This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json) Hash identifier: TnhD5mxg6qAK7pmiHL4U8DRuiTRVxELZ74dwwS1mk20= Subject key identifier: FB:06:8B:8E:7E:9A:54:F0:EE:D1:86:4D:82:C7:33:A1:F2:37:BC:90 Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Certificate serial: 019AF19AACC74D9BDDFC2D15BE099EEC57CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=) 2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: rw023boxeysjDIWKXCXyCS11PMx8wbfzkquZdfGbNt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ac:c7:4d:9b:dd:fc:2d:15:be:09:9e:ec:57:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=fb068b8e7e9a54f0eed1864d82c733a1f237bc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:43:7b:70:72:18:1a:06:f6:ae:a6:a3:21: 5e:07:35:86:7c:05:e0:3b:b9:92:b7:ce:b7:04:12: 06:aa:c8:09:c4:c3:cb:71:f3:d3:40:87:90:81:a3: 8f:c8:01:ea:47:ca:81:22:fd:1e:93:75:6d:b5:4e: 63:8f:4a:20:00:e0:0f:4b:a8:54:fa:80:4f:0e:51: 22:00:f8:1e:fc:73:7c:de:c1:ef:74:47:4d:a3:a9: 41:dd:21:08:e1:27:02:3a:ba:56:bb:b3:7c:c5:f5: b6:60:dc:6e:e6:da:75:a3:b3:01:a2:fa:4a:89:1f: 10:c2:ae:15:04:2e:58:d6:ab:e0:dd:0c:90:c7:41: 59:78:55:de:0b:e8:b8:82:4d:3d:cc:e9:75:da:6b: 4b:aa:c5:8f:53:c5:58:04:5a:91:64:23:b1:a2:3d: 13:95:e3:30:8e:db:23:83:b4:c7:76:a4:6b:22:cc: 77:cf:87:99:26:26:47:76:fb:5b:c6:c2:6a:b6:bf: e7:36:b3:83:37:1a:1c:4f:e8:9f:9e:84:c3:fe:6d: 0d:0b:73:30:dd:8b:37:27:7f:85:85:22:dc:52:aa: 4a:ab:36:79:5a:fc:3d:46:73:1d:3b:fb:b1:5d:a6: eb:b7:5b:8d:d8:2b:58:a7:b5:5f:a2:74:e2:39:22: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:8B:8E:7E:9A:54:F0:EE:D1:86:4D:82:C7:33:A1:F2:37:BC:90 X509v3 Authority Key Identifier: keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:94:ca:cb:99:53:9c:93:16:d3:f3:ba:5c:4f:17:79:45:f3: 1e:11:43:c8:99:4d:9a:a1:f4:a1:0e:eb:84:b5:c8:ec:41:45: a2:07:82:d9:4d:97:35:87:78:23:b3:6d:4f:1a:54:07:64:e8: 4a:0e:15:db:6f:f5:65:8e:c3:58:16:cb:77:49:71:dd:58:9f: 75:0b:d3:21:6a:a0:b2:b9:6e:8d:57:f2:fe:74:f3:a0:b2:f1: 74:e6:cc:f2:a6:56:c6:c1:33:dd:c5:78:77:a8:24:2d:2b:2e: 2a:5e:a7:68:13:da:fb:37:0e:4a:cf:88:99:8e:54:d1:89:81: b3:0a:1c:5d:49:a9:be:8a:a5:1f:15:9b:6f:71:0b:75:74:1c: 36:b7:d7:20:19:7f:7d:1d:d3:3c:6e:22:f3:05:c3:ef:75:15: a3:5a:2c:15:2e:f1:a0:75:c6:f8:4b:fd:03:df:f8:91:c9:5a: db:db:94:17:60:56:30:8b:ee:36:ff:fb:db:42:ac:bd:67:91: ec:e3:b6:c8:d8:9e:d3:c6:88:44:a9:b6:0a:fb:56:95:61:8f: 5d:b2:66:b5:ee:57:de:59:88:97:7f:cd:2c:ed:77:9f:36:45: 07:be:5c:e6:b5:45:c6:bc:3a:52:96:1e:cf:c2:0d:6f:86:30: 5a:14:f8:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqzHTZvd/C0Vvgme7FfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk NDBlMWQwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD EyhmYjA2OGI4ZTdlOWE1NGYwZWVkMTg2NGQ4MmM3MzNhMWYyMzdiYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQlDe3ByGBoG9q6moyFeBzWGfAXg O7mSt863BBIGqsgJxMPLcfPTQIeQgaOPyAHqR8qBIv0ek3VttU5jj0ogAOAPS6hU +oBPDlEiAPge/HN83sHvdEdNo6lB3SEI4ScCOrpWu7N8xfW2YNxu5tp1o7MBovpK iR8Qwq4VBC5Y1qvg3QyQx0FZeFXeC+i4gk09zOl12mtLqsWPU8VYBFqRZCOxoj0T leMwjtsjg7THdqRrIsx3z4eZJiZHdvtbxsJqtr/nNrODNxocT+ifnoTD/m0NC3Mw 3Ys3J3+FhSLcUqpKqzZ5Wvw9RnMdO/uxXabrt1uN2CtYp7VfonTiOSLbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsGi45+mlTw7tGGTYLHM6HyN7yQMB8GA1UdIwQY MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5TKy5lT nJMW0/O6XE8XeUXzHhFDyJlNmqH0oQ7rhLXI7EFFogeC2U2XNYd4I7NtTxpUB2To Sg4V22/1ZY7DWBbLd0lx3VifdQvTIWqgsrlujVfy/nTzoLLxdObM8qZWxsEz3cV4 d6gkLSsuKl6naBPa+zcOSs+ImY5U0YmBswocXUmpvoqlHxWbb3ELdXQcNrfXIBl/ fR3TPG4i8wXD73UVo1osFS7xoHXG+Ev9A9/4kcla29uUF2BWMIvuNv/720KsvWeR 7OO2yNie08aIRKm2CvtWlWGPXbJmte5X3lmIl3/NLO13nzZFB75c5rVFxrw6UpYe z8INb4YwWhT4qg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:22 2025 by rpki-client