This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json) Hash identifier: iKNXH483ZPItM2NuIjE5aqIzD92YUXJp7OZPrf5AKzw= Subject key identifier: 34:41:FE:97:47:E5:FA:18:3D:72:33:D1:51:BC:9B:70:53:5A:1C:A1 Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Certificate serial: 019AF31B3E0D75BE47ABAA072885C74A4A1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=) 2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: DE3We7VyS7c+5jOtSrUm82h/De0Xav79pK6FfHvFouw=) 3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3e:0d:75:be:47:ab:aa:07:28:85:c7:4a:4a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=3441fe9747e5fa183d7233d151bc9b70535a1ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:79:02:a3:c2:ea:de:32:be:d8:eb:a3:4e:28: 45:7f:8c:a0:82:42:14:47:ba:02:6c:8e:95:80:af: 56:db:d7:58:a8:cc:aa:ee:50:de:69:52:01:89:01: bf:31:c6:78:d3:0c:91:12:76:61:ef:f3:1b:10:e2: 6b:8c:1c:d9:de:aa:48:5e:fe:13:12:f9:31:67:d7: 20:35:aa:00:a8:28:8b:6b:fd:de:21:54:cf:03:bf: cc:e4:0a:b5:1e:37:2b:9e:58:74:c9:46:66:06:82: 3d:04:82:ff:e0:a2:37:3c:02:f9:d8:20:e0:ca:1e: be:34:c7:f7:7a:ee:ed:84:b8:1f:db:d6:fa:5f:57: 17:57:3a:59:ae:02:a2:57:f2:74:b0:b0:4f:2c:eb: b1:2f:4f:92:60:3a:00:22:71:87:d6:d5:bd:4d:c1: 12:39:43:7f:83:75:3d:91:37:c9:6d:77:9f:58:45: 7f:d3:a0:4b:8d:4e:b1:ed:29:f1:1f:9d:af:cc:05: d2:7a:90:80:f6:b2:40:c5:fe:d1:7d:28:81:c3:2f: bd:db:56:9f:fc:63:b6:35:ea:56:16:cf:ee:b0:83: a0:82:86:34:b9:24:6b:d4:1b:34:ee:1b:64:9e:4e: 1b:ea:e7:ff:b7:bf:35:76:80:e1:97:d1:0e:98:bf: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:41:FE:97:47:E5:FA:18:3D:72:33:D1:51:BC:9B:70:53:5A:1C:A1 X509v3 Authority Key Identifier: keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:63:f8:a1:96:c9:e7:9b:88:41:48:56:5c:36:34:36:6e:2a: fa:9f:c4:e3:76:29:a9:9a:d2:6f:e7:e2:27:14:3e:4f:63:b4: 44:dd:55:17:22:49:0a:36:56:9d:5d:28:48:1a:37:58:ed:ef: 1b:7a:13:91:cf:78:47:d7:35:03:2f:48:08:fa:88:2a:9d:e4: 4e:62:12:bb:54:f8:f4:bd:31:87:25:29:0b:29:42:d5:07:40: 50:4a:d4:a6:03:9a:1b:a6:90:20:28:71:af:e4:c9:c7:eb:89: 6d:2e:84:cb:53:a2:78:3f:78:05:f5:46:51:55:e9:d4:8e:d2: 3a:df:4f:d8:60:ae:64:f6:fa:85:a8:b7:f1:5c:5f:d5:62:ee: 19:85:02:d9:58:60:c7:04:7d:db:61:7d:d2:94:61:cb:46:cf: 41:ac:ca:80:12:07:03:7e:91:a8:d2:ac:f7:9c:47:c0:06:66: e5:5c:41:12:46:de:bb:69:72:3f:c9:7b:40:17:bb:22:d7:6b: f3:fa:88:02:f0:74:1e:d0:10:98:a1:27:00:8c:58:28:b3:a6: 02:b9:10:7f:1a:62:ed:0d:7a:59:78:ce:74:6a:51:ff:c3:46: aa:17:80:73:80:e5:6a:70:4c:41:03:74:ca:28:ba:0d:67:88: 8f:dd:b7:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz4Ndb5Hq6oHKIXHSkodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz YzcyMzAwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EygzNDQxZmU5NzQ3ZTVmYTE4M2Q3MjMzZDE1MWJjOWI3MDUzNWExY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXkCo8Lq3jK+2OujTihFf4yggkIU R7oCbI6VgK9W29dYqMyq7lDeaVIBiQG/McZ40wyREnZh7/MbEOJrjBzZ3qpIXv4T EvkxZ9cgNaoAqCiLa/3eIVTPA7/M5Aq1Hjcrnlh0yUZmBoI9BIL/4KI3PAL52CDg yh6+NMf3eu7thLgf29b6X1cXVzpZrgKiV/J0sLBPLOuxL0+SYDoAInGH1tW9TcES OUN/g3U9kTfJbXefWEV/06BLjU6x7SnxH52vzAXSepCA9rJAxf7RfSiBwy+921af /GO2NepWFs/usIOggoY0uSRr1Bs07htknk4b6uf/t781doDhl9EOmL+DtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRB/pdH5foYPXIz0VG8m3BTWhyhMB8GA1UdIwQY MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt NTUzOGRjMGJiMDk5LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5 LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2P4oZbJ 55uIQUhWXDY0Nm4q+p/E43YpqZrSb+fiJxQ+T2O0RN1VFyJJCjZWnV0oSBo3WO3v G3oTkc94R9c1Ay9ICPqIKp3kTmISu1T49L0xhyUpCylC1QdAUErUpgOaG6aQIChx r+TJx+uJbS6Ey1OieD94BfVGUVXp1I7SOt9P2GCuZPb6hai38Vxf1WLuGYUC2Vhg xwR922F90pRhy0bPQazKgBIHA36RqNKs95xHwAZm5VxBEkbeu2lyP8l7QBe7Itdr 8/qIAvB0HtAQmKEnAIxYKLOmArkQfxpi7Q16WXjOdGpR/8NGqheAc4DlanBMQQN0 yii6DWeIj923VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:19 2025 by rpki-client