This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json) Hash identifier: KeS4st+WRcIiEeLeiOqjBBrfWTB3xQrjhqQHPqLkOZc= Subject key identifier: 41:3C:DA:86:23:27:F8:BF:C5:CD:AD:14:EC:28:45:DD:5F:F8:30:3D Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Certificate serial: 019B3CEC42F1E3254709B3C2E281B20355F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:15 +0000 Manifest next update: Sun 21 Dec 2025 18:01:15 +0000 Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=) 2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: clkKYgTI2UkxAbb5d3CkxUytqDdTUM/3Eg1jMOyTC1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:42:f1:e3:25:47:09:b3:c2:e2:81:b2:03:55:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Validity Not Before: Dec 20 18:01:15 2025 GMT Not After : Dec 21 18:01:15 2025 GMT Subject: CN=413cda862327f8bfc5cdad14ec2845dd5ff8303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7b:9c:70:5c:29:1b:77:f7:8a:d8:5d:e2:87: 73:2b:d6:c7:bf:d1:94:9c:bb:9f:e4:19:ba:ff:80: e8:bf:1f:66:8f:ca:22:61:02:0a:b7:96:6a:c2:f8: bd:6a:42:e6:7d:48:de:16:84:51:62:1d:ae:a4:12: 80:37:11:72:94:50:19:22:04:c1:73:9c:92:29:21: 6b:4b:50:c2:77:53:f2:ec:b3:df:22:ed:02:3d:fe: 9b:e7:6b:05:d6:77:e1:72:3c:87:aa:db:b4:16:35: a3:a4:74:70:57:d3:ae:23:ef:8f:62:0c:26:bd:d2: 20:c5:22:d5:2b:d6:bd:a5:d4:14:16:9e:9d:a0:a2: d0:b4:ca:32:75:68:07:b7:4e:aa:fd:ad:54:da:a6: 0d:d9:b2:bc:a9:c3:46:21:97:2b:56:cb:53:9f:02: 59:b9:c4:3d:ce:ea:e5:19:b3:76:a1:64:dc:cc:dd: 02:7a:0f:d5:87:54:8a:ee:64:b6:79:8a:a2:6b:f8: a3:61:41:74:57:a9:21:25:d9:73:33:c3:e8:6f:04: 86:10:9f:36:6a:00:56:b6:e0:f5:0e:f4:5b:81:66: 47:35:49:31:60:0c:31:49:f6:b1:1d:99:71:ba:59: 23:48:d8:e0:a1:bd:d6:42:f5:75:a9:ee:1f:3c:85: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3C:DA:86:23:27:F8:BF:C5:CD:AD:14:EC:28:45:DD:5F:F8:30:3D X509v3 Authority Key Identifier: keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e9:4c:ac:b4:45:54:6b:9c:f5:9d:50:63:73:8d:71:5f:8f: b2:dd:2d:2b:d0:77:4e:af:ee:86:dc:63:c4:d4:aa:fa:77:0e: 08:73:97:af:c4:dd:75:14:95:c7:bf:90:8b:f1:d2:d6:87:10: a6:1d:04:6d:29:5d:80:12:3a:24:cd:e2:a0:00:ab:47:ec:42: 4a:0f:74:44:48:65:bf:62:4d:25:cb:50:59:92:3e:83:00:1e: 87:c1:e1:49:2c:41:59:19:27:46:a6:22:f4:b9:fb:d8:e7:fb: eb:bb:69:cb:ae:fa:a7:dc:2d:f2:ec:f4:d0:b0:98:5d:fc:9b: 18:ac:9b:60:f1:54:9f:fa:73:1c:73:1c:10:7a:bc:e1:83:09: 5d:be:18:3f:6b:a9:1a:08:a9:a9:57:75:4a:98:d3:19:f4:56: 8d:f8:c5:68:e5:83:c4:81:31:1f:89:f3:e7:fc:5f:b5:25:61: 92:20:26:ee:f9:00:b2:56:9d:e0:b3:d9:ce:e3:59:7d:7d:ec: 6a:3e:eb:cc:47:8b:4a:e8:e9:42:f8:e3:9e:72:01:7f:fe:34: 25:a9:7f:c0:0a:b1:b6:61:a4:e2:d1:71:6b:f9:23:83:14:2f: 4f:a3:4d:f6:8f:e5:52:82:9a:3b:7d:57:25:4c:ca:e7:09:e7: cd:99:fe:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87ELx4yVHCbPC4oGyA1X1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk NDBlMWQwHhcNMjUxMjIwMTgwMTE1WhcNMjUxMjIxMTgwMTE1WjAzMTEwLwYDVQQD Eyg0MTNjZGE4NjIzMjdmOGJmYzVjZGFkMTRlYzI4NDVkZDVmZjgzMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XuccFwpG3f3ithd4odzK9bHv9GU nLuf5Bm6/4Dovx9mj8oiYQIKt5Zqwvi9akLmfUjeFoRRYh2upBKANxFylFAZIgTB c5ySKSFrS1DCd1Py7LPfIu0CPf6b52sF1nfhcjyHqtu0FjWjpHRwV9OuI++PYgwm vdIgxSLVK9a9pdQUFp6doKLQtMoydWgHt06q/a1U2qYN2bK8qcNGIZcrVstTnwJZ ucQ9zurlGbN2oWTczN0Ceg/Vh1SK7mS2eYqia/ijYUF0V6khJdlzM8PobwSGEJ82 agBWtuD1DvRbgWZHNUkxYAwxSfaxHZlxulkjSNjgob3WQvV1qe4fPIXMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE82oYjJ/i/xc2tFOwoRd1f+DA9MB8GA1UdIwQY MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFelMrLRF VGuc9Z1QY3ONcV+Pst0tK9B3Tq/uhtxjxNSq+ncOCHOXr8TddRSVx7+Qi/HS1ocQ ph0EbSldgBI6JM3ioACrR+xCSg90REhlv2JNJctQWZI+gwAeh8HhSSxBWRknRqYi 9Ln72Of767tpy676p9wt8uz00LCYXfybGKybYPFUn/pzHHMcEHq84YMJXb4YP2up GgipqVd1SpjTGfRWjfjFaOWDxIExH4nz5/xftSVhkiAm7vkAslad4LPZzuNZfX3s aj7rzEeLSujpQvjjnnIBf/40Jal/wAqxtmGk4tFxa/kjgxQvT6NN9o/lUoKaO31X JUzK5wnnzZn+MQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:24 2025 by rpki-client