This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json) Hash identifier: yOX9K81bB6yS/0v+h+iEdXXSX+Trw2NCeQTPB1ngGbs= Subject key identifier: 5E:2F:73:F7:B3:E0:10:B7:6F:20:04:A9:B4:EE:AE:EA:01:0B:C2:1A Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Certificate serial: 019B3B34B8DF4429CBCD04420EC6830E0508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 10:01:09 +0000 Manifest this update: Sat 20 Dec 2025 10:01:09 +0000 Manifest next update: Sun 21 Dec 2025 10:01:09 +0000 Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: pUXTmPzQU4tzUibJQK9GQ7+0DtzoeJPdjrSOyPcU9a8=) 2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b8:df:44:29:cb:cd:04:42:0e:c6:83:0e:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Validity Not Before: Dec 20 10:01:09 2025 GMT Not After : Dec 21 10:01:09 2025 GMT Subject: CN=5e2f73f7b3e010b76f2004a9b4eeaeea010bc21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f6:2e:2b:b6:80:61:e8:51:b6:55:ac:59:a0: 4d:41:56:1b:8f:81:7e:74:73:b7:2f:8e:77:6e:92: 41:25:97:bc:7c:dc:bb:9f:1d:4e:69:3f:52:ee:ef: 90:fb:b2:0f:9e:d1:26:ed:d4:72:9c:ac:5b:0c:64: 8c:50:d3:28:25:79:cb:99:44:dc:53:59:9c:75:9b: 15:22:7e:05:f8:26:34:a1:16:1b:6f:6d:4f:7d:d9: b0:de:4d:30:d6:54:0f:c3:a6:ab:8f:72:7c:ba:04: ca:3e:7b:f6:53:52:a6:f6:56:b9:57:66:b1:70:61: c4:93:f6:97:4e:f8:49:da:78:fe:98:c5:f3:09:cf: f0:c1:7a:24:1e:1b:df:3f:ab:a6:d2:fe:06:1b:e2: 75:42:69:a7:84:4d:8b:e8:17:eb:15:53:6b:cd:07: b9:06:87:cc:5b:de:65:85:cc:7b:26:69:dd:f3:aa: a3:a9:67:48:da:cf:0d:cb:c9:ac:55:49:76:9c:46: 0c:3e:56:86:e7:42:22:75:3f:ad:2c:4f:80:88:3d: 80:bd:df:a8:8a:28:82:ee:7f:cb:d3:de:c1:79:55: d3:cf:82:90:86:8d:87:2c:12:be:72:c6:eb:ee:1f: 75:71:38:3d:15:f6:b1:d2:1c:63:36:4e:ec:b5:5a: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:73:F7:B3:E0:10:B7:6F:20:04:A9:B4:EE:AE:EA:01:0B:C2:1A X509v3 Authority Key Identifier: keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ea:1a:5b:ec:78:60:19:fd:75:35:5c:6c:de:4d:e8:06:da: 67:ff:70:65:95:77:0a:6d:f9:59:52:80:24:3a:22:f6:49:fe: b3:bc:9f:24:db:f0:ab:e5:44:fb:6a:fa:54:ca:3b:62:e4:48: d6:f3:a2:01:ad:d8:78:0c:21:af:cb:2e:e5:6c:d9:87:e8:7c: 8f:ef:18:4f:20:06:1d:9f:d0:7e:ec:8a:53:76:9c:b1:3c:37: da:57:f2:7a:70:0b:a3:94:6c:3d:f2:41:ba:26:0d:6c:33:05: bf:cb:02:33:25:c6:4b:e0:e8:64:5a:fe:00:3a:97:77:2e:8e: ed:8e:86:2c:c2:53:1c:73:09:dd:60:49:75:ad:7f:7b:40:8a: 9f:89:7d:f5:1d:a3:3a:34:45:12:f0:8a:4c:4f:ea:6c:b0:af: f1:24:4a:63:2d:14:3b:65:82:b1:d3:39:4a:75:d5:65:17:6e: b0:41:42:8a:50:6e:a9:b0:53:57:ab:d7:46:66:b6:78:0e:0f: ab:2f:2a:24:cf:93:ef:bc:78:e9:12:c2:0d:14:69:77:97:67: e8:8f:c9:93:93:1c:dc:56:57:12:76:47:4d:ce:44:20:95:78: 54:0f:8d:90:f5:c1:c5:7f:fd:29:f7:a0:5b:9c:51:85:a7:a5: e7:7c:9e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLjfRCnLzQRCDsaDDgUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli MjA4ODcwHhcNMjUxMjIwMTAwMTA5WhcNMjUxMjIxMTAwMTA5WjAzMTEwLwYDVQQD Eyg1ZTJmNzNmN2IzZTAxMGI3NmYyMDA0YTliNGVlYWVlYTAxMGJjMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PYuK7aAYehRtlWsWaBNQVYbj4F+ dHO3L453bpJBJZe8fNy7nx1OaT9S7u+Q+7IPntEm7dRynKxbDGSMUNMoJXnLmUTc U1mcdZsVIn4F+CY0oRYbb21Pfdmw3k0w1lQPw6arj3J8ugTKPnv2U1Km9la5V2ax cGHEk/aXTvhJ2nj+mMXzCc/wwXokHhvfP6um0v4GG+J1QmmnhE2L6BfrFVNrzQe5 BofMW95lhcx7Jmnd86qjqWdI2s8Ny8msVUl2nEYMPlaG50IidT+tLE+AiD2Avd+o iiiC7n/L097BeVXTz4KQho2HLBK+csbr7h91cTg9Ffax0hxjNk7stVqVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4vc/ez4BC3byAEqbTuruoBC8IaMB8GA1UdIwQY MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt ZjUzYWQ0NmNhZjNjLzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeoaW+x4 YBn9dTVcbN5N6AbaZ/9wZZV3Cm35WVKAJDoi9kn+s7yfJNvwq+VE+2r6VMo7YuRI 1vOiAa3YeAwhr8su5WzZh+h8j+8YTyAGHZ/QfuyKU3acsTw32lfyenALo5RsPfJB uiYNbDMFv8sCMyXGS+DoZFr+ADqXdy6O7Y6GLMJTHHMJ3WBJda1/e0CKn4l99R2j OjRFEvCKTE/qbLCv8SRKYy0UO2WCsdM5SnXVZRdusEFCilBuqbBTV6vXRma2eA4P qy8qJM+T77x46RLCDRRpd5dn6I/Jk5Mc3FZXEnZHTc5EIJV4VA+NkPXBxX/9Kfeg W5xRhael53yejw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:00:25 2025 by rpki-client