This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft File: 7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json) Hash identifier: BhiaGsz43Q7RIwq60+rPZgziCc6D0h/OAwBdqXHN+6s= Subject key identifier: 39:6F:3C:ED:E3:80:48:77:94:57:9F:65:68:AD:D8:A8:AB:8F:A8:99 Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Certificate serial: 019B3F488D7F3B6C11C8ABCF323C27379830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft Manifest number: 1147 Signing time: Sun 21 Dec 2025 05:01:17 +0000 Manifest this update: Sun 21 Dec 2025 05:01:17 +0000 Manifest next update: Mon 22 Dec 2025 05:01:17 +0000 Files and hashes: 1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=) 2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: Hp1WPXgo2cIYNvpb4iWGk+GVXWeJpdZBkyu9Dp9MWKQ=) 3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=) 4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:8d:7f:3b:6c:11:c8:ab:cf:32:3c:27:37:98:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Validity Not Before: Dec 21 05:01:17 2025 GMT Not After : Dec 22 05:01:17 2025 GMT Subject: CN=396f3cede380487794579f6568add8a8ab8fa899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:fb:44:eb:79:2a:97:40:f6:df:eb:8b:c3: f8:57:2a:2f:67:75:b9:93:55:99:e2:d4:5a:05:99: 93:4e:97:86:ca:90:ae:81:70:af:57:a8:eb:9d:b7: ca:1c:47:c3:6a:a2:f6:20:8c:f7:4a:46:ea:62:21: 58:37:63:39:8b:db:80:1f:ef:70:99:2c:d0:f6:23: 75:8a:99:b5:d2:f6:c7:c1:66:e6:32:79:fc:0f:10: 13:e4:10:db:1a:ea:e5:4c:fe:80:fe:4b:f0:c8:12: e1:6d:f7:a5:01:cf:6c:19:d1:34:a4:85:e0:91:23: 4e:27:57:f6:56:1e:1b:15:03:ba:b1:b2:27:d2:6e: 45:99:4b:ab:02:5e:dd:5e:e3:6a:82:0c:57:0c:dc: 22:cc:d5:3e:10:cf:2b:47:75:05:1b:15:4c:67:96: fc:e4:5c:b0:c5:ab:e2:08:d3:0b:79:74:bc:ce:f3: 19:f8:7d:12:17:9b:ef:5a:d7:73:3e:7d:23:de:90: 29:2b:e9:33:ca:0f:37:be:b9:0d:da:c5:d0:4d:da: 35:24:9c:2b:d5:62:32:12:b1:bd:44:0e:d2:18:7d: ed:b7:2a:1e:d6:e5:da:a2:1d:74:f5:79:7d:5f:f7: d1:ff:24:c8:fc:2e:46:16:6b:bc:df:94:14:17:81: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6F:3C:ED:E3:80:48:77:94:57:9F:65:68:AD:D8:A8:AB:8F:A8:99 X509v3 Authority Key Identifier: keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:31:73:f5:eb:94:c7:d8:0e:7d:99:0d:2f:b4:71:ef:fa: 87:9e:e2:63:7b:7f:03:eb:ca:8f:b2:9d:0b:41:74:8c:12:5f: d9:39:0e:e3:9f:a9:02:7d:9b:d9:23:c0:dc:d6:de:d0:66:71: 9c:07:19:4a:cf:29:c6:ba:a2:8e:48:3e:48:a2:9a:ff:cd:fb: 97:ec:3c:6f:07:c3:1a:50:c5:a4:87:30:38:9f:51:72:a1:ab: 44:cc:9f:fd:d3:c6:43:be:74:99:0b:a1:48:ed:ca:46:b2:83: ef:d9:8e:51:2b:db:8f:83:88:73:bc:5a:c6:76:b4:58:36:cc: 1e:6c:55:6a:18:48:53:a4:9c:f5:9b:38:2c:93:c3:cd:a2:84: 8d:91:25:2c:68:6c:a5:80:b6:4d:7f:a3:b4:32:58:07:bb:93: 81:42:3a:ab:c3:51:de:da:d7:c2:89:50:17:c0:65:25:73:ce: 7c:64:ac:39:62:58:1e:50:1e:11:ed:ba:06:e0:e0:26:f1:35: 48:03:5f:b7:1a:cf:61:57:da:e9:dd:bb:47:41:60:1b:ae:75: 3c:9c:31:ba:43:46:ac:b2:80:48:2a:04:e6:dc:8f:48:b3:f3: 3c:c1:7a:88:b8:50:33:cd:fe:57:33:e0:82:39:79:6e:24:46: 07:44:c2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SI1/O2wRyKvPMjwnN5gwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDU5ODY4OTdkMDI0ZTQ4YzdjZDI1ZTE4OTFjNDIwOGZm M2JiYjIwHhcNMjUxMjIxMDUwMTE3WhcNMjUxMjIyMDUwMTE3WjAzMTEwLwYDVQQD EygzOTZmM2NlZGUzODA0ODc3OTQ1NzlmNjU2OGFkZDhhOGFiOGZhODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8f7ROt5KpdA9t/ri8P4VyovZ3W5 k1WZ4tRaBZmTTpeGypCugXCvV6jrnbfKHEfDaqL2IIz3SkbqYiFYN2M5i9uAH+9w mSzQ9iN1ipm10vbHwWbmMnn8DxAT5BDbGurlTP6A/kvwyBLhbfelAc9sGdE0pIXg kSNOJ1f2Vh4bFQO6sbIn0m5FmUurAl7dXuNqggxXDNwizNU+EM8rR3UFGxVMZ5b8 5FywxaviCNMLeXS8zvMZ+H0SF5vvWtdzPn0j3pApK+kzyg83vrkN2sXQTdo1JJwr 1WIyErG9RA7SGH3ttyoe1uXaoh109Xl9X/fR/yTI/C5GFmu835QUF4EFhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlvPO3jgEh3lFefZWit2Kirj6iZMB8GA1UdIwQY MBaAFOwFmGiX0CTkjHzSXhiRxCCP87uyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQt NzY2ZDFmMzI0MzNjLzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQtNzY2ZDFmMzI0MzNj LzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMncxc/Xr lMfYDn2ZDS+0ce/6h57iY3t/A+vKj7KdC0F0jBJf2TkO45+pAn2b2SPA3Nbe0GZx nAcZSs8pxrqijkg+SKKa/837l+w8bwfDGlDFpIcwOJ9RcqGrRMyf/dPGQ750mQuh SO3KRrKD79mOUSvbj4OIc7xaxna0WDbMHmxVahhIU6Sc9Zs4LJPDzaKEjZElLGhs pYC2TX+jtDJYB7uTgUI6q8NR3trXwolQF8BlJXPOfGSsOWJYHlAeEe26BuDgJvE1 SANftxrPYVfa6d27R0FgG651PJwxukNGrLKASCoE5tyPSLPzPMF6iLhQM83+VzPg gjl5biRGB0TCiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:07 2025 by rpki-client