This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json) Hash identifier: 6guxkrzzUKbLCXuq1SPuDcHdEdOunxmAiGmzIT8OWzk= Subject key identifier: AD:9C:F9:11:12:58:17:13:C4:6B:C2:29:B5:A1:59:54:11:3C:04:7B Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a Certificate serial: 019B2DAFACF3B1AF30705CC190BD71378CF3 Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft Manifest number: 09BA Signing time: Wed 17 Dec 2025 19:00:35 +0000 Manifest this update: Wed 17 Dec 2025 19:00:35 +0000 Manifest next update: Thu 18 Dec 2025 19:00:35 +0000 Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: aOOFsB2yD2ETMDVnJshEy/imJYCao89j2+AX/HmfWNg=) 2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: QirkwexzFfMNjXGnDm5ZPLfUmXga0CBqdtRO+26r3GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:af:ac:f3:b1:af:30:70:5c:c1:90:bd:71:37:8c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a Validity Not Before: Dec 17 19:00:35 2025 GMT Not After : Dec 18 19:00:35 2025 GMT Subject: CN=ad9cf91112581713c46bc229b5a15954113c047b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:e1:a6:5e:b1:24:71:37:17:88:7a:fc:af: e1:d1:e2:d8:3d:d6:fe:a9:de:79:19:75:b5:cd:71: c7:40:f3:da:20:c6:99:2a:23:a5:8b:59:e5:62:23: 61:eb:b9:aa:9d:50:a5:09:ee:7f:34:08:cd:c7:fa: 67:d8:f8:c7:fc:a3:02:42:56:d9:27:52:60:eb:03: 67:d4:b4:37:f8:c3:b3:dd:f9:23:e8:64:0d:6b:91: af:5c:92:d8:ad:38:5e:02:bf:f1:13:ef:6d:b7:d0: a3:e2:c9:1d:04:03:90:06:2a:09:b2:10:b5:4f:e3: 24:a7:1b:e1:76:2e:5c:b9:43:db:d9:e8:49:76:13: 16:85:82:56:c5:7e:2c:8c:c0:27:b6:c7:f6:9c:4f: 79:1d:95:08:07:6a:65:96:df:b2:21:69:ef:35:05: 5b:5c:18:17:52:7c:0e:09:83:3f:a7:12:6e:03:bd: 22:e2:16:19:b9:cf:25:3f:0e:13:18:1a:81:fb:08: 7c:1a:e8:11:ee:93:eb:b9:e3:71:5f:55:e2:57:b9: 7d:f4:3f:6b:7f:2d:95:dd:f9:d1:56:41:d3:66:15: 8d:0a:19:6a:85:dd:70:b3:5e:df:60:1c:3d:fb:88: b9:6c:2c:58:37:26:49:33:7c:31:f5:14:d8:f3:64: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9C:F9:11:12:58:17:13:C4:6B:C2:29:B5:A1:59:54:11:3C:04:7B X509v3 Authority Key Identifier: keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d6:58:bb:78:c8:e5:04:91:bd:31:2b:77:46:fa:02:fe:93: 36:9e:78:b9:1c:74:44:d8:62:27:40:31:a3:54:1c:40:33:a7: 4b:7f:f4:f4:b8:db:ee:8a:87:8d:d0:47:19:14:90:bc:13:89: 63:5f:43:e8:8c:b6:0f:90:17:29:ba:1d:b2:1a:02:5c:7e:3e: a4:0a:42:8b:d9:9f:8e:6e:53:8c:90:8a:00:62:ac:df:eb:a3: b0:ca:83:61:ee:d9:97:c4:cd:72:fa:02:4e:8d:e4:20:b2:fe: 4d:e6:60:f2:6c:4a:d4:7f:8d:8d:8b:3b:ac:72:c4:1a:f1:de: bd:ab:4d:fc:49:92:6e:1e:7d:ee:af:da:9a:f7:03:5e:35:af: 00:4c:e8:aa:7f:e8:c9:63:db:63:68:35:5b:c5:8a:7a:d8:ba: 23:72:26:99:50:3a:7b:44:0d:86:31:b6:e7:e0:5a:17:ca:ea: 10:46:d5:ee:41:43:c9:2e:7a:9f:7f:c2:15:88:1b:46:01:5f: 81:1a:08:47:04:c2:0e:8f:f7:72:78:d3:e1:ed:21:ec:1f:5c: d6:a3:51:c8:3e:4d:a8:b7:d6:c5:f8:8a:9f:03:67:52:3c:42: 95:7a:1e:71:86:42:a8:30:b9:ca:ec:b9:e5:62:69:a5:58:41: bb:85:f5:ae -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgISAZstr6zzsa8wcFzBkL1xN4zzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi MTczMWEwHhcNMjUxMjE3MTkwMDM1WhcNMjUxMjE4MTkwMDM1WjAzMTEwLwYDVQQD EyhhZDljZjkxMTEyNTgxNzEzYzQ2YmMyMjliNWExNTk1NDExM2MwNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UHhpl6xJHE3F4h6/K/h0eLYPdb+ qd55GXW1zXHHQPPaIMaZKiOli1nlYiNh67mqnVClCe5/NAjNx/pn2PjH/KMCQlbZ J1Jg6wNn1LQ3+MOz3fkj6GQNa5GvXJLYrTheAr/xE+9tt9Cj4skdBAOQBioJshC1 T+Mkpxvhdi5cuUPb2ehJdhMWhYJWxX4sjMAntsf2nE95HZUIB2pllt+yIWnvNQVb XBgXUnwOCYM/pxJuA70i4hYZuc8lPw4TGBqB+wh8GugR7pPrueNxX1XiV7l99D9r fy2V3fnRVkHTZhWNChlqhd1ws17fYBw9+4i5bCxYNyZJM3wx9RTY82SAPwIDAQAB o4IBzDCCAcgwHQYDVR0OBBYEFK2c+RESWBcTxGvCKbWhWVQRPAR7MB8GA1UdIwQY MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4 by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD ggEBACLWWLt4yOUEkb0xK3dG+gL+kzaeeLkcdETYYidAMaNUHEAzp0t/9PS42+6K h43QRxkUkLwTiWNfQ+iMtg+QFym6HbIaAlx+PqQKQovZn45uU4yQigBirN/ro7DK g2Hu2ZfEzXL6Ak6N5CCy/k3mYPJsStR/jY2LO6xyxBrx3r2rTfxJkm4efe6v2pr3 A141rwBM6Kp/6Mlj22NoNVvFinrYuiNyJplQOntEDYYxtufgWhfK6hBG1e5BQ8ku ep9/whWIG0YBX4EaCEcEwg6P93J40+HtIewfXNajUcg+Tai31sX4ip8DZ1I8QpV6 HnGGQqgwucrsueViaaVYQbuF9a4= -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:39 2025 by rpki-client