This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json) Hash identifier: b0AfXxWMP/OfczXg4ADNIPx4sINox2csAGkco1hOgQE= Subject key identifier: 84:2A:B1:E2:C1:B0:F1:96:BD:D9:BB:79:D3:7D:B7:24:8E:E9:94:B0 Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99 Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99 Certificate serial: 019AF0BEFE156A79AF464CAE66470DE8F02A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft Manifest number: 1769 Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 23:00:39 +0000 Manifest next update: Sat 06 Dec 2025 23:00:39 +0000 Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=) 2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: z+Vu2JcYW/BolJ3YShUaRZm3UokYzJQyj9douALFE+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fe:15:6a:79:af:46:4c:ae:66:47:0d:e8:f0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99 Validity Not Before: Dec 5 23:00:39 2025 GMT Not After : Dec 6 23:00:39 2025 GMT Subject: CN=842ab1e2c1b0f196bdd9bb79d37db7248ee994b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:87:80:0d:51:24:a8:ba:04:4e:57:62:fa:34: 20:c7:f5:56:cc:57:6b:a2:6b:2f:18:6b:b3:63:8a: 12:0f:74:85:55:3f:9f:0c:6a:56:a8:ab:2e:6f:38: 09:4e:4d:20:8b:1d:e9:e5:f9:80:75:05:4b:f7:23: 35:d3:73:b2:e7:f9:33:8b:78:7b:14:dc:23:47:c7: 5d:8e:07:8f:9a:42:7b:1c:1e:d3:1e:16:2d:b3:27: 34:a2:67:8d:93:ac:70:77:bd:18:49:9c:c2:e1:ce: 88:5b:88:51:38:2e:17:03:bd:44:47:79:9e:82:75: 1b:f0:c4:55:d5:11:0e:a1:24:bd:0e:7a:7a:ce:15: 99:76:4f:e9:a1:8f:62:e3:80:a5:dd:fd:93:07:97: e8:cd:ca:0d:d8:bf:0b:b4:c0:ee:26:85:79:7f:54: 79:5e:7b:93:9e:c9:f1:d1:57:8e:06:1d:75:03:09: 82:cd:f5:45:1b:c2:7a:d7:24:80:49:e8:94:7c:78: 5d:a6:fe:f6:ad:82:ee:a1:ef:aa:9c:2c:75:d7:d3: a4:26:55:97:dd:3d:66:f9:7f:94:35:ff:45:0c:3b: c4:2e:f9:92:a3:88:38:c2:ea:4b:68:e3:b0:ed:0e: 71:ec:6c:14:d8:65:90:ee:2b:08:4b:a3:a2:6d:1b: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2A:B1:E2:C1:B0:F1:96:BD:D9:BB:79:D3:7D:B7:24:8E:E9:94:B0 X509v3 Authority Key Identifier: keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a6:76:71:e0:4d:82:ea:8e:e5:14:0b:2c:63:f3:36:fc:3d: 83:5c:5a:d2:32:e4:f7:32:63:a0:00:99:8e:b0:ac:69:d6:de: 04:9b:cd:15:98:0e:61:07:d5:9b:79:b9:d6:a4:b1:d0:dc:7a: a7:89:2a:64:3b:24:ef:81:72:00:fc:db:87:0b:60:4a:61:4f: 73:20:f3:37:1e:d5:19:c9:1c:1f:b8:06:4e:85:5e:6c:7f:d2: 76:19:8e:4b:0e:6a:cb:37:5d:78:e5:3e:cd:a7:79:fc:1d:fb: af:51:4a:08:8a:30:4e:e9:d7:a2:94:50:b4:ef:61:51:0d:9d: 48:55:16:86:8c:51:14:27:5a:b8:1f:c6:50:88:79:b0:07:f6: be:e6:f7:24:f2:a7:83:12:fd:54:ac:25:7a:db:bb:04:df:3d: 4d:0b:54:99:f3:7e:1d:74:a5:bb:b1:0d:f0:da:af:65:f5:f3: 46:a8:e2:05:b4:31:b2:63:fb:69:1c:c1:e9:33:5b:0e:00:c8: 72:92:a5:64:44:a7:71:70:f7:aa:19:3d:76:29:12:57:f0:65: a0:6b:9e:80:e9:39:df:3f:c1:80:6e:00:68:ff:b3:6f:be:d3: fd:09:e8:70:f2:e3:9e:99:3d:ab:7a:6c:96:1a:61:6d:e4:c2: 29:e8:11:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvv4VanmvRkyuZkcN6PAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl OTlkOTkwHhcNMjUxMjA1MjMwMDM5WhcNMjUxMjA2MjMwMDM5WjAzMTEwLwYDVQQD Eyg4NDJhYjFlMmMxYjBmMTk2YmRkOWJiNzlkMzdkYjcyNDhlZTk5NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oeADVEkqLoETldi+jQgx/VWzFdr omsvGGuzY4oSD3SFVT+fDGpWqKsubzgJTk0gix3p5fmAdQVL9yM103Oy5/kzi3h7 FNwjR8ddjgePmkJ7HB7THhYtsyc0omeNk6xwd70YSZzC4c6IW4hROC4XA71ER3me gnUb8MRV1REOoSS9Dnp6zhWZdk/poY9i44Cl3f2TB5fozcoN2L8LtMDuJoV5f1R5 XnuTnsnx0VeOBh11AwmCzfVFG8J61ySASeiUfHhdpv72rYLuoe+qnCx119OkJlWX 3T1m+X+UNf9FDDvELvmSo4g4wupLaOOw7Q5x7GwU2GWQ7isIS6OibRuvIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQqseLBsPGWvdm7edN9tySO6ZSwMB8GA1UdIwQY MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt MmFlYWRiOTY2Yjc2LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2 LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqZ2ceBN guqO5RQLLGPzNvw9g1xa0jLk9zJjoACZjrCsadbeBJvNFZgOYQfVm3m51qSx0Nx6 p4kqZDsk74FyAPzbhwtgSmFPcyDzNx7VGckcH7gGToVebH/SdhmOSw5qyzddeOU+ zad5/B37r1FKCIowTunXopRQtO9hUQ2dSFUWhoxRFCdauB/GUIh5sAf2vub3JPKn gxL9VKwletu7BN89TQtUmfN+HXSlu7EN8NqvZfXzRqjiBbQxsmP7aRzB6TNbDgDI cpKlZESncXD3qhk9dikSV/BloGuegOk53z/BgG4AaP+zb77T/QnocPLjnpk9q3ps lhphbeTCKegRSw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:53 2025 by rpki-client