This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft File: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json) Hash identifier: mBYulsCr5iYigKDxMAjYSS/ESO/U8wMKa++aX1kknlA= Subject key identifier: E3:48:7E:C4:30:E1:2C:9A:7E:4E:7C:99:E8:4F:C7:E7:F2:4A:2A:40 Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Certificate serial: 019AF31B1BED8A23540731BEBF7294C1D276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft Manifest number: 05BD Signing time: Sat 06 Dec 2025 10:00:31 +0000 Manifest this update: Sat 06 Dec 2025 10:00:31 +0000 Manifest next update: Sun 07 Dec 2025 10:00:31 +0000 Files and hashes: 1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: /2Vd7LivDOK19L82p6L9t/Z7o1v7aAvNvZ9q76sI8d8=) 2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1b:ed:8a:23:54:07:31:be:bf:72:94:c1:d2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Validity Not Before: Dec 6 10:00:31 2025 GMT Not After : Dec 7 10:00:31 2025 GMT Subject: CN=e3487ec430e12c9a7e4e7c99e84fc7e7f24a2a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:47:59:d0:af:2e:9a:fb:0c:47:73:54:6d: 63:3b:89:41:63:92:4f:e2:fc:43:81:db:2e:4f:ef: b3:06:99:46:b3:72:23:34:18:90:1e:f7:ca:77:cf: 55:fc:d0:2a:c4:cc:91:3d:56:6f:7c:90:b4:a9:3c: 5b:58:0f:33:b2:8f:10:a6:e4:68:e7:18:f1:68:3f: 69:6c:4d:fd:52:f3:24:90:e7:ca:2f:99:08:56:54: e6:0f:24:65:23:c0:da:4f:43:d6:55:42:ad:da:20: cd:94:10:63:dc:f4:e5:ce:84:f2:1e:27:fe:7d:af: 85:ba:da:f4:90:28:ea:1d:93:83:15:84:4b:07:c4: 49:6c:38:64:e5:85:b2:be:22:7a:ab:2b:b5:7d:0e: ee:50:f8:db:5e:51:1f:aa:3a:9e:65:9c:0f:f8:c8: 91:f1:56:e1:49:ca:27:84:d5:e8:f1:b0:64:63:39: 4d:2d:90:a4:5d:fe:0d:26:a1:17:9b:8f:24:b2:8e: 5a:57:6e:ca:43:52:7a:97:ac:30:77:ce:04:30:2f: ee:f1:b0:ab:11:d3:b0:b9:f4:04:94:82:6c:51:d6: 2c:2c:d9:30:3f:43:e5:7f:68:0c:9f:f9:23:65:b1: 06:94:29:23:6d:59:aa:ef:49:5a:e5:70:88:e2:65: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:48:7E:C4:30:E1:2C:9A:7E:4E:7C:99:E8:4F:C7:E7:F2:4A:2A:40 X509v3 Authority Key Identifier: keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c5:e6:b2:80:8f:cd:cf:25:77:49:92:0a:72:fd:65:92:39: 41:95:54:6d:e4:b9:23:14:58:2f:7d:40:c7:a8:26:ef:47:e8: 53:3c:d6:a2:1a:09:93:1c:d9:7e:9e:ff:ff:4f:40:7f:f5:6d: de:1d:7c:1d:65:f2:05:a8:81:62:97:48:06:1f:14:26:37:9f: 25:3d:c4:9d:10:69:38:20:71:f9:cc:81:88:2e:c0:8f:97:30: 39:37:7a:d5:be:a3:85:6c:43:16:66:2c:91:72:51:e5:b7:ef: a9:b9:a3:ae:aa:77:27:c8:47:ee:3f:0e:25:64:98:40:83:d2: 05:26:8d:d5:c3:9d:81:03:77:be:5e:32:09:a0:68:9b:f4:ed: 01:85:c3:ec:b8:31:bf:93:9e:e5:12:b8:69:58:97:12:ae:de: 54:36:d9:c4:83:dc:5e:bd:95:ea:5b:ae:c9:b3:4e:c9:41:18: b7:b6:ba:4d:0b:5f:ca:99:a5:20:b6:9a:9b:da:97:df:16:44: b3:af:85:a3:a0:6e:6f:a1:86:10:35:d6:c8:17:02:48:2c:82: 65:ad:b9:a6:aa:a7:e6:ed:d6:82:60:aa:76:b9:84:c8:9e:fb: 8c:98:6a:2a:08:ff:9d:7b:52:15:9a:8c:2b:0d:e8:10:ab:98: 33:56:23:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxvtiiNUBzG+v3KUwdJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWE1MjQxNjMxM2I3NjQzZWQyOGQ0M2JjM2M0NjYxZjQ2 YWIzNjYwHhcNMjUxMjA2MTAwMDMxWhcNMjUxMjA3MTAwMDMxWjAzMTEwLwYDVQQD EyhlMzQ4N2VjNDMwZTEyYzlhN2U0ZTdjOTllODRmYzdlN2YyNGEyYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuENHWdCvLpr7DEdzVG1jO4lBY5JP 4vxDgdsuT++zBplGs3IjNBiQHvfKd89V/NAqxMyRPVZvfJC0qTxbWA8zso8QpuRo 5xjxaD9pbE39UvMkkOfKL5kIVlTmDyRlI8DaT0PWVUKt2iDNlBBj3PTlzoTyHif+ fa+Futr0kCjqHZODFYRLB8RJbDhk5YWyviJ6qyu1fQ7uUPjbXlEfqjqeZZwP+MiR 8VbhSconhNXo8bBkYzlNLZCkXf4NJqEXm48kso5aV27KQ1J6l6wwd84EMC/u8bCr EdOwufQElIJsUdYsLNkwP0Plf2gMn/kjZbEGlCkjbVmq70la5XCI4mVz6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONIfsQw4Syafk58mehPx+fySipAMB8GA1UdIwQY MBaAFO6qUkFjE7dkPtKNQ7w8RmH0arNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAt ZDMzN2I5MzhkM2NjLzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAtZDMzN2I5MzhkM2Nj LzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocXmsoCP zc8ld0mSCnL9ZZI5QZVUbeS5IxRYL31Ax6gm70foUzzWohoJkxzZfp7//09Af/Vt 3h18HWXyBaiBYpdIBh8UJjefJT3EnRBpOCBx+cyBiC7Aj5cwOTd61b6jhWxDFmYs kXJR5bfvqbmjrqp3J8hH7j8OJWSYQIPSBSaN1cOdgQN3vl4yCaBom/TtAYXD7Lgx v5Oe5RK4aViXEq7eVDbZxIPcXr2V6luuybNOyUEYt7a6TQtfypmlILaam9qX3xZE s6+Fo6Bub6GGEDXWyBcCSCyCZa25pqqn5u3WgmCqdrmEyJ77jJhqKgj/nXtSFZqM Kw3oEKuYM1YjxA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:49 2025 by rpki-client