This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json) Hash identifier: 1c0KJXxkNYfABxC83CgXy/RzAcCcBbZfn4+fdJClzjE= Subject key identifier: 11:BC:E9:12:F6:83:4F:35:F4:31:9B:38:51:02:8D:4B:98:AD:53:78 Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Certificate serial: 019B35A1049D5640FE355DC2CB34C39E613A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 08:01:43 +0000 Manifest this update: Fri 19 Dec 2025 08:01:43 +0000 Manifest next update: Sat 20 Dec 2025 08:01:43 +0000 Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: Qip+IV0FzJvZFPRG/n3zECbCR7jhJtXSGZSNQ/hexMU=) 2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a1:04:9d:56:40:fe:35:5d:c2:cb:34:c3:9e:61:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Validity Not Before: Dec 19 08:01:43 2025 GMT Not After : Dec 20 08:01:43 2025 GMT Subject: CN=11bce912f6834f35f4319b3851028d4b98ad5378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:04:96:36:7f:6d:f6:ef:ef:0f:db:51:62: 06:40:25:b6:89:f9:40:02:2c:0c:d5:89:2e:b9:0a: ef:90:38:ee:59:0a:ab:fa:e4:0c:93:96:59:67:49: bb:61:7e:ac:3c:1b:6a:ae:85:d9:e2:32:08:05:4a: d8:24:93:14:49:7d:cd:c0:83:96:03:b1:9d:28:b6: 7f:d9:56:fe:c0:ce:bc:6f:c4:80:9d:8a:45:06:8d: d8:5d:16:16:47:e9:05:21:4d:ba:9d:7d:4a:62:fb: 47:cb:5b:c2:ac:c1:04:dd:d5:23:db:be:67:67:84: ac:1f:24:28:6b:20:ce:0b:ea:a7:f5:c4:f9:99:70: e8:37:a8:5e:81:c1:86:96:94:24:d6:87:e0:cc:c9: b2:52:8a:19:6c:94:bd:b4:5d:d1:a7:33:d7:0e:96: ce:5d:ee:8c:45:fc:d9:3a:fb:3a:fa:68:61:e7:74: 04:96:74:1e:b0:e0:99:94:80:7e:c7:de:5f:91:43: ce:8a:a8:71:43:df:55:a6:0c:03:b8:e9:29:76:2e: d5:23:6d:69:89:71:9a:cb:72:67:2c:b8:c9:36:45: 60:bd:02:89:51:52:94:d7:fb:d0:7b:ae:70:12:c8: 12:8f:85:c1:50:da:f4:38:71:aa:ee:33:7c:1b:09: 49:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:E9:12:F6:83:4F:35:F4:31:9B:38:51:02:8D:4B:98:AD:53:78 X509v3 Authority Key Identifier: keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:64:46:12:fc:ee:45:56:b9:13:3f:b3:7c:a5:b8:12:d0:c3: 93:61:39:5f:a8:ec:a3:12:dd:fe:6d:10:7b:ff:9b:4a:27:e7: ff:4a:64:be:52:3a:01:80:f1:81:e4:73:9d:96:81:01:cc:8a: 80:30:0c:cf:95:ae:a9:40:a8:5a:6c:1e:ff:c1:6b:78:13:ba: 33:91:07:bd:f3:99:92:4b:36:28:f1:2c:e5:60:20:4c:73:4a: da:91:95:fd:cc:d8:47:5a:f8:98:b9:0d:38:b5:ed:61:80:73: 49:ab:ce:0c:f6:e2:9e:37:be:d1:c1:ab:0b:f0:68:c9:4a:2b: 6d:5f:aa:05:5e:40:cb:ea:ff:61:d4:53:de:71:ba:28:e1:7d: a5:c4:7f:fb:24:f1:1a:0d:15:7f:f4:2c:1d:e1:2c:a5:57:a1: e0:45:63:d0:16:df:7e:96:8d:7f:54:67:89:42:d0:d9:9a:81: 16:1e:56:34:fa:8e:ee:4f:94:fc:52:f6:f4:be:97:f9:eb:83: eb:12:20:a6:37:ab:5b:a0:ac:73:b9:f6:c2:d3:bf:18:8e:a5: b9:cc:b5:50:44:fa:79:b9:1d:26:6c:5b:dc:8f:9b:c7:29:5c: 71:92:7a:e7:ae:de:1b:08:87:82:1f:c5:79:fa:e0:cf:7b:31: 30:1f:1e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oQSdVkD+NV3CyzTDnmE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk NjEyMjAwHhcNMjUxMjE5MDgwMTQzWhcNMjUxMjIwMDgwMTQzWjAzMTEwLwYDVQQD EygxMWJjZTkxMmY2ODM0ZjM1ZjQzMTliMzg1MTAyOGQ0Yjk4YWQ1Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/EEljZ/bfbv7w/bUWIGQCW2iflA AiwM1YkuuQrvkDjuWQqr+uQMk5ZZZ0m7YX6sPBtqroXZ4jIIBUrYJJMUSX3NwIOW A7GdKLZ/2Vb+wM68b8SAnYpFBo3YXRYWR+kFIU26nX1KYvtHy1vCrMEE3dUj275n Z4SsHyQoayDOC+qn9cT5mXDoN6hegcGGlpQk1ofgzMmyUooZbJS9tF3RpzPXDpbO Xe6MRfzZOvs6+mhh53QElnQesOCZlIB+x95fkUPOiqhxQ99VpgwDuOkpdi7VI21p iXGay3JnLLjJNkVgvQKJUVKU1/vQe65wEsgSj4XBUNr0OHGq7jN8GwlJ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG86RL2g0819DGbOFECjUuYrVN4MB8GA1UdIwQY MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1 LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmRGEvzu RVa5Ez+zfKW4EtDDk2E5X6jsoxLd/m0Qe/+bSifn/0pkvlI6AYDxgeRznZaBAcyK gDAMz5WuqUCoWmwe/8FreBO6M5EHvfOZkks2KPEs5WAgTHNK2pGV/czYR1r4mLkN OLXtYYBzSavODPbinje+0cGrC/BoyUorbV+qBV5Ay+r/YdRT3nG6KOF9pcR/+yTx Gg0Vf/QsHeEspVeh4EVj0BbffpaNf1RniULQ2ZqBFh5WNPqO7k+U/FL29L6X+euD 6xIgpjerW6Csc7n2wtO/GI6lucy1UET6ebkdJmxb3I+bxylccZJ6567eGwiHgh/F efrgz3sxMB8eAg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:03 2025 by rpki-client