This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json) Hash identifier: pSlLbkn99SBgop5SQPZjm2Dm7PRxQE0/XX4EKuvn5QY= Subject key identifier: 9F:FB:88:9A:34:B0:1F:78:CC:36:59:EF:53:9F:3C:45:08:15:68:16 Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Certificate serial: 019AF61CCF5DBB68FE5772AA7F4AC2A05E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 00:01:14 +0000 Manifest this update: Sun 07 Dec 2025 00:01:14 +0000 Manifest next update: Mon 08 Dec 2025 00:01:14 +0000 Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: sQ2WyEf2RxAKbOyYNHYGFOf3dkF9HCaqxZrwWgO0uNs=) 2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:cf:5d:bb:68:fe:57:72:aa:7f:4a:c2:a0:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Validity Not Before: Dec 7 00:01:14 2025 GMT Not After : Dec 8 00:01:14 2025 GMT Subject: CN=9ffb889a34b01f78cc3659ef539f3c4508156816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:58:c5:88:76:f4:99:51:ca:2b:8e:cb:1c: 5e:60:de:4f:dd:38:ec:64:8b:42:05:cd:b8:57:3b: 18:30:48:ac:78:92:a6:c6:4e:6a:cf:dc:a1:1e:6f: 35:35:36:9c:00:ae:db:09:f3:79:94:4a:b4:fb:4a: c9:22:3b:0f:d3:d6:26:64:09:01:a4:3b:ea:71:19: 10:5a:97:e4:72:42:1f:ce:66:90:d1:95:32:61:ea: b1:4f:6b:a2:07:56:85:a3:35:1c:da:f6:00:21:d2: 02:01:06:e9:0d:99:3e:07:2a:cc:64:6c:75:a7:c4: 4e:0e:6a:ca:59:9e:6d:a0:4b:29:4c:30:9f:58:4e: 25:2b:3a:82:cc:d5:4a:47:f0:49:a4:1f:8f:5d:8b: a0:74:c0:e6:b7:87:2a:a4:55:4c:04:b4:88:09:e5: a9:7e:29:4f:5c:22:df:20:7d:7f:58:9a:f8:ef:a4: 51:fd:bc:21:39:97:91:de:91:53:2c:f5:8b:54:70: 60:ea:51:fc:c9:6f:b7:46:48:df:7a:7e:61:41:bf: f0:a9:a0:85:73:18:6d:04:1c:a4:9d:9a:cd:08:ec: 16:44:d6:83:c9:81:c8:5d:f6:58:1a:b0:8a:78:59: 3f:83:2a:aa:37:d9:2a:30:81:f3:b5:c4:fb:ad:f4: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FB:88:9A:34:B0:1F:78:CC:36:59:EF:53:9F:3C:45:08:15:68:16 X509v3 Authority Key Identifier: keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2b:82:ce:12:16:52:fa:90:49:fc:41:c4:68:55:60:8b:91: ff:67:75:8e:cd:80:aa:0c:26:ab:43:c9:35:53:ca:83:f2:b0: 79:0e:ab:fc:18:08:5d:9f:e4:7f:35:1d:f3:5a:44:ed:41:0e: d0:30:f0:ed:cc:85:e3:94:90:d1:dc:cd:ce:c8:d5:f4:ac:bf: 4c:ae:57:9a:16:23:63:8b:53:28:2c:6e:76:fb:89:de:f7:46: 91:b2:e3:9d:b3:c3:bf:52:b6:82:10:fb:be:12:3d:7e:a0:d9: 29:96:56:55:03:9d:d5:de:91:de:04:8f:76:54:50:db:de:84: 1f:e0:ac:68:92:38:0f:67:0c:38:ec:1e:9f:41:b5:7d:27:75: 7c:9b:0a:8d:23:a1:e4:20:8c:51:17:70:d6:83:ac:c5:e0:b0: e0:c5:0c:27:46:c8:6f:db:dc:00:a4:16:f4:9a:3f:98:40:a9: bc:b6:ad:e6:9b:cb:01:3a:bb:ed:41:a6:1a:10:86:3a:c1:f8: a8:af:4d:65:07:e5:71:23:f8:e0:96:67:d3:9e:61:91:37:16: 54:a7:cd:f1:03:29:ca:6a:53:84:db:86:fa:a7:ab:d5:38:12: eb:84:a9:09:3f:08:00:c6:39:77:52:e3:ac:7a:3f:3a:0c:a0: 4b:67:35:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HM9du2j+V3Kqf0rCoF49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0 NTVhNTYwHhcNMjUxMjA3MDAwMTE0WhcNMjUxMjA4MDAwMTE0WjAzMTEwLwYDVQQD Eyg5ZmZiODg5YTM0YjAxZjc4Y2MzNjU5ZWY1MzlmM2M0NTA4MTU2ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVYxYh29JlRyiuOyxxeYN5P3Tjs ZItCBc24VzsYMEiseJKmxk5qz9yhHm81NTacAK7bCfN5lEq0+0rJIjsP09YmZAkB pDvqcRkQWpfkckIfzmaQ0ZUyYeqxT2uiB1aFozUc2vYAIdICAQbpDZk+ByrMZGx1 p8RODmrKWZ5toEspTDCfWE4lKzqCzNVKR/BJpB+PXYugdMDmt4cqpFVMBLSICeWp filPXCLfIH1/WJr476RR/bwhOZeR3pFTLPWLVHBg6lH8yW+3Rkjfen5hQb/wqaCF cxhtBByknZrNCOwWRNaDyYHIXfZYGrCKeFk/gyqqN9kqMIHztcT7rfRuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/7iJo0sB94zDZZ71OfPEUIFWgWMB8GA1UdIwQY MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1 LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCuCzhIW UvqQSfxBxGhVYIuR/2d1js2Aqgwmq0PJNVPKg/KweQ6r/BgIXZ/kfzUd81pE7UEO 0DDw7cyF45SQ0dzNzsjV9Ky/TK5XmhYjY4tTKCxudvuJ3vdGkbLjnbPDv1K2ghD7 vhI9fqDZKZZWVQOd1d6R3gSPdlRQ296EH+CsaJI4D2cMOOwen0G1fSd1fJsKjSOh 5CCMURdw1oOsxeCw4MUMJ0bIb9vcAKQW9Jo/mECpvLat5pvLATq77UGmGhCGOsH4 qK9NZQflcSP44JZn055hkTcWVKfN8QMpympThNuG+qer1TgS64SpCT8IAMY5d1Lj rHo/OgygS2c15w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:36 2025 by rpki-client