This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json) Hash identifier: wSOFFkKugE9hwQF6HBM71GPQCfwFCz55sri0mKZs2+w= Subject key identifier: 70:B1:07:7E:66:A2:69:77:0C:E7:97:3C:89:7F:30:27:4C:94:B8:45 Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6 Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6 Certificate serial: 019AF50B5AFD8AA6B525C32E30C5C5CD072A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft Manifest number: 0DCF Signing time: Sat 06 Dec 2025 19:02:32 +0000 Manifest this update: Sat 06 Dec 2025 19:02:32 +0000 Manifest next update: Sun 07 Dec 2025 19:02:32 +0000 Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: Z1CMD01Ul4kgBZ+gYbpIIQN6fUgxKLx0r1jBet9kE3Q=) 2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:5a:fd:8a:a6:b5:25:c3:2e:30:c5:c5:cd:07:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6 Validity Not Before: Dec 6 19:02:32 2025 GMT Not After : Dec 7 19:02:32 2025 GMT Subject: CN=70b1077e66a269770ce7973c897f30274c94b845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:e6:76:ac:dc:9e:a8:3f:5d:80:8d:47:6e: 60:69:ea:7e:ba:2d:ab:e3:af:0b:f4:ab:f4:f7:54: e7:88:8d:01:2a:d2:9d:85:58:6c:82:5a:b5:4c:e7: 52:27:9c:87:18:aa:05:28:f8:27:a3:d1:44:f5:87: d0:8c:67:d7:bb:91:73:38:35:33:7a:61:f6:de:93: 10:79:c1:d9:11:fa:6a:d2:72:30:42:57:23:ac:7a: 4e:f2:7d:ab:13:c6:03:37:46:8a:e9:4d:2b:e8:f1: 72:bc:fb:f4:e3:8d:3a:f3:c2:f5:7c:60:59:08:28: 3a:33:84:95:45:83:0b:76:77:6a:85:53:b2:b9:e3: ac:ca:f9:a4:22:f8:e4:a5:19:9e:8b:9c:7d:92:71: be:15:db:1c:ba:f1:25:a5:df:1d:7c:f6:2c:7b:23: a6:64:78:b5:e0:79:82:fd:b6:ec:ed:58:3a:75:97: fb:6f:bb:1f:d1:a8:5c:ce:11:17:d0:85:b6:55:a5: e3:3d:a6:28:b3:b4:0c:28:1f:99:86:57:32:22:79: 28:cb:36:9d:0e:ce:9b:1f:ec:f3:b7:cd:83:16:5e: ea:c7:d1:5b:86:18:3e:6d:ca:56:af:a6:6f:91:3a: 21:b1:10:af:e5:fa:31:07:59:ab:75:da:6c:0a:2b: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B1:07:7E:66:A2:69:77:0C:E7:97:3C:89:7F:30:27:4C:94:B8:45 X509v3 Authority Key Identifier: keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:45:6d:a6:e0:cc:4b:cb:0e:79:ac:ef:c7:65:bb:48:36:68: 5c:ed:38:2c:f4:2b:a1:5a:b3:d5:dd:45:1c:bd:bb:f2:11:af: e2:59:4b:95:5c:9e:08:1a:bd:1c:4f:57:a5:3c:f2:80:8a:12: 6d:84:6b:1f:7d:ab:0b:6b:2a:fd:d3:e9:ec:1b:b8:a4:ad:e4: 31:4b:f1:df:52:ec:a5:75:72:69:6c:e5:df:f9:12:07:46:50: 26:a4:b6:d1:59:71:8f:67:4f:eb:73:30:ad:2f:1c:c6:7e:9a: 48:aa:c5:a6:c6:c5:65:07:ca:b5:5e:91:5a:62:3e:f7:16:e5: c6:f6:c4:48:04:a2:11:aa:68:22:29:fd:43:2a:bc:15:9b:8d: 63:0e:37:d7:34:88:81:74:38:63:18:14:42:18:f0:7a:f6:af: b9:9e:6f:0c:e8:17:9d:ab:21:2d:57:a3:81:e4:06:92:32:73: 3e:1c:ea:7c:ce:f6:5c:29:c8:ee:79:12:ee:c7:9b:82:5e:49: ce:24:82:a0:ab:f9:b3:b5:a1:3c:bb:74:f5:31:de:47:1c:21: ba:23:45:d5:fa:53:0a:5f:04:61:97:29:8c:df:82:38:e9:3b: b3:0f:fd:90:2d:95:b5:75:b8:c4:11:22:cf:0e:fe:0c:15:92: 25:f3:57:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1r9iqa1JcMuMMXFzQcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2 NTViZTYwHhcNMjUxMjA2MTkwMjMyWhcNMjUxMjA3MTkwMjMyWjAzMTEwLwYDVQQD Eyg3MGIxMDc3ZTY2YTI2OTc3MGNlNzk3M2M4OTdmMzAyNzRjOTRiODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwPmdqzcnqg/XYCNR25gaep+ui2r 468L9Kv091TniI0BKtKdhVhsglq1TOdSJ5yHGKoFKPgno9FE9YfQjGfXu5FzODUz emH23pMQecHZEfpq0nIwQlcjrHpO8n2rE8YDN0aK6U0r6PFyvPv0440688L1fGBZ CCg6M4SVRYMLdndqhVOyueOsyvmkIvjkpRmei5x9knG+FdscuvElpd8dfPYseyOm ZHi14HmC/bbs7Vg6dZf7b7sf0ahczhEX0IW2VaXjPaYos7QMKB+ZhlcyInkoyzad Ds6bH+zzt82DFl7qx9Fbhhg+bcpWr6ZvkTohsRCv5foxB1mrddpsCituTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCxB35moml3DOeXPIl/MCdMlLhFMB8GA1UdIwQY MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3 LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEVtpuDM S8sOeazvx2W7SDZoXO04LPQroVqz1d1FHL278hGv4llLlVyeCBq9HE9XpTzygIoS bYRrH32rC2sq/dPp7Bu4pK3kMUvx31LspXVyaWzl3/kSB0ZQJqS20Vlxj2dP63Mw rS8cxn6aSKrFpsbFZQfKtV6RWmI+9xblxvbESASiEapoIin9Qyq8FZuNYw431zSI gXQ4YxgUQhjwevavuZ5vDOgXnashLVejgeQGkjJzPhzqfM72XCnI7nkS7sebgl5J ziSCoKv5s7WhPLt09THeRxwhuiNF1fpTCl8EYZcpjN+COOk7sw/9kC2VtXW4xBEi zw7+DBWSJfNX7w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:59 2025 by rpki-client