmoAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvm084CyARk7yBrOj9AaVNujO2GMB8GA1UdIwQY MBaAFO3D3wRuHh1b8FIruRPylXKHpJtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQt NTIzZTQ0NWY5MGRjLzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQtNTIzZTQ0NWY5MGRj LzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAED+JVVVb u0bfMSxf9X4Se4XQluvDLhaRUrfpHYmV+F6rTGDv9aDqLPHB4KcpGDGjXKYtLJSP Pm/rfy+gGIMETyWkJbbVH1VbLBuuryCvBmcHfZViBMehrhbLxhpfQh6TM7ynnFoq 2XQ+m7ZPxkReBYU3emiZkd3RUDTqqg2DoYu4WLW4bUdbcY8QkeJawzAeLtGaIr3w vrOXKvqSAjVTYfZibh8vxRRkBfVFdJOvaamUSHYRYVnA3aDiSqNhpUeyO4lL4Jix duoTBzwBWyoUjDP6Ax6SB6uXX/ahrvCgGUGOmWYlMZNzdarpdNFuWDkzut2gFArm hDo17idsYTzHPw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:16 2025 by rpki-client