This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft File: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json) Hash identifier: D2ZvDDECMfvCA/GZFqnXuHVidBoJfWlckU9XvpokYF8= Subject key identifier: 52:B1:49:C6:1C:43:E7:EE:1D:CE:19:F1:82:26:8B:A7:ED:77:9B:AB Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41 Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41 Certificate serial: 019B747ECAE8816371F78918778AE6717B46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 13:00:25 +0000 Manifest this update: Wed 31 Dec 2025 13:00:25 +0000 Manifest next update: Thu 01 Jan 2026 13:00:25 +0000 Files and hashes: 1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: Vx2oOZhreDTcnOkDJ4ybQZ3xgdhaS6Fu66iMCC3cao8=) 2: VOwZFJ2kzA4iWyaWmWEZLWn-AT4.roa (hash: YQUstvHHSMLfCh8uMvOZZqE+6wkkgDZ2K70GWR3RN8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7e:ca:e8:81:63:71:f7:89:18:77:8a:e6:71:7b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41 Validity Not Before: Dec 31 13:00:25 2025 GMT Not After : Jan 1 13:00:25 2026 GMT Subject: CN=52b149c61c43e7ee1dce19f182268ba7ed779bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:83:ab:8a:b4:1a:48:43:38:38:7c:6c:b2: 3d:b3:2b:31:71:b7:df:78:7e:cb:75:28:1c:3f:5b: fe:86:69:39:60:4e:f7:85:55:dd:6c:fb:50:2d:02: af:70:6a:fa:25:ad:3c:19:20:8d:88:7c:3c:ad:53: 87:05:97:bc:43:68:c5:52:b4:9f:c6:ed:66:f7:7b: 5b:0f:0d:b9:35:84:07:bf:9e:4d:52:53:05:c1:a4: f1:be:e9:70:c8:a7:ba:df:17:04:8b:d2:6a:a3:5a: 1c:59:41:49:75:b2:bb:e1:42:ac:2a:5a:cc:3a:4d: 75:39:00:94:bf:ac:27:84:fa:36:f1:23:3c:60:1d: 71:ec:88:94:48:4c:1c:3f:1b:93:68:56:23:63:ca: 2c:a1:41:1d:5a:e2:a0:7e:13:51:92:53:3b:ee:f9: c6:25:04:9a:92:63:c3:98:07:a7:8e:48:24:6f:f9: 82:1a:43:41:c7:13:e9:a7:d1:a3:95:e5:1b:f7:97: 4b:b6:a7:93:95:22:c9:a6:96:94:d2:ef:08:8c:d2: 82:da:79:dd:85:6e:68:5b:26:58:cd:6a:fb:81:33: 3c:8d:90:3f:ba:d1:4e:2d:00:b5:62:8c:dd:39:65: fe:e1:9a:18:53:37:b1:7b:c9:8f:a6:85:fb:6c:ac: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B1:49:C6:1C:43:E7:EE:1D:CE:19:F1:82:26:8B:A7:ED:77:9B:AB X509v3 Authority Key Identifier: keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4f:70:a9:b4:84:d7:fb:2b:f9:63:b8:0d:6a:d8:5d:0e:e4: f6:bf:4d:69:e4:29:e1:85:4c:91:6c:56:13:f2:41:e0:ba:34: 0d:5f:05:c4:48:8a:2b:31:75:89:34:9a:4c:bb:9d:c3:96:a7: d9:1c:6c:7f:64:fb:ad:47:63:32:ba:f8:5e:7f:57:ba:67:e1: fe:b2:2b:ef:eb:0a:80:a5:a5:6c:fe:0d:a4:4d:21:68:7f:7c: aa:57:77:1c:f9:b6:4c:3a:e6:59:75:96:dc:ca:be:74:1c:be: 18:39:75:c8:52:46:78:6d:9f:7c:dd:f0:71:2a:cb:3c:04:85: 3d:cd:cc:23:f9:23:9d:8b:bc:39:82:77:96:6b:1a:8a:55:40: a4:dc:5c:81:92:cd:1f:56:e6:73:4b:5f:b0:65:6c:70:92:16: 83:14:14:b0:d0:f6:72:52:3f:57:4b:6f:08:1a:0f:41:56:e1: 5c:6c:65:72:40:72:3d:16:d1:1a:7f:f7:7b:c7:b8:f2:00:e8: 05:61:b7:cc:cc:e3:76:30:92:11:1a:5b:3a:62:c6:d5:3a:7e: b6:ee:94:ca:10:5e:79:8f:a6:80:4b:55:68:de:34:6f:ca:99: 7a:9e:f8:76:1c:bc:5d:65:94:08:16:ca:ba:05:e0:85:43:88: bd:d2:1f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0fsrogWNx94kYd4rmcXtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOTdiNzJkNWQ0Zjc1MGYxYjEzOGMyYTkwMWRkNjUxMDky MWJlNDEwHhcNMjUxMjMxMTMwMDI1WhcNMjYwMTAxMTMwMDI1WjAzMTEwLwYDVQQD Eyg1MmIxNDljNjFjNDNlN2VlMWRjZTE5ZjE4MjI2OGJhN2VkNzc5YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlyDq4q0GkhDODh8bLI9sysxcbff eH7LdSgcP1v+hmk5YE73hVXdbPtQLQKvcGr6Ja08GSCNiHw8rVOHBZe8Q2jFUrSf xu1m93tbDw25NYQHv55NUlMFwaTxvulwyKe63xcEi9Jqo1ocWUFJdbK74UKsKlrM Ok11OQCUv6wnhPo28SM8YB1x7IiUSEwcPxuTaFYjY8osoUEdWuKgfhNRklM77vnG JQSakmPDmAenjkgkb/mCGkNBxxPpp9GjleUb95dLtqeTlSLJppaU0u8IjNKC2nnd hW5oWyZYzWr7gTM8jZA/utFOLQC1YozdOWX+4ZoYUzexe8mPpoX7bKw5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKxScYcQ+fuHc4Z8YImi6ftd5urMB8GA1UdIwQY MBaAFOyXty1dT3UPGxOMKpAd1lEJIb5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzIt ODA2NmZhMjEyNDFhLzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzItODA2NmZhMjEyNDFh LzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE9wqbSE 1/sr+WO4DWrYXQ7k9r9NaeQp4YVMkWxWE/JB4Lo0DV8FxEiKKzF1iTSaTLudw5an 2Rxsf2T7rUdjMrr4Xn9Xumfh/rIr7+sKgKWlbP4NpE0haH98qld3HPm2TDrmWXWW 3Mq+dBy+GDl1yFJGeG2ffN3wcSrLPASFPc3MI/kjnYu8OYJ3lmsailVApNxcgZLN H1bmc0tfsGVscJIWgxQUsND2clI/V0tvCBoPQVbhXGxlckByPRbRGn/3e8e48gDo BWG3zMzjdjCSERpbOmLG1Tp+tu6UyhBeeY+mgEtVaN40b8qZep74dhy8XWWUCBbK ugXghUOIvdIfKg== -----END CERTIFICATE-----Generated at Wed Dec 31 22:50:58 2025 by rpki-client