This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json) Hash identifier: K1ykFHu6q77oONPGDDpxRflNJ9/B9JXLsH3Oz55P8ME= Subject key identifier: F4:35:41:06:F5:7A:FC:A3:52:AD:F5:80:59:B2:07:17:9D:20:88:E3 Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Certificate serial: 019B3E6CD26925EBC7E801D2EAA084CC85E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft Manifest number: 061C Signing time: Sun 21 Dec 2025 01:01:17 +0000 Manifest this update: Sun 21 Dec 2025 01:01:17 +0000 Manifest next update: Mon 22 Dec 2025 01:01:17 +0000 Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: KzfBKSlxNxydAr4lVOfKNdezpGUVVW9nCNKj1QVqEM4=) 2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:d2:69:25:eb:c7:e8:01:d2:ea:a0:84:cc:85:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a Validity Not Before: Dec 21 01:01:17 2025 GMT Not After : Dec 22 01:01:17 2025 GMT Subject: CN=f4354106f57afca352adf58059b207179d2088e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:ba:44:29:f0:a7:11:63:da:6f:e0:b7:53: 74:02:0c:3d:bf:f1:7b:60:b6:f1:c0:ca:ac:b5:f5: ff:cc:ad:a2:af:61:f8:af:8a:48:65:c2:a4:f5:10: c1:bc:ad:17:a4:77:55:1a:e0:49:81:17:24:bd:e9: 67:72:a7:0b:a7:47:8c:37:27:4d:43:8d:b6:ae:fd: 7f:52:7f:07:78:09:2f:fe:ac:eb:d2:bd:a0:22:02: 49:59:54:2e:5a:1c:d5:af:75:c5:20:74:56:92:af: 5f:f7:77:49:cb:90:09:5f:2c:9d:2f:03:7a:7e:cf: 73:d8:e2:a5:58:db:6c:35:4e:bc:c6:d5:f3:96:5a: 75:29:3f:ad:53:dd:4e:19:99:12:30:61:18:07:a8: b0:f1:c5:ee:a2:58:dd:60:95:61:9b:eb:f8:ad:21: 11:7a:a9:5a:dd:fc:d1:a7:df:eb:c1:e1:d8:06:23: ac:46:7c:5b:02:1e:3e:94:25:1b:6d:8f:56:aa:95: 89:c9:68:7a:0b:dd:c0:a4:22:1e:52:1a:96:f1:08: e8:20:89:18:e4:85:d8:85:d0:fd:13:5d:83:dd:36: dd:f7:bf:fd:73:c8:a2:7b:d0:ff:bb:41:f0:1b:08: 41:5b:b3:d5:40:3e:d6:99:58:16:7d:3e:90:69:fe: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:35:41:06:F5:7A:FC:A3:52:AD:F5:80:59:B2:07:17:9D:20:88:E3 X509v3 Authority Key Identifier: keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dd:c8:aa:33:43:4a:1a:53:09:96:39:dc:20:d7:6f:6b:a4: be:c8:d3:b5:91:59:3e:f1:6b:f1:f2:2c:b1:cc:a1:3b:97:0e: 2c:40:f8:81:d3:30:f1:48:13:b0:0f:1f:2e:4d:d1:8c:f4:0f: 89:66:6c:3a:25:ed:c7:86:92:3a:24:d0:e7:db:94:aa:46:fe: ef:35:4f:da:c5:5f:fc:b5:41:51:dd:17:90:8e:6e:a5:d6:f5: 42:eb:8d:dd:3e:4c:2e:33:c1:c3:97:08:54:78:e2:74:ac:93: 6d:f9:b5:89:33:66:11:ce:c1:d3:ba:3b:98:bd:6e:08:27:7f: b3:7c:e8:59:f4:2c:e3:42:58:93:62:7d:fa:9e:d0:57:7d:5d: a4:63:1b:5b:58:01:52:fc:e9:26:d6:a4:cf:b1:6e:d0:a3:95: 1e:a5:11:62:e7:86:f4:40:cd:b4:64:d8:a2:b5:a4:99:72:8f: 14:ef:bf:80:70:84:0c:fd:00:f4:75:62:50:9c:c7:1b:97:3b: 41:1e:f3:38:53:c7:52:eb:80:1c:68:f7:47:db:fd:5a:ec:a1: e4:64:f7:3d:6b:66:fa:25:44:cc:f1:00:ab:f8:60:ad:42:35: 43:17:ea:1a:47:f0:6d:72:cf:43:91:4e:2d:28:4f:5e:c0:95: 55:93:7c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bNJpJevH6AHS6qCEzIXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzdmMzI2M2ZlMzQ4YWIyYzhkMzY4NDc1ZDZiYzA0N2E2 YTk3NmEwHhcNMjUxMjIxMDEwMTE3WhcNMjUxMjIyMDEwMTE3WjAzMTEwLwYDVQQD EyhmNDM1NDEwNmY1N2FmY2EzNTJhZGY1ODA1OWIyMDcxNzlkMjA4OGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoG6RCnwpxFj2m/gt1N0Agw9v/F7 YLbxwMqstfX/zK2ir2H4r4pIZcKk9RDBvK0XpHdVGuBJgRckvelncqcLp0eMNydN Q422rv1/Un8HeAkv/qzr0r2gIgJJWVQuWhzVr3XFIHRWkq9f93dJy5AJXyydLwN6 fs9z2OKlWNtsNU68xtXzllp1KT+tU91OGZkSMGEYB6iw8cXuoljdYJVhm+v4rSER eqla3fzRp9/rweHYBiOsRnxbAh4+lCUbbY9WqpWJyWh6C93ApCIeUhqW8QjoIIkY 5IXYhdD9E12D3Tbd97/9c8iie9D/u0HwGwhBW7PVQD7WmVgWfT6Qaf7SGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ1QQb1evyjUq31gFmyBxedIIjjMB8GA1UdIwQY MBaAFOx38yY/40irLI02hHXWvAR6apdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQt ZDUxNzI5MzBmOGJmLzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQtZDUxNzI5MzBmOGJm LzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb93IqjND ShpTCZY53CDXb2ukvsjTtZFZPvFr8fIsscyhO5cOLED4gdMw8UgTsA8fLk3RjPQP iWZsOiXtx4aSOiTQ59uUqkb+7zVP2sVf/LVBUd0XkI5updb1QuuN3T5MLjPBw5cI VHjidKyTbfm1iTNmEc7B07o7mL1uCCd/s3zoWfQs40JYk2J9+p7QV31dpGMbW1gB UvzpJtakz7Fu0KOVHqURYueG9EDNtGTYorWkmXKPFO+/gHCEDP0A9HViUJzHG5c7 QR7zOFPHUuuAHGj3R9v9Wuyh5GT3PWtm+iVEzPEAq/hgrUI1QxfqGkfwbXLPQ5FO LShPXsCVVZN8fA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:45:36 2025 by rpki-client