This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json) Hash identifier: 5LUocHgpFwMqT+Ymg8VQTP5X5MjAToMe0HpEKaRKDFM= Subject key identifier: BF:DC:A4:D6:06:E8:EC:41:77:9D:6B:C2:B5:85:64:1D:BB:CF:E7:83 Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a Certificate serial: 019AF01A39720C129CE2E0B88577FB6B703F Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft Manifest number: 0991 Signing time: Fri 05 Dec 2025 20:00:29 +0000 Manifest this update: Fri 05 Dec 2025 20:00:29 +0000 Manifest next update: Sat 06 Dec 2025 20:00:29 +0000 Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: n2wzj+Zj0rJQhenVKydk1iaAwSKYJHOehHmxx8QbTiQ=) 2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: U4lr9m0oMSzQuf8PBGmPSAWHOfVqn/TddLGVRQNm9zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:39:72:0c:12:9c:e2:e0:b8:85:77:fb:6b:70:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a Validity Not Before: Dec 5 20:00:29 2025 GMT Not After : Dec 6 20:00:29 2025 GMT Subject: CN=bfdca4d606e8ec41779d6bc2b585641dbbcfe783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:01:41:e9:6f:de:e7:41:37:1e:87:3b:0b:32: a4:e0:42:76:a9:f7:0b:9b:39:48:bb:ee:8a:f1:83: 8a:70:65:21:03:78:6d:d3:90:e8:40:ba:b5:12:fe: 4a:bd:0f:4e:38:ba:6d:5f:60:7b:50:5e:8f:83:b5: 0e:82:91:21:b9:05:ba:43:d2:6d:6d:b9:85:10:48: 4c:fb:6c:f6:8d:0c:92:0f:bf:0b:d0:c3:f6:6e:87: 5f:31:27:85:a3:97:51:ef:34:6b:69:15:90:1c:3d: 17:8a:e2:20:88:07:dc:f4:ed:0e:aa:9d:c9:ea:9b: 2a:26:09:9f:18:44:8f:b3:7c:dd:1f:dc:7c:b9:71: fb:fc:46:6f:02:cc:a2:a4:e8:e0:71:e2:3c:03:6a: 9c:81:74:f2:b4:d5:58:1a:1f:81:02:fa:25:09:ac: 72:35:8f:aa:b5:f6:11:50:8e:30:32:fb:f7:68:9e: 3d:2a:8d:23:19:96:38:9f:7f:9f:8b:c3:85:75:f9: 65:bf:94:37:8a:50:dc:39:30:1b:19:08:aa:2c:15: eb:2c:1d:75:8b:b2:24:96:51:43:41:38:f3:21:b2: f0:9f:a3:00:3d:6e:4e:d6:64:be:9b:b7:c3:2b:ff: fb:65:88:1e:84:e6:7a:bb:fa:05:98:32:a6:07:9e: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:A4:D6:06:E8:EC:41:77:9D:6B:C2:B5:85:64:1D:BB:CF:E7:83 X509v3 Authority Key Identifier: keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:87:ec:0e:94:83:db:2d:15:c5:e1:74:87:72:36:d9:d0:83: 4d:67:2b:da:44:19:47:55:36:ea:4a:f7:49:30:2c:1a:af:a3: 48:1e:ad:27:89:98:04:b8:54:7c:e1:33:c5:10:95:de:23:ad: 22:38:28:e7:dc:f6:06:92:33:84:85:5e:cb:b7:a5:02:7c:e9: 45:21:0e:51:03:9c:67:78:bd:61:6d:bf:81:4b:36:2f:6d:f9: 32:a5:73:02:82:a2:55:1f:8e:1f:f4:bb:33:79:7d:72:56:70: 7f:02:a2:3a:cd:f3:97:ed:1a:22:85:a1:07:f4:52:a6:7f:d6: b8:15:51:87:d7:d9:ee:1b:3c:20:d0:69:dd:39:b5:e7:29:a7: 42:75:80:c9:bb:5b:46:a2:80:df:f3:8e:3d:cf:c7:60:eb:f9: fa:9b:14:ef:02:ef:dd:dc:e8:5c:b0:b0:1e:d1:72:33:21:7d: 3e:3e:26:8a:aa:77:15:55:e9:6a:0e:78:2c:b1:40:a6:94:2c: ef:79:62:6d:4d:03:b8:f9:ae:0c:07:43:c1:9e:da:12:c2:61: 9e:d3:f0:45:5c:16:13:04:26:25:71:5c:ae:70:2c:75:49:7c: 60:2c:52:9a:02:8f:06:b5:2d:b8:6b:94:c2:6f:a1:7d:4f:6f: 9e:de:77:bd -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgISAZrwGjlyDBKc4uC4hXf7a3A/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi MTczMWEwHhcNMjUxMjA1MjAwMDI5WhcNMjUxMjA2MjAwMDI5WjAzMTEwLwYDVQQD EyhiZmRjYTRkNjA2ZThlYzQxNzc5ZDZiYzJiNTg1NjQxZGJiY2ZlNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AFB6W/e50E3Hoc7CzKk4EJ2qfcL mzlIu+6K8YOKcGUhA3ht05DoQLq1Ev5KvQ9OOLptX2B7UF6Pg7UOgpEhuQW6Q9Jt bbmFEEhM+2z2jQySD78L0MP2bodfMSeFo5dR7zRraRWQHD0XiuIgiAfc9O0Oqp3J 6psqJgmfGESPs3zdH9x8uXH7/EZvAsyipOjgceI8A2qcgXTytNVYGh+BAvolCaxy NY+qtfYRUI4wMvv3aJ49Ko0jGZY4n3+fi8OFdfllv5Q3ilDcOTAbGQiqLBXrLB11 i7IkllFDQTjzIbLwn6MAPW5O1mS+m7fDK//7ZYgehOZ6u/oFmDKmB54fKQIDAQAB o4IBzDCCAcgwHQYDVR0OBBYEFL/cpNYG6OxBd51rwrWFZB27z+eDMB8GA1UdIwQY MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4 by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAWH7A6Ug9stFcXhdIdyNtnQg01nK9pEGUdVNupK90kwLBqvo0gerSeJmAS4 VHzhM8UQld4jrSI4KOfc9gaSM4SFXsu3pQJ86UUhDlEDnGd4vWFtv4FLNi9t+TKl cwKColUfjh/0uzN5fXJWcH8CojrN85ftGiKFoQf0UqZ/1rgVUYfX2e4bPCDQad05 tecpp0J1gMm7W0aigN/zjj3Px2Dr+fqbFO8C793c6FywsB7RcjMhfT4+JoqqdxVV 6WoOeCyxQKaULO95Ym1NA7j5rgwHQ8Ge2hLCYZ7T8EVcFhMEJiVxXK5wLHVJfGAs UpoCjwa1LbhrlMJvoX1Pb57ed70= -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:24 2025 by rpki-client