This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json) Hash identifier: y9NfCOOrpfs8lDgtzZUHsdR4ZYfFlbORq7dtWQVOMm0= Subject key identifier: 88:5A:50:4A:08:2C:9F:0B:87:02:A9:A5:1A:A4:B7:57:04:F9:6F:EF Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Certificate serial: 019AFB7A12C7D28CD86C0CE65603F6162D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 01:01:12 +0000 Manifest this update: Mon 08 Dec 2025 01:01:12 +0000 Manifest next update: Tue 09 Dec 2025 01:01:12 +0000 Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: Jsg57CbZD+cNn//1Haq+RHemXfKGi/DGekPvsRSBInI=) 2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:7a:12:c7:d2:8c:d8:6c:0c:e6:56:03:f6:16:2d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Validity Not Before: Dec 8 01:01:12 2025 GMT Not After : Dec 9 01:01:12 2025 GMT Subject: CN=885a504a082c9f0b8702a9a51aa4b75704f96fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:61:38:69:a6:cf:9e:d4:3f:2b:62:4f:e7: b0:ed:69:fe:e7:3f:4b:06:37:a7:5d:72:91:63:86: 50:92:3d:52:40:af:ff:12:8d:06:45:12:2d:ea:ee: bc:f6:e4:2d:d9:7a:71:7c:11:af:91:2f:f9:d4:2b: 7b:81:98:70:6d:d4:7d:9e:cb:9c:5d:1a:22:7e:b1: ba:c6:78:67:f4:ca:c7:92:59:2a:bf:16:61:96:d3: 09:d8:67:6e:e9:46:80:5c:91:9e:8c:c6:9a:cc:62: e9:05:c1:2c:8e:32:e5:6a:59:6f:fe:72:36:39:93: 13:97:73:59:33:45:a1:6c:13:73:04:67:ad:c3:58: 40:3e:d9:d6:28:fd:37:54:3c:f0:49:a0:cf:0d:cd: 0a:55:bb:b7:12:25:ff:c0:d5:87:40:23:80:8a:95: 88:20:be:8d:43:4a:fb:c8:d8:27:bc:79:e6:68:da: 60:ba:7e:5a:1e:75:51:99:95:2b:4f:24:39:ad:f4: a9:dc:0d:07:13:d7:72:af:74:53:c7:a0:f7:39:7b: 9b:92:47:d6:ca:f0:be:51:84:44:5c:e4:a9:ab:f1: 84:19:5e:09:23:49:fb:f5:5b:c6:f5:0c:50:53:9d: 5e:62:22:5e:39:38:2d:c7:07:86:1e:75:67:98:99: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5A:50:4A:08:2C:9F:0B:87:02:A9:A5:1A:A4:B7:57:04:F9:6F:EF X509v3 Authority Key Identifier: keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:04:b8:4b:39:b2:e0:41:77:26:f1:5c:34:a6:55:95:a5:59: 6f:e0:e4:02:e9:f9:76:f8:b6:f5:8a:e5:77:7e:6a:aa:a6:e9: b8:ce:e9:53:98:19:97:bc:df:33:0f:5e:8c:60:92:8f:4a:0d: 95:87:72:ce:8e:99:7d:b3:45:28:e9:26:dc:52:2f:3c:d6:b0: 66:b9:41:3c:65:62:9f:5a:40:ee:fe:4c:e6:7a:78:8c:6a:66: e3:d9:f7:1c:b9:33:fb:6c:db:34:2a:81:f7:75:71:fc:9a:74: 42:49:00:1c:ba:e7:80:dd:7a:0f:59:3f:f6:56:e9:2a:15:77: 64:af:00:c3:f9:ad:09:ba:13:74:11:a8:1a:7e:c2:66:65:64: 8e:e2:d8:43:fd:a5:64:4a:e1:d1:8d:d0:79:60:ba:05:36:97: b8:33:dc:0f:c1:ce:d5:df:bd:ae:a8:2d:55:9e:d0:25:20:cf: d1:41:11:36:46:2b:70:a1:d9:65:97:f1:e0:99:5c:2e:e9:76: a8:ee:c6:9d:5a:fa:4a:a6:54:b6:dc:5a:67:be:1e:cf:90:eb: e4:b7:98:34:10:96:90:84:8b:e7:8b:0e:5c:0a:0b:06:2d:29: 27:28:b4:55:b1:af:6b:f0:1e:93:46:80:f7:b8:dd:35:58:67: b2:d2:11:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7ehLH0ozYbAzmVgP2Fi1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli MjA4ODcwHhcNMjUxMjA4MDEwMTEyWhcNMjUxMjA5MDEwMTEyWjAzMTEwLwYDVQQD Eyg4ODVhNTA0YTA4MmM5ZjBiODcwMmE5YTUxYWE0Yjc1NzA0Zjk2ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS5hOGmmz57UPytiT+ew7Wn+5z9L BjenXXKRY4ZQkj1SQK//Eo0GRRIt6u689uQt2XpxfBGvkS/51Ct7gZhwbdR9nsuc XRoifrG6xnhn9MrHklkqvxZhltMJ2Gdu6UaAXJGejMaazGLpBcEsjjLlallv/nI2 OZMTl3NZM0WhbBNzBGetw1hAPtnWKP03VDzwSaDPDc0KVbu3EiX/wNWHQCOAipWI IL6NQ0r7yNgnvHnmaNpgun5aHnVRmZUrTyQ5rfSp3A0HE9dyr3RTx6D3OXubkkfW yvC+UYREXOSpq/GEGV4JI0n79VvG9QxQU51eYiJeOTgtxweGHnVnmJlRVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhaUEoILJ8LhwKppRqkt1cE+W/vMB8GA1UdIwQY MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt ZjUzYWQ0NmNhZjNjLzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAS4Szmy 4EF3JvFcNKZVlaVZb+DkAun5dvi29Yrld35qqqbpuM7pU5gZl7zfMw9ejGCSj0oN lYdyzo6ZfbNFKOkm3FIvPNawZrlBPGVin1pA7v5M5np4jGpm49n3HLkz+2zbNCqB 93Vx/Jp0QkkAHLrngN16D1k/9lbpKhV3ZK8Aw/mtCboTdBGoGn7CZmVkjuLYQ/2l ZErh0Y3QeWC6BTaXuDPcD8HO1d+9rqgtVZ7QJSDP0UERNkYrcKHZZZfx4JlcLul2 qO7GnVr6SqZUttxaZ74ez5Dr5LeYNBCWkISL54sOXAoLBi0pJyi0VbGva/Aek0aA 97jdNVhnstIR1w== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:05 2025 by rpki-client