This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json) Hash identifier: HsY8Q2rz6Hca+nKSWlpWcule01dqfC41r2PVF9SO1UI= Subject key identifier: ED:4B:1A:0C:7A:A6:80:66:BA:43:4D:4C:0C:E3:5E:F6:6A:11:45:7A Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Certificate serial: 019AF3895370387257B9430BE83BD73A6732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft Manifest number: 0618 Signing time: Sat 06 Dec 2025 12:00:54 +0000 Manifest this update: Sat 06 Dec 2025 12:00:54 +0000 Manifest next update: Sun 07 Dec 2025 12:00:54 +0000 Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: wUBoWrxklRPiAPAeAUzvDXaIoKIP+nxaaWUu460dytk=) 2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:53:70:38:72:57:b9:43:0b:e8:3b:d7:3a:67:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489 Validity Not Before: Dec 6 12:00:54 2025 GMT Not After : Dec 7 12:00:54 2025 GMT Subject: CN=ed4b1a0c7aa68066ba434d4c0ce35ef66a11457a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:e5:7c:48:b1:84:1b:00:79:bf:ff:12:29: c4:d2:59:41:38:f2:de:80:81:83:54:42:88:50:b7: 42:d7:da:ed:43:0c:a0:c3:43:84:af:9b:e2:3e:29: 03:55:b5:b2:c9:45:2c:3a:36:6d:40:60:a0:66:a4: 67:c2:99:38:96:74:a0:83:11:f9:3d:0b:62:96:d8: 61:72:6b:e8:ad:24:db:16:6b:2e:c9:bd:dc:48:56: 74:03:ba:44:60:f1:b4:97:29:65:61:ba:f5:0e:81: e6:6e:5b:2b:34:f8:ff:70:b4:82:90:47:f3:f7:43: 97:09:30:36:d4:0a:29:b1:02:ee:59:a0:41:14:1a: 3d:d8:58:93:8e:11:72:31:c7:e1:6c:18:f6:0c:4e: 54:35:c7:ed:de:59:2c:73:7e:6b:6f:83:8e:88:e6: ca:1e:b2:ff:51:03:e6:dc:e3:7a:0b:d0:d4:7f:3b: 56:eb:62:d4:04:76:08:24:e8:94:b4:85:d5:60:37: 0a:33:36:eb:db:17:fa:4a:c9:9e:8f:fe:be:08:33: c4:87:27:81:21:a9:c8:95:9a:59:31:ee:06:5f:1e: e1:55:c6:b6:ad:de:89:64:20:d8:0d:8f:92:02:09: c7:7c:79:39:7c:98:b4:39:e5:f8:49:66:40:18:c3: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4B:1A:0C:7A:A6:80:66:BA:43:4D:4C:0C:E3:5E:F6:6A:11:45:7A X509v3 Authority Key Identifier: keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6d:8f:e9:62:e8:70:19:32:21:df:bb:80:b9:7d:7b:55:05: 73:49:dd:50:fc:e8:98:56:83:14:8e:6d:ef:b8:50:40:05:e5: b9:d8:43:99:1b:86:d2:da:c9:bb:58:0b:ac:f7:fd:9d:d2:5f: 57:19:a9:5d:be:43:0b:c7:ca:e9:0d:8b:9f:de:f1:11:f3:b5: a6:b0:0c:03:41:b5:b9:68:a4:5c:b9:2e:da:ee:47:be:a9:b7: 63:ec:26:a1:8b:4b:35:a9:9a:c8:ed:79:22:a1:7b:88:9e:32: 6d:c0:5f:7f:a0:6a:86:bf:28:71:02:a5:d3:d4:bb:4c:7a:74: b9:a1:08:26:a1:d6:2b:0f:92:79:bd:69:ee:4f:1a:a7:10:e5: 20:0a:93:1f:f2:40:d9:29:55:95:ad:e0:48:24:f3:64:e1:e2: 9e:60:3b:ca:b5:12:db:4f:77:53:5a:0c:e5:e7:d2:76:a9:9e: f2:4e:67:d8:ba:08:51:7f:81:d6:12:55:8c:a6:56:e5:8b:f8: f5:fd:a1:1e:7d:04:29:f7:28:ba:1c:b4:b2:5d:a8:66:56:42: f4:e0:f0:09:05:33:23:9f:49:14:5f:db:50:92:61:c3:45:a1: ac:15:3a:5f:89:b6:ca:8f:0c:ff:59:7b:29:00:05:2b:72:68: 7f:d1:79:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVNwOHJXuUML6DvXOmcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk MTQ0ODkwHhcNMjUxMjA2MTIwMDU0WhcNMjUxMjA3MTIwMDU0WjAzMTEwLwYDVQQD EyhlZDRiMWEwYzdhYTY4MDY2YmE0MzRkNGMwY2UzNWVmNjZhMTE0NTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVXlfEixhBsAeb//EinE0llBOPLe gIGDVEKIULdC19rtQwygw0OEr5viPikDVbWyyUUsOjZtQGCgZqRnwpk4lnSggxH5 PQtilthhcmvorSTbFmsuyb3cSFZ0A7pEYPG0lyllYbr1DoHmblsrNPj/cLSCkEfz 90OXCTA21AopsQLuWaBBFBo92FiTjhFyMcfhbBj2DE5UNcft3lksc35rb4OOiObK HrL/UQPm3ON6C9DUfztW62LUBHYIJOiUtIXVYDcKMzbr2xf6Ssmej/6+CDPEhyeB IanIlZpZMe4GXx7hVca2rd6JZCDYDY+SAgnHfHk5fJi0OeX4SWZAGMMl7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1LGgx6poBmukNNTAzjXvZqEUV6MB8GA1UdIwQY MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm2P6WLo cBkyId+7gLl9e1UFc0ndUPzomFaDFI5t77hQQAXludhDmRuG0trJu1gLrPf9ndJf VxmpXb5DC8fK6Q2Ln97xEfO1prAMA0G1uWikXLku2u5Hvqm3Y+wmoYtLNamayO15 IqF7iJ4ybcBff6Bqhr8ocQKl09S7THp0uaEIJqHWKw+Seb1p7k8apxDlIAqTH/JA 2SlVla3gSCTzZOHinmA7yrUS2093U1oM5efSdqme8k5n2LoIUX+B1hJVjKZW5Yv4 9f2hHn0EKfcouhy0sl2oZlZC9ODwCQUzI59JFF/bUJJhw0WhrBU6X4m2yo8M/1l7 KQAFK3Jof9F5iw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:19 2025 by rpki-client