This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json) Hash identifier: tGdRx7tIzWZpBE2qySBspuUOMogiGvnwKBaza9TNf8A= Subject key identifier: E6:A6:EA:B9:BD:F9:22:60:3F:3E:55:D1:89:A0:95:8A:C3:8F:AF:2F Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Certificate serial: 019B2F9E0BF216C01218E5E655C642444CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 04:00:45 +0000 Manifest this update: Thu 18 Dec 2025 04:00:45 +0000 Manifest next update: Fri 19 Dec 2025 04:00:45 +0000 Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 1cxhkr2VWpAmsW3GQUwWzTa9SLkFoTHRSB+lJN38NXc=) 2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:0b:f2:16:c0:12:18:e5:e6:55:c6:42:44:4c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Validity Not Before: Dec 18 04:00:45 2025 GMT Not After : Dec 19 04:00:45 2025 GMT Subject: CN=e6a6eab9bdf922603f3e55d189a0958ac38faf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:a8:03:c3:7a:31:92:19:e1:35:d1:0f:a6: de:da:1d:b8:7e:5e:bc:54:48:75:24:99:0c:c4:83: 26:f6:b9:7c:f1:ac:bc:c2:3d:7b:ae:07:ae:a3:67: b1:34:50:28:19:c7:a0:24:e4:31:75:1d:c6:55:85: ec:91:5b:c0:79:b7:e6:21:be:be:46:65:d0:e7:c0: d0:dd:c5:08:77:47:4b:07:b9:7b:d2:22:62:da:72: 06:5b:99:55:17:cb:65:f9:3c:80:7e:6e:b7:2e:a0: 59:de:71:5b:b6:b5:f6:ad:92:51:3a:7c:f0:6d:3a: c4:89:81:a7:20:ba:8e:cb:e1:83:8a:43:a4:13:6d: f0:fb:a5:ff:15:5d:2d:f9:5c:a8:2f:bf:db:47:cc: 40:c8:27:fe:5c:a7:e4:a4:a7:43:6b:08:6d:c7:a4: 6d:67:61:7b:00:7a:fc:fa:c8:8e:d9:51:74:2d:66: 88:89:1a:88:b3:f1:e8:24:d2:82:3f:10:c7:a4:3c: b9:11:99:b9:df:83:98:3d:ed:28:12:e5:5c:d0:db: 6f:ab:b7:99:c2:3a:61:c6:21:a1:91:c8:69:f2:12: 6b:21:f7:5a:fe:cd:6a:e1:c1:69:96:f0:74:b6:b3: 4d:85:07:29:97:4d:34:ab:ff:7a:25:4f:51:21:77: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A6:EA:B9:BD:F9:22:60:3F:3E:55:D1:89:A0:95:8A:C3:8F:AF:2F X509v3 Authority Key Identifier: keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:db:fb:51:dd:f5:63:d3:29:c0:3a:b9:91:a8:ce:7c:2d:13: c6:c7:60:18:86:51:b4:25:1a:b6:ca:16:4a:51:e8:7d:64:24: d7:db:b2:5c:a7:3a:8f:0d:43:b7:48:ae:0d:fb:fd:81:5a:e1: 18:29:36:4e:23:cb:bf:26:96:fd:e4:67:4b:94:c2:3b:8f:d0: 12:84:23:d3:de:5d:e4:58:71:42:7c:66:ea:80:58:c0:09:ee: 72:07:4e:38:f0:15:7b:2c:06:d8:72:c3:d0:9e:2e:28:b5:dd: 3d:6a:5e:7b:d2:18:7f:71:78:68:d7:16:8c:e8:ec:fc:2b:85: f2:08:57:62:20:db:f8:68:67:5f:e2:9b:3b:95:51:3e:72:14: eb:01:97:4d:87:cb:ba:82:e0:4d:7b:02:79:73:aa:c0:1a:89: 10:4e:0c:1e:38:a8:67:4f:7c:03:05:51:bb:9a:5e:35:ee:d6: 83:d3:d3:1e:2a:a7:2b:03:9e:80:9a:ff:38:dc:63:42:1a:23: 6a:92:d2:24:fb:ba:2d:73:10:b5:d2:c8:06:9d:63:39:f0:47: 5b:f8:93:1b:b4:6b:01:6f:38:fb:f6:4b:9e:a7:c2:67:2f:0d: d9:0d:1c:b2:a3:d9:31:fa:2c:74:18:0e:fa:0e:82:96:fc:bd: da:d9:93:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvngvyFsASGOXmVcZCREzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYzhhMWFhZDAyMDU5NDNhNDU3MjM4OWJiNzQzMzRlMWNh Mjg0ODUwHhcNMjUxMjE4MDQwMDQ1WhcNMjUxMjE5MDQwMDQ1WjAzMTEwLwYDVQQD EyhlNmE2ZWFiOWJkZjkyMjYwM2YzZTU1ZDE4OWEwOTU4YWMzOGZhZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qaoA8N6MZIZ4TXRD6be2h24fl68 VEh1JJkMxIMm9rl88ay8wj17rgeuo2exNFAoGcegJOQxdR3GVYXskVvAebfmIb6+ RmXQ58DQ3cUId0dLB7l70iJi2nIGW5lVF8tl+TyAfm63LqBZ3nFbtrX2rZJROnzw bTrEiYGnILqOy+GDikOkE23w+6X/FV0t+VyoL7/bR8xAyCf+XKfkpKdDawhtx6Rt Z2F7AHr8+siO2VF0LWaIiRqIs/HoJNKCPxDHpDy5EZm534OYPe0oEuVc0Ntvq7eZ wjphxiGhkchp8hJrIfda/s1q4cFplvB0trNNhQcpl000q/96JU9RIXerIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOam6rm9+SJgPz5V0YmglYrDj68vMB8GA1UdIwQY MBaAFOzIoarQIFlDpFcjibt0M04cooSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEt NGE2OGYyMzVjMzg4LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEtNGE2OGYyMzVjMzg4 LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINv7Ud31 Y9MpwDq5kajOfC0TxsdgGIZRtCUatsoWSlHofWQk19uyXKc6jw1Dt0iuDfv9gVrh GCk2TiPLvyaW/eRnS5TCO4/QEoQj095d5FhxQnxm6oBYwAnucgdOOPAVeywG2HLD 0J4uKLXdPWpee9IYf3F4aNcWjOjs/CuF8ghXYiDb+GhnX+KbO5VRPnIU6wGXTYfL uoLgTXsCeXOqwBqJEE4MHjioZ098AwVRu5peNe7Wg9PTHiqnKwOegJr/ONxjQhoj apLSJPu6LXMQtdLIBp1jOfBHW/iTG7RrAW84+/ZLnqfCZy8N2Q0csqPZMfosdBgO +g6Clvy92tmTdg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:29 2025 by rpki-client