This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json) Hash identifier: DX+BnlbLmlrKTnMO3UZtza5J4VsGeEj2KhF2R80jcPY= Subject key identifier: E4:2C:01:ED:CA:78:29:F6:06:52:11:92:C1:C8:C8:46:BC:2B:AE:A2 Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225 Certificate serial: 019AF38921B450DAAC6719035A6412118CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft Manifest number: 0C5A Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: sII5bsi/BFwwG16Phc2ALUY0hQj8BXhzS4ubnmfm+RA=) 2: YSH0QfgktL4T3PqTj2iClyuBZuc.roa (hash: otGtnOmBuu+IdPmE0dcRqAI5P+FLdodcVi6Fo/18JQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:21:b4:50:da:ac:67:19:03:5a:64:12:11:8c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225 Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=e42c01edca7829f606521192c1c8c846bc2baea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:27:aa:1e:8a:4a:c3:4e:09:e3:f1:3a:dd: 5f:a4:5e:d9:9b:cc:9a:9b:b9:74:25:a1:6c:3e:08: 26:40:2b:96:73:32:16:af:f5:e4:ac:31:60:22:db: 82:07:79:95:bc:68:32:be:46:da:27:2a:26:28:6f: cf:9f:54:17:46:f6:d7:4c:6a:02:1b:b7:c0:8d:34: 98:ed:74:13:e6:1a:bc:ad:00:4b:11:85:51:c1:6e: c8:6f:e2:e1:1d:be:9c:4c:f8:39:f0:8e:b2:33:bb: ac:b2:ab:50:13:0e:22:49:e8:ba:99:cf:0a:b1:b6: 5f:f7:4e:37:ca:bd:2f:c9:7d:49:c3:90:f5:5d:ba: bc:cc:07:6f:b3:d4:2f:ee:bf:fd:cb:66:51:e1:20: 9e:16:8b:4f:12:3d:e8:cd:39:70:81:00:8a:56:46: 38:db:43:d4:8e:a9:91:07:2b:74:fe:05:84:e8:bb: 58:b9:2a:cc:18:17:5a:c1:46:80:88:46:c7:89:b4: 53:04:45:0a:12:fb:80:cc:ce:d4:fe:66:ef:76:13: c3:9d:4e:15:00:b0:b6:e9:5f:03:85:e1:cc:24:bc: f4:24:9a:a9:12:c2:91:e7:f0:15:13:4b:05:7d:62: 1f:5c:ff:31:af:6e:4f:1e:d7:c2:00:a6:8b:d1:5c: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:01:ED:CA:78:29:F6:06:52:11:92:C1:C8:C8:46:BC:2B:AE:A2 X509v3 Authority Key Identifier: keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b3:cd:4d:c5:cf:6e:47:86:ff:01:37:12:f1:79:31:0d:d2: d1:2e:ff:f3:48:1d:30:60:57:2c:66:76:16:70:e5:ec:84:43: 94:59:e5:bc:b4:ce:78:ff:79:ce:0f:88:4d:1a:5f:1c:ac:d2: 3d:43:3a:e0:d5:27:e8:17:8a:58:c1:32:b1:62:1d:ae:fc:af: c4:a2:9a:65:7f:13:6e:36:98:b1:24:6d:0e:e0:4d:aa:7f:c0: 51:61:83:ef:ee:80:75:c6:4c:fc:47:04:ed:f1:58:28:00:44: d2:22:a1:a7:ff:aa:59:ea:b8:ee:00:b7:48:c7:2e:6b:78:72: e1:68:1f:87:31:d0:be:73:95:2e:aa:af:42:4a:dd:2c:80:c5: 79:65:cf:49:d8:2a:4c:5e:29:82:d3:c7:71:6c:9b:e7:e6:ef: ad:c2:7d:78:6f:09:7b:28:b4:2e:37:12:45:6b:75:37:6c:96: a4:a9:1a:e5:7b:13:b6:59:3a:d3:0f:5c:22:3e:15:06:b8:a9: 73:96:77:76:c7:a5:cb:e5:6a:81:60:fa:73:a0:28:18:75:ef: 71:93:43:79:6e:4a:99:f0:8d:b9:24:c7:6c:51:c4:21:f4:51: 5b:85:a4:4c:7a:cb:e7:af:d0:06:eb:fa:56:cf:6b:55:14:6f: 42:f4:58:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSG0UNqsZxkDWmQSEYzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTI2OTE4NWY2M2RjMzM1NjAzN2Y3MTNjZThhMDkwOWZm MDcyMjUwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EyhlNDJjMDFlZGNhNzgyOWY2MDY1MjExOTJjMWM4Yzg0NmJjMmJhZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAposnqh6KSsNOCePxOt1fpF7Zm8ya m7l0JaFsPggmQCuWczIWr/XkrDFgItuCB3mVvGgyvkbaJyomKG/Pn1QXRvbXTGoC G7fAjTSY7XQT5hq8rQBLEYVRwW7Ib+LhHb6cTPg58I6yM7ussqtQEw4iSei6mc8K sbZf9043yr0vyX1Jw5D1Xbq8zAdvs9Qv7r/9y2ZR4SCeFotPEj3ozTlwgQCKVkY4 20PUjqmRByt0/gWE6LtYuSrMGBdawUaAiEbHibRTBEUKEvuAzM7U/mbvdhPDnU4V ALC26V8DheHMJLz0JJqpEsKR5/AVE0sFfWIfXP8xr25PHtfCAKaL0VxQPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQsAe3KeCn2BlIRksHIyEa8K66iMB8GA1UdIwQY MBaAFOySaRhfY9wzVgN/cTzooJCf8HIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUt YTZjOGJkODc0MmE0LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUtYTZjOGJkODc0MmE0 LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObPNTcXP bkeG/wE3EvF5MQ3S0S7/80gdMGBXLGZ2FnDl7IRDlFnlvLTOeP95zg+ITRpfHKzS PUM64NUn6BeKWMEysWIdrvyvxKKaZX8TbjaYsSRtDuBNqn/AUWGD7+6AdcZM/EcE 7fFYKABE0iKhp/+qWeq47gC3SMcua3hy4WgfhzHQvnOVLqqvQkrdLIDFeWXPSdgq TF4pgtPHcWyb5+bvrcJ9eG8Jeyi0LjcSRWt1N2yWpKka5XsTtlk60w9cIj4VBrip c5Z3dsely+VqgWD6c6AoGHXvcZNDeW5KmfCNuSTHbFHEIfRRW4WkTHrL56/QBuv6 Vs9rVRRvQvRY2A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:20 2025 by rpki-client