This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft File: 7f4_b22YcU4B8IxzsmRDaHdOhmA.mft (raw, json) Hash identifier: h/G+XVxklaTG8gESIkuRHEUVS9NwsmXGDn7jYs6jlIg= Subject key identifier: 22:D0:A5:D2:49:A0:0F:73:E5:AF:52:45:EF:C3:50:D0:D7:4A:79:FB Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Certificate serial: 019B2B8AA3B62A43D652027C27C18478DC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft Manifest number: 0AC3 Signing time: Wed 17 Dec 2025 09:01:04 +0000 Manifest this update: Wed 17 Dec 2025 09:01:04 +0000 Manifest next update: Thu 18 Dec 2025 09:01:04 +0000 Files and hashes: 1: 7f4_b22YcU4B8IxzsmRDaHdOhmA.crl (hash: v1PoLjpXRqpwPEM+Nwxqx9K8gj0xf4vDCSDhb+sf1Jo=) 2: C33JEEkzeUPfbth7teviRKyxbuE.roa (hash: bhxYSOeRjG5Bc/CRRVr1eQSS4+raxx1XaOAQhc1D4HU=) 3: aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa (hash: i0WEsyrwOUpXjeH2PBX2MXTKTehmIYecmcGg2/8/obc=) 4: e9TfqWRofyD675IhahYJlsYvNF4.roa (hash: 0ikrXobtlg5G9MIAvXgvEZuXnt9mYx+QHzanlYlPOWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a3:b6:2a:43:d6:52:02:7c:27:c1:84:78:dc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Validity Not Before: Dec 17 09:01:04 2025 GMT Not After : Dec 18 09:01:04 2025 GMT Subject: CN=22d0a5d249a00f73e5af5245efc350d0d74a79fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:ae:22:44:5f:04:f4:28:08:40:90:94:94: e4:d0:38:7d:00:13:b0:8b:32:a6:ae:d0:7f:45:aa: d1:09:34:30:d8:99:cc:3e:d2:e0:0a:52:3b:ef:48: a0:84:fb:cf:40:61:fa:66:a4:5c:48:e9:f2:83:b5: 46:94:e8:3d:bb:54:42:aa:7f:91:9f:3f:6e:7d:6f: e2:f2:6e:6d:30:d3:61:57:92:87:ef:8a:35:7c:58: fd:5f:99:8e:db:7c:5d:29:17:f5:5d:89:7d:b2:83: a2:8e:08:1c:af:46:93:81:9a:42:3e:6c:ef:c1:7f: 26:19:c3:2e:c7:f7:3c:fa:a9:b5:65:8e:56:fe:37: e6:d0:d0:22:56:02:cd:85:ca:fe:e2:15:08:9f:a8: 17:55:96:4d:f2:bd:73:c2:69:a2:cf:22:99:01:57: 3e:43:19:31:26:5f:0a:72:73:13:f6:a7:ef:15:8a: 68:85:23:5a:c5:9f:04:df:bc:4b:76:f2:b4:40:5b: cc:77:17:a4:1a:e2:f3:7b:ee:ac:dd:22:19:59:98: 7d:06:fc:b0:c5:88:bb:ae:8b:62:7a:29:52:78:ee: 3c:08:11:d2:f3:37:e2:ab:cf:e3:ac:ea:6c:76:07: 16:3b:76:cc:cc:25:c4:7d:2b:43:fd:d8:39:83:ae: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D0:A5:D2:49:A0:0F:73:E5:AF:52:45:EF:C3:50:D0:D7:4A:79:FB X509v3 Authority Key Identifier: keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:12:df:21:05:89:7a:58:6d:75:84:1f:81:a4:56:36:95:23: 72:90:df:bf:42:6a:09:a2:d5:ad:85:9c:64:ac:7b:1b:de:0f: ce:67:64:b7:65:1b:3f:4d:cc:fd:30:a5:7c:84:2e:f2:f4:a5: 51:f9:d2:5d:69:11:22:c8:ac:ad:5d:e6:fc:47:f3:a6:bc:1f: 5b:ab:2b:6b:6c:8a:91:0a:00:e1:81:36:7b:0d:06:17:86:7d: 94:54:9d:1f:90:5e:e8:be:56:b7:85:8d:0d:77:ec:f0:31:8e: 83:84:7d:7e:17:cf:ce:7d:1e:09:27:a6:e0:08:e4:d5:35:86: ab:79:1e:d9:a9:bc:11:af:03:42:b2:33:c9:a2:fa:04:b8:57: c1:31:a9:92:79:f6:a8:c6:11:38:b7:ee:b3:87:3c:8d:45:5a: 0f:ef:7b:5f:53:10:d2:01:48:24:4b:a0:5b:a7:9f:db:cc:47: 06:6c:ce:df:37:a6:c1:8e:05:88:87:89:f3:da:c9:a8:c8:e9: 3a:be:51:eb:4e:82:f8:28:6f:cf:1c:5e:73:d4:88:25:c1:ad: 9a:25:eb:de:6f:79:af:29:d6:90:b1:1c:45:99:34:50:44:b5: c2:af:7c:60:c0:1b:bf:40:d2:8e:79:59:65:f1:71:f0:61:65: 84:bc:8c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqO2KkPWUgJ8J8GEeNwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmUzZjZmNmQ5ODcxNGUwMWYwOGM3M2IyNjQ0MzY4Nzc0 ZTg2NjAwHhcNMjUxMjE3MDkwMTA0WhcNMjUxMjE4MDkwMTA0WjAzMTEwLwYDVQQD EygyMmQwYTVkMjQ5YTAwZjczZTVhZjUyNDVlZmMzNTBkMGQ3NGE3OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN2uIkRfBPQoCECQlJTk0Dh9ABOw izKmrtB/RarRCTQw2JnMPtLgClI770ighPvPQGH6ZqRcSOnyg7VGlOg9u1RCqn+R nz9ufW/i8m5tMNNhV5KH74o1fFj9X5mO23xdKRf1XYl9soOijggcr0aTgZpCPmzv wX8mGcMux/c8+qm1ZY5W/jfm0NAiVgLNhcr+4hUIn6gXVZZN8r1zwmmizyKZAVc+ QxkxJl8KcnMT9qfvFYpohSNaxZ8E37xLdvK0QFvMdxekGuLze+6s3SIZWZh9Bvyw xYi7rotieilSeO48CBHS8zfiq8/jrOpsdgcWO3bMzCXEfStD/dg5g64SiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLQpdJJoA9z5a9SRe/DUNDXSnn7MB8GA1UdIwQY MBaAFO3+P29tmHFOAfCMc7JkQ2h3ToZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMt ZWI0YTk2YzM4YzZmLzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMtZWI0YTk2YzM4YzZm LzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphLfIQWJ elhtdYQfgaRWNpUjcpDfv0JqCaLVrYWcZKx7G94Pzmdkt2UbP03M/TClfIQu8vSl UfnSXWkRIsisrV3m/EfzprwfW6sra2yKkQoA4YE2ew0GF4Z9lFSdH5Be6L5Wt4WN DXfs8DGOg4R9fhfPzn0eCSem4Ajk1TWGq3ke2am8Ea8DQrIzyaL6BLhXwTGpknn2 qMYROLfus4c8jUVaD+97X1MQ0gFIJEugW6ef28xHBmzO3zemwY4FiIeJ89rJqMjp Or5R606C+Chvzxxec9SIJcGtmiXr3m95rynWkLEcRZk0UES1wq98YMAbv0DSjnlZ ZfFx8GFlhLyM4g== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:52 2025 by rpki-client