This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json) Hash identifier: P0x8gRwksXkYMfpONxVEZhYthVExUQSIDbyB+pN8Hvg= Subject key identifier: F7:D2:54:DD:B9:BF:CA:37:E7:3F:33:11:03:5D:A8:1A:03:00:5F:FC Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Certificate serial: 019B34FB9506D64E7C7EDB5EC8C71199F7B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft Manifest number: 02DD Signing time: Fri 19 Dec 2025 05:01:01 +0000 Manifest this update: Fri 19 Dec 2025 05:01:01 +0000 Manifest next update: Sat 20 Dec 2025 05:01:01 +0000 Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: YaWV2y8F/jahU+YV18Kj7hrZSKOOpcqm+ZKi+4oXKIQ=) 2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:95:06:d6:4e:7c:7e:db:5e:c8:c7:11:99:f7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Validity Not Before: Dec 19 05:01:01 2025 GMT Not After : Dec 20 05:01:01 2025 GMT Subject: CN=f7d254ddb9bfca37e73f3311035da81a03005ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:12:07:e6:a5:77:02:48:81:bd:74:0c:c7: ac:c4:2e:0d:13:e8:01:f5:a1:6d:3d:70:01:6c:8f: 71:21:65:2b:93:4b:a4:0e:97:ae:f2:0c:b5:1c:45: b9:52:66:55:85:f6:b2:df:2b:fe:31:18:8c:23:46: 94:c8:d8:fd:2c:1b:30:03:9d:91:0a:96:22:ed:29: 7d:f0:55:b7:60:bc:05:11:c9:6d:3e:d7:4a:ff:81: c2:19:c6:da:a0:80:ab:ee:5d:d0:b0:de:e7:7f:51: cb:dd:2b:52:c2:c5:60:d4:43:bc:7d:fc:ea:3b:c7: 6b:f2:73:0a:f2:f2:02:fc:61:d4:d6:98:fd:27:0f: 6d:f6:f6:02:af:6f:c1:99:20:86:80:aa:1d:d2:13: d7:be:dd:b3:4b:89:74:ed:46:41:5e:ef:c9:6e:2c: 04:1d:cf:fe:99:64:57:15:98:51:28:cd:69:87:e3: e4:ce:8f:58:1a:b5:c3:72:d2:b2:83:29:a3:a2:4c: d1:47:16:83:15:89:4e:fa:e0:97:f7:eb:01:8a:17: 9b:6e:c0:dc:1a:64:d8:f0:59:56:d8:0b:66:ba:ad: ea:fa:28:fa:33:93:8e:8f:3d:4c:c1:bc:1b:6f:80: fb:03:ef:62:0f:d2:0f:50:87:a2:18:25:8a:df:e3: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D2:54:DD:B9:BF:CA:37:E7:3F:33:11:03:5D:A8:1A:03:00:5F:FC X509v3 Authority Key Identifier: keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:42:9b:c7:5b:53:d7:4f:73:82:f2:9e:2a:e3:a8:11:e7:4f: d5:a1:7b:05:cf:51:e8:5b:f3:3d:64:9d:00:4d:33:83:29:a8: 64:2a:f6:c4:7d:aa:18:94:ed:4a:6a:40:14:c0:52:a3:0b:e9: 69:06:87:15:c3:b5:3e:ae:fa:f1:78:d3:50:df:13:17:07:88: 78:e2:96:96:3c:49:8d:7f:35:c4:14:96:31:ca:03:44:b9:25: 0e:95:b7:a1:72:73:08:7a:63:1d:60:b3:f5:70:20:7a:d7:7a: 3d:4e:20:52:2f:19:6c:a4:05:47:c3:92:8a:54:6e:f4:2a:23: 52:37:33:db:48:91:98:86:d3:a9:85:e0:8c:72:b4:1a:4b:90: 7c:ce:0b:2f:bf:d1:e6:6c:6c:97:3b:9a:0f:50:be:cc:79:96: a9:a2:92:ac:09:ca:82:b8:8e:ab:0e:47:2e:de:0c:28:64:9a: a9:90:bf:8d:34:24:3c:99:e0:93:47:58:4c:d3:0b:16:67:03: a4:56:41:01:4f:6d:d1:64:7a:07:61:32:f7:88:3a:cb:fc:53: 60:c5:a0:e1:eb:6c:4a:5f:ba:b1:66:39:80:6f:a9:67:40:bd: 64:2f:b7:f9:be:93:ab:10:14:c2:e7:88:52:f4:34:02:55:df: 46:64:08:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+5UG1k58ftteyMcRmfeyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzYTRhMDVmMzcwNTBmN2MwMzc5ZDM0ZjRmNDgxNGJk MjA5ZGYwHhcNMjUxMjE5MDUwMTAxWhcNMjUxMjIwMDUwMTAxWjAzMTEwLwYDVQQD EyhmN2QyNTRkZGI5YmZjYTM3ZTczZjMzMTEwMzVkYTgxYTAzMDA1ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXYSB+aldwJIgb10DMesxC4NE+gB 9aFtPXABbI9xIWUrk0ukDpeu8gy1HEW5UmZVhfay3yv+MRiMI0aUyNj9LBswA52R CpYi7Sl98FW3YLwFEcltPtdK/4HCGcbaoICr7l3QsN7nf1HL3StSwsVg1EO8ffzq O8dr8nMK8vIC/GHU1pj9Jw9t9vYCr2/BmSCGgKod0hPXvt2zS4l07UZBXu/JbiwE Hc/+mWRXFZhRKM1ph+Pkzo9YGrXDctKygymjokzRRxaDFYlO+uCX9+sBihebbsDc GmTY8FlW2Atmuq3q+ij6M5OOjz1Mwbwbb4D7A+9iD9IPUIeiGCWK3+O2zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfSVN25v8o35z8zEQNdqBoDAF/8MB8GA1UdIwQY MBaAFOzfOkoF83BQ98A3nTT09IFL0gnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTkt ZWY4NzQwNWY5YTExLzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTktZWY4NzQwNWY5YTEx LzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0Kbx1tT 109zgvKeKuOoEedP1aF7Bc9R6FvzPWSdAE0zgymoZCr2xH2qGJTtSmpAFMBSowvp aQaHFcO1Pq768XjTUN8TFweIeOKWljxJjX81xBSWMcoDRLklDpW3oXJzCHpjHWCz 9XAgetd6PU4gUi8ZbKQFR8OSilRu9CojUjcz20iRmIbTqYXgjHK0GkuQfM4LL7/R 5mxslzuaD1C+zHmWqaKSrAnKgriOqw5HLt4MKGSaqZC/jTQkPJngk0dYTNMLFmcD pFZBAU9t0WR6B2Ey94g6y/xTYMWg4etsSl+6sWY5gG+pZ0C9ZC+3+b6TqxAUwueI UvQ0AlXfRmQINw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:27 2025 by rpki-client