This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json) Hash identifier: F6mrXV01YSX9xfCHH9oAt2hryMDNeDch8yeeXOWHyog= Subject key identifier: 15:FF:96:5E:14:DA:05:54:18:FE:FC:54:FE:6E:C8:32:81:DA:41:F8 Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Certificate serial: 019B3C7F7E11C76B8655FED08EAD7149774D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft Manifest number: 04FE Signing time: Sat 20 Dec 2025 16:02:26 +0000 Manifest this update: Sat 20 Dec 2025 16:02:26 +0000 Manifest next update: Sun 21 Dec 2025 16:02:26 +0000 Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=) 2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: ZA7Z0ZvtSFktB3R7sdPrVB2G0wsk66DN3IeORSW4KLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:7e:11:c7:6b:86:55:fe:d0:8e:ad:71:49:77:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Validity Not Before: Dec 20 16:02:26 2025 GMT Not After : Dec 21 16:02:26 2025 GMT Subject: CN=15ff965e14da055418fefc54fe6ec83281da41f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:54:39:6d:67:bf:e1:a4:5a:1a:32:fd:98: 9f:96:2e:c4:b0:29:ba:d7:a1:f1:f0:8e:c1:aa:e0: 2b:a9:08:4a:e9:5f:69:08:9a:ba:1c:a9:c1:d6:62: 87:de:96:4d:8c:d0:c8:e4:11:28:d8:38:f4:02:12: 6b:ec:d5:a6:89:46:9c:62:e6:98:dd:df:c0:9e:33: 2e:69:21:5f:7a:2f:c2:88:6f:8e:5a:90:ef:2a:8a: b6:28:f3:3f:32:8d:ce:60:98:e9:c4:61:e2:02:c5: d7:c4:79:46:50:b5:76:32:f9:51:94:61:74:4c:b3: 84:5a:5d:46:14:4c:04:81:82:68:5d:ba:94:5d:23: 7d:60:f0:91:89:3e:aa:b2:be:00:0a:82:52:78:08: 18:74:ce:d8:d5:e9:35:e1:50:c0:2b:3d:dc:24:4c: f7:54:fb:3a:83:d8:62:45:90:27:ac:ac:41:e1:95: 6c:54:c9:01:d5:c4:26:ea:06:f6:70:37:2d:44:7c: 70:ce:2b:e5:bc:47:22:0f:44:ac:ac:39:8d:ec:8c: d6:45:35:9f:48:10:67:97:2c:9f:b1:3a:4e:5a:63: c5:c3:c4:88:9f:d9:86:66:f8:96:4c:aa:00:89:ab: a1:fb:87:74:1d:17:c3:36:f7:3b:11:02:42:5c:fe: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:96:5E:14:DA:05:54:18:FE:FC:54:FE:6E:C8:32:81:DA:41:F8 X509v3 Authority Key Identifier: keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:69:7d:63:61:39:6b:f7:ff:10:47:b8:f3:a5:03:c4:ab:2b: 08:8a:a7:f8:82:7f:b7:e4:7f:06:1d:d4:da:aa:9a:0f:51:01: 0d:16:3b:cf:5b:88:e8:93:92:3f:9e:bc:e1:93:67:7e:9d:ad: 12:13:c1:a8:08:39:0f:a1:f8:62:46:be:07:92:6a:fc:d0:86: b8:85:14:30:ac:ba:ab:6c:86:a8:29:4c:50:40:88:54:0d:58: 10:82:5f:70:da:f2:df:a3:6e:ef:0b:b9:26:c5:5e:94:59:34: 89:64:5e:fd:40:3a:12:b6:05:ed:b8:42:92:7d:9e:ef:52:65: e5:a9:8a:07:1f:d2:ed:eb:06:31:61:df:47:41:ff:16:6d:6c: 05:b9:7a:25:c2:e9:2c:dc:b8:78:77:1e:47:c0:8f:da:58:1b: e5:5f:12:98:21:c7:ea:fd:11:89:09:ef:89:70:a9:eb:1d:89: e3:af:7d:9e:94:5c:e1:ad:17:1c:90:a5:62:a6:bc:b9:4f:3d: ae:b9:50:39:01:b9:7f:24:e5:ed:6e:eb:76:ef:5b:62:39:9f: 01:66:b6:24:3c:a6:30:4e:e7:0a:ff:4e:99:9e:0a:d6:66:75: b6:0c:b2:11:11:7e:4e:cc:80:09:64:da:16:3a:61:9d:cf:3a: 43:27:7d:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f34Rx2uGVf7Qjq1xSXdNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1 NTQ2Y2MwHhcNMjUxMjIwMTYwMjI2WhcNMjUxMjIxMTYwMjI2WjAzMTEwLwYDVQQD EygxNWZmOTY1ZTE0ZGEwNTU0MThmZWZjNTRmZTZlYzgzMjgxZGE0MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY5UOW1nv+GkWhoy/Zifli7EsCm6 16Hx8I7BquArqQhK6V9pCJq6HKnB1mKH3pZNjNDI5BEo2Dj0AhJr7NWmiUacYuaY 3d/AnjMuaSFfei/CiG+OWpDvKoq2KPM/Mo3OYJjpxGHiAsXXxHlGULV2MvlRlGF0 TLOEWl1GFEwEgYJoXbqUXSN9YPCRiT6qsr4ACoJSeAgYdM7Y1ek14VDAKz3cJEz3 VPs6g9hiRZAnrKxB4ZVsVMkB1cQm6gb2cDctRHxwzivlvEciD0SsrDmN7IzWRTWf SBBnlyyfsTpOWmPFw8SIn9mGZviWTKoAiauh+4d0HRfDNvc7EQJCXP7PowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX/ll4U2gVUGP78VP5uyDKB2kH4MB8GA1UdIwQY MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1 LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVml9Y2E5 a/f/EEe486UDxKsrCIqn+IJ/t+R/Bh3U2qqaD1EBDRY7z1uI6JOSP5684ZNnfp2t EhPBqAg5D6H4Yka+B5Jq/NCGuIUUMKy6q2yGqClMUECIVA1YEIJfcNry36Nu7wu5 JsVelFk0iWRe/UA6ErYF7bhCkn2e71Jl5amKBx/S7esGMWHfR0H/Fm1sBbl6JcLp LNy4eHceR8CP2lgb5V8SmCHH6v0RiQnviXCp6x2J4699npRc4a0XHJClYqa8uU89 rrlQOQG5fyTl7W7rdu9bYjmfAWa2JDymME7nCv9OmZ4K1mZ1tgyyERF+TsyACWTa Fjphnc86Qyd9hQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:28 2025 by rpki-client