This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json) Hash identifier: owBUro7tmEF2k8cGlx5dwBPP1rc1wmecODrNXCoDXMA= Subject key identifier: 10:D9:6B:96:CE:85:EB:A4:0E:9B:D4:86:3C:C2:74:A7:D5:7B:FE:71 Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9 Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9 Certificate serial: 019B5CAE2A156F52F6CCA29EDD06439E8918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft Manifest number: 0743 Signing time: Fri 26 Dec 2025 22:01:16 +0000 Manifest this update: Fri 26 Dec 2025 22:01:16 +0000 Manifest next update: Sat 27 Dec 2025 22:01:16 +0000 Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: p7y+KjZHSBc4v9g1pNTxWyrk+PRFGHPvHmcvVmIyJ8g=) 2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:2a:15:6f:52:f6:cc:a2:9e:dd:06:43:9e:89:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9 Validity Not Before: Dec 26 22:01:16 2025 GMT Not After : Dec 27 22:01:16 2025 GMT Subject: CN=10d96b96ce85eba40e9bd4863cc274a7d57bfe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:ba:22:d0:5b:0b:29:b9:ea:c8:de:8e:6d: c4:5e:1c:ca:d2:c6:59:d8:b4:21:6d:fb:e8:2e:ae: 0b:6d:e8:89:3b:7d:87:11:28:20:dd:b9:b5:80:e0: f0:f1:bb:9a:2d:24:31:60:2a:d4:84:30:83:3e:b4: 8b:a9:77:00:ee:d3:54:16:3d:cc:51:d6:1e:9b:df: fa:4c:ce:dc:f1:c7:f1:3d:69:4c:52:ed:e1:70:e0: 4f:a1:4c:af:d8:6e:4c:8e:65:b3:f6:2e:b8:b6:af: cd:40:53:22:92:32:fb:a5:6b:7d:9e:fb:0e:38:bc: ac:9b:88:1a:ff:6a:29:87:b9:22:92:7d:7c:00:05: 6f:c9:ca:b6:10:3a:89:ca:ac:5f:34:77:9a:37:12: 1c:a3:a0:0b:e7:4e:10:fb:9d:eb:41:3c:c2:11:3b: 8a:82:7d:9e:78:35:34:b6:4b:63:fd:f9:5f:8b:68: 9b:69:c0:c0:0f:af:1b:e3:05:84:6f:76:f0:e4:37: ee:ad:34:4c:da:45:c5:65:81:93:42:6a:fc:39:59: e5:34:f7:71:9e:c3:d1:54:8f:8a:75:78:12:c9:b3: 23:b8:51:33:16:ce:10:37:ca:85:eb:74:e9:cb:ec: 2b:99:40:45:7f:d5:23:84:b6:c4:59:24:ff:06:48: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D9:6B:96:CE:85:EB:A4:0E:9B:D4:86:3C:C2:74:A7:D5:7B:FE:71 X509v3 Authority Key Identifier: keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a7:ff:f1:85:01:24:3c:29:96:3a:0c:49:f3:51:32:c7:65: 08:f2:05:30:63:ee:08:8f:86:b9:b4:46:28:28:03:ac:c6:9e: 00:8c:85:01:e0:ac:98:c7:1a:32:c7:2b:c4:8f:73:33:66:4e: 86:66:06:f7:15:28:91:2a:31:69:35:d2:da:3e:96:c9:8d:cb: 59:00:00:51:33:e3:d3:0f:62:4b:c6:28:e1:b3:23:2d:ab:05: 9c:d7:7b:0c:68:84:d3:55:e3:c8:7f:fc:bc:c5:04:25:4e:b4: 8d:c5:68:fd:29:56:6e:05:7f:a6:f8:61:59:b0:c4:bf:a2:40: b0:93:47:41:e7:dd:da:1b:67:bd:67:85:48:44:f9:a4:33:b7: 69:9a:de:2f:9f:bb:44:e5:69:73:46:91:71:14:1c:de:bc:25: 96:32:5a:44:07:94:e2:a2:e1:ea:39:ab:05:e4:8d:ff:d0:06: 53:75:14:20:1d:03:48:d2:05:11:6d:27:f6:98:c3:34:da:32: a9:a7:15:19:b4:82:f9:2f:85:9d:ca:bd:15:e5:03:78:6a:43: 63:2f:06:8a:8f:2c:da:34:07:31:90:9f:0b:39:40:f1:7f:41: c6:af:25:96:32:19:0a:28:45:87:2a:e4:58:39:5b:22:d5:6f: c9:7e:2c:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrioVb1L2zKKe3QZDnokYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjRhMjc4NzIyMjU5N2YxNmQxZWU0YzQzNWJlODY5MGYx MDMzZDkwHhcNMjUxMjI2MjIwMTE2WhcNMjUxMjI3MjIwMTE2WjAzMTEwLwYDVQQD EygxMGQ5NmI5NmNlODVlYmE0MGU5YmQ0ODYzY2MyNzRhN2Q1N2JmZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nu6ItBbCym56sjejm3EXhzK0sZZ 2LQhbfvoLq4LbeiJO32HESgg3bm1gODw8buaLSQxYCrUhDCDPrSLqXcA7tNUFj3M UdYem9/6TM7c8cfxPWlMUu3hcOBPoUyv2G5MjmWz9i64tq/NQFMikjL7pWt9nvsO OLysm4ga/2oph7kikn18AAVvycq2EDqJyqxfNHeaNxIco6AL504Q+53rQTzCETuK gn2eeDU0tktj/flfi2ibacDAD68b4wWEb3bw5DfurTRM2kXFZYGTQmr8OVnlNPdx nsPRVI+KdXgSybMjuFEzFs4QN8qF63Tpy+wrmUBFf9UjhLbEWST/BkhbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDZa5bOheukDpvUhjzCdKfVe/5xMB8GA1UdIwQY MBaAFNO0onhyIll/FtHuTENb6GkPEDPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zOWVjOGMtNDg0MS00ZGQxLTgwOGQt N2JlODczNDE3ZDc2LzEvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zOWVjOGMtNDg0MS00ZGQxLTgwOGQtN2JlODczNDE3ZDc2 LzEvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKf/8YUB JDwpljoMSfNRMsdlCPIFMGPuCI+GubRGKCgDrMaeAIyFAeCsmMcaMscrxI9zM2ZO hmYG9xUokSoxaTXS2j6WyY3LWQAAUTPj0w9iS8Yo4bMjLasFnNd7DGiE01XjyH/8 vMUEJU60jcVo/SlWbgV/pvhhWbDEv6JAsJNHQefd2htnvWeFSET5pDO3aZreL5+7 ROVpc0aRcRQc3rwlljJaRAeU4qLh6jmrBeSN/9AGU3UUIB0DSNIFEW0n9pjDNNoy qacVGbSC+S+Fncq9FeUDeGpDYy8Gio8s2jQHMZCfCzlA8X9Bxq8lljIZCihFhyrk WDlbItVvyX4soQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:16:10 2025 by rpki-client