This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: mTA1obJzJCcs0raA5NhXWUUPar4/WJadzKx0ZVFc4/8=
Subject key identifier: B0:97:1A:33:DA:35:69:60:E4:54:AF:27:F2:60:FE:F0:CD:4D:73:BD
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019B4B831B052CCC50F2424392048D33B059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0F5D
Signing time: Tue 23 Dec 2025 14:00:41 +0000
Manifest this update: Tue 23 Dec 2025 14:00:41 +0000
Manifest next update: Wed 24 Dec 2025 14:00:41 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: F8PFsZGT/OPeUd84fU8IevrUpEUurDV2ZXwjnniV8uI=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4b:83:1b:05:2c:cc:50:f2:42:43:92:04:8d:33:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Dec 23 14:00:41 2025 GMT
Not After : Dec 24 14:00:41 2025 GMT
Subject: CN=b0971a33da356960e454af27f260fef0cd4d73bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:9a:79:ae:ca:77:80:7f:dd:3d:d8:97:02:
84:2d:8b:50:3f:e1:1f:0c:4b:c4:b4:f6:4e:de:39:
4f:fb:fb:1d:fc:db:6a:13:01:bf:4b:16:95:7d:32:
b6:db:0c:f9:52:89:6f:79:92:0c:dc:60:5b:f6:96:
55:da:cb:34:ac:84:8c:c6:80:a1:e1:2d:f6:98:9b:
48:dd:b4:49:40:44:55:53:28:59:e8:4d:1d:96:7e:
7e:c2:b6:3a:4b:a1:4d:57:c8:08:e4:35:4a:0e:85:
ce:d7:33:d3:99:d6:87:eb:1a:e2:c5:7f:94:17:ae:
fc:53:fe:62:35:31:94:15:c3:35:56:46:90:bb:13:
43:b3:1c:d0:14:bf:9c:03:78:eb:fa:fb:1c:5d:80:
f9:45:d3:67:82:ba:85:01:00:c2:25:d5:c6:00:d9:
b0:b0:9c:8c:bb:d8:83:81:cf:80:83:93:f2:01:38:
b7:8c:82:da:da:5b:28:8f:72:1b:a9:10:06:21:9d:
d4:07:6e:c9:5c:22:95:06:36:ce:b5:72:6b:e4:d5:
3a:8d:3f:8e:1d:fc:cf:ee:36:db:ce:5b:27:a2:10:
7b:f5:d5:b2:39:ba:46:e7:48:ab:84:ba:24:68:29:
37:79:71:31:3e:70:07:1c:20:0f:e8:84:eb:dc:aa:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:1A:33:DA:35:69:60:E4:54:AF:27:F2:60:FE:F0:CD:4D:73:BD
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:fc:75:fb:b0:15:91:c4:ca:f8:53:9d:0c:5e:60:e7:59:
ae:2d:bb:c2:34:4d:2e:e4:dc:f5:c3:ce:b9:e9:80:e6:8b:62:
9c:9d:03:fa:79:0a:15:4c:79:83:0f:6f:d2:76:24:4d:9e:2a:
49:71:2d:58:96:ae:ce:47:8c:ef:9c:8e:c7:40:e2:1f:a4:9b:
8c:8c:66:6d:aa:30:7f:28:13:64:0f:9d:e9:3c:08:8f:00:bb:
f7:87:09:45:07:5c:6c:20:68:15:ec:44:61:45:42:93:19:c2:
5c:08:27:fe:96:6f:a1:f6:b4:5f:ee:a4:7d:0e:e0:e3:17:4e:
26:b0:f5:dc:12:59:ea:f1:ee:f0:4d:25:7d:f0:1b:03:04:9c:
7d:93:12:f4:36:39:d2:c4:bd:87:8c:a8:cc:f4:7f:69:15:51:
db:6a:5e:31:44:73:04:5e:02:3f:34:a5:32:81:63:b0:66:ea:
63:58:70:b3:54:b4:62:a3:e8:17:ab:0a:29:0f:e0:fa:df:f0:
07:ab:75:9c:25:ca:52:27:8a:a2:d8:55:39:f9:49:71:a7:55:
fd:c5:c4:ed:51:73:0e:c9:78:13:e8:87:89:04:e0:19:93:5d:
bb:72:89:6b:32:44:65:bb:dd:6c:2c:a4:93:e7:e2:01:e0:55:
53:29:a7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtLgxsFLMxQ8kJDkgSNM7BZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjUxMjIzMTQwMDQxWhcNMjUxMjI0MTQwMDQxWjAzMTEwLwYDVQQD
EyhiMDk3MWEzM2RhMzU2OTYwZTQ1NGFmMjdmMjYwZmVmMGNkNGQ3M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzWaea7Kd4B/3T3YlwKELYtQP+Ef
DEvEtPZO3jlP+/sd/NtqEwG/SxaVfTK22wz5UolveZIM3GBb9pZV2ss0rISMxoCh
4S32mJtI3bRJQERVUyhZ6E0dln5+wrY6S6FNV8gI5DVKDoXO1zPTmdaH6xrixX+U
F678U/5iNTGUFcM1VkaQuxNDsxzQFL+cA3jr+vscXYD5RdNngrqFAQDCJdXGANmw
sJyMu9iDgc+Ag5PyATi3jILa2lsoj3IbqRAGIZ3UB27JXCKVBjbOtXJr5NU6jT+O
HfzP7jbbzlsnohB79dWyObpG50irhLokaCk3eXExPnAHHCAP6ITr3KpDnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCXGjPaNWlg5FSvJ/Jg/vDNTXO9MB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGz8dfuw
FZHEyvhTnQxeYOdZri27wjRNLuTc9cPOuemA5otinJ0D+nkKFUx5gw9v0nYkTZ4q
SXEtWJauzkeM75yOx0DiH6SbjIxmbaowfygTZA+d6TwIjwC794cJRQdcbCBoFexE
YUVCkxnCXAgn/pZvofa0X+6kfQ7g4xdOJrD13BJZ6vHu8E0lffAbAwScfZMS9DY5
0sS9h4yozPR/aRVR22peMURzBF4CPzSlMoFjsGbqY1hws1S0YqPoF6sKKQ/g+t/w
B6t1nCXKUieKothVOflJcadV/cXE7VFzDsl4E+iHiQTgGZNdu3KJazJEZbvdbCyk
k+fiAeBVUymnFg==
-----END CERTIFICATE-----
Generated at Tue Dec 23 17:16:00 2025 by rpki-client