This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json) Hash identifier: 6D6K6shrjtr8oNQVAKJUxk6kwm7AZwW4hOLwXJTRnR4= Subject key identifier: E6:06:9B:15:98:02:86:C4:C1:8C:22:09:20:68:03:B7:2D:E5:8E:F8 Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Certificate serial: 019B3D59ECD100E00C3305A0801BF6784ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft Manifest number: F0 Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: TwCDGd4NH/thS3ZW9Xy/2jOwEaL1M7GKoH0kxIRh6X8=) 2: QXgU6iZ9eTA61-_lrp-WFw2wrio.roa (hash: pI7i4CdNQU0hsPQOTDHwQvTJeIPilN2xVeBBH/PkqDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ec:d1:00:e0:0c:33:05:a0:80:1b:f6:78:4a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=e6069b15980286c4c18c2209206803b72de58ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:9b:2a:4a:4e:90:74:11:67:8a:65:5f:fe: f2:28:c1:f4:e4:99:1c:0a:b8:d5:3e:af:80:b5:99: 16:97:da:fe:df:90:e6:23:2b:34:32:c7:2d:87:ba: c6:0e:b4:ce:0e:ff:f3:7d:75:25:1b:b0:e2:01:87: 09:4d:8c:b4:fe:81:75:3f:a4:1c:29:68:fe:59:aa: 2b:a5:18:51:62:38:1a:b6:08:37:6f:54:cf:2f:fd: a7:a5:a5:1e:ad:ee:67:23:49:cf:8d:27:f8:71:8d: f5:de:2c:d3:4c:30:c7:b9:56:d3:e8:4d:5e:44:b6: 80:3f:c4:5f:c3:e3:86:97:3a:f0:57:b6:47:18:5c: 53:46:85:49:a1:26:73:f6:15:b0:fe:8c:7b:52:d3: f4:7d:d6:90:dd:22:16:10:6d:55:93:e5:6d:37:97: ba:ea:42:0d:e5:a1:20:8e:91:ac:e3:3f:c3:68:5c: 24:18:83:73:0e:94:2b:e6:95:ac:0a:47:69:5f:a8: 4e:c4:58:21:d1:8b:71:ae:c0:ef:95:ab:14:16:08: b1:fe:ee:e7:d6:33:73:b0:9c:b1:4e:4e:fa:e8:1d: d8:3f:83:82:ff:be:0e:a3:3e:c6:a8:fe:5f:84:7c: c1:3f:31:0c:fc:30:a8:51:2a:46:54:ba:04:25:81: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:06:9B:15:98:02:86:C4:C1:8C:22:09:20:68:03:B7:2D:E5:8E:F8 X509v3 Authority Key Identifier: keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ca:70:f4:d4:c2:ce:4f:fb:47:c4:98:4b:9c:a4:e0:db:c2: 1f:ce:46:c2:e0:29:5e:6c:fe:a1:6c:a1:30:a5:49:87:8d:ad: 0a:fc:28:9a:a5:03:75:a1:72:0a:c8:57:a5:9f:4c:43:c4:71: 7a:de:a8:59:07:78:20:33:8c:e4:86:5c:b6:04:a9:97:cb:0a: 38:95:6e:a1:04:c1:aa:21:06:9a:37:67:72:52:d0:78:dc:ed: f7:8e:96:10:82:03:26:76:60:42:74:7f:e2:11:e9:a1:d8:c3: e0:a6:d5:ac:35:b2:1a:10:5a:d6:d0:7f:1e:7f:8b:3c:e5:77: 07:96:a0:48:8a:d2:ff:2d:9e:44:68:51:18:7b:9c:89:76:9d: 89:03:a4:a4:83:71:c5:69:e8:27:cf:b2:cc:4f:9e:f8:33:ba: 13:1e:38:04:78:00:bb:5d:43:49:6d:19:37:62:d4:2d:07:29: 29:29:04:2c:6c:ba:98:f0:2f:fe:c2:5b:59:47:7f:32:7e:4d: 95:f1:7d:34:f3:af:7a:b4:a8:34:dd:c0:35:02:11:c3:f9:0b: d6:bb:9b:3d:0c:51:22:d3:a6:99:f1:5f:cf:b1:bb:cb:2e:7c: 8d:02:fd:e9:f1:11:3a:96:5f:49:88:86:69:1e:48:a0:3f:35: 55:b5:a4:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WezRAOAMMwWggBv2eEq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjM0MjgzNzNkY2U4YTVmOTdmNDVlZmM2YzI4YjlmYmU3 Y2Q1NGQwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD EyhlNjA2OWIxNTk4MDI4NmM0YzE4YzIyMDkyMDY4MDNiNzJkZTU4ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD+bKkpOkHQRZ4plX/7yKMH05Jkc CrjVPq+AtZkWl9r+35DmIys0Mscth7rGDrTODv/zfXUlG7DiAYcJTYy0/oF1P6Qc KWj+WaorpRhRYjgatgg3b1TPL/2npaUere5nI0nPjSf4cY313izTTDDHuVbT6E1e RLaAP8Rfw+OGlzrwV7ZHGFxTRoVJoSZz9hWw/ox7UtP0fdaQ3SIWEG1Vk+VtN5e6 6kIN5aEgjpGs4z/DaFwkGINzDpQr5pWsCkdpX6hOxFgh0YtxrsDvlasUFgix/u7n 1jNzsJyxTk766B3YP4OC/74Ooz7GqP5fhHzBPzEM/DCoUSpGVLoEJYFcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYGmxWYAobEwYwiCSBoA7ct5Y74MB8GA1UdIwQY MBaAFO4jQoNz3Oil+X9F78bCi5++fNVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUt M2Y3N2ZkNDI3OTlhLzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUtM2Y3N2ZkNDI3OTlh LzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcpw9NTC zk/7R8SYS5yk4NvCH85GwuApXmz+oWyhMKVJh42tCvwomqUDdaFyCshXpZ9MQ8Rx et6oWQd4IDOM5IZctgSpl8sKOJVuoQTBqiEGmjdnclLQeNzt946WEIIDJnZgQnR/ 4hHpodjD4KbVrDWyGhBa1tB/Hn+LPOV3B5agSIrS/y2eRGhRGHuciXadiQOkpINx xWnoJ8+yzE+e+DO6Ex44BHgAu11DSW0ZN2LULQcpKSkELGy6mPAv/sJbWUd/Mn5N lfF9NPOverSoNN3ANQIRw/kL1rubPQxRItOmmfFfz7G7yy58jQL96fEROpZfSYiG aR5IoD81VbWkRw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:27:29 2025 by rpki-client