This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json) Hash identifier: l731amAjgACtkGbrOtttbf5RQ8qtr8gfOg9XiKxjpTM= Subject key identifier: CF:69:CB:2E:1B:0A:7C:5B:FD:83:BE:00:C7:4B:71:CE:C5:40:F3:ED Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3 Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3 Certificate serial: 019AFB42E57522ACFF0CE3AC3A806CFBFB5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft Manifest number: 14AB Signing time: Mon 08 Dec 2025 00:00:56 +0000 Manifest this update: Mon 08 Dec 2025 00:00:56 +0000 Manifest next update: Tue 09 Dec 2025 00:00:56 +0000 Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: rIx3+Dq9DumxWpHyURvL5cRrbw5wkQqPj/PPVQJvq6Y=) 2: aCQkmSTzEflyT6Hwko3Tmkp5YgM.roa (hash: cY38nbBebmnJBkoepfEX2AZ8X9a8BlXKUlC0CLvNiCU=) 3: ot-4ava-H_JGfkFEE8IMfoH7D2U.roa (hash: 066ShywS1FpC299llP3evwqIgvXEIG2I1bIowA8MHvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:e5:75:22:ac:ff:0c:e3:ac:3a:80:6c:fb:fb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3 Validity Not Before: Dec 8 00:00:56 2025 GMT Not After : Dec 9 00:00:56 2025 GMT Subject: CN=cf69cb2e1b0a7c5bfd83be00c74b71cec540f3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:da:a6:fa:ca:4d:d5:d2:d1:e4:ff:83:22: a4:ec:b3:9e:fb:b5:b9:07:8f:a4:7c:7f:18:ec:1f: 35:45:0c:8c:b6:ba:44:64:5e:bf:bb:c7:f8:ba:09: df:2d:b4:e2:dc:fb:21:4c:a2:24:b6:be:e8:d0:85: b7:b9:6d:c8:73:c8:16:ba:ac:ee:41:28:fe:44:99: 70:32:1c:7f:e9:46:63:41:cd:a1:d2:f5:4c:2a:f9: 07:39:20:a3:a0:f5:31:61:29:48:ac:9a:67:94:20: 65:57:11:ac:f1:7d:3e:3f:47:76:c5:da:31:59:b4: a4:46:6d:a8:ce:f5:e8:6e:59:bd:85:a4:86:f4:0a: bc:6f:a8:f4:86:b0:f7:33:3a:4e:83:bb:c6:dd:d3: 84:8e:f3:ad:0e:82:51:5f:e6:8c:59:c3:24:97:14: ae:40:9a:dc:2b:d4:21:b5:a2:0d:d5:0c:ff:43:29: f6:46:0e:1f:9d:05:8a:ff:2d:57:56:44:fc:8b:4d: 50:df:f7:87:94:16:31:04:04:be:d7:b8:3a:6a:8c: 2c:b2:9a:4f:67:ab:ac:1c:85:2e:4a:dd:a9:35:1c: f9:6e:b0:1a:67:a9:f5:8c:6b:d7:d0:6b:f5:05:e1: fc:28:a6:96:03:26:b9:87:78:d8:62:3a:8f:d9:09: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:69:CB:2E:1B:0A:7C:5B:FD:83:BE:00:C7:4B:71:CE:C5:40:F3:ED X509v3 Authority Key Identifier: keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f4:91:4b:7b:46:2f:3f:6f:ef:0b:7a:f1:df:c2:cb:d0:24: b1:67:c9:93:db:e5:48:c3:b7:31:a1:a6:1e:54:67:55:58:b8: 5f:55:3c:66:21:28:65:b2:95:00:53:55:f6:55:f6:c0:dc:d8: 14:96:e2:71:cf:a3:28:57:ae:a0:28:21:b0:dc:ba:90:65:06: 64:f2:20:dc:57:dd:9c:34:93:a4:b9:34:f9:9f:8e:9f:1b:40: 0e:62:b5:6b:f4:6c:24:27:5c:be:f2:11:16:77:e5:50:18:81: 82:e6:d4:2c:f1:14:be:7e:9f:31:1d:9b:76:94:ea:f8:f0:d4: 14:21:a3:22:f3:34:02:5c:c1:2d:97:48:13:da:2c:38:0c:14: 7b:25:07:0b:e8:20:a6:55:a2:2f:f4:75:2f:2f:d5:fa:1d:77: e6:7d:48:22:8f:cd:b9:bd:ff:49:53:0c:23:ca:b5:de:b6:ca: 74:aa:bb:aa:f9:b0:b7:20:d8:29:38:c8:44:19:5b:85:00:f1: 60:d6:1f:fd:dd:56:77:05:84:3c:f6:3d:aa:ab:2d:42:1b:3f: ad:7f:3a:c0:44:e4:d1:63:f4:16:29:5b:49:a3:21:c7:d7:e6: 9a:8e:fa:dd:4b:ae:c1:6e:40:67:4a:9a:e3:e8:08:d8:0b:75: fd:6d:7c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QuV1Iqz/DOOsOoBs+/taMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZWUyNWE3OGE4MTZiZGUzNjJjNDBjODZlMzliOTQ3ZDBl ZTJmZjMwHhcNMjUxMjA4MDAwMDU2WhcNMjUxMjA5MDAwMDU2WjAzMTEwLwYDVQQD EyhjZjY5Y2IyZTFiMGE3YzViZmQ4M2JlMDBjNzRiNzFjZWM1NDBmM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx3apvrKTdXS0eT/gyKk7LOe+7W5 B4+kfH8Y7B81RQyMtrpEZF6/u8f4ugnfLbTi3PshTKIktr7o0IW3uW3Ic8gWuqzu QSj+RJlwMhx/6UZjQc2h0vVMKvkHOSCjoPUxYSlIrJpnlCBlVxGs8X0+P0d2xdox WbSkRm2ozvXoblm9haSG9Aq8b6j0hrD3MzpOg7vG3dOEjvOtDoJRX+aMWcMklxSu QJrcK9QhtaIN1Qz/Qyn2Rg4fnQWK/y1XVkT8i01Q3/eHlBYxBAS+17g6aowssppP Z6usHIUuSt2pNRz5brAaZ6n1jGvX0Gv1BeH8KKaWAya5h3jYYjqP2Qk0gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9pyy4bCnxb/YO+AMdLcc7FQPPtMB8GA1UdIwQY MBaAFO3uJaeKgWveNixAyG45uUfQ7i/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYt NTQzNDFjZDEzYTlkLzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYtNTQzNDFjZDEzYTlk LzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfSRS3tG Lz9v7wt68d/Cy9AksWfJk9vlSMO3MaGmHlRnVVi4X1U8ZiEoZbKVAFNV9lX2wNzY FJbicc+jKFeuoCghsNy6kGUGZPIg3FfdnDSTpLk0+Z+OnxtADmK1a/RsJCdcvvIR FnflUBiBgubULPEUvn6fMR2bdpTq+PDUFCGjIvM0AlzBLZdIE9osOAwUeyUHC+gg plWiL/R1Ly/V+h135n1IIo/Nub3/SVMMI8q13rbKdKq7qvmwtyDYKTjIRBlbhQDx YNYf/d1WdwWEPPY9qqstQhs/rX86wETk0WP0FilbSaMhx9fmmo763UuuwW5AZ0qa 4+gI2At1/W182A== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:37 2025 by rpki-client