This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json) Hash identifier: dfy4tPUYRbadscXoN0vFZtvma0ehbM2ifi67GJuMtME= Subject key identifier: EF:7D:56:A8:E0:B7:7A:6E:C8:F2:D0:C3:2F:39:5A:BA:C3:AC:08:CC Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Certificate serial: 019AF35242CE74C5701F7DC8A793D9D80246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft Manifest number: 02BB Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: 4PvRdUt/eCoWYPaKG/PcgY47/lZsnZTEIGlK2gxPU7Q=) 2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:42:ce:74:c5:70:1f:7d:c8:a7:93:d9:d8:02:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=ef7d56a8e0b77a6ec8f2d0c32f395abac3ac08cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:cb:63:78:d9:dd:08:df:e3:40:c6:bb:a2: 60:2f:fd:52:9b:10:90:7d:75:86:f5:78:9d:8d:79: 62:30:3f:cb:b6:12:de:50:35:2f:9d:d1:5d:00:7f: ac:ff:b1:fb:20:04:e2:4f:82:bd:2b:a7:c7:be:67: 09:64:5a:a1:84:50:7d:29:60:64:83:38:cd:83:31: 8b:48:65:b7:31:8d:f7:45:76:0a:bc:25:2a:7e:8b: 6a:ad:a0:92:cd:98:9b:1f:ac:ef:b2:e8:ad:f8:07: 7c:04:b6:78:56:66:5b:1b:6e:84:61:f3:6e:14:d0: b8:94:49:4f:3b:a1:2c:20:e5:6e:01:e8:e2:9f:03: 12:b7:fa:21:3e:1e:80:b7:af:b9:db:29:b1:3b:d7: 51:90:22:95:a4:9d:6e:64:0a:c2:eb:7b:51:7f:fb: 84:12:7b:11:e2:2a:f4:10:37:a6:40:0a:31:5d:57: b9:92:64:de:13:f6:d7:f8:fd:49:81:2e:eb:40:ae: f6:25:cf:3f:5a:0b:3f:49:1d:12:4b:98:97:3c:cc: 34:df:e4:0b:b1:40:8e:df:10:2c:78:41:6a:0e:cd: 8d:61:48:00:24:5a:66:9c:a6:0a:12:a3:7e:6d:40: 7e:d1:e4:24:02:a6:b3:a6:d2:9d:69:45:db:2f:5f: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7D:56:A8:E0:B7:7A:6E:C8:F2:D0:C3:2F:39:5A:BA:C3:AC:08:CC X509v3 Authority Key Identifier: keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:6e:d9:9a:bc:f4:2c:40:72:c8:28:cd:92:50:7b:99:93: d6:c1:14:f6:90:66:13:75:af:de:a1:e9:af:36:73:8f:54:af: 3b:66:62:94:c9:69:36:3b:c0:5b:0b:b9:8f:fb:a7:b4:5d:b3: e1:18:e9:79:f5:ee:5b:3a:5a:ff:60:9e:bb:7a:08:71:9b:4f: bb:99:97:40:08:bf:21:1a:97:4b:59:e2:f4:e1:e9:d8:76:98: dc:45:e1:30:93:97:35:ec:98:5d:ce:4b:0c:82:32:aa:a4:ef: 02:68:00:73:2c:13:20:a7:96:19:fb:07:67:ba:84:38:f2:42: 69:63:c5:1f:cd:65:69:48:70:00:25:51:e0:3c:42:5e:02:95: 20:17:98:ce:83:c4:bc:07:ce:13:c4:92:f7:34:40:02:f6:99: 53:36:d3:9e:f1:39:e8:38:6e:ed:17:da:0f:2d:00:99:ec:15: 99:29:34:8e:1f:4a:2a:92:d9:e6:51:24:01:25:55:9a:0f:b4: ed:85:cd:1c:78:0d:47:40:8e:34:3d:05:f6:1e:80:ce:d7:a7: 42:16:fd:80:97:7d:8b:9e:43:79:db:99:66:bc:ab:6b:bf:75: 9b:92:23:b2:49:ca:b6:af:8e:70:4b:ed:83:10:1e:c5:5c:c3: 4d:bd:c7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkLOdMVwH33Ip5PZ2AJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzYTRhMDVmMzcwNTBmN2MwMzc5ZDM0ZjRmNDgxNGJk MjA5ZGYwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD EyhlZjdkNTZhOGUwYjc3YTZlYzhmMmQwYzMyZjM5NWFiYWMzYWMwOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyPLY3jZ3Qjf40DGu6JgL/1SmxCQ fXWG9XidjXliMD/LthLeUDUvndFdAH+s/7H7IATiT4K9K6fHvmcJZFqhhFB9KWBk gzjNgzGLSGW3MY33RXYKvCUqfotqraCSzZibH6zvsuit+Ad8BLZ4VmZbG26EYfNu FNC4lElPO6EsIOVuAejinwMSt/ohPh6At6+52ymxO9dRkCKVpJ1uZArC63tRf/uE EnsR4ir0EDemQAoxXVe5kmTeE/bX+P1JgS7rQK72Jc8/Wgs/SR0SS5iXPMw03+QL sUCO3xAseEFqDs2NYUgAJFpmnKYKEqN+bUB+0eQkAqazptKdaUXbL1+yJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO99Vqjgt3puyPLQwy85WrrDrAjMMB8GA1UdIwQY MBaAFOzfOkoF83BQ98A3nTT09IFL0gnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTkt ZWY4NzQwNWY5YTExLzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTktZWY4NzQwNWY5YTEx LzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmlu2Zq8 9CxAcsgozZJQe5mT1sEU9pBmE3Wv3qHprzZzj1SvO2ZilMlpNjvAWwu5j/untF2z 4RjpefXuWzpa/2Ceu3oIcZtPu5mXQAi/IRqXS1ni9OHp2HaY3EXhMJOXNeyYXc5L DIIyqqTvAmgAcywTIKeWGfsHZ7qEOPJCaWPFH81laUhwACVR4DxCXgKVIBeYzoPE vAfOE8SS9zRAAvaZUzbTnvE56Dhu7RfaDy0AmewVmSk0jh9KKpLZ5lEkASVVmg+0 7YXNHHgNR0COND0F9h6AztenQhb9gJd9i55DeduZZryra791m5IjsknKtq+OcEvt gxAexVzDTb3HJA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:16 2025 by rpki-client