This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json) Hash identifier: j7lmYj9WYNMYYaBeEltNi7xKI3VrAc0rg26DdpsCnkM= Subject key identifier: 0D:FD:9E:E0:DC:9B:1B:42:91:C7:8C:D6:DF:17:69:B0:7B:62:04:7A Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Certificate serial: 019AF12EE75A506A3BA90090486EEF07AF09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft Manifest number: 04D7 Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=) 2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: Kv9TlHUZOzNXBJscuixnrPinyF9wkSEF5sUW1jSXNnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e7:5a:50:6a:3b:a9:00:90:48:6e:ef:07:af:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=0dfd9ee0dc9b1b4291c78cd6df1769b07b62047a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:fb:76:e0:42:06:2c:6f:09:48:80:f8:d5: d0:8f:71:7d:67:ab:e9:9d:09:f1:c4:0e:d1:ae:71: 8c:a0:8b:69:b9:a1:27:5f:a4:a6:fe:ad:e0:af:d8: 15:b0:72:52:ba:00:3d:30:7c:68:ef:e1:a1:c7:ca: b9:3f:24:96:56:d4:fa:c1:9b:05:28:2f:21:ef:c9: e9:84:5c:86:a4:59:8c:7a:aa:9e:dc:cc:ca:9e:4c: f7:71:05:1e:8f:ed:c1:99:a9:e8:a7:72:a2:80:18: 31:4b:3f:0b:f8:49:fe:8b:7f:5e:0a:a3:ff:9a:f9: 03:65:0b:ef:c3:08:17:e1:d7:f7:6d:f2:e5:6d:93: 22:c3:37:38:f8:a8:20:bc:aa:93:b0:f9:54:0e:b7: 75:68:8b:4c:44:12:2b:22:ed:42:25:35:ca:81:d8: bb:cc:d7:0f:29:eb:b0:11:45:ec:7e:dd:60:78:ef: 6b:7b:79:df:ff:c4:6a:21:b0:c4:e7:43:98:2a:f3: 91:32:87:e0:b6:37:ae:0a:3d:e4:80:6e:71:42:25: 33:ad:37:3c:de:82:8e:24:d6:ad:9a:7e:29:52:83: e9:9a:35:12:39:da:44:38:0b:41:bc:79:8c:0c:02: 54:35:67:b4:3e:19:f1:19:bd:6d:93:0e:8f:0d:46: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:9E:E0:DC:9B:1B:42:91:C7:8C:D6:DF:17:69:B0:7B:62:04:7A X509v3 Authority Key Identifier: keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6d:1a:34:40:bc:83:34:7d:b1:6c:3f:57:0e:97:3f:a4:f5: cc:96:a8:53:44:1f:35:c0:19:54:f6:9a:c2:de:a3:1f:1a:52: d4:35:02:e1:0c:72:f3:48:4f:49:1a:fd:22:ee:94:ef:c4:c1: d2:ce:0e:36:67:59:d5:77:78:31:6b:84:59:42:97:d3:a1:b7: 8c:f4:8f:8f:57:9a:7d:a1:50:88:8c:26:19:93:15:66:63:03: cf:98:06:7b:d6:fc:da:9f:33:4e:e5:09:54:86:16:23:ad:60: 71:35:c1:67:3c:da:66:9e:47:5f:f5:4f:d6:86:aa:6e:ff:b5: 15:7e:dc:5b:30:eb:e8:f8:fb:5e:56:f4:51:64:80:9f:80:21: 60:e1:c7:a0:a6:fa:43:37:a0:12:2a:e4:4d:50:ac:ed:5e:84: 8c:b4:31:e7:bb:0f:c9:83:6f:18:19:24:88:6a:1f:b1:94:09: 13:d0:6c:57:f9:d9:a1:56:51:b4:d0:92:63:dc:0c:7f:52:92: d6:32:15:a3:ae:b8:85:47:ac:2d:77:29:a7:e8:09:3f:ae:4a: 1c:34:e0:9b:0b:7a:d5:e8:97:c6:a9:f5:9f:7c:69:44:d0:04: 89:20:4a:2e:1c:ea:f1:99:35:e5:55:00:8c:32:6b:dc:61:8a: f2:4e:c7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLudaUGo7qQCQSG7vB68JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1 NTQ2Y2MwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EygwZGZkOWVlMGRjOWIxYjQyOTFjNzhjZDZkZjE3NjliMDdiNjIwNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL77duBCBixvCUiA+NXQj3F9Z6vp nQnxxA7RrnGMoItpuaEnX6Sm/q3gr9gVsHJSugA9MHxo7+Ghx8q5PySWVtT6wZsF KC8h78nphFyGpFmMeqqe3MzKnkz3cQUej+3Bmanop3KigBgxSz8L+En+i39eCqP/ mvkDZQvvwwgX4df3bfLlbZMiwzc4+KggvKqTsPlUDrd1aItMRBIrIu1CJTXKgdi7 zNcPKeuwEUXsft1geO9re3nf/8RqIbDE50OYKvORMofgtjeuCj3kgG5xQiUzrTc8 3oKOJNatmn4pUoPpmjUSOdpEOAtBvHmMDAJUNWe0PhnxGb1tkw6PDUZJbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA39nuDcmxtCkceM1t8XabB7YgR6MB8GA1UdIwQY MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1 LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW0aNEC8 gzR9sWw/Vw6XP6T1zJaoU0QfNcAZVPaawt6jHxpS1DUC4Qxy80hPSRr9Iu6U78TB 0s4ONmdZ1Xd4MWuEWUKX06G3jPSPj1eafaFQiIwmGZMVZmMDz5gGe9b82p8zTuUJ VIYWI61gcTXBZzzaZp5HX/VP1oaqbv+1FX7cWzDr6Pj7Xlb0UWSAn4AhYOHHoKb6 QzegEirkTVCs7V6EjLQx57sPyYNvGBkkiGofsZQJE9BsV/nZoVZRtNCSY9wMf1KS 1jIVo664hUesLXcpp+gJP65KHDTgmwt61eiXxqn1n3xpRNAEiSBKLhzq8Zk15VUA jDJr3GGK8k7HnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:05 2025 by rpki-client