This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json) Hash identifier: OyPSOH+cJwxGdxEREzF4k38O9KoXtOnfbEdEPBDjheo= Subject key identifier: BC:D0:84:53:1D:08:A2:FB:A3:9C:27:99:BA:8C:7A:A2:7D:6F:F7:3C Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Certificate serial: 019B390F22B14B11449576151294FEA8F30E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft Manifest number: 0419 Signing time: Sat 20 Dec 2025 00:00:51 +0000 Manifest this update: Sat 20 Dec 2025 00:00:51 +0000 Manifest next update: Sun 21 Dec 2025 00:00:51 +0000 Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: z/21TRb9c2VMrT5AyqcC4Ust/gHDQG39kwxgANNU6+4=) 2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:22:b1:4b:11:44:95:76:15:12:94:fe:a8:f3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Validity Not Before: Dec 20 00:00:51 2025 GMT Not After : Dec 21 00:00:51 2025 GMT Subject: CN=bcd084531d08a2fba39c2799ba8c7aa27d6ff73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:8d:67:f0:80:dc:be:42:e6:1c:88:02:9e: ff:da:bf:b9:9d:3c:44:84:da:a7:92:8b:42:5b:7e: 30:ee:c5:34:78:c3:34:bd:36:30:0a:5a:e7:86:9a: c8:c0:9b:d0:39:e3:4c:91:a5:56:e2:bf:c2:fc:b5: f0:b8:12:f1:54:4c:fa:8d:c9:d8:d0:8c:78:97:76: b1:68:22:c2:e6:03:51:c2:66:49:43:e8:6c:df:82: 4c:86:5a:e6:ed:51:eb:d9:05:1a:b0:76:3e:51:4f: 0f:c0:6f:61:20:f8:3b:f3:7e:af:b6:6b:bc:08:91: ec:2b:b3:f7:60:c3:8a:88:d5:2f:36:47:7f:a7:e9: 41:8a:23:56:c3:26:6a:2b:0f:01:14:72:c7:64:5e: 6e:f5:a9:5d:36:b1:a3:7c:4b:1e:bd:45:6e:7e:7b: e9:0b:0e:f9:ce:1e:90:42:e4:33:d3:77:03:13:0a: e4:29:e3:09:f5:28:a2:7d:db:18:cd:13:e3:92:f5: 29:ff:22:12:64:fb:db:14:10:5e:7b:4c:f9:25:f0: ee:1c:ed:85:17:04:f4:6d:5d:9c:e6:df:72:ba:29: 8a:cf:53:88:5a:98:4f:88:e0:7e:96:dd:87:9a:d9: ee:4f:55:cc:d9:26:97:05:a0:3b:67:9a:cc:9e:d4: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D0:84:53:1D:08:A2:FB:A3:9C:27:99:BA:8C:7A:A2:7D:6F:F7:3C X509v3 Authority Key Identifier: keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3b:eb:8d:65:fa:b8:14:28:45:fc:bc:66:d5:df:8a:bb:96: 6f:f1:10:1c:b4:4b:eb:ab:1b:1e:cb:6c:06:1b:2e:e1:22:69: ea:1b:68:7a:03:e5:03:ae:71:3b:aa:10:37:75:4c:61:37:a8: 64:f3:e6:21:3d:2e:ed:26:3d:0c:f9:dd:cd:65:a8:a3:a5:e1: bb:36:bb:a2:2e:7a:31:c0:77:3b:f4:9c:c7:d2:97:fa:47:e5: 92:ff:3b:46:b2:f3:fc:bf:45:ed:8f:27:f2:67:0b:ec:f4:a3: 2c:a4:41:99:ca:95:b9:a6:d8:62:49:10:b2:38:3e:d7:0d:79: 80:0a:40:a7:d8:86:c9:df:85:21:f6:07:c3:01:16:53:be:72: 3a:9d:18:d9:57:c6:e5:ec:bf:87:91:86:78:c1:fe:61:a8:b4: 62:25:fe:de:10:91:c4:1b:ef:a6:af:55:4f:5d:aa:1d:1a:f0: a5:4c:06:54:c2:a1:05:df:df:91:0d:c7:8a:39:f4:7b:d8:42: 51:ac:19:e9:d1:c6:89:ab:56:bb:92:a0:1a:17:21:ac:22:40: 40:5c:11:22:54:97:6b:04:0a:c6:0a:4c:9c:6d:ce:f5:86:4c: 16:e4:eb:a2:a4:b6:35:35:3b:4e:db:74:a7:59:71:33:3b:40: e2:50:f7:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DyKxSxFElXYVEpT+qPMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk NTQyMTIwHhcNMjUxMjIwMDAwMDUxWhcNMjUxMjIxMDAwMDUxWjAzMTEwLwYDVQQD EyhiY2QwODQ1MzFkMDhhMmZiYTM5YzI3OTliYThjN2FhMjdkNmZmNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyauNZ/CA3L5C5hyIAp7/2r+5nTxE hNqnkotCW34w7sU0eMM0vTYwClrnhprIwJvQOeNMkaVW4r/C/LXwuBLxVEz6jcnY 0Ix4l3axaCLC5gNRwmZJQ+hs34JMhlrm7VHr2QUasHY+UU8PwG9hIPg7836vtmu8 CJHsK7P3YMOKiNUvNkd/p+lBiiNWwyZqKw8BFHLHZF5u9aldNrGjfEsevUVufnvp Cw75zh6QQuQz03cDEwrkKeMJ9SiifdsYzRPjkvUp/yISZPvbFBBee0z5JfDuHO2F FwT0bV2c5t9yuimKz1OIWphPiOB+lt2HmtnuT1XM2SaXBaA7Z5rMntQrxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzQhFMdCKL7o5wnmbqMeqJ9b/c8MB8GA1UdIwQY MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjvrjWX6 uBQoRfy8ZtXfiruWb/EQHLRL66sbHstsBhsu4SJp6htoegPlA65xO6oQN3VMYTeo ZPPmIT0u7SY9DPndzWWoo6Xhuza7oi56McB3O/Scx9KX+kflkv87RrLz/L9F7Y8n 8mcL7PSjLKRBmcqVuabYYkkQsjg+1w15gApAp9iGyd+FIfYHwwEWU75yOp0Y2VfG 5ey/h5GGeMH+Yai0YiX+3hCRxBvvpq9VT12qHRrwpUwGVMKhBd/fkQ3Hijn0e9hC UawZ6dHGiatWu5KgGhchrCJAQFwRIlSXawQKxgpMnG3O9YZMFuTroqS2NTU7Ttt0 p1lxMztA4lD3Bw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:37:29 2025 by rpki-client