This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json) Hash identifier: Eue/Qxrpc5YWFXibZvqUvKtzqNvHhidqDTyYon5hE6s= Subject key identifier: 30:09:A3:E1:E4:F4:CA:6B:78:B9:52:24:2E:45:D6:D3:D7:2F:E8:B4 Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Certificate serial: 019B6D33CDCFE47B4F251D54FCE402ECE650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft Manifest number: 1371 Signing time: Tue 30 Dec 2025 03:01:10 +0000 Manifest this update: Tue 30 Dec 2025 03:01:10 +0000 Manifest next update: Wed 31 Dec 2025 03:01:10 +0000 Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: XRKJfHNDoVFe3cYo/w+WfcOjKXpNgWGmEf1UR/sJVcI=) 2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:cd:cf:e4:7b:4f:25:1d:54:fc:e4:02:ec:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Validity Not Before: Dec 30 03:01:10 2025 GMT Not After : Dec 31 03:01:10 2025 GMT Subject: CN=3009a3e1e4f4ca6b78b952242e45d6d3d72fe8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:50:09:8d:fc:7f:2d:7c:eb:29:64:fc:b5: b9:18:87:12:4b:03:9c:8f:17:ec:f7:88:43:35:dc: d4:63:f5:49:0b:62:e4:ed:e4:aa:34:82:cb:43:34: 66:f6:42:d5:2a:b4:f6:58:84:35:b3:35:2f:49:ed: e0:43:09:57:a8:f3:12:bc:07:07:4e:18:2c:34:56: 76:59:ad:6a:46:ff:cf:47:63:8c:01:22:a1:c1:af: c4:2f:1c:17:ea:e0:96:88:ba:9e:bd:4f:4e:75:e7: 26:02:8b:1d:0a:d3:f9:96:f3:32:a0:77:f0:0e:a5: 09:35:f1:f9:96:09:4e:a9:51:49:2d:6e:f9:48:d4: f3:38:8f:87:58:3c:0e:0a:d8:ce:f0:7b:cb:57:1c: cb:5a:59:02:e7:c6:a8:ba:db:f1:c7:e8:3a:25:eb: aa:d4:cb:2a:92:f6:30:e4:9a:67:89:a2:3f:66:f3: d5:85:6b:72:84:b4:13:4a:5f:d4:fa:ba:eb:de:dc: 75:26:1d:e3:4d:95:93:b0:0d:10:51:6e:db:fc:d5: 9c:93:be:81:9e:06:ce:4b:53:18:cd:9c:87:4f:d6: 2c:22:3a:38:f1:2b:34:eb:46:e4:af:a6:bd:93:31: 68:53:15:cd:61:3c:1a:cf:bc:a7:c4:32:2a:91:cd: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:09:A3:E1:E4:F4:CA:6B:78:B9:52:24:2E:45:D6:D3:D7:2F:E8:B4 X509v3 Authority Key Identifier: keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b6:dd:9c:eb:7f:4a:be:7e:a3:3a:47:93:db:2c:6a:85:09: 72:0a:51:84:41:cd:83:56:b1:cc:0e:52:f4:0e:0d:b1:f3:f4: 82:88:f9:ef:5b:2e:fb:51:01:82:cb:ce:c3:39:20:08:6e:74: 04:b0:62:08:8b:6d:94:4b:5c:bb:fd:ba:0e:74:5e:ea:bf:c7: b2:ae:0c:4a:bd:3c:4f:7a:4b:c5:59:cd:b9:e6:da:ce:40:36: 57:8f:f0:07:90:08:da:4b:60:c3:a4:a5:af:fb:02:e3:28:f9: 79:31:e5:1c:27:7a:02:bc:2b:4b:14:54:66:cd:bb:98:76:51: 01:9f:a9:07:cc:1c:d6:48:13:76:20:4f:f4:46:08:a9:e6:8e: f8:c4:08:53:4c:f0:e6:c6:32:9c:16:75:85:bb:70:3e:12:21: 22:8b:66:ee:03:8a:dc:66:28:35:61:e4:77:cf:ae:a2:91:54: ed:9e:d5:8d:5b:86:a8:a4:6f:f6:31:68:c7:3e:98:f7:fe:05: 3f:e7:bc:8f:59:b1:86:c2:0b:0c:06:4a:67:46:aa:29:97:a1: 7e:0d:90:ba:5e:e7:8e:5c:0b:12:6a:35:12:d0:05:b0:0a:7d: 7c:e1:ee:f0:f1:29:7d:cd:86:cc:5b:c9:ec:88:19:1a:67:35: 16:b9:52:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM83P5HtPJR1U/OQC7OZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh ZWYzY2MwHhcNMjUxMjMwMDMwMTEwWhcNMjUxMjMxMDMwMTEwWjAzMTEwLwYDVQQD EygzMDA5YTNlMWU0ZjRjYTZiNzhiOTUyMjQyZTQ1ZDZkM2Q3MmZlOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N1QCY38fy186ylk/LW5GIcSSwOc jxfs94hDNdzUY/VJC2Lk7eSqNILLQzRm9kLVKrT2WIQ1szUvSe3gQwlXqPMSvAcH ThgsNFZ2Wa1qRv/PR2OMASKhwa/ELxwX6uCWiLqevU9OdecmAosdCtP5lvMyoHfw DqUJNfH5lglOqVFJLW75SNTzOI+HWDwOCtjO8HvLVxzLWlkC58aoutvxx+g6Jeuq 1MsqkvYw5JpniaI/ZvPVhWtyhLQTSl/U+rrr3tx1Jh3jTZWTsA0QUW7b/NWck76B ngbOS1MYzZyHT9YsIjo48Ss060bkr6a9kzFoUxXNYTwaz7ynxDIqkc08XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAJo+Hk9MpreLlSJC5F1tPXL+i0MB8GA1UdIwQY MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLbdnOt/ Sr5+ozpHk9ssaoUJcgpRhEHNg1axzA5S9A4NsfP0goj571su+1EBgsvOwzkgCG50 BLBiCIttlEtcu/26DnRe6r/Hsq4MSr08T3pLxVnNuebazkA2V4/wB5AI2ktgw6Sl r/sC4yj5eTHlHCd6ArwrSxRUZs27mHZRAZ+pB8wc1kgTdiBP9EYIqeaO+MQIU0zw 5sYynBZ1hbtwPhIhIotm7gOK3GYoNWHkd8+uopFU7Z7VjVuGqKRv9jFoxz6Y9/4F P+e8j1mxhsILDAZKZ0aqKZehfg2Qul7njlwLEmo1EtAFsAp9fOHu8PEpfc2GzFvJ 7IgZGmc1FrlS+A== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:55 2025 by rpki-client