This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json) Hash identifier: zSZ358HCLhvHOKuB15GJ8nqPtcQRQ+akZVqIYM3P2W4= Subject key identifier: 5D:6B:D9:7D:98:0C:2A:B3:B3:A6:48:CF:E1:82:0C:BC:3D:79:5F:59 Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Certificate serial: 019AF1D1B1B3DA050785C712E82F883D9276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: +VomMFwBSG/knIcUfxfMfTtxF5bwK2XD1grYJthj2ag=) 2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b1:b3:da:05:07:85:c7:12:e8:2f:88:3d:92:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=5d6bd97d980c2ab3b3a648cfe1820cbc3d795f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:66:92:60:dc:e1:cb:92:85:a4:d9:74:16: 4d:5d:82:d4:28:05:71:27:44:c4:bd:df:2f:d9:a7: 35:7c:26:77:9f:86:c8:c0:e3:ab:c2:2e:91:5e:e3: d6:b6:d3:43:8e:6c:41:e3:9f:20:6e:a8:d6:9e:1f: 4d:59:51:bc:24:df:f6:17:95:b7:00:25:50:09:d6: 8b:9e:c4:72:f5:b0:38:43:a0:a7:6e:98:c4:92:a8: 0d:24:63:63:88:cd:0c:22:9f:71:18:37:53:26:2a: 1b:55:bd:f9:0e:32:3d:6a:5f:47:f0:df:a7:00:e0: 5e:62:73:f6:b9:b8:a1:7a:9f:2e:2e:98:23:8f:a5: a9:66:51:e4:69:5f:51:5a:d2:0f:40:7d:96:5d:4e: 37:66:4e:fc:f0:4e:eb:39:5d:f0:e0:fa:68:45:6a: 25:85:59:f7:36:4c:da:80:ce:88:e4:08:26:c1:70: 29:fa:62:e1:b3:3b:64:74:a8:54:99:6d:e1:7f:bd: 67:02:5a:8e:e8:53:50:39:ac:45:1c:58:46:ab:cc: 59:10:cf:81:26:9f:0c:04:58:ee:69:4a:64:97:9d: 9c:5f:79:69:1f:bd:79:f9:8b:a4:50:d4:e5:0b:e8: 65:0c:5f:75:c1:91:bd:2b:44:be:77:48:bc:a7:31: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6B:D9:7D:98:0C:2A:B3:B3:A6:48:CF:E1:82:0C:BC:3D:79:5F:59 X509v3 Authority Key Identifier: keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:53:e4:07:2d:c7:4e:c3:c5:07:9c:37:98:90:06:94:e7: 63:8e:04:02:7f:05:83:ba:d0:2e:b8:99:af:ea:a2:dc:98:7f: cc:e5:50:b4:29:3b:b3:a6:86:04:ad:0b:ee:96:ea:17:59:33: 12:e6:5d:ed:15:96:8a:c5:37:ca:cf:f5:cd:52:c4:53:12:97: 94:e0:6d:50:b4:93:d0:de:3d:c8:74:10:46:51:f8:3e:9f:1f: 3d:2d:3b:b0:de:22:8d:a8:e1:70:4b:18:e3:fe:32:c2:a3:69: 8e:aa:f3:14:d4:cb:64:60:df:39:1c:68:9f:b2:1a:b3:65:16: bb:4f:ae:c5:fb:d5:0d:52:fa:6e:47:50:b1:23:2a:d8:81:9a: be:c4:12:38:00:79:11:bb:ec:f4:18:71:2b:e4:66:eb:14:91: 58:fa:bb:05:3d:b7:70:f0:93:77:f3:08:07:d3:44:44:67:ae: 55:11:e3:2d:74:4a:c8:90:c3:ad:7f:31:71:7d:54:83:1a:c2: c9:47:de:02:95:ab:6b:61:d7:68:54:19:16:d6:4b:da:b6:dc: 1d:d9:3e:21:e7:71:0b:d4:b4:dc:3e:ed:58:28:6b:59:ff:39: f5:2e:bd:04:60:62:4a:a1:d5:2e:11:e9:c8:26:b1:62:61:f3: af:c1:78:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bGz2gUHhccS6C+IPZJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx MTAwYTMwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD Eyg1ZDZiZDk3ZDk4MGMyYWIzYjNhNjQ4Y2ZlMTgyMGNiYzNkNzk1ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8RmkmDc4cuShaTZdBZNXYLUKAVx J0TEvd8v2ac1fCZ3n4bIwOOrwi6RXuPWttNDjmxB458gbqjWnh9NWVG8JN/2F5W3 ACVQCdaLnsRy9bA4Q6CnbpjEkqgNJGNjiM0MIp9xGDdTJiobVb35DjI9al9H8N+n AOBeYnP2ubihep8uLpgjj6WpZlHkaV9RWtIPQH2WXU43Zk788E7rOV3w4PpoRWol hVn3NkzagM6I5AgmwXAp+mLhsztkdKhUmW3hf71nAlqO6FNQOaxFHFhGq8xZEM+B Jp8MBFjuaUpkl52cX3lpH715+YukUNTlC+hlDF91wZG9K0S+d0i8pzHnyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1r2X2YDCqzs6ZIz+GCDLw9eV9ZMB8GA1UdIwQY MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs1T5Act x07DxQecN5iQBpTnY44EAn8Fg7rQLriZr+qi3Jh/zOVQtCk7s6aGBK0L7pbqF1kz EuZd7RWWisU3ys/1zVLEUxKXlOBtULST0N49yHQQRlH4Pp8fPS07sN4ijajhcEsY 4/4ywqNpjqrzFNTLZGDfORxon7Ias2UWu0+uxfvVDVL6bkdQsSMq2IGavsQSOAB5 Ebvs9BhxK+Rm6xSRWPq7BT23cPCTd/MIB9NERGeuVRHjLXRKyJDDrX8xcX1UgxrC yUfeApWra2HXaFQZFtZL2rbcHdk+IedxC9S03D7tWChrWf859S69BGBiSqHVLhHp yCaxYmHzr8F42g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:23 2025 by rpki-client