This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json) Hash identifier: cEk2V951k0MCTS4HYE0WRgtP8GoZbe1v3KEQzwmp3I8= Subject key identifier: 75:B0:19:A7:AA:26:BA:2F:43:37:6B:1A:FD:FE:BF:1E:9E:E5:CD:58 Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Certificate serial: 019AF2095CFC4F14188F6B29FD2773FAB76A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: zpjidVABGx3rwgbBIKcmJ28TEz+VfkoTu+dOmWTxHhs=) 2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5c:fc:4f:14:18:8f:6b:29:fd:27:73:fa:b7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=75b019a7aa26ba2f43376b1afdfebf1e9ee5cd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:e2:22:33:51:4f:f5:53:dc:90:aa:25:84: b2:3c:89:db:69:e1:9b:80:3c:5b:cd:6c:2f:5c:f2: eb:e6:92:33:ea:1e:67:dc:4b:43:f2:a2:a2:10:3a: 60:39:3a:dc:2a:82:c6:a7:82:07:12:92:ea:4f:c3: 26:9e:51:a5:bd:c7:5a:53:ec:0a:22:69:db:c0:d5: dc:40:4f:d2:c5:d1:f9:1c:ef:82:23:c2:eb:aa:f1: 01:51:fc:86:45:07:c9:b4:bd:08:ad:be:66:a4:54: d6:20:32:c6:2c:d8:f9:a1:41:02:85:df:54:a4:24: cb:40:63:90:42:2a:d1:56:b6:d1:cb:a4:d5:07:20: 77:be:c3:be:2e:1b:b5:10:7e:ec:f7:87:fc:d3:5e: 2a:7d:bf:a4:e1:51:30:ad:c4:eb:df:af:4b:6f:e7: 52:0b:da:e7:aa:48:f5:a7:40:9e:0e:36:9a:0a:8a: dc:05:2f:e8:c4:22:f7:7d:5c:ee:fe:a8:f0:01:2d: 60:16:f9:9a:2b:0e:bf:94:8d:f7:84:3e:49:16:30: b6:da:ac:da:68:49:65:e9:0d:6d:81:5d:7e:05:3e: 5c:b5:47:43:31:62:9f:d7:56:b2:c6:1c:9a:29:6c: fa:47:28:fb:94:44:f3:e8:41:db:55:a0:d9:7f:83: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B0:19:A7:AA:26:BA:2F:43:37:6B:1A:FD:FE:BF:1E:9E:E5:CD:58 X509v3 Authority Key Identifier: keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fc:0a:be:19:ee:d7:de:b6:18:d7:69:43:9e:db:f0:fb:36: 7d:86:5f:02:25:80:e4:1a:77:77:86:cb:ab:23:1d:55:6f:ea: b8:45:dc:8c:cc:a7:76:fa:27:15:ec:62:dd:9f:09:94:60:a3: 49:51:43:99:69:24:13:93:0e:09:23:25:3f:1c:c2:68:21:a4: a2:66:35:54:4d:a4:e8:e3:13:2f:fb:99:c7:b5:81:c0:a2:38: 7b:39:7a:89:7b:11:37:fc:fb:35:d7:26:f2:f5:88:64:5f:eb: cc:a4:de:8d:ad:ae:76:05:7c:27:c8:e8:a6:c9:95:cd:ea:ca: bf:75:93:8c:c1:b1:f6:92:cb:cd:25:e2:f9:84:32:d8:d1:de: f3:0a:4d:dd:06:77:09:bf:d0:1b:23:6a:88:aa:41:3e:e7:1e: b3:12:f1:ec:89:99:12:18:99:a6:6c:27:78:5a:f0:a9:9f:e2: 3c:e8:53:38:c9:2c:34:bb:a5:08:27:99:2e:5a:57:fe:b9:73: 54:c5:66:cb:c4:5b:3f:ea:32:6d:e4:06:3c:85:af:33:04:4d: 01:68:a1:f5:c7:26:89:16:a8:08:c2:83:83:55:3f:22:51:16: 3a:64:7f:a5:58:fe:ab:dd:55:6f:6d:43:90:0a:0f:ec:3b:4c: e7:6b:ea:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVz8TxQYj2sp/Sdz+rdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk NjEyMjAwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD Eyg3NWIwMTlhN2FhMjZiYTJmNDMzNzZiMWFmZGZlYmYxZTllZTVjZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZPiIjNRT/VT3JCqJYSyPInbaeGb gDxbzWwvXPLr5pIz6h5n3EtD8qKiEDpgOTrcKoLGp4IHEpLqT8MmnlGlvcdaU+wK ImnbwNXcQE/SxdH5HO+CI8LrqvEBUfyGRQfJtL0Irb5mpFTWIDLGLNj5oUEChd9U pCTLQGOQQirRVrbRy6TVByB3vsO+Lhu1EH7s94f8014qfb+k4VEwrcTr369Lb+dS C9rnqkj1p0CeDjaaCorcBS/oxCL3fVzu/qjwAS1gFvmaKw6/lI33hD5JFjC22qza aEll6Q1tgV1+BT5ctUdDMWKf11ayxhyaKWz6Ryj7lETz6EHbVaDZf4OP6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWwGaeqJrovQzdrGv3+vx6e5c1YMB8GA1UdIwQY MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1 LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfwKvhnu 1962GNdpQ57b8Ps2fYZfAiWA5Bp3d4bLqyMdVW/quEXcjMyndvonFexi3Z8JlGCj SVFDmWkkE5MOCSMlPxzCaCGkomY1VE2k6OMTL/uZx7WBwKI4ezl6iXsRN/z7Ndcm 8vWIZF/rzKTeja2udgV8J8jopsmVzerKv3WTjMGx9pLLzSXi+YQy2NHe8wpN3QZ3 Cb/QGyNqiKpBPucesxLx7ImZEhiZpmwneFrwqZ/iPOhTOMksNLulCCeZLlpX/rlz VMVmy8RbP+oybeQGPIWvMwRNAWih9ccmiRaoCMKDg1U/IlEWOmR/pVj+q91Vb21D kAoP7DtM52vqlw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:57 2025 by rpki-client