This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json) Hash identifier: Qcu/OfJqsqBJ0SabKPz6AUJxHcYR6E/lf3kGkekHucQ= Subject key identifier: E8:99:3C:CE:6D:EF:B6:EA:1D:5F:83:57:E0:14:B4:80:74:BF:D7:02 Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1 Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1 Certificate serial: 019B360E522DB34D40AD8E8F508C4400E8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft Manifest number: 10EF Signing time: Fri 19 Dec 2025 10:01:06 +0000 Manifest this update: Fri 19 Dec 2025 10:01:06 +0000 Manifest next update: Sat 20 Dec 2025 10:01:06 +0000 Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: 8FaEIjU+WK40oUsepNujqeO5s4/efyHsLMdw8AcHuyA=) 2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:52:2d:b3:4d:40:ad:8e:8f:50:8c:44:00:e8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1 Validity Not Before: Dec 19 10:01:06 2025 GMT Not After : Dec 20 10:01:06 2025 GMT Subject: CN=e8993cce6defb6ea1d5f8357e014b48074bfd702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:35:2f:93:59:92:c9:01:04:81:21:25:ef: 77:69:2f:14:49:1a:f8:b6:69:03:8d:c6:db:e7:3a: b8:00:09:c4:64:b9:4e:ac:4a:ac:9b:25:d8:88:b7: a0:b1:f2:db:e6:a4:35:53:0e:7a:23:b5:6b:6a:bc: 96:8c:3f:aa:c6:bc:69:87:fb:29:fb:6d:df:df:95: b6:16:38:2b:f1:4c:53:f6:72:0f:22:9d:6b:ab:f0: 2b:0d:71:6e:47:c7:90:49:12:36:6b:e3:a5:10:d4: ff:20:5e:54:a6:1b:87:c2:c7:e7:f8:87:28:73:f8: 2a:be:d4:5e:c3:23:d8:d0:e4:0a:b6:3a:80:99:59: 4d:7a:06:74:58:d4:7d:bc:5a:4b:d5:31:21:08:fa: 02:f5:14:9f:d6:ba:e5:48:5c:07:34:23:14:94:bc: 78:3e:63:e1:4a:5a:74:64:ad:8e:88:75:6c:33:37: 5d:dd:18:e2:f6:f2:84:06:bb:4f:38:db:d8:90:6a: 70:95:34:b1:b3:88:37:96:41:14:f6:b5:29:c7:e7: 7c:be:fe:4b:12:22:72:ac:5d:2d:d1:bf:de:94:d7: 20:9c:f5:ff:0c:0f:79:56:bb:c5:f5:dc:05:3d:f7: f6:4c:67:c7:a9:be:2e:2c:f8:f2:e6:bf:b0:9f:05: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:99:3C:CE:6D:EF:B6:EA:1D:5F:83:57:E0:14:B4:80:74:BF:D7:02 X509v3 Authority Key Identifier: keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:25:71:4c:88:e6:86:56:a3:0c:a6:1c:c5:f1:21:ee:df:d8: 07:53:40:53:ba:8e:4c:69:2e:93:8d:ce:62:04:cf:63:7d:99: a5:46:ef:f5:e4:70:0e:fa:d2:19:28:da:ef:99:ac:49:ab:bf: 3a:f5:1d:55:76:be:8a:d3:ce:1c:a6:2d:c8:b3:96:d1:38:e4: 24:fa:4d:30:72:7b:20:f6:26:80:f5:e4:97:26:9f:48:00:74: b4:28:1c:93:8f:db:c3:24:f5:68:89:b3:ec:2d:ff:1b:9b:05: f8:c8:09:17:60:3c:a1:be:22:b5:61:ec:91:2a:e3:bb:92:d8: 25:9a:cb:12:fa:49:92:e5:cb:61:b6:40:2b:bc:cf:2f:9a:84: d6:d5:97:1c:13:1e:2a:05:a0:27:be:17:d2:47:b9:11:0a:ba: 82:50:0e:c5:38:7d:3e:d2:7f:44:0a:5b:b0:d9:c8:6c:a6:e3: d8:4a:60:ee:bf:27:f0:2c:8a:0d:df:89:f5:1b:32:6c:16:9e: a0:8b:3a:e4:3a:24:a1:45:13:59:f2:91:b6:3b:72:69:d1:cd: f0:bd:64:75:a0:d5:61:1d:94:e2:ae:39:0d:53:88:33:d6:8a: a0:89:bf:fa:26:3a:1e:2c:4e:eb:a7:d6:dd:cb:6a:b8:66:9d: 1f:f5:db:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlIts01ArY6PUIxEAOi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2 ODI0ZjEwHhcNMjUxMjE5MTAwMTA2WhcNMjUxMjIwMTAwMTA2WjAzMTEwLwYDVQQD EyhlODk5M2NjZTZkZWZiNmVhMWQ1ZjgzNTdlMDE0YjQ4MDc0YmZkNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8A1L5NZkskBBIEhJe93aS8USRr4 tmkDjcbb5zq4AAnEZLlOrEqsmyXYiLegsfLb5qQ1Uw56I7VraryWjD+qxrxph/sp +23f35W2Fjgr8UxT9nIPIp1rq/ArDXFuR8eQSRI2a+OlENT/IF5UphuHwsfn+Ico c/gqvtRewyPY0OQKtjqAmVlNegZ0WNR9vFpL1TEhCPoC9RSf1rrlSFwHNCMUlLx4 PmPhSlp0ZK2OiHVsMzdd3Rji9vKEBrtPONvYkGpwlTSxs4g3lkEU9rUpx+d8vv5L EiJyrF0t0b/elNcgnPX/DA95VrvF9dwFPff2TGfHqb4uLPjy5r+wnwWjJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiZPM5t77bqHV+DV+AUtIB0v9cCMB8GA1UdIwQY MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiVxTIjm hlajDKYcxfEh7t/YB1NAU7qOTGkuk43OYgTPY32ZpUbv9eRwDvrSGSja75msSau/ OvUdVXa+itPOHKYtyLOW0TjkJPpNMHJ7IPYmgPXklyafSAB0tCgck4/bwyT1aImz 7C3/G5sF+MgJF2A8ob4itWHskSrju5LYJZrLEvpJkuXLYbZAK7zPL5qE1tWXHBMe KgWgJ74X0ke5EQq6glAOxTh9PtJ/RApbsNnIbKbj2Epg7r8n8CyKDd+J9RsybBae oIs65DokoUUTWfKRtjtyadHN8L1kdaDVYR2U4q45DVOIM9aKoIm/+iY6HixO66fW 3ctquGadH/Xbig== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:23 2025 by rpki-client