This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft File: 7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json) Hash identifier: IUQC4QBtdKhBFFcOVMa73+svFNi1tfJ8Rrmr+6VJxl4= Subject key identifier: D3:4E:EE:3C:34:FC:92:EC:DD:5B:CD:51:59:C9:03:1D:4A:F8:3C:1C Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Certificate serial: 019B2B1DD3E9F0D23EC83CB105B7BC7BED0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft Manifest number: 11DD Signing time: Wed 17 Dec 2025 07:02:13 +0000 Manifest this update: Wed 17 Dec 2025 07:02:13 +0000 Manifest next update: Thu 18 Dec 2025 07:02:13 +0000 Files and hashes: 1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: e7aDMpQjrUOMZ8AIs87XBzOm3rwjevF5qTyi2qYkDck=) 2: F1syaj2slElK5y18q2bJFyk_Xt4.roa (hash: 0cchVuYo1uzzUlT1evGpupW2C9gukJ9GqtBWuAJKa5E=) 3: S9qORFlVihRXgXPTMQZutfjwKHE.roa (hash: vsbhWoTnzrB7AOoQuujS+OxmDvP0R8xrr9NkNJFez7M=) 4: TpzFnk7W-OsBRIAAr3dm_mueJxU.roa (hash: nkfZhHTodmONOvq1O5TW8ZfGR4EOeCS+8IrKi31DjPQ=) 5: eh6k6EDW67F1BaMz22DQsW1dFis.roa (hash: IQTOzLLAJV1/nAGCPNSZ0w+xeltOMYm8kA0XXPxhjRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:d3:e9:f0:d2:3e:c8:3c:b1:05:b7:bc:7b:ed:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Validity Not Before: Dec 17 07:02:13 2025 GMT Not After : Dec 18 07:02:13 2025 GMT Subject: CN=d34eee3c34fc92ecdd5bcd5159c9031d4af83c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:22:a0:4d:a4:5c:72:68:b9:3a:ba:1a:a7: 0c:5d:52:46:c6:8b:18:56:39:46:00:b5:1e:4d:3e: d4:a4:53:7e:14:a4:56:07:de:44:59:61:5a:cf:2c: c8:df:fb:ec:26:82:cf:50:63:a4:4e:01:f3:38:20: fb:30:62:5c:6e:92:ee:c4:38:f8:d3:b6:eb:ad:86: 43:e3:fa:a4:91:8a:fb:3d:12:6e:4e:8d:53:93:3a: 45:8c:66:03:a8:e4:18:ee:c7:8c:ae:05:7d:6b:02: 16:1f:c4:0c:f5:f9:47:5a:9f:fd:d4:0f:20:69:44: 55:a9:09:92:b2:3b:f5:4a:56:fa:03:18:81:78:86: e6:4a:ad:ac:df:6a:3b:95:7f:c7:08:94:af:22:33: 39:46:74:8b:57:46:5a:16:8f:98:9d:a4:e6:4b:a9: 0b:2c:2e:dc:d8:1f:f1:53:8d:c1:0a:88:d4:bb:33: 19:3f:63:95:6c:49:ea:1a:f4:64:d8:87:fe:a8:d2: d4:60:46:f1:6b:ac:15:0e:ca:8b:e4:88:e3:6e:56: 6b:25:55:3e:b5:a2:8a:3c:a3:5f:c5:f8:89:b4:ba: 6c:13:e1:2e:08:89:3a:1a:2d:cb:a4:e6:56:dc:5c: e4:e8:28:a2:f8:a2:20:db:b6:f6:df:4b:e0:d8:ef: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:EE:3C:34:FC:92:EC:DD:5B:CD:51:59:C9:03:1D:4A:F8:3C:1C X509v3 