This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json) Hash identifier: aU7/YsLz4mATG9FKQuMstjfC8GrprMsRY/wWEMLbF+8= Subject key identifier: 73:04:BF:F3:16:CB:7A:2A:E7:6E:00:67:41:81:59:05:F4:DC:C4:77 Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Certificate serial: 019B2F9E557661A8613A0B151B0D74592921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 04:01:04 +0000 Manifest this update: Thu 18 Dec 2025 04:01:04 +0000 Manifest next update: Fri 19 Dec 2025 04:01:04 +0000 Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: Wn0ug1LoKExeOE5l4/73el05z8hWUKxBFi10bseM5H8=) 2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:55:76:61:a8:61:3a:0b:15:1b:0d:74:59:29:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Validity Not Before: Dec 18 04:01:04 2025 GMT Not After : Dec 19 04:01:04 2025 GMT Subject: CN=7304bff316cb7a2ae76e006741815905f4dcc477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:3e:cf:46:7e:e3:f1:f2:40:1b:e2:d2:f3: f6:16:17:80:5f:1a:b1:e9:f6:23:c7:3d:5f:ec:1d: fb:32:fb:ab:d7:53:1d:20:51:ef:7e:37:00:d3:07: e5:72:5b:cb:dc:6d:d9:a7:b2:4e:cc:b5:62:2c:9a: 46:c1:59:e5:27:1d:27:fb:0b:2e:67:76:b5:62:24: 6e:35:15:d3:aa:2c:b5:eb:dc:45:13:c2:3c:59:ad: 50:6b:86:14:3d:6f:93:b3:e7:21:f6:9b:d3:3e:69: 04:09:61:51:32:31:7a:f2:d0:95:67:36:9d:b8:7f: f3:ca:6d:67:6a:05:0d:f4:91:26:fd:83:ab:6f:a5: ec:6f:d3:2c:7b:ec:c7:ee:05:65:1f:5e:f1:05:96: 85:d5:79:8e:7d:a0:a5:3d:90:b0:10:fa:0b:eb:ad: 1c:ef:24:82:4b:ee:79:88:85:56:5d:56:73:8d:98: bd:c2:f4:0a:79:5c:39:87:32:ac:e7:03:92:1d:af: 47:e1:c0:24:8d:8d:34:0c:08:b8:b5:1e:4f:f1:61: 0f:5a:2e:4f:8e:61:8a:4c:46:5f:87:dc:f1:a2:d9: 92:89:c3:dc:f8:60:1f:ce:b0:c7:30:03:29:ed:63: de:ed:e3:36:ee:93:d5:2b:70:3f:20:71:f8:c7:f3: b9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:BF:F3:16:CB:7A:2A:E7:6E:00:67:41:81:59:05:F4:DC:C4:77 X509v3 Authority Key Identifier: keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a4:90:35:bf:72:dd:30:9f:a2:a7:7d:1a:46:3c:b2:fb:f6: d8:d9:61:81:83:21:dd:f4:67:0e:d5:94:1a:2f:79:c9:a2:e2: 30:19:ca:b8:a0:0a:d5:3b:0c:c8:54:7e:49:6d:fd:42:68:96: 50:5f:24:2c:1f:1e:ee:6d:fa:14:f3:36:8f:ee:d3:5a:b8:aa: e1:cf:d9:a1:3b:8a:f2:8b:a8:c1:06:bd:c2:11:6a:57:5d:23: 3d:bd:bf:d3:5c:d7:44:7e:0c:3a:6d:e6:ce:7d:9c:e0:a5:b1: c5:15:32:4a:e6:c2:96:63:09:5d:0e:63:8b:ff:6d:8a:f2:f3: 9b:bd:82:5e:ce:59:10:60:e9:84:f2:1b:9d:b0:e9:07:8e:f2: 66:84:df:bc:43:f7:a5:72:2f:b3:a8:ca:99:ee:2c:ab:b9:95: f9:5f:5e:a0:fa:83:69:5e:89:59:f4:ed:b0:04:f4:64:5b:0f: 1d:5e:c6:52:5e:6d:3b:18:47:c0:9f:c7:7a:9d:a2:2e:a3:83: 9a:2e:ac:d5:e4:05:55:85:f0:92:7e:74:19:d3:1d:ef:e9:6b: 71:6b:98:e5:35:1a:c2:c7:3a:d8:b7:2b:fb:98:4f:da:cd:00: 25:3e:63:ff:8b:5b:9c:ee:a9:be:39:da:a8:26:d3:51:a7:5d: 16:e0:2f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnlV2YahhOgsVGw10WSkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli MjA4ODcwHhcNMjUxMjE4MDQwMTA0WhcNMjUxMjE5MDQwMTA0WjAzMTEwLwYDVQQD Eyg3MzA0YmZmMzE2Y2I3YTJhZTc2ZTAwNjc0MTgxNTkwNWY0ZGNjNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DE+z0Z+4/HyQBvi0vP2FheAXxqx 6fYjxz1f7B37Mvur11MdIFHvfjcA0wflclvL3G3Zp7JOzLViLJpGwVnlJx0n+wsu Z3a1YiRuNRXTqiy169xFE8I8Wa1Qa4YUPW+Ts+ch9pvTPmkECWFRMjF68tCVZzad uH/zym1nagUN9JEm/YOrb6Xsb9Mse+zH7gVlH17xBZaF1XmOfaClPZCwEPoL660c 7ySCS+55iIVWXVZzjZi9wvQKeVw5hzKs5wOSHa9H4cAkjY00DAi4tR5P8WEPWi5P jmGKTEZfh9zxotmSicPc+GAfzrDHMAMp7WPe7eM27pPVK3A/IHH4x/O5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMEv/MWy3oq524AZ0GBWQX03MR3MB8GA1UdIwQY MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt ZjUzYWQ0NmNhZjNjLzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaSQNb9y 3TCfoqd9GkY8svv22NlhgYMh3fRnDtWUGi95yaLiMBnKuKAK1TsMyFR+SW39QmiW UF8kLB8e7m36FPM2j+7TWriq4c/ZoTuK8ouowQa9whFqV10jPb2/01zXRH4MOm3m zn2c4KWxxRUySubClmMJXQ5ji/9tivLzm72CXs5ZEGDphPIbnbDpB47yZoTfvEP3 pXIvs6jKme4sq7mV+V9eoPqDaV6JWfTtsAT0ZFsPHV7GUl5tOxhHwJ/Hep2iLqOD mi6s1eQFVYXwkn50GdMd7+lrcWuY5TUawsc62Lcr+5hP2s0AJT5j/4tbnO6pvjna qCbTUaddFuAvHA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:45 2025 by rpki-client