This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json) Hash identifier: SwBM2TDp98bsl829DXfcTlA6CxCQ3hDzW+hp9io4m54= Subject key identifier: 71:80:52:A9:36:49:BC:65:77:1D:88:DF:86:96:D0:D6:1E:FC:96:6E Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Certificate serial: 019AF2097E7B94FD4EAF1CEC50593C0D7B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft Manifest number: C9 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: 97TYi7UiqHBgt9TLukxhNc10f3rp7S+eQIhgVKv1Pik=) 2: QXgU6iZ9eTA61-_lrp-WFw2wrio.roa (hash: pI7i4CdNQU0hsPQOTDHwQvTJeIPilN2xVeBBH/PkqDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:7b:94:fd:4e:af:1c:ec:50:59:3c:0d:7b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=718052a93649bc65771d88df8696d0d61efc966e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:2e:b4:54:70:ce:92:b9:cf:25:bc:01:d9: 9b:3b:98:b2:b4:e4:46:0b:5c:3f:93:65:34:57:d3: 92:0f:9b:30:e0:60:6e:3f:88:0f:76:43:d1:29:8b: 8c:72:e0:2c:27:95:5c:20:f3:ec:63:da:f0:18:f2: 97:52:96:83:fa:3f:c9:bb:33:06:51:0d:20:51:26: 23:ed:7b:78:72:d4:8b:ef:86:4b:16:13:16:76:3f: 83:d3:97:4f:84:10:7f:3e:13:75:80:76:26:c5:83: 57:b2:b7:dc:73:69:ed:97:2e:ce:93:9c:71:1e:ab: 79:cb:d8:e6:df:7e:8e:97:62:90:7f:af:ab:8f:75: 9d:4e:85:f6:17:3a:1e:f9:6a:f3:60:17:da:e1:d6: 84:ca:5d:ec:0d:6e:73:30:2f:1c:34:aa:61:3c:8e: 47:a7:87:75:ac:82:1a:e6:99:88:80:55:13:04:81: 9a:20:81:b2:51:38:26:fe:02:a1:7b:4f:61:cc:a9: b4:3b:7e:b3:14:51:62:78:4a:0f:55:89:d8:2f:34: 77:0c:eb:d4:16:c3:d3:84:bf:94:1c:79:52:26:db: 64:df:f9:3e:dd:eb:a8:52:bb:19:b1:68:32:41:0d: a0:ed:75:13:01:4a:8b:45:be:8e:0c:d3:5b:ee:af: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:80:52:A9:36:49:BC:65:77:1D:88:DF:86:96:D0:D6:1E:FC:96:6E X509v3 Authority Key Identifier: keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3c:68:4e:3d:11:a4:16:eb:49:6e:7a:31:4f:ae:2f:33:7f: 4d:38:11:c8:b5:9b:d1:6d:2a:a6:72:e0:b6:66:93:13:2d:5b: 7c:15:12:ae:bf:59:2a:aa:ad:57:80:44:93:a1:61:78:a3:65: 16:cd:86:99:92:a2:4b:ec:e5:4f:92:9d:39:2c:02:cd:51:46: 88:2a:12:b4:97:51:24:a5:46:aa:2b:e4:76:c6:c5:9b:29:ec: 61:2b:97:dd:81:bc:be:9b:a4:19:ba:d5:38:29:52:be:79:e6: 34:68:f0:d4:aa:a1:84:01:ca:1b:c2:5d:86:bc:a7:a0:ea:fc: 98:e4:c0:9a:fc:eb:04:d7:6f:52:31:7e:d7:39:d0:25:04:28: 22:93:ff:cb:77:bf:75:17:2e:fa:30:5e:b2:8c:71:5f:9a:da: b7:f7:2c:7f:79:17:1e:67:3b:19:de:f6:a7:b6:01:b4:f7:bc: 26:33:75:f7:92:f8:dd:65:8a:f8:d3:d9:75:8b:a1:95:71:b0: 93:43:68:5e:b0:71:b7:4a:77:10:3b:9a:dd:7b:63:4c:ff:d0: 6f:23:1e:9a:0e:10:fb:0e:30:2f:1c:84:d8:b6:8d:e8:4d:44: 9e:ab:bb:a4:c7:67:23:1b:64:95:5d:c1:cd:72:37:0a:b8:b6: 6f:6c:ab:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX57lP1OrxzsUFk8DXuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjM0MjgzNzNkY2U4YTVmOTdmNDVlZmM2YzI4YjlmYmU3 Y2Q1NGQwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg3MTgwNTJhOTM2NDliYzY1NzcxZDg4ZGY4Njk2ZDBkNjFlZmM5NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhUutFRwzpK5zyW8AdmbO5iytORG C1w/k2U0V9OSD5sw4GBuP4gPdkPRKYuMcuAsJ5VcIPPsY9rwGPKXUpaD+j/JuzMG UQ0gUSYj7Xt4ctSL74ZLFhMWdj+D05dPhBB/PhN1gHYmxYNXsrfcc2ntly7Ok5xx Hqt5y9jm336Ol2KQf6+rj3WdToX2Fzoe+WrzYBfa4daEyl3sDW5zMC8cNKphPI5H p4d1rIIa5pmIgFUTBIGaIIGyUTgm/gKhe09hzKm0O36zFFFieEoPVYnYLzR3DOvU FsPThL+UHHlSJttk3/k+3euoUrsZsWgyQQ2g7XUTAUqLRb6ODNNb7q/JmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGAUqk2Sbxldx2I34aW0NYe/JZuMB8GA1UdIwQY MBaAFO4jQoNz3Oil+X9F78bCi5++fNVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUt M2Y3N2ZkNDI3OTlhLzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUtM2Y3N2ZkNDI3OTlh LzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDxoTj0R pBbrSW56MU+uLzN/TTgRyLWb0W0qpnLgtmaTEy1bfBUSrr9ZKqqtV4BEk6FheKNl Fs2GmZKiS+zlT5KdOSwCzVFGiCoStJdRJKVGqivkdsbFmynsYSuX3YG8vpukGbrV OClSvnnmNGjw1KqhhAHKG8JdhrynoOr8mOTAmvzrBNdvUjF+1znQJQQoIpP/y3e/ dRcu+jBesoxxX5rat/csf3kXHmc7Gd72p7YBtPe8JjN195L43WWK+NPZdYuhlXGw k0NoXrBxt0p3EDua3XtjTP/QbyMemg4Q+w4wLxyE2LaN6E1Enqu7pMdnIxtklV3B zXI3Cri2b2yrXw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:00 2025 by rpki-client