This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json) Hash identifier: +dpdcISQJpYMcAlCSjnUMLVxJAMxx4zq3hlNo9SI/E8= Subject key identifier: E1:4E:61:47:67:5D:BC:3C:E2:0C:BF:91:6D:5C:B8:B8:BF:A3:88:55 Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Certificate serial: 019B2BF8D02E3B8F58319FBC811ACE2509AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 11:01:24 +0000 Manifest this update: Wed 17 Dec 2025 11:01:24 +0000 Manifest next update: Thu 18 Dec 2025 11:01:24 +0000 Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: AMLDp3QxUx/pPT4dL0wYrEkCBA8i6et+AXJkxdQ8JgE=) 2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d0:2e:3b:8f:58:31:9f:bc:81:1a:ce:25:09:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Validity Not Before: Dec 17 11:01:24 2025 GMT Not After : Dec 18 11:01:24 2025 GMT Subject: CN=e14e6147675dbc3ce20cbf916d5cb8b8bfa38855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:cb:f2:22:74:e8:bc:c8:a6:88:ec:2d:6e:94: fb:aa:c5:9f:4c:16:4f:3b:1c:5f:38:54:a5:fe:26: 91:12:32:a3:08:fc:e1:63:27:c4:89:25:bc:91:72: ef:38:4b:ee:d5:7a:6f:6c:14:3c:ea:a0:00:1a:98: e5:ee:d3:76:f8:ec:2a:64:d0:f3:03:1c:58:73:ec: 2e:f9:b7:d4:7d:da:86:25:a9:33:86:83:d9:ef:a6: 91:e2:f2:5b:68:b0:72:4d:27:1a:73:3e:a0:2c:ac: 58:cd:ea:a8:d5:92:be:db:8f:d9:96:ad:52:7c:ab: 54:b4:6c:4f:e8:a8:c1:a2:34:4c:7b:c3:d5:70:30: 59:f0:f9:f8:f1:4d:9b:6b:04:b1:89:cb:13:e5:66: de:0b:66:3a:7c:77:1e:21:34:1e:05:10:74:06:ad: 36:ea:3f:2d:1d:23:df:95:6f:0b:03:24:28:50:eb: 82:90:47:b9:9d:6d:e6:13:5b:54:7a:00:8a:fd:1b: e6:e8:c4:c4:19:82:1e:3b:9f:c2:22:4d:f3:e2:1b: 29:c2:00:95:43:a4:d6:28:08:d2:03:88:b4:24:64: f3:7c:d2:9d:77:46:57:4c:2c:fb:69:19:01:51:a5: b3:e4:fc:f8:8e:0f:85:58:42:1e:b7:fe:db:02:1f: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:61:47:67:5D:BC:3C:E2:0C:BF:91:6D:5C:B8:B8:BF:A3:88:55 X509v3 Authority Key Identifier: keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:80:db:b3:ca:3a:68:d3:2c:42:d7:b3:ad:f6:ed:76:46:f8: 6e:07:91:44:0c:80:86:7f:f7:b8:e2:67:6f:84:c6:b8:f4:63: 15:73:4a:e4:49:35:c9:3c:0b:45:1e:5a:3f:8c:0b:5a:78:c9: 61:9c:c2:54:60:df:57:a6:a5:63:94:9b:aa:1c:d1:bd:7b:6c: ec:6d:a5:4f:10:94:04:f7:c4:fa:1d:ba:46:55:89:59:b4:44: 92:5e:6c:ea:ca:24:98:32:c3:51:45:1a:a2:68:40:3d:c2:b1: 1f:6e:22:ff:c0:b8:c4:52:92:f0:74:fe:a9:a2:61:55:07:80: 45:a3:18:c9:fa:e4:36:de:d6:38:00:dd:78:cb:29:9d:f5:9c: cb:78:41:e3:3c:11:52:ab:fc:02:12:0e:8d:8f:84:98:c7:61: 31:53:f7:7b:f2:6e:b0:7a:f8:a6:4a:05:91:1a:c7:a5:02:a2: 56:67:cf:94:bd:1c:da:1d:17:1c:dd:68:2e:9a:31:5a:1b:e4: a7:03:3c:be:a3:4c:e9:9b:8d:04:43:17:07:11:e5:37:49:2f: 53:00:ca:58:20:22:d5:16:ab:58:23:19:ed:eb:5a:ea:1c:6c: b3:18:ca:bc:e0:48:e2:8d:f1:c9:bb:d1:2c:f2:cd:b5:a1:79: 46:17:a5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NAuO49YMZ+8gRrOJQmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk NjEyMjAwHhcNMjUxMjE3MTEwMTI0WhcNMjUxMjE4MTEwMTI0WjAzMTEwLwYDVQQD EyhlMTRlNjE0NzY3NWRiYzNjZTIwY2JmOTE2ZDVjYjhiOGJmYTM4ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8vyInTovMimiOwtbpT7qsWfTBZP OxxfOFSl/iaREjKjCPzhYyfEiSW8kXLvOEvu1XpvbBQ86qAAGpjl7tN2+OwqZNDz AxxYc+wu+bfUfdqGJakzhoPZ76aR4vJbaLByTScacz6gLKxYzeqo1ZK+24/Zlq1S fKtUtGxP6KjBojRMe8PVcDBZ8Pn48U2bawSxicsT5WbeC2Y6fHceITQeBRB0Bq02 6j8tHSPflW8LAyQoUOuCkEe5nW3mE1tUegCK/Rvm6MTEGYIeO5/CIk3z4hspwgCV Q6TWKAjSA4i0JGTzfNKdd0ZXTCz7aRkBUaWz5Pz4jg+FWEIet/7bAh8lLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFOYUdnXbw84gy/kW1cuLi/o4hVMB8GA1UdIwQY MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1 LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4Dbs8o6 aNMsQtezrfbtdkb4bgeRRAyAhn/3uOJnb4TGuPRjFXNK5Ek1yTwLRR5aP4wLWnjJ YZzCVGDfV6alY5SbqhzRvXts7G2lTxCUBPfE+h26RlWJWbREkl5s6sokmDLDUUUa omhAPcKxH24i/8C4xFKS8HT+qaJhVQeARaMYyfrkNt7WOADdeMspnfWcy3hB4zwR Uqv8AhIOjY+EmMdhMVP3e/JusHr4pkoFkRrHpQKiVmfPlL0c2h0XHN1oLpoxWhvk pwM8vqNM6ZuNBEMXBxHlN0kvUwDKWCAi1RarWCMZ7eta6hxssxjKvOBI4o3xybvR LPLNtaF5RhelSw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:13 2025 by rpki-client