This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json) Hash identifier: 3YqGTyPSX4sLiQd9TSnshFQy6mfI23p+4ELZE3/B2eA= Subject key identifier: 23:C9:78:7D:B8:3F:62:96:14:3D:4E:09:67:1E:61:AD:86:C6:77:AB Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a Certificate serial: 019B2B8B14BCE0B2BC75AD9A7B9D8E5F23E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft Manifest number: 147C Signing time: Wed 17 Dec 2025 09:01:33 +0000 Manifest this update: Wed 17 Dec 2025 09:01:33 +0000 Manifest next update: Thu 18 Dec 2025 09:01:33 +0000 Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: 7dxvNJJewhbh6NX78rRiNJ+9devwjQXJTOL4VNVBM5A=) 2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:14:bc:e0:b2:bc:75:ad:9a:7b:9d:8e:5f:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a Validity Not Before: Dec 17 09:01:33 2025 GMT Not After : Dec 18 09:01:33 2025 GMT Subject: CN=23c9787db83f6296143d4e09671e61ad86c677ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:5b:af:05:0b:a9:ca:66:e4:7f:71:dc:7d: c3:a8:df:11:c9:af:60:17:3a:b3:50:c7:86:01:1b: e0:4a:de:e5:58:b4:36:e1:43:d4:76:51:56:44:30: 4b:26:f1:a3:02:d0:c1:f4:f9:85:36:bd:02:78:56: 5b:b5:dc:89:08:ef:a4:e5:3d:e3:ce:01:7a:e8:a4: ba:06:6a:cb:76:e3:dd:d4:79:b9:ca:29:df:88:76: d0:7d:61:c6:cd:8f:88:78:72:1d:fd:e1:2a:7a:1c: b5:dc:b6:2d:01:0d:6a:32:9a:5f:1d:bd:dd:f1:37: 96:e7:84:41:34:81:8a:12:23:3e:31:e3:5c:a5:a6: 47:a9:7c:0e:6e:4c:a9:26:9a:f8:4d:6a:8e:28:6a: cb:4a:b8:2c:da:bf:01:91:fb:50:31:70:12:67:ad: 0a:ed:a0:f0:b4:90:e3:97:b7:8a:59:d3:53:d3:1f: d7:e3:04:1b:8a:6e:c6:cf:c1:94:ea:ff:ea:22:24: 61:64:91:5a:85:5e:c7:9c:3d:50:06:f4:83:9c:0f: 21:f5:d3:a2:7e:ad:ec:9d:75:36:3c:b3:e6:c1:d8: d9:3c:95:8b:05:ab:d8:8c:d5:3a:a9:37:70:02:86: 98:0c:0b:7b:e9:53:b0:a1:0c:18:af:7f:b3:f7:ac: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C9:78:7D:B8:3F:62:96:14:3D:4E:09:67:1E:61:AD:86:C6:77:AB X509v3 Authority Key Identifier: keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1c:55:93:24:42:e8:93:a7:35:9f:29:6b:93:a2:15:87:04: dd:7b:7c:e8:36:cc:10:15:08:82:ec:64:9e:19:8a:79:ce:12: 17:7b:33:30:5c:69:8a:7a:33:f1:3c:2d:a3:ed:70:5a:37:e3: 90:73:cc:41:fd:8f:87:4f:ab:c7:db:7c:84:60:1c:6c:a9:ff: a8:4e:38:c6:e0:ff:83:be:4b:ea:78:9c:92:01:92:30:79:ea: 6a:0a:60:67:e5:22:70:c7:f4:38:39:2a:33:02:7a:37:b1:10: a1:11:c0:8d:85:ed:59:be:34:dd:d7:0a:d7:a5:b0:00:d4:43: b2:81:27:5e:48:f5:4d:2a:1a:10:9b:76:ca:7e:d6:e7:51:ed: 38:f7:3a:83:85:ab:9a:b5:a1:d0:8b:d1:f7:53:ae:da:92:e4: 2f:a2:e6:94:74:cc:8b:ad:cb:15:fc:01:98:fc:7c:e2:54:44: 0f:3d:92:00:5e:99:31:75:ab:7c:7a:a0:90:2e:d7:f9:04:83: d8:53:c2:8e:bf:77:37:14:22:f3:fb:8e:dc:54:1a:f1:21:00: 3e:58:a6:2b:95:5d:7e:27:01:2d:de:ec:33:ba:55:09:46:0a: 0c:9a:c8:06:b7:91:83:3c:4a:84:9c:5c:8c:75:c8:14:2e:4e: d8:24:9b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrixS84LK8da2ae52OXyPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2NjMmI5MDljN2M4MTVjYWNjYjVmY2U1MzFjMzI1MjZm YWRkNWEwHhcNMjUxMjE3MDkwMTMzWhcNMjUxMjE4MDkwMTMzWjAzMTEwLwYDVQQD EygyM2M5Nzg3ZGI4M2Y2Mjk2MTQzZDRlMDk2NzFlNjFhZDg2YzY3N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qlbrwULqcpm5H9x3H3DqN8Rya9g FzqzUMeGARvgSt7lWLQ24UPUdlFWRDBLJvGjAtDB9PmFNr0CeFZbtdyJCO+k5T3j zgF66KS6BmrLduPd1Hm5yinfiHbQfWHGzY+IeHId/eEqehy13LYtAQ1qMppfHb3d 8TeW54RBNIGKEiM+MeNcpaZHqXwObkypJpr4TWqOKGrLSrgs2r8BkftQMXASZ60K 7aDwtJDjl7eKWdNT0x/X4wQbim7Gz8GU6v/qIiRhZJFahV7HnD1QBvSDnA8h9dOi fq3snXU2PLPmwdjZPJWLBavYjNU6qTdwAoaYDAt76VOwoQwYr3+z96y0DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPJeH24P2KWFD1OCWceYa2GxnerMB8GA1UdIwQY MBaAFOzMwrkJx8gVysy1/OUxwyUm+t1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMjAxZTYtOTA2ZS00N2Q4LTg5MjMt NmVmYWI5YjE3NmQ5LzEvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kMjAxZTYtOTA2ZS00N2Q4LTg5MjMtNmVmYWI5YjE3NmQ5 LzEvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBxVkyRC 6JOnNZ8pa5OiFYcE3Xt86DbMEBUIguxknhmKec4SF3szMFxpinoz8Twto+1wWjfj kHPMQf2Ph0+rx9t8hGAcbKn/qE44xuD/g75L6nickgGSMHnqagpgZ+UicMf0ODkq MwJ6N7EQoRHAjYXtWb403dcK16WwANRDsoEnXkj1TSoaEJt2yn7W51HtOPc6g4Wr mrWh0IvR91Ou2pLkL6LmlHTMi63LFfwBmPx84lREDz2SAF6ZMXWrfHqgkC7X+QSD 2FPCjr93NxQi8/uO3FQa8SEAPlimK5VdficBLd7sM7pVCUYKDJrIBreRgzxKhJxc jHXIFC5O2CSb7g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:12 2025 by rpki-client