This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json) Hash identifier: QtIo4S31l6FyoJXOgCERjca4nAWlopwce5NTEN+Il6Y= Subject key identifier: C9:C2:72:9B:47:0A:69:65:14:EA:03:4F:5E:CD:6E:A9:68:B3:8E:FB Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Certificate serial: 019B3AFE45D80242B073B13BB58FB553C3ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft Manifest number: 1570 Signing time: Sat 20 Dec 2025 09:01:40 +0000 Manifest this update: Sat 20 Dec 2025 09:01:40 +0000 Manifest next update: Sun 21 Dec 2025 09:01:40 +0000 Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=) 2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: jbNuQ2EqyTN+ACVvtS2p4KuAvNNd8MehNZcfM0AsQRA=) 3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=) 4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:45:d8:02:42:b0:73:b1:3b:b5:8f:b5:53:c3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Validity Not Before: Dec 20 09:01:40 2025 GMT Not After : Dec 21 09:01:40 2025 GMT Subject: CN=c9c2729b470a696514ea034f5ecd6ea968b38efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:7d:c1:ab:af:0a:2e:e1:dd:85:69:dc:f2: 94:db:87:f4:66:3e:da:ac:6d:03:b1:49:26:53:fc: 86:c4:ec:82:e2:a8:ed:81:98:95:46:fb:5b:b0:e3: 48:7d:6c:66:f9:fe:22:0d:4a:58:38:a6:f7:cd:06: 36:19:f7:ee:05:a6:45:f7:78:f3:51:5e:9a:34:7e: 29:9d:90:6b:49:3f:78:50:02:39:8a:ef:b1:2b:84: ed:e1:8c:93:78:40:40:8a:00:b6:30:9e:cc:c5:bf: 5f:4c:ea:cd:01:fc:5d:b5:7a:31:e1:24:cb:d8:ca: d8:4b:29:91:26:25:28:19:5e:d3:f2:09:a8:33:a2: b4:f0:d2:bb:e4:68:13:21:27:8c:53:04:c3:a4:56: 50:27:61:bb:ca:4d:e3:06:db:36:fc:4e:53:6d:0f: 92:26:b3:96:eb:90:99:5c:67:c6:f8:26:08:0b:c8: dc:15:4d:d5:9f:ff:f1:9c:b7:7e:78:e2:bd:a2:15: 55:60:82:9d:13:88:e8:77:a8:b8:6c:c7:ed:39:76: 8d:df:28:81:5a:2d:20:94:fc:49:7d:8a:00:b2:1b: 11:93:80:ec:f9:dc:83:30:d3:cd:bf:b9:54:76:35: d5:19:7f:b1:26:34:26:dc:93:2a:6d:f6:e7:ac:25: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:72:9B:47:0A:69:65:14:EA:03:4F:5E:CD:6E:A9:68:B3:8E:FB X509v3 Authority Key Identifier: keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f7:7a:93:1d:19:52:25:67:6f:7e:99:e5:94:5f:b5:25:05: f3:d8:c9:27:88:94:5f:74:4f:54:1d:ce:5e:46:ff:44:bf:01: 1b:42:42:02:38:54:92:ed:03:8b:0d:02:64:b7:80:06:7d:a3: 24:75:f7:41:a8:05:cb:8d:a8:2e:1b:21:b5:14:34:47:ae:a9: 76:15:57:24:27:6f:07:ba:0a:8b:69:31:ff:b2:45:96:13:3b: 8c:6d:f3:76:ab:50:da:62:c8:ce:50:b6:f8:45:fe:e7:9d:e7: 7a:c3:59:8f:b0:a0:27:54:0e:6f:76:69:f3:fa:29:89:f6:33: 24:44:c2:0c:50:af:96:5d:fc:96:24:24:b2:c0:08:f5:ea:a7: 82:ca:9c:35:99:9c:c6:04:fd:7a:30:4c:77:4a:df:90:bd:46: d7:a4:62:b4:de:0f:bc:38:5f:29:2b:29:65:b4:02:55:80:3e: cd:27:06:2a:f0:18:8e:a7:d0:23:43:68:61:fa:ba:93:22:b8: 21:9f:96:04:81:c1:91:f1:c6:78:b0:c7:55:6a:7b:51:08:c1: e1:0c:c2:d3:78:f8:93:5e:18:b0:dd:c9:b9:c0:cd:bb:3b:0f: a3:18:fa:b3:d5:29:04:6a:79:03:f9:36:1f:a4:1e:58:77:6b: 5f:e4:94:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kXYAkKwc7E7tY+1U8PtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz YmExMDAwHhcNMjUxMjIwMDkwMTQwWhcNMjUxMjIxMDkwMTQwWjAzMTEwLwYDVQQD EyhjOWMyNzI5YjQ3MGE2OTY1MTRlYTAzNGY1ZWNkNmVhOTY4YjM4ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBt9wauvCi7h3YVp3PKU24f0Zj7a rG0DsUkmU/yGxOyC4qjtgZiVRvtbsONIfWxm+f4iDUpYOKb3zQY2GffuBaZF93jz UV6aNH4pnZBrST94UAI5iu+xK4Tt4YyTeEBAigC2MJ7Mxb9fTOrNAfxdtXox4STL 2MrYSymRJiUoGV7T8gmoM6K08NK75GgTISeMUwTDpFZQJ2G7yk3jBts2/E5TbQ+S JrOW65CZXGfG+CYIC8jcFU3Vn//xnLd+eOK9ohVVYIKdE4jod6i4bMftOXaN3yiB Wi0glPxJfYoAshsRk4Ds+dyDMNPNv7lUdjXVGX+xJjQm3JMqbfbnrCW0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnCcptHCmllFOoDT17Nbqlos477MB8GA1UdIwQY MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3 LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/d6kx0Z UiVnb36Z5ZRftSUF89jJJ4iUX3RPVB3OXkb/RL8BG0JCAjhUku0Diw0CZLeABn2j JHX3QagFy42oLhshtRQ0R66pdhVXJCdvB7oKi2kx/7JFlhM7jG3zdqtQ2mLIzlC2 +EX+553nesNZj7CgJ1QOb3Zp8/opifYzJETCDFCvll38liQkssAI9eqngsqcNZmc xgT9ejBMd0rfkL1G16RitN4PvDhfKSspZbQCVYA+zScGKvAYjqfQI0NoYfq6kyK4 IZ+WBIHBkfHGeLDHVWp7UQjB4QzC03j4k14YsN3JucDNuzsPoxj6s9UpBGp5A/k2 H6QeWHdrX+SUWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:30 2025 by rpki-client