Authority Key Identifier: keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:57:fe:2b:f5:c2:8c:36:fb:e7:cb:c5:d6:33:7d:13:07:fd: 0b:46:73:8f:ad:6e:32:5c:94:af:96:07:ea:a3:97:ae:46:e6: 96:d1:a3:71:b6:cb:93:67:3d:04:39:7d:e7:c7:d0:15:83:31: ed:c0:0a:ae:9f:62:f5:99:43:94:ca:4f:0d:0f:e7:77:19:26: 3f:02:36:94:32:25:87:0f:bd:e5:15:f5:83:26:fb:bf:25:86: dc:fe:3d:be:c1:5b:30:c4:42:d5:72:75:f6:a5:a6:03:5e:48: fc:35:6d:ba:04:fc:31:a3:69:27:59:c3:b0:d6:97:60:7a:0c: 7e:40:70:dd:9c:c5:d4:47:88:a2:ef:70:18:56:3c:c3:75:53: 2e:0d:21:39:4a:fd:d1:05:7c:48:4b:d8:8f:be:c4:18:df:c5: 4a:b6:af:64:37:2b:6f:c2:2f:43:87:10:6d:a1:b1:c2:16:94: 39:9b:bb:62:fa:3b:d9:33:e4:f2:f1:eb:34:05:40:6d:22:e0: 2c:ee:78:af:19:93:79:aa:cb:be:79:b2:11:79:26:86:38:47: 15:57:d6:b0:c9:8a:8a:cb:02:69:c4:f2:26:26:72:c2:3b:94: c1:01:c6:3c:a0:18:42:a3:49:41:bc:19:b2:18:e9:61:da:1a: 82:d8:cf:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHdPp8NI+yDyxBbe8e+0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2E2MzNlZjJjMDgyNTFhNTg2MDM1NjJlNTZhYTZlZmE5 M2VjMjUwHhcNMjUxMjE3MDcwMjEzWhcNMjUxMjE4MDcwMjEzWjAzMTEwLwYDVQQD EyhkMzRlZWUzYzM0ZmM5MmVjZGQ1YmNkNTE1OWM5MDMxZDRhZjgzYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn50ioE2kXHJouTq6GqcMXVJGxosY VjlGALUeTT7UpFN+FKRWB95EWWFazyzI3/vsJoLPUGOkTgHzOCD7MGJcbpLuxDj4 07brrYZD4/qkkYr7PRJuTo1TkzpFjGYDqOQY7seMrgV9awIWH8QM9flHWp/91A8g aURVqQmSsjv1Slb6AxiBeIbmSq2s32o7lX/HCJSvIjM5RnSLV0ZaFo+YnaTmS6kL LC7c2B/xU43BCojUuzMZP2OVbEnqGvRk2If+qNLUYEbxa6wVDsqL5IjjblZrJVU+ taKKPKNfxfiJtLpsE+EuCIk6Gi3LpOZW3Fzk6Cii+KIg27b230vg2O+m1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNO7jw0/JLs3VvNUVnJAx1K+DwcMB8GA1UdIwQY MBaAFOw6Yz7ywIJRpYYDVi5Wqm76k+wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUt ZjdjMmMyYTkxYmMyLzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUtZjdjMmMyYTkxYmMy LzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFf+K/XC jDb758vF1jN9Ewf9C0Zzj61uMlyUr5YH6qOXrkbmltGjcbbLk2c9BDl958fQFYMx 7cAKrp9i9ZlDlMpPDQ/ndxkmPwI2lDIlhw+95RX1gyb7vyWG3P49vsFbMMRC1XJ1 9qWmA15I/DVtugT8MaNpJ1nDsNaXYHoMfkBw3ZzF1EeIou9wGFY8w3VTLg0hOUr9 0QV8SEvYj77EGN/FSravZDcrb8IvQ4cQbaGxwhaUOZu7Yvo72TPk8vHrNAVAbSLg LO54rxmTearLvnmyEXkmhjhHFVfWsMmKissCacTyJiZywjuUwQHGPKAYQqNJQbwZ shjpYdoagtjPRg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:51 2025 by rpki-client