This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json) Hash identifier: GCekHBBgoxR1pdumeapVmHdTVhW/AL+bc4dkUIi1QkE= Subject key identifier: F1:0E:C9:29:9C:9A:72:0D:A3:03:20:4D:9B:94:BB:D1:71:16:15:84 Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1 Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1 Certificate serial: 019B6655884F525B018871C8D5A16F9ED120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft Manifest number: 0FE0 Signing time: Sun 28 Dec 2025 19:00:40 +0000 Manifest this update: Sun 28 Dec 2025 19:00:40 +0000 Manifest next update: Mon 29 Dec 2025 19:00:40 +0000 Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: jLeWZVXYNNIMEU8+QxN7J/Q0laEMQr8CA9kfQ3Qu7EU=) 2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:88:4f:52:5b:01:88:71:c8:d5:a1:6f:9e:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1 Validity Not Before: Dec 28 19:00:40 2025 GMT Not After : Dec 29 19:00:40 2025 GMT Subject: CN=f10ec9299c9a720da303204d9b94bbd171161584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:45:dc:17:f6:56:af:65:c3:a0:35:9c:55: 32:ed:7d:33:25:13:b6:1e:35:e1:6a:68:0e:f7:cd: fd:8d:33:ca:26:40:40:f6:55:71:e5:b9:2f:22:95: 03:3c:14:da:ed:ae:37:16:27:2d:bf:16:48:02:96: 9e:80:76:e1:9f:71:29:59:3d:61:47:10:12:e1:78: 43:d3:15:fb:03:80:3f:13:02:96:98:a8:aa:5a:55: 21:67:33:a3:a6:1d:88:e5:44:e3:6d:b5:bd:35:c8: 90:a9:d5:00:ef:36:09:16:98:4e:0f:bf:a7:dd:0f: a9:96:34:4c:18:62:78:12:fe:83:12:00:d2:d7:b9: 9d:94:ab:46:3a:34:4d:e0:43:f6:5d:fa:07:56:13: 5e:3a:18:25:4c:89:9e:cd:0d:35:99:44:38:92:fb: d8:44:d1:e1:10:03:11:10:a8:5c:e5:a2:d1:b3:ed: cb:f8:ce:67:15:b1:21:bc:15:ed:1e:53:21:a4:06: 5a:8c:16:ec:86:a6:85:1a:98:a9:3b:dd:cd:e0:9e: 27:48:96:4c:a0:89:97:98:66:ea:d5:65:5e:18:5c: e1:eb:e1:90:4a:76:b4:e2:a4:ff:86:1f:22:bb:9b: 70:45:6d:f6:87:ed:3d:ab:64:b2:de:fd:b7:2a:57: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:C9:29:9C:9A:72:0D:A3:03:20:4D:9B:94:BB:D1:71:16:15:84 X509v3 Authority Key Identifier: keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:8c:2a:0c:92:8d:9e:e1:f5:9f:c9:21:c9:71:b7:d6:ac: 10:15:96:39:c2:40:69:a3:e4:92:cd:69:22:92:23:3a:2a:3e: 5f:be:e0:bc:c3:29:88:75:ac:ae:34:0b:03:bf:90:2b:af:f1: e1:cf:65:24:40:1d:f0:91:e6:32:58:19:6e:01:f3:d3:1a:c4: b1:09:e8:d1:5e:aa:51:29:6a:af:bf:53:b8:e8:f2:9e:42:7f: b2:f7:ae:e3:64:d2:76:7d:05:2d:b3:07:6b:52:35:85:08:62: b4:be:5f:87:d2:b4:b4:1a:b2:cc:00:46:0b:9d:89:55:b7:37: 39:cd:1d:e2:4f:1c:ea:10:aa:d9:22:c4:46:67:09:43:00:6b: 76:31:23:39:50:b6:3a:d7:4b:d0:f8:16:3e:a1:8c:33:de:ba: b2:92:27:32:cc:e0:7c:02:82:23:54:19:e4:16:c1:3c:47:41: a5:80:18:bb:d6:39:1f:55:4d:b3:d2:d8:0e:70:dc:38:a4:6e: 34:7b:9b:da:49:cb:0a:11:55:64:ef:5c:2c:44:ee:93:88:23: a6:ca:f6:6a:e2:e5:c7:67:08:3d:6a:2d:67:97:3f:c6:e6:38: 86:03:62:60:8c:62:92:f0:10:77:27:14:a7:2a:38:af:f3:26: 53:ed:be:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVYhPUlsBiHHI1aFvntEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYzQ1ZmNhZGM0YzkzM2FjOGZmNGUwYjQzNGE1YmZiNTY3 YjY1YTEwHhcNMjUxMjI4MTkwMDQwWhcNMjUxMjI5MTkwMDQwWjAzMTEwLwYDVQQD EyhmMTBlYzkyOTljOWE3MjBkYTMwMzIwNGQ5Yjk0YmJkMTcxMTYxNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BFF3Bf2Vq9lw6A1nFUy7X0zJRO2 HjXhamgO9839jTPKJkBA9lVx5bkvIpUDPBTa7a43FictvxZIApaegHbhn3EpWT1h RxAS4XhD0xX7A4A/EwKWmKiqWlUhZzOjph2I5UTjbbW9NciQqdUA7zYJFphOD7+n 3Q+pljRMGGJ4Ev6DEgDS17mdlKtGOjRN4EP2XfoHVhNeOhglTImezQ01mUQ4kvvY RNHhEAMREKhc5aLRs+3L+M5nFbEhvBXtHlMhpAZajBbshqaFGpipO93N4J4nSJZM oImXmGbq1WVeGFzh6+GQSna04qT/hh8iu5twRW32h+09q2Sy3v23KlfXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEOySmcmnINowMgTZuUu9FxFhWEMB8GA1UdIwQY MBaAFOzEX8rcTJM6yP9OC0NKW/tWe2WhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQt ZTA3NmY4Y2NiOGI5LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQtZTA3NmY4Y2NiOGI5 LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoSMKgyS jZ7h9Z/JIclxt9asEBWWOcJAaaPkks1pIpIjOio+X77gvMMpiHWsrjQLA7+QK6/x 4c9lJEAd8JHmMlgZbgHz0xrEsQno0V6qUSlqr79TuOjynkJ/sveu42TSdn0FLbMH a1I1hQhitL5fh9K0tBqyzABGC52JVbc3Oc0d4k8c6hCq2SLERmcJQwBrdjEjOVC2 OtdL0PgWPqGMM966spInMszgfAKCI1QZ5BbBPEdBpYAYu9Y5H1VNs9LYDnDcOKRu NHub2knLChFVZO9cLETuk4gjpsr2auLlx2cIPWotZ5c/xuY4hgNiYIxikvAQdycU pyo4r/MmU+2+zw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:56 2025 by rpki-client