This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json) Hash identifier: OTpDrSNXqly25ijrulT4jnCmiH0yoc0npU/jFZX49d8= Subject key identifier: FD:35:47:4B:EC:5E:2E:2A:D0:A3:78:87:17:C8:43:49:52:72:4B:EE Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32 Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32 Certificate serial: 019AF12CE519A75A7ED7378E40D6CB81FC3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: TvsYSeDO44SzqT7xvOtakge9QXhaAhtueQY7dYnibgc=) 2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e5:19:a7:5a:7e:d7:37:8e:40:d6:cb:81:fc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=fd35474bec5e2e2ad0a3788717c8434952724bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:0e:6f:ca:46:8c:00:05:5d:71:a2:9c:dc: 26:b8:09:af:e9:6e:6f:31:50:52:2c:30:f9:5b:be: 6d:c1:e7:f3:36:3a:f2:d2:a9:e4:c6:21:61:2d:a7: c8:f4:52:c0:40:0c:39:72:ef:a6:30:0a:91:46:82: 93:cc:52:7c:27:34:07:29:9e:c8:0e:41:4c:84:e9: 73:1e:d8:b0:bc:1f:be:53:b7:42:9c:18:c6:ec:f6: ef:58:a0:6e:af:5c:e0:86:e0:63:fa:20:2a:b4:ce: 3f:98:93:2d:fd:18:38:9e:5b:8a:3d:ce:1a:eb:bd: 9e:58:33:7b:e4:2a:37:04:1b:66:c5:f5:23:ba:27: d8:c9:32:cb:23:ee:97:2e:8b:69:f4:13:fa:28:8c: 9a:14:64:31:71:f5:b2:dc:e4:c8:f1:72:c4:53:1f: bb:88:83:48:d3:24:fb:35:65:1a:4f:ac:76:ff:14: 48:38:28:83:c5:20:1a:df:39:e5:81:71:02:50:c5: 14:82:b7:3d:fd:54:37:de:92:ae:bb:5e:93:aa:cc: c9:b0:9f:17:02:d1:2b:0f:4c:c0:30:14:36:48:fd: 8c:6d:97:69:f0:21:21:cd:ac:18:01:52:d0:2d:14: 56:4b:ed:d5:3a:bd:30:11:cd:ca:eb:19:51:f2:91: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:47:4B:EC:5E:2E:2A:D0:A3:78:87:17:C8:43:49:52:72:4B:EE X509v3 Authority Key Identifier: keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:92:08:88:22:ab:db:86:29:9b:82:5e:af:9c:7b:59:1e:c3: 91:37:5c:30:b2:5d:f1:45:09:4a:8f:a6:1a:79:7e:59:f2:3f: 90:3c:a0:18:9c:ad:4d:66:1e:13:e9:3b:90:d1:26:34:81:90: 10:bb:c8:d3:dc:94:15:a9:d3:53:df:32:cf:38:1c:b8:65:b7: 1d:ee:b6:64:30:2e:95:b3:0f:4c:7c:90:0c:b4:1f:d4:6b:8e: 33:5c:29:b9:c7:37:88:73:91:f4:9e:a1:99:35:12:48:fb:77: 3f:a7:30:f2:15:77:b0:d9:67:35:f9:65:f9:a9:a9:1d:cd:cc: 90:eb:50:90:ac:cc:67:f4:97:8a:f9:6c:89:3d:fb:44:50:28: 0d:a4:fe:22:9e:02:4e:d1:56:0c:e8:43:7c:0c:ff:b9:16:0f: fc:2c:f7:2a:d6:5b:30:17:b9:91:3b:5b:c6:c2:62:e6:40:68: ff:09:3b:d2:05:eb:72:2b:70:1c:54:bb:a3:25:8f:1c:6b:de: 88:03:fa:94:71:9a:c2:16:41:68:20:cd:46:2d:7f:7d:f5:04: 9e:b7:69:80:13:75:45:a0:de:ae:19:b1:b5:6a:de:a3:e7:1a: 46:ed:5e:c1:62:b2:ac:3d:2f:69:70:ac:57:96:eb:09:d5:0b: 78:c4:6d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOUZp1p+1zeOQNbLgfw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMGJkMGVhOTVhMTkwYzcwM2E4NWUwOWViYzVlNWZkYTVj ZGNlMzIwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD EyhmZDM1NDc0YmVjNWUyZTJhZDBhMzc4ODcxN2M4NDM0OTUyNzI0YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SgOb8pGjAAFXXGinNwmuAmv6W5v MVBSLDD5W75twefzNjry0qnkxiFhLafI9FLAQAw5cu+mMAqRRoKTzFJ8JzQHKZ7I DkFMhOlzHtiwvB++U7dCnBjG7PbvWKBur1zghuBj+iAqtM4/mJMt/Rg4nluKPc4a 672eWDN75Co3BBtmxfUjuifYyTLLI+6XLotp9BP6KIyaFGQxcfWy3OTI8XLEUx+7 iINI0yT7NWUaT6x2/xRIOCiDxSAa3znlgXECUMUUgrc9/VQ33pKuu16TqszJsJ8X AtErD0zAMBQ2SP2MbZdp8CEhzawYAVLQLRRWS+3VOr0wEc3K6xlR8pHRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP01R0vsXi4q0KN4hxfIQ0lSckvuMB8GA1UdIwQY MBaAFO4L0OqVoZDHA6heCevF5f2lzc4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wZDVkOWYtNTgwOC00ODcxLWEyNGQt YmViZGY0Y2Q0ODViLzEvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wZDVkOWYtNTgwOC00ODcxLWEyNGQtYmViZGY0Y2Q0ODVi LzEvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJIIiCKr 24Ypm4Jer5x7WR7DkTdcMLJd8UUJSo+mGnl+WfI/kDygGJytTWYeE+k7kNEmNIGQ ELvI09yUFanTU98yzzgcuGW3He62ZDAulbMPTHyQDLQf1GuOM1wpucc3iHOR9J6h mTUSSPt3P6cw8hV3sNlnNfll+ampHc3MkOtQkKzMZ/SXivlsiT37RFAoDaT+Ip4C TtFWDOhDfAz/uRYP/Cz3KtZbMBe5kTtbxsJi5kBo/wk70gXrcitwHFS7oyWPHGve iAP6lHGawhZBaCDNRi1/ffUEnrdpgBN1RaDerhmxtWreo+caRu1ewWKyrD0vaXCs V5brCdULeMRtWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:43 2025 by rpki-client