This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json) Hash identifier: UUh6fSh86dyN9IiRoo2oxLI5gajceuuhZ2QDChpA1uo= Subject key identifier: 78:B4:2E:A2:E0:32:6B:ED:B6:5C:BB:F7:71:76:EE:A1:AE:8A:8E:E0 Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76 Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876 Certificate serial: 019B42B7465842BE8987D97ADAC5FC3DDCAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 21:01:05 +0000 Manifest this update: Sun 21 Dec 2025 21:01:05 +0000 Manifest next update: Mon 22 Dec 2025 21:01:05 +0000 Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: UUrOOGF+wOCRIi3unPRwHS8ICvLZZZdGI4f75VQciZc=) 2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:46:58:42:be:89:87:d9:7a:da:c5:fc:3d:dc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876 Validity Not Before: Dec 21 21:01:05 2025 GMT Not After : Dec 22 21:01:05 2025 GMT Subject: CN=78b42ea2e0326bedb65cbbf77176eea1ae8a8ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0e:f1:93:f0:f1:cb:bc:0d:a8:7f:6b:0f:56: dd:79:c4:20:79:86:bf:5d:85:85:00:51:7b:92:50: 1b:6e:cd:a6:b6:47:81:83:f1:fd:37:ae:0b:21:cb: 6f:ac:43:78:47:be:d0:bd:fd:3f:94:1b:98:20:c6: 9e:63:88:3b:18:28:0b:14:60:96:28:01:37:21:53: 6a:b0:ca:8e:11:53:d7:aa:f3:7d:92:12:7d:a3:ef: 97:e4:4f:3e:79:dc:b2:38:e8:30:f3:69:da:b7:1c: cb:cd:ba:71:d5:dc:fb:21:5a:10:f5:c7:5d:56:50: 0d:a6:8f:7f:7e:3a:0d:e5:2d:ee:fd:03:34:34:e2: 5e:a7:f6:9e:d3:da:c5:6c:08:2a:41:0e:43:9b:ba: 6f:7f:e4:af:9c:c6:58:20:b1:9e:09:e3:f1:07:5c: 9f:46:ad:dd:48:4b:31:0d:47:f0:a6:ff:4f:d7:5c: e4:b8:a2:5b:9c:5f:5e:9b:76:30:4a:65:6f:94:f9: be:39:d5:61:2f:d0:76:d5:d2:c2:62:49:a5:95:59: a5:3e:67:a1:eb:1f:d7:3b:74:db:0a:13:b4:45:22: 11:75:f6:7e:56:20:d5:a2:9c:b2:01:66:99:29:4e: cf:25:19:91:fb:10:6a:22:a3:de:0f:d6:02:c9:21: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B4:2E:A2:E0:32:6B:ED:B6:5C:BB:F7:71:76:EE:A1:AE:8A:8E:E0 X509v3 Authority Key Identifier: keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5f:6e:b2:9e:af:60:0e:af:65:d6:62:ce:4a:10:c4:5f:2c: e9:44:1c:e5:71:b8:10:ac:06:87:a2:e3:5e:4e:ed:4e:67:4a: 19:f8:39:f9:00:1e:4d:73:49:88:83:1b:80:5f:ab:b7:87:3b: 6b:45:e1:9e:f6:d3:c5:3d:15:35:cc:31:97:94:78:dd:ab:a4: 3c:17:4e:4a:19:91:10:15:e9:d4:88:34:2d:99:8d:6a:8d:b5: 34:d8:be:da:3d:76:d9:e3:1f:8d:0b:cc:e5:4c:5c:09:bf:7a: 85:17:de:6d:86:bc:13:3e:d1:3b:a8:72:5a:cd:e3:f3:8d:7c: dc:03:1e:5f:d0:b0:8d:59:d4:75:1f:75:93:ac:c3:ae:ff:7f: 9b:ca:c0:1b:18:cc:f5:e8:21:6e:6e:69:5f:47:df:2d:48:9f: 2d:11:b8:09:f8:a2:63:7a:47:96:37:34:64:4a:ac:02:1e:05: e5:3b:ff:10:df:9f:1f:85:6a:8e:c3:74:01:c0:27:6a:da:2d: 6a:22:f9:e6:54:60:64:d7:0d:0d:76:4a:1b:23:03:af:fa:fd: 8c:4b:35:db:e5:11:01:86:6b:eb:34:94:b2:9c:8b:e2:13:42: b3:39:9e:38:5d:f0:b4:ad:d9:1a:48:02:97:26:56:85:de:b4: e4:b2:dc:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0ZYQr6Jh9l62sX8PdyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2QzZDdlNWNiZjE4YWY2NmI3ZjViNGE1ZTBhYzE5ZWNk Mzk4NzYwHhcNMjUxMjIxMjEwMTA1WhcNMjUxMjIyMjEwMTA1WjAzMTEwLwYDVQQD Eyg3OGI0MmVhMmUwMzI2YmVkYjY1Y2JiZjc3MTc2ZWVhMWFlOGE4ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q7xk/Dxy7wNqH9rD1bdecQgeYa/ XYWFAFF7klAbbs2mtkeBg/H9N64LIctvrEN4R77Qvf0/lBuYIMaeY4g7GCgLFGCW KAE3IVNqsMqOEVPXqvN9khJ9o++X5E8+edyyOOgw82natxzLzbpx1dz7IVoQ9cdd VlANpo9/fjoN5S3u/QM0NOJep/ae09rFbAgqQQ5Dm7pvf+SvnMZYILGeCePxB1yf Rq3dSEsxDUfwpv9P11zkuKJbnF9em3YwSmVvlPm+OdVhL9B21dLCYkmllVmlPmeh 6x/XO3TbChO0RSIRdfZ+ViDVopyyAWaZKU7PJRmR+xBqIqPeD9YCySFs3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHi0LqLgMmvttly793F27qGuio7gMB8GA1UdIwQY MBaAFOw9PX5cvxivZrf1tKXgrBns05h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMt NDY2MGZhZDgzOTg1LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMtNDY2MGZhZDgzOTg1 LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkl9usp6v YA6vZdZizkoQxF8s6UQc5XG4EKwGh6LjXk7tTmdKGfg5+QAeTXNJiIMbgF+rt4c7 a0XhnvbTxT0VNcwxl5R43aukPBdOShmREBXp1Ig0LZmNao21NNi+2j122eMfjQvM 5UxcCb96hRfebYa8Ez7RO6hyWs3j84183AMeX9CwjVnUdR91k6zDrv9/m8rAGxjM 9eghbm5pX0ffLUifLRG4CfiiY3pHljc0ZEqsAh4F5Tv/EN+fH4VqjsN0AcAnatot aiL55lRgZNcNDXZKGyMDr/r9jEs12+URAYZr6zSUspyL4hNCszmeOF3wtK3ZGkgC lyZWhd605LLcHA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:34 2025 by rpki-client