This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json) Hash identifier: nEFzSwKCRBTiVM1AAlruA4KHgQAk5OnpCDTuUamLr9w= Subject key identifier: 34:72:B0:33:07:2E:37:FF:11:D3:5F:EB:CE:F9:1A:B9:40:30:CA:CA Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9 Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9 Certificate serial: 019AF2772ABCAF2A6278F65FD6DF3511AC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: I7oO7RY4p+x1gVcMvNxuEP6j/4/tl/BaZm64vwEVQT4=) 2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2a:bc:af:2a:62:78:f6:5f:d6:df:35:11:ac:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=3472b033072e37ff11d35febcef91ab94030caca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:a0:c1:49:54:4a:b7:89:0b:0b:73:d1:11: 64:bf:fa:0b:87:50:3e:79:2a:73:17:00:43:e7:81: 99:d5:f2:e0:6a:b5:de:a2:f7:b0:20:07:8d:f3:d0: b7:39:f8:22:73:92:ca:a4:98:62:3b:d4:2a:bc:cd: 28:ae:c5:86:87:cb:92:45:52:9e:e4:f7:94:c6:71: 29:76:32:d3:a0:a8:a5:89:c2:7d:1a:32:d4:70:18: 18:0b:b0:50:e8:7b:69:c3:e7:42:38:35:63:0c:f9: 20:70:9c:80:3b:2e:9d:f0:1b:53:bd:a2:b3:0f:17: 1c:9b:b2:2d:5d:a6:5f:4a:77:00:57:dc:8d:f4:0a: 90:98:89:7a:6a:16:c4:f2:46:9b:e7:e3:16:69:45: 55:a5:0f:1a:d8:52:8c:56:0e:83:94:fe:0c:ab:36: 8a:ef:b9:57:94:d5:9a:3b:fd:cc:c7:cf:90:bd:e5: af:49:d4:00:64:2c:3b:ca:0a:57:49:55:a9:f6:8d: 35:00:98:23:90:ef:e5:27:99:97:e2:af:4f:6d:c8: d7:03:f3:38:ec:3c:b4:a2:c2:09:a3:5a:9a:28:f6: 32:9c:98:e8:3f:26:82:98:1c:be:1e:a1:dd:b9:e0: ff:de:b0:8c:13:6f:88:db:11:04:06:ea:df:38:b1: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:B0:33:07:2E:37:FF:11:D3:5F:EB:CE:F9:1A:B9:40:30:CA:CA X509v3 Authority Key Identifier: keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:26:87:ae:98:2c:f9:57:f9:6b:10:2c:28:5b:70:5a:cd:99: 36:c8:45:0b:53:4d:c1:7d:87:58:bb:ee:45:29:3e:a5:19:7d: 9c:20:7d:35:b8:c6:71:98:ea:ba:ba:0e:9b:d7:56:7f:0a:d6: 6f:15:24:9b:34:8a:38:1a:ce:8d:d7:ab:48:17:a3:bd:24:db: 4a:7d:e5:cd:dc:d3:50:74:bf:cc:aa:40:24:51:27:5c:c0:dc: 9a:f4:13:bf:bd:63:62:77:6c:c3:63:a4:7b:90:65:6e:27:17: 1d:ad:d5:62:78:e1:c1:6d:1f:c5:ea:67:16:c3:fd:39:14:80: c4:2f:88:c2:3c:60:4f:8b:c6:ee:eb:c3:01:5b:13:8a:9b:9b: ae:ba:f0:e6:5c:3c:af:af:26:12:03:12:73:cb:53:64:ee:20: 93:37:b1:77:50:9c:96:b9:fc:4d:4c:50:ab:4e:aa:a6:e9:35: 63:92:5e:41:c8:12:dd:d3:41:33:fb:46:b7:95:08:6c:ae:9b: 2d:0a:43:37:9f:d6:cd:9f:10:37:b5:77:9c:a6:3b:17:df:1d: 5d:57:2c:08:72:16:77:a4:cc:c4:52:10:26:54:1a:97:a3:95: 09:ea:f2:46:36:3a:44:68:04:b3:cf:1a:d1:f4:02:44:e9:ed: ce:74:d9:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyq8rypiePZf1t81EaxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjRhMjc4NzIyMjU5N2YxNmQxZWU0YzQzNWJlODY5MGYx MDMzZDkwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD EygzNDcyYjAzMzA3MmUzN2ZmMTFkMzVmZWJjZWY5MWFiOTQwMzBjYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPSgwUlUSreJCwtz0RFkv/oLh1A+ eSpzFwBD54GZ1fLgarXeovewIAeN89C3Ofgic5LKpJhiO9QqvM0orsWGh8uSRVKe 5PeUxnEpdjLToKilicJ9GjLUcBgYC7BQ6Htpw+dCODVjDPkgcJyAOy6d8BtTvaKz Dxccm7ItXaZfSncAV9yN9AqQmIl6ahbE8kab5+MWaUVVpQ8a2FKMVg6DlP4MqzaK 77lXlNWaO/3Mx8+QveWvSdQAZCw7ygpXSVWp9o01AJgjkO/lJ5mX4q9PbcjXA/M4 7Dy0osIJo1qaKPYynJjoPyaCmBy+HqHdueD/3rCME2+I2xEEBurfOLHuaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRysDMHLjf/EdNf6875GrlAMMrKMB8GA1UdIwQY MBaAFNO0onhyIll/FtHuTENb6GkPEDPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zOWVjOGMtNDg0MS00ZGQxLTgwOGQt N2JlODczNDE3ZDc2LzEvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zOWVjOGMtNDg0MS00ZGQxLTgwOGQtN2JlODczNDE3ZDc2 LzEvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiaHrpgs +Vf5axAsKFtwWs2ZNshFC1NNwX2HWLvuRSk+pRl9nCB9NbjGcZjquroOm9dWfwrW bxUkmzSKOBrOjderSBejvSTbSn3lzdzTUHS/zKpAJFEnXMDcmvQTv71jYndsw2Ok e5BlbicXHa3VYnjhwW0fxepnFsP9ORSAxC+IwjxgT4vG7uvDAVsTipubrrrw5lw8 r68mEgMSc8tTZO4gkzexd1Cclrn8TUxQq06qpuk1Y5JeQcgS3dNBM/tGt5UIbK6b LQpDN5/WzZ8QN7V3nKY7F98dXVcsCHIWd6TMxFIQJlQal6OVCeryRjY6RGgEs88a 0fQCROntznTZtw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:48 2025 by rpki-client