This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json) Hash identifier: lbBzWUZ8cA1vunP6MenGJasx5QIgt9kpxg6ClqdjMEk= Subject key identifier: C1:66:20:D5:F5:E9:26:95:5D:BB:B7:F6:F4:01:61:17:33:BB:07:0A Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8 Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8 Certificate serial: 019AF12D3C552ABE41B01A565A60747C4CE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft Manifest number: 0CFA Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: e17yUIXgSghmcxl9TwSaQyMPCD+PgPgdbw6wonlzN/M=) 2: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (hash: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3c:55:2a:be:41:b0:1a:56:5a:60:74:7c:4c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=c16620d5f5e926955dbbb7f6f401611733bb070a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:04:2f:f7:a0:3e:1d:b5:72:51:0f:a7:2e: 8e:f1:f5:60:9b:05:55:e8:11:95:e0:90:2c:25:9d: 94:3b:6e:e0:4f:1f:7d:0e:94:0f:de:89:94:9a:72: 70:5d:19:6d:6e:f6:bd:82:fa:e9:9d:b0:c8:b9:37: 4a:36:99:8b:af:51:d6:89:e2:6d:e7:21:0d:bd:c8: d7:05:f1:b3:f8:4b:d0:37:57:2b:d5:ff:10:56:20: 78:d1:e8:de:7a:43:be:d4:4b:0c:98:18:42:92:eb: fd:61:fb:da:17:db:69:9f:53:b7:e2:15:58:b8:7e: 28:c8:4f:d4:1f:7a:b2:ae:71:b8:a1:73:09:7f:6b: 06:1c:da:bf:d7:69:22:62:31:23:c9:3b:d2:95:84: ee:92:bf:c8:2d:ed:c7:74:35:fc:26:f2:fc:1c:03: 5d:14:0e:b2:09:53:b2:6b:f5:0f:02:54:5f:fe:11: c3:63:a0:af:ae:19:0d:7b:8a:49:59:5a:4b:12:4f: ea:7a:67:bd:a0:af:4f:47:74:e2:0e:4e:49:55:c7: ec:cc:68:14:4d:6e:95:fa:3c:84:72:d6:b9:38:dd: 7a:27:2c:a5:b1:11:3d:1e:93:9b:32:10:4a:84:73: 6f:9b:2e:51:b4:6b:84:62:90:71:8f:c4:9a:52:da: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:66:20:D5:F5:E9:26:95:5D:BB:B7:F6:F4:01:61:17:33:BB:07:0A X509v3 Authority Key Identifier: keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:57:6b:92:86:86:ff:89:ac:93:01:30:02:77:e8:d2:c3:e9: 06:3d:ca:90:d0:62:88:d0:64:b9:2d:2f:c0:00:22:10:79:67: ae:c1:8f:4d:8b:d0:cc:27:78:86:53:70:7b:f9:07:4f:d6:db: 25:62:9b:81:56:a1:2b:51:6a:9e:3a:3b:77:7d:85:ac:7b:e8: 2f:dd:88:25:72:6c:15:59:9a:e9:c4:e4:1c:a7:3a:c6:a2:1f: fe:61:cd:b0:f5:80:1a:88:85:ed:70:8e:03:d6:ec:61:c5:97: ca:76:b2:f0:ad:b9:99:5e:2d:5b:0d:86:d3:cd:fb:97:a6:f8: 4c:94:8c:4e:ce:d8:8e:30:12:5d:7d:80:79:a4:98:a8:93:2e: e3:ac:b8:20:31:93:98:8a:63:3a:3d:39:5d:dd:92:58:53:dd: 66:2e:4b:dd:fc:36:ad:a2:80:76:12:66:67:46:89:6a:7d:32: 29:ca:30:db:07:c6:54:14:17:a7:de:b7:38:4d:14:f6:b1:56: bc:64:b5:b9:73:4f:6a:61:5b:91:fd:44:b8:d6:45:99:a6:35: 52:a2:1b:aa:11:40:23:02:2f:95:a2:9f:45:b9:cf:12:88:93: 49:ae:80:33:81:8f:5c:7c:12:6e:58:b8:3b:2d:5c:05:67:53: 3f:27:fd:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTxVKr5BsBpWWmB0fEzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzc3ZWQ5ZmExMWVjMTk5NTU1NTk3NjJkZTA0N2E1YTZl YjE0YTgwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EyhjMTY2MjBkNWY1ZTkyNjk1NWRiYmI3ZjZmNDAxNjExNzMzYmIwNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa4EL/egPh21clEPpy6O8fVgmwVV 6BGV4JAsJZ2UO27gTx99DpQP3omUmnJwXRltbva9gvrpnbDIuTdKNpmLr1HWieJt 5yENvcjXBfGz+EvQN1cr1f8QViB40ejeekO+1EsMmBhCkuv9YfvaF9tpn1O34hVY uH4oyE/UH3qyrnG4oXMJf2sGHNq/12kiYjEjyTvSlYTukr/ILe3HdDX8JvL8HANd FA6yCVOya/UPAlRf/hHDY6CvrhkNe4pJWVpLEk/qeme9oK9PR3TiDk5JVcfszGgU TW6V+jyEcta5ON16JyylsRE9HpObMhBKhHNvmy5RtGuEYpBxj8SaUtqaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFmINX16SaVXbu39vQBYRczuwcKMB8GA1UdIwQY MBaAFO43ftn6EewZlVVZdi3gR6Wm6xSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMt OWU3MWNiZDQyMTdiLzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMtOWU3MWNiZDQyMTdi LzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFdrkoaG /4mskwEwAnfo0sPpBj3KkNBiiNBkuS0vwAAiEHlnrsGPTYvQzCd4hlNwe/kHT9bb JWKbgVahK1Fqnjo7d32FrHvoL92IJXJsFVma6cTkHKc6xqIf/mHNsPWAGoiF7XCO A9bsYcWXynay8K25mV4tWw2G0837l6b4TJSMTs7YjjASXX2AeaSYqJMu46y4IDGT mIpjOj05Xd2SWFPdZi5L3fw2raKAdhJmZ0aJan0yKcow2wfGVBQXp963OE0U9rFW vGS1uXNPamFbkf1EuNZFmaY1UqIbqhFAIwIvlaKfRbnPEoiTSa6AM4GPXHwSbli4 Oy1cBWdTPyf9yw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:23 2025 by rpki-client