This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json) Hash identifier: MavBu/jMSkbE4fDKoQtam5/2/+nMQkKcXPCBwsNeYNE= Subject key identifier: 8C:E9:1A:C3:6D:60:30:A7:B4:56:00:E9:2E:BF:CC:1E:3E:C5:B7:F9 Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76 Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876 Certificate serial: 019AF19B9867F3B8C33662F443E97BB2CEB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: UuISdsEwp4kC/hSjvjhMMevqcjJkF052dnOPpz0vDTw=) 2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:98:67:f3:b8:c3:36:62:f4:43:e9:7b:b2:ce:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=8ce91ac36d6030a7b45600e92ebfcc1e3ec5b7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:04:8c:4a:b8:e9:93:b6:f4:e5:2f:da:a7: 9c:b0:94:b5:5a:3e:eb:0f:01:06:41:e5:e2:0a:81: 4e:ad:81:e9:a1:5f:b3:e7:1a:f0:7a:63:c0:2a:f8: b9:97:97:57:e5:06:2e:76:bb:ee:7d:0b:e7:ff:ce: 5d:42:5e:d3:28:3f:68:e6:da:33:c1:4d:a3:92:3e: 9b:ac:d3:11:fe:b4:df:80:56:c9:bf:fc:09:22:0f: 40:01:ae:46:56:2e:ec:54:49:1f:ee:e0:0d:df:e9: 77:6f:28:a8:a3:de:55:41:c0:e0:12:8e:11:d1:73: ba:72:85:6b:90:71:0b:53:fc:b8:af:60:f3:a7:8c: 1a:b0:c1:5a:8d:51:9d:74:fe:15:11:93:22:fc:f7: cc:e2:58:be:d8:e9:83:b1:da:84:8e:7c:ae:71:e5: c3:bc:af:1c:b4:b4:8e:f8:93:2f:05:dc:be:31:20: ee:0d:09:d6:84:f4:e0:ab:b5:b0:c8:e8:fb:13:cb: a3:2c:58:68:04:b6:c4:8b:66:64:1f:a3:8d:15:fe: 1e:ad:9c:77:f2:60:e1:64:cd:f6:38:f0:c3:f9:dd: b0:43:4b:cb:4f:29:60:e6:31:40:00:1b:15:bf:cf: 23:98:cc:57:9f:c0:01:5e:1e:fc:5b:13:f8:6e:cb: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:1A:C3:6D:60:30:A7:B4:56:00:E9:2E:BF:CC:1E:3E:C5:B7:F9 X509v3 Authority Key Identifier: keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d4:be:6d:67:e0:2c:c0:dd:cc:97:a9:f9:f1:c3:d6:cf:1a: 9d:9f:95:28:1a:f2:2f:4f:38:9b:f7:ac:67:74:26:80:56:44: 1d:2c:b0:60:d2:d1:aa:78:e6:34:df:36:68:b7:28:82:32:ee: 11:17:8f:f4:ca:05:f6:35:b1:e4:50:a1:9f:ae:96:0a:97:05: 1a:0e:72:c5:6e:23:d1:99:ee:0d:81:fb:8d:48:4b:47:90:37: 20:26:29:fd:d0:9a:17:0e:a9:c0:9b:9c:d6:30:df:d4:f5:0f: ae:e2:f0:1c:cd:ab:a0:65:e3:14:f5:85:ba:f2:dc:25:e1:fb: 16:9e:33:b3:39:5e:b5:43:b8:04:1b:74:65:b2:be:11:43:7f: 6f:f3:f8:82:ba:db:73:00:7e:83:b4:f6:8b:b4:36:6e:67:e4: e1:11:c5:60:12:10:95:92:7f:5c:c3:75:71:46:03:63:c8:ad: 85:13:06:73:46:0a:95:64:fd:8b:9a:55:c8:ab:e2:7a:a2:37: a1:05:47:33:a0:9d:1e:73:5c:21:a7:36:c5:54:71:ba:8d:dd: a0:07:c7:49:c7:da:a5:68:72:67:42:d1:01:d9:81:48:d9:71: c8:86:7c:c7:2b:b5:39:6d:2d:52:82:97:89:4d:1a:85:b4:71: 5c:7b:07:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5hn87jDNmL0Q+l7ss65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2QzZDdlNWNiZjE4YWY2NmI3ZjViNGE1ZTBhYzE5ZWNk Mzk4NzYwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg4Y2U5MWFjMzZkNjAzMGE3YjQ1NjAwZTkyZWJmY2MxZTNlYzViN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFoEjEq46ZO29OUv2qecsJS1Wj7r DwEGQeXiCoFOrYHpoV+z5xrwemPAKvi5l5dX5QYudrvufQvn/85dQl7TKD9o5toz wU2jkj6brNMR/rTfgFbJv/wJIg9AAa5GVi7sVEkf7uAN3+l3byioo95VQcDgEo4R 0XO6coVrkHELU/y4r2Dzp4wasMFajVGddP4VEZMi/PfM4li+2OmDsdqEjnyuceXD vK8ctLSO+JMvBdy+MSDuDQnWhPTgq7WwyOj7E8ujLFhoBLbEi2ZkH6ONFf4erZx3 8mDhZM32OPDD+d2wQ0vLTylg5jFAABsVv88jmMxXn8ABXh78WxP4bstDQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzpGsNtYDCntFYA6S6/zB4+xbf5MB8GA1UdIwQY MBaAFOw9PX5cvxivZrf1tKXgrBns05h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMt NDY2MGZhZDgzOTg1LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMtNDY2MGZhZDgzOTg1 LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdS+bWfg LMDdzJep+fHD1s8anZ+VKBryL084m/esZ3QmgFZEHSywYNLRqnjmNN82aLcogjLu EReP9MoF9jWx5FChn66WCpcFGg5yxW4j0ZnuDYH7jUhLR5A3ICYp/dCaFw6pwJuc 1jDf1PUPruLwHM2roGXjFPWFuvLcJeH7Fp4zszletUO4BBt0ZbK+EUN/b/P4grrb cwB+g7T2i7Q2bmfk4RHFYBIQlZJ/XMN1cUYDY8ithRMGc0YKlWT9i5pVyKvieqI3 oQVHM6CdHnNcIac2xVRxuo3doAfHScfapWhyZ0LRAdmBSNlxyIZ8xyu1OW0tUoKX iU0ahbRxXHsHCw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:08 2025 by rpki-client