This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json) Hash identifier: b8s4x0vNTRI0VO6pHpoo07YqoFfq918djWenSaoUTXU= Subject key identifier: A0:7C:98:97:A9:22:E8:9F:AD:EF:8F:DB:36:20:2E:C0:96:32:B6:0C Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e Certificate serial: 019AF49C2DFFF770469DBEF460322579A1F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:07 +0000 Manifest this update: Sat 06 Dec 2025 17:01:07 +0000 Manifest next update: Sun 07 Dec 2025 17:01:07 +0000 Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: I9ZZl7SZ9Pk96CllFTIy3J9p30zy7f3zGt7crIhovgw=) 2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2d:ff:f7:70:46:9d:be:f4:60:32:25:79:a1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e Validity Not Before: Dec 6 17:01:07 2025 GMT Not After : Dec 7 17:01:07 2025 GMT Subject: CN=a07c9897a922e89fadef8fdb36202ec09632b60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:0f:13:bb:02:d8:18:34:8c:28:d2:03:e3: 87:e6:17:e7:90:b7:5a:5e:1b:70:ff:b9:93:ee:16: 98:a9:75:71:5a:91:2d:20:4d:7e:2d:26:44:dc:df: 76:24:18:38:da:89:d0:dd:df:be:12:9e:0d:7f:25: 56:a7:60:66:a8:84:b2:7e:01:57:3f:76:48:ea:37: c8:e5:f7:4b:5f:07:2f:54:15:37:40:57:00:66:a2: b6:d6:37:1b:94:d6:6a:13:b3:71:a1:bf:15:a4:ff: 2f:a0:7d:61:fd:60:c3:28:30:70:e4:4a:c9:59:36: 47:8f:38:66:a4:45:a1:46:3d:f9:50:76:74:c4:da: dd:df:29:f3:8d:b9:97:44:38:30:6e:20:11:a6:48: a1:b1:fc:55:bc:fb:0d:9f:d5:5b:24:c4:ee:2f:85: 6c:97:c2:09:40:a0:41:68:fb:ce:f5:58:0c:37:78: 5a:48:20:20:6b:db:86:c5:e4:f1:f0:6e:da:1a:cb: 90:bc:bb:30:fd:11:d6:03:1b:7c:f2:7c:b7:b2:70: 09:38:1c:0c:06:f1:df:75:2f:d9:5a:4a:9b:91:e2: 81:fa:96:02:58:87:02:31:10:e0:2f:8a:a3:ac:11: f3:5e:c3:30:11:f0:de:c1:f9:9d:f6:55:06:5c:11: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7C:98:97:A9:22:E8:9F:AD:EF:8F:DB:36:20:2E:C0:96:32:B6:0C X509v3 Authority Key Identifier: keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2b:49:07:f7:4b:02:1d:0f:cd:a0:95:b8:42:5c:ae:87:c9: d6:82:5e:00:b5:f0:e9:0c:aa:78:64:66:2a:b6:c2:01:2e:43: d3:e8:3c:9d:a1:2c:6a:02:19:73:50:bc:29:a8:95:e6:c3:1a: ad:95:93:58:9e:97:20:56:68:c9:32:71:24:e1:05:b8:ab:83: 7d:75:d5:ad:0b:4d:2e:1e:31:fe:04:41:24:96:84:d2:41:5a: 8c:5b:a1:5f:40:c1:a7:d6:f6:76:7e:6b:79:50:21:16:1b:60: 5a:db:d1:d1:c7:d2:b0:83:a9:7a:b1:c7:9a:cc:ef:fe:b9:d6: 2b:f4:15:e9:65:b4:48:55:be:6d:9c:e3:4e:c5:fa:82:a4:09: d3:d5:c7:97:28:ec:16:f3:96:93:55:ca:dc:8e:7e:61:81:d7: b3:85:ee:43:b7:8f:e5:de:1a:ba:67:af:95:5a:dd:28:d6:8f: 8f:92:eb:aa:bf:87:7d:dc:b2:80:0b:b9:f6:d6:ee:5a:31:8d: 52:00:ca:32:45:79:99:c9:c4:ed:56:c5:d4:9b:a7:04:39:35: 62:e4:3e:e0:6d:c4:65:9e:1f:5f:5d:89:50:3c:f7:be:72:a3: e6:24:a5:d2:91:d6:07:dc:e5:77:4a:38:d4:ab:b6:81:de:59: ab:c2:4b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC3/93BGnb70YDIleaHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey ODAzN2UwHhcNMjUxMjA2MTcwMTA3WhcNMjUxMjA3MTcwMTA3WjAzMTEwLwYDVQQD EyhhMDdjOTg5N2E5MjJlODlmYWRlZjhmZGIzNjIwMmVjMDk2MzJiNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIUPE7sC2Bg0jCjSA+OH5hfnkLda Xhtw/7mT7haYqXVxWpEtIE1+LSZE3N92JBg42onQ3d++Ep4NfyVWp2BmqISyfgFX P3ZI6jfI5fdLXwcvVBU3QFcAZqK21jcblNZqE7Nxob8VpP8voH1h/WDDKDBw5ErJ WTZHjzhmpEWhRj35UHZ0xNrd3ynzjbmXRDgwbiARpkihsfxVvPsNn9VbJMTuL4Vs l8IJQKBBaPvO9VgMN3haSCAga9uGxeTx8G7aGsuQvLsw/RHWAxt88ny3snAJOBwM BvHfdS/ZWkqbkeKB+pYCWIcCMRDgL4qjrBHzXsMwEfDewfmd9lUGXBHdyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKB8mJepIuifre+P2zYgLsCWMrYMMB8GA1UdIwQY MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkStJB/dL Ah0PzaCVuEJcrofJ1oJeALXw6QyqeGRmKrbCAS5D0+g8naEsagIZc1C8KaiV5sMa rZWTWJ6XIFZoyTJxJOEFuKuDfXXVrQtNLh4x/gRBJJaE0kFajFuhX0DBp9b2dn5r eVAhFhtgWtvR0cfSsIOperHHmszv/rnWK/QV6WW0SFW+bZzjTsX6gqQJ09XHlyjs FvOWk1XK3I5+YYHXs4XuQ7eP5d4aumevlVrdKNaPj5Lrqr+HfdyygAu59tbuWjGN UgDKMkV5mcnE7VbF1JunBDk1YuQ+4G3EZZ4fX12JUDz3vnKj5iSl0pHWB9zld0o4 1Ku2gd5Zq8JLdA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:29 2025 by rpki-client