This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft File: B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json) Hash identifier: MHs8YiIuGcsqoUOFS6lhUwgrygGzvBEzFyyGuwzvYME= Subject key identifier: 48:C3:7E:E8:A3:43:7D:31:29:D2:C8:51:4C:43:8C:4F:59:13:84:4C Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10 Certificate issuer: /CN=07b7a0c1babd621e8220d0d777877a844b413c10 Certificate serial: 019AF19B747393002200998A289375B85B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: 2KzU9lsGFUeZ5fvIDRJ2vNbvy6qhJiNidJxw62MyWRA=) 2: u07_9pXlmAHNvZNIHp40fo4J9fA.roa (hash: 204TNJbYlIMXBCvMgIFRQa54vmawR7NJf6FejBBRQA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:74:73:93:00:22:00:99:8a:28:93:75:b8:5b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=48c37ee8a3437d3129d2c8514c438c4f5913844c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:e2:6b:35:ba:0b:4f:a9:86:a5:d3:0b:d4: 6e:1f:3b:a8:c0:fd:08:56:8d:76:35:56:f9:ce:b9: 87:0c:ca:0d:70:92:39:17:84:46:20:5e:e2:9a:be: d5:57:85:20:b8:36:e7:b7:4a:39:3e:78:07:4a:43: a9:5e:8d:67:59:ca:cc:5f:ea:51:c2:ae:8c:32:19: 57:32:d4:1a:ad:aa:63:fa:03:ea:24:7e:3c:a4:f8: dc:f3:43:e1:6c:31:ba:82:ac:e6:99:a8:26:35:a5: 19:52:31:24:63:62:a0:56:63:47:2e:9d:09:63:1f: 92:7c:dc:b3:c1:47:79:6f:9b:f1:8d:4b:bb:be:de: 61:be:57:d4:d4:55:eb:45:b4:ee:bf:37:d2:a9:e5: ed:df:d2:a8:f6:2c:c8:2b:50:80:da:0c:e8:c9:91: 36:36:f6:5c:e9:c5:4c:1a:d9:4a:01:9d:ff:df:95: 8d:fd:76:17:35:34:c6:24:95:3e:2c:87:22:7e:62: 47:bc:5f:f0:c8:52:1f:0d:78:a2:f3:90:1d:44:7e: c7:6e:6e:71:5b:77:6c:5a:09:0f:b1:fb:8e:7b:18: 4c:99:ef:2f:cb:f9:51:c4:52:3e:ab:11:b5:1f:b6: 31:5d:e0:e9:75:be:f3:ee:0d:8d:3b:d6:37:be:26: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C3:7E:E8:A3:43:7D:31:29:D2:C8:51:4C:43:8C:4F:59:13:84:4C X509v3 Authority Key Identifier: keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e5:51:6c:e6:ac:df:f2:a0:02:22:e1:25:48:3c:9a:4b:b1: af:30:2d:cc:22:9f:a9:ca:02:4e:65:24:44:36:ae:bb:e1:73: cb:7d:27:d8:df:c5:3c:a2:ef:40:73:b6:e5:90:eb:02:b3:d0: f0:41:bf:63:53:f9:7d:ff:b2:f9:82:18:c4:a2:ff:b5:df:e3: 67:7d:20:7e:14:fb:4c:7d:73:81:63:fa:45:57:17:02:9c:53: 5c:94:d2:e1:60:55:e7:06:35:de:54:e4:d2:b0:02:94:e0:e1: a0:a7:a7:43:1d:19:63:71:68:ef:96:d8:5b:77:e5:cb:37:b0: 27:18:83:6b:b1:4e:a1:18:f7:2b:c7:59:be:5f:cc:68:71:15: d8:87:07:d2:3f:ac:85:d7:67:13:db:88:8f:0c:58:02:be:11: 2c:24:dd:a1:8f:0d:9b:48:8d:8e:ed:9a:83:5a:08:a6:fa:45: 0b:fe:15:30:e2:9e:4e:6f:f7:78:9c:78:d8:b1:1b:4a:1a:66: ae:12:2e:9a:1a:8d:82:5a:57:f9:57:7e:c7:7e:d2:dd:04:54: 59:a8:1e:1d:a3:a1:fb:cd:83:22:6a:b0:ae:78:16:9f:3d:82: e6:1f:93:fe:42:3a:80:12:2b:fd:89:b5:80:c9:3f:87:e8:68: 3b:0d:35:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3RzkwAiAJmKKJN1uFswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YjdhMGMxYmFiZDYyMWU4MjIwZDBkNