This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft File: s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json) Hash identifier: F9+Z9qdrzAbr8zPSw9GMEJenKWe38bIBG0C6A9yzJZE= Subject key identifier: 75:7D:A1:23:4A:D4:C2:07:37:E2:D6:60:D6:46:66:86:64:BE:1D:2B Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80 Certificate issuer: /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080 Certificate serial: 019B31C352DB8700DF7CC02D8EDB89465760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft Manifest number: 08F1 Signing time: Thu 18 Dec 2025 14:00:42 +0000 Manifest this update: Thu 18 Dec 2025 14:00:42 +0000 Manifest next update: Fri 19 Dec 2025 14:00:42 +0000 Files and hashes: 1: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: hsk+lbLNxw9wpfYCRNjXnO/5z1UMuYUMZ2qVQjsB+jQ=) 2: sGUfZNonYxZsb_xTxnb3H4Yu91o.roa (hash: s4fR6r2ByqMIr6sZhA9/b2xFuO1KrvktMupAhaQVN8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:52:db:87:00:df:7c:c0:2d:8e:db:89:46:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080 Validity Not Before: Dec 18 14:00:42 2025 GMT Not After : Dec 19 14:00:42 2025 GMT Subject: CN=757da1234ad4c20737e2d660d646668664be1d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:6a:a7:5b:34:02:3a:93:78:40:f4:30:b9: 9a:a7:8b:a0:00:b6:b8:f2:53:03:67:34:86:6d:c7: d4:5b:ef:37:01:ce:88:7a:f2:26:7a:0a:37:06:d9: bb:bc:0d:04:85:ad:92:04:3a:f0:6b:df:21:92:ce: 48:aa:b6:d9:b1:0b:d3:fe:93:14:b8:f7:dc:b0:ac: 33:b5:21:21:4c:8b:9f:66:2d:05:46:54:5b:58:51: 96:78:8d:f7:ff:56:5b:1b:79:90:81:b5:fc:15:66: 3c:04:e5:7a:aa:ff:76:12:82:43:4e:b9:28:4a:21: 2d:c3:15:a5:66:f9:c4:4e:38:2d:09:da:d6:f6:86: cf:66:a2:96:85:5b:5a:47:ec:6b:f1:19:bd:9b:6e: 78:f5:c4:7e:53:17:30:ff:62:49:f9:22:ac:9b:dc: c4:38:c3:d1:0b:50:11:d7:56:75:8d:05:60:96:46: d7:ca:50:bc:13:df:a5:31:71:53:0a:52:98:53:e1: 64:30:c6:a4:af:96:b9:f5:c6:1d:72:13:c5:6a:34: 4a:a4:d7:d9:21:dd:eb:91:e9:8a:57:2a:55:f1:d0: 72:f5:ad:f0:03:17:05:db:ca:a9:60:c4:82:4b:de: c2:ce:46:22:70:98:3c:7a:f3:2d:0d:8b:f2:3d:ff: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:A1:23:4A:D4:C2:07:37:E2:D6:60:D6:46:66:86:64:BE:1D:2B X509v3 Authority Key Identifier: keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9a:55:35:7b:77:5e:df:7c:8b:88:67:dd:8a:28:72:22:21: ce:8a:bb:3d:45:f5:a2:7a:42:ea:20:7c:5b:7c:7e:5f:ad:3b: ef:55:44:8a:a7:df:71:fd:36:1f:87:aa:07:81:9c:71:5b:41: e9:14:d6:bf:c4:0b:25:14:60:55:f2:8e:ce:44:5c:27:97:f1: b5:ef:29:a5:91:87:fe:12:bd:36:35:3b:cf:c4:e3:e3:57:db: 97:9c:e2:09:f3:4f:44:cc:d3:d0:b4:ef:0f:19:a5:c2:18:52: 62:f5:cb:34:8b:9b:c2:58:0b:8e:83:48:b2:5d:8f:58:80:e7: c5:2e:c3:77:3e:d6:f0:8a:c2:f8:e5:fa:63:2d:3f:49:14:8b: 59:57:8e:7d:c6:d2:7a:21:bd:0b:02:e9:94:46:2b:52:ac:66: 04:ba:2c:74:f6:e0:5d:15:c1:54:3f:8f:c9:eb:af:98:d9:62: 39:4b:c0:07:9a:56:e2:a2:db:db:58:44:23:26:dd:6f:e7:10: 35:38:4c:15:ae:c3:dc:54:e6:c8:48:33:62:39:04:3d:44:69: f4:eb:20:c2:0f:cd:25:84:49:7b:76:c0:fa:83:f5:9d:35:77: 9b:63:b9:0c:62:57:52:57:3e:55:90:25:71:b9:08:1c:b5:03: 94:3b:90:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw1LbhwDffMAtjtuJRldgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjc3ZTUyY2M3NzdhMWVhZmU2OWE1MTdmOTVkMmMyMTlj MTkwODAwHhcNMjUxMjE4MTQwMDQyWhcNMjUxMjE5MTQwMDQyWjAzMTEwLwYDVQQD Eyg3NTdkYTEyMzRhZDRjMjA3MzdlMmQ2NjBkNjQ2NjY4NjY0YmUxZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVJqp1s0AjqTeED0MLmap4ugALa4 8lMDZzSGbcfUW+83Ac6IevImego3Btm7vA0Eha2SBDrwa98hks5IqrbZsQvT/pMU uPfcsKwztSEhTIufZi0FRlRbWFGWeI33/1ZbG3mQgbX8FWY8BOV6qv92EoJDTrko SiEtwxWlZvnETjgtCdrW9obPZqKWhVtaR+xr8Rm9m2549cR+Uxcw/2JJ+SKsm9zE OMPRC1AR11Z1jQVglkbXylC8E9+lMXFTClKYU+FkMMakr5a59cYdchPFajRKpNfZ Id3rkemKVypV8dBy9a3wAxcF28qpYMSCS97CzkYicJg8evMtDYvyPf/PawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV9oSNK1MIHN+LWYNZGZoZkvh0rMB8GA1UdIwQY MBaAFLO3flLMd3oer+aaUX+V0sIZwZCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUt YjRhZWU4YzVkNDhlLzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUtYjRhZWU4YzVkNDhl LzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5pVNXt3 Xt98i4hn3YoociIhzoq7PUX1onpC6iB8W3x+X60771VEiqffcf02H4eqB4GccVtB 6RTWv8QLJRRgVfKOzkRcJ5fxte8ppZGH/hK9NjU7z8Tj41fbl5ziCfNPRMzT0LTv DxmlwhhSYvXLNIubwlgLjoNIsl2PWIDnxS7Ddz7W8IrC+OX6Yy0/SRSLWVeOfcbS eiG9CwLplEYrUqxmBLosdPbgXRXBVD+PyeuvmNliOUvAB5pW4qLb21hEIybdb+cQ NThMFa7D3FTmyEgzYjkEPURp9Osgwg/NJYRJe3bA+oP1nTV3m2O5DGJXUlc+VZAl cbkIHLUDlDuQVg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:48:41 2025 by rpki-client