This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json) Hash identifier: pQuHxa1M89lGVVgTAABk8/1A6wMxEgrCjl2IDqqTzt4= Subject key identifier: 33:8D:F3:E1:81:E3:C4:15:29:5E:1C:FC:1F:EE:67:D0:EF:75:A8:96 Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f Certificate serial: 019B3DFEB3B8CDA6D34EFE383139B43DD656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft Manifest number: 0F56 Signing time: Sat 20 Dec 2025 23:01:00 +0000 Manifest this update: Sat 20 Dec 2025 23:01:00 +0000 Manifest next update: Sun 21 Dec 2025 23:01:00 +0000 Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=) 2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: TKNf5dzAaEq20Y7GgNsA70Z6NZJNhD0cIkCEgv03+8w=) 3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b3:b8:cd:a6:d3:4e:fe:38:31:39:b4:3d:d6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f Validity Not Before: Dec 20 23:01:00 2025 GMT Not After : Dec 21 23:01:00 2025 GMT Subject: CN=338df3e181e3c415295e1cfc1fee67d0ef75a896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:e3:b0:b2:d9:83:e6:ef:61:34:57:a9:5e: 68:44:68:51:54:bd:14:ae:56:b7:f8:af:8b:b2:99: f9:63:be:5f:7a:bd:ac:fc:1e:20:5b:ac:8f:60:84: 05:4f:f6:5e:5e:73:c0:64:e1:f8:c0:94:55:bd:07: 84:05:d0:cf:bf:c5:d8:91:ba:d9:26:c3:1f:98:34: 8d:cc:99:10:d0:de:c8:c9:b5:4a:c9:39:55:ec:d7: 70:54:c2:28:85:50:30:12:a9:21:96:6b:cf:5b:0b: 5c:ed:39:80:39:bb:ad:69:c6:9d:a4:40:66:2b:d0: 91:17:c0:9f:ff:4a:2b:f1:97:c0:8b:f3:7b:7d:b5: 73:ba:cf:ef:43:f0:0b:9d:d9:10:20:9d:21:60:5a: 7c:cb:51:09:12:f4:ff:1b:e6:09:47:4b:f1:da:45: 03:93:42:11:62:ba:1a:e3:b0:f3:aa:f0:92:2d:aa: 9c:89:58:51:71:c2:05:24:3c:ec:80:70:e3:e9:3b: d7:ab:8f:2a:0d:83:13:e7:e5:40:8a:84:2f:66:25: 59:e3:5c:ce:b9:1b:6d:ed:7c:2c:e2:a0:02:52:a5: 28:69:04:5b:56:99:72:7e:5e:a7:5b:be:3c:c2:f8: 30:71:ba:81:f4:e3:8a:4b:20:a0:f1:d4:bd:98:ce: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:F3:E1:81:E3:C4:15:29:5E:1C:FC:1F:EE:67:D0:EF:75:A8:96 X509v3 Authority Key Identifier: keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7a:04:63:07:9a:8c:92:61:cf:fe:3c:93:dd:7b:6e:21:d0: 9a:a8:9e:9b:cf:07:be:5f:2c:8a:ec:b7:7f:b7:dd:4c:f5:fe: 96:fc:ab:8e:7a:38:ef:53:2f:85:20:a5:a2:cd:f3:07:c7:0d: 15:b8:a3:37:b5:d2:4a:5f:ac:09:b5:82:e6:e8:71:28:58:fe: 9c:ad:88:7b:41:ce:26:0b:03:3f:dc:4c:1b:56:34:40:11:56: 17:c7:3d:83:69:82:00:7b:d7:45:63:d9:8b:08:02:9a:17:4f: ad:2f:53:3e:79:15:81:6b:1b:d9:f9:0a:64:39:ef:e0:90:20: 4a:5c:4d:96:25:59:54:b6:8a:8a:93:d5:bb:87:f7:be:86:da: f5:c8:82:fe:7a:6c:94:4d:38:5b:e3:90:a1:d8:b3:5c:9e:98: bc:ae:62:c1:82:ac:3a:6f:18:91:29:b2:c7:ad:d1:13:6d:58: 57:b5:3a:11:b0:28:df:ba:71:08:2a:cd:5d:6f:87:b4:69:cc: d2:f0:7e:15:1f:5b:e0:4e:be:f9:f6:93:80:60:a0:50:22:11: 3c:4d:83:37:42:30:0b:fe:14:9f:64:98:56:2e:bd:44:5c:2c: 5d:f8:52:85:3d:f9:80:87:b3:36:bb:b4:b5:27:a8:d5:b6:a8: 6d:77:b4:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rO4zabTTv44MTm0PdZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4 YzEzNGYwHhcNMjUxMjIwMjMwMTAwWhcNMjUxMjIxMjMwMTAwWjAzMTEwLwYDVQQD EygzMzhkZjNlMTgxZTNjNDE1Mjk1ZTFjZmMxZmVlNjdkMGVmNzVhODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LnjsLLZg+bvYTRXqV5oRGhRVL0U rla3+K+Lspn5Y75fer2s/B4gW6yPYIQFT/ZeXnPAZOH4wJRVvQeEBdDPv8XYkbrZ JsMfmDSNzJkQ0N7IybVKyTlV7NdwVMIohVAwEqkhlmvPWwtc7TmAObutacadpEBm K9CRF8Cf/0or8ZfAi/N7fbVzus/vQ/ALndkQIJ0hYFp8y1EJEvT/G+YJR0vx2kUD k0IRYroa47DzqvCSLaqciVhRccIFJDzsgHDj6TvXq48qDYMT5+VAioQvZiVZ41zO uRtt7Xws4qACUqUoaQRbVplyfl6nW748wvgwcbqB9OOKSyCg8dS9mM5VJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDON8+GB48QVKV4c/B/uZ9DvdaiWMB8GA1UdIwQY MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHoEYwea jJJhz/48k917biHQmqiem88Hvl8siuy3f7fdTPX+lvyrjno471MvhSClos3zB8cN FbijN7XSSl+sCbWC5uhxKFj+nK2Ie0HOJgsDP9xMG1Y0QBFWF8c9g2mCAHvXRWPZ iwgCmhdPrS9TPnkVgWsb2fkKZDnv4JAgSlxNliVZVLaKipPVu4f3voba9ciC/nps lE04W+OQodizXJ6YvK5iwYKsOm8YkSmyx63RE21YV7U6EbAo37pxCCrNXW+HtGnM 0vB+FR9b4E6++faTgGCgUCIRPE2DN0IwC/4Un2SYVi69RFwsXfhShT35gIezNru0 tSeo1baobXe0xA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:04 2025 by rpki-client