This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json) Hash identifier: /siJNPDq+Alve/y5VO1aaaggYmUj6c8j68Nz6hchdCU= Subject key identifier: 84:12:13:86:9C:85:7D:5B:AC:9F:8E:C9:06:40:CF:84:45:FB:72:6B Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Certificate serial: 019AF50A6632500FE0F0F70421C1953F7478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:30 +0000 Manifest this update: Sat 06 Dec 2025 19:01:30 +0000 Manifest next update: Sun 07 Dec 2025 19:01:30 +0000 Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: 5moUpOUjclqsDuXqyB/4VXZSg40qCV2XzzFn34L++YE=) 2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:66:32:50:0f:e0:f0:f7:04:21:c1:95:3f:74:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810 Validity Not Before: Dec 6 19:01:30 2025 GMT Not After : Dec 7 19:01:30 2025 GMT Subject: CN=841213869c857d5bac9f8ec90640cf8445fb726b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:86:71:f3:d6:37:a5:3f:a5:3d:9e:34:e2: 53:07:66:6f:1b:0b:5a:f4:f4:55:62:65:f2:86:57: 8a:e0:ad:e5:47:7b:41:eb:aa:31:12:69:2b:79:0b: 98:d0:59:9b:e3:31:b7:6f:7d:3e:5c:d9:06:68:cd: 58:5a:c8:b0:a6:23:73:e9:36:5c:26:63:7f:e6:5a: 9f:ce:4d:67:7f:5d:45:a9:9b:8b:d8:fc:69:99:79: e6:40:02:9d:b6:e9:3c:46:28:a8:d0:19:e3:bc:d2: ce:43:5e:dd:5d:3e:59:f2:f5:2e:c8:6c:ec:ca:44: e5:7e:21:05:f2:4f:1c:cd:4e:30:4a:4a:17:90:84: c1:73:5e:86:e3:e7:f9:16:de:8c:6a:e9:16:55:f2: 1b:b3:21:3c:2a:59:97:59:c1:bb:4e:80:16:63:e7: 62:78:64:b0:e7:cb:56:91:f0:02:d1:91:9c:6e:b1: b6:9f:81:b7:a1:5e:11:2c:05:89:4f:5a:78:b2:fb: 80:c0:2c:2a:ab:e4:4a:71:22:f8:fe:21:ce:09:d9: 71:d7:72:68:17:a5:d3:a7:a1:31:0f:93:b5:37:37: 29:ed:4f:18:47:75:e6:27:a7:a7:7e:c7:e1:3f:a6: cb:4a:b3:35:a4:d5:8b:a5:6d:87:4d:82:93:5f:fc: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:13:86:9C:85:7D:5B:AC:9F:8E:C9:06:40:CF:84:45:FB:72:6B X509v3 Authority Key Identifier: keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:67:c9:a8:7a:d7:f0:92:5b:55:6f:79:c5:45:85:33:6b: dd:42:20:ca:73:b5:b6:ce:5d:fa:05:4a:5c:b3:75:1a:4f:26: d4:e7:9e:c5:f3:46:46:d0:01:2c:53:5c:bb:a0:a8:f3:25:21: 02:15:3e:d2:50:a6:00:e8:67:12:fe:cb:5a:c2:a9:cf:df:2e: df:b7:ed:0b:19:51:35:2f:35:e4:14:2b:85:96:77:ea:bb:9f: 0e:f0:18:71:b4:c9:7a:3f:82:a5:b3:45:02:c2:cd:5c:f8:85: 3b:4c:11:46:a3:38:63:74:73:63:1d:f0:d8:47:10:b0:dc:57: a6:6d:35:64:3d:ef:51:88:fd:4b:2f:73:f4:34:ec:80:ff:63: d9:33:16:23:f6:4a:7d:0e:a3:11:d1:9d:7f:02:4c:29:61:bc: 14:43:a1:90:b2:9d:4d:61:c4:2a:e1:36:9d:7f:f2:77:c0:82: 19:e8:5a:d6:9c:41:2d:44:2b:03:e5:ad:85:b3:58:91:1c:2d: ea:1c:36:a2:73:ab:cd:f6:2a:45:a5:5d:f0:7f:db:c7:fc:fc: 68:12:54:4a:71:51:85:58:3a:85:c0:ec:e3:06:d0:04:2d:57: c0:fb:75:82:3f:15:b4:02:db:37:70:bb:91:09:7a:1d:e3:13: 62:1e:ff:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmYyUA/g8PcEIcGVP3R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzI0MjdjYjJmYWY4YmQ5YjZkZDlhZTEzN2M0ZDQ5MTRh OGU4MTAwHhcNMjUxMjA2MTkwMTMwWhcNMjUxMjA3MTkwMTMwWjAzMTEwLwYDVQQD Eyg4NDEyMTM4NjljODU3ZDViYWM5ZjhlYzkwNjQwY2Y4NDQ1ZmI3MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0iGcfPWN6U/pT2eNOJTB2ZvGwta 9PRVYmXyhleK4K3lR3tB66oxEmkreQuY0Fmb4zG3b30+XNkGaM1YWsiwpiNz6TZc JmN/5lqfzk1nf11FqZuL2PxpmXnmQAKdtuk8Riio0BnjvNLOQ17dXT5Z8vUuyGzs ykTlfiEF8k8czU4wSkoXkITBc16G4+f5Ft6MaukWVfIbsyE8KlmXWcG7ToAWY+di eGSw58tWkfAC0ZGcbrG2n4G3oV4RLAWJT1p4svuAwCwqq+RKcSL4/iHOCdlx13Jo F6XTp6ExD5O1Nzcp7U8YR3XmJ6enfsfhP6bLSrM1pNWLpW2HTYKTX/y6HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQSE4achX1brJ+OyQZAz4RF+3JrMB8GA1UdIwQY MBaAFOxyQnyy+vi9m23ZrhN8TUkUqOgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUt NGRmM2RiODA3MzI3LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUtNGRmM2RiODA3MzI3 LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQlnyah6 1/CSW1VvecVFhTNr3UIgynO1ts5d+gVKXLN1Gk8m1OeexfNGRtABLFNcu6Co8yUh AhU+0lCmAOhnEv7LWsKpz98u37ftCxlRNS815BQrhZZ36rufDvAYcbTJej+CpbNF AsLNXPiFO0wRRqM4Y3RzYx3w2EcQsNxXpm01ZD3vUYj9Sy9z9DTsgP9j2TMWI/ZK fQ6jEdGdfwJMKWG8FEOhkLKdTWHEKuE2nX/yd8CCGeha1pxBLUQrA+WthbNYkRwt 6hw2onOrzfYqRaVd8H/bx/z8aBJUSnFRhVg6hcDs4wbQBC1XwPt1gj8VtALbN3C7 kQl6HeMTYh7/tg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:08 2025 by rpki-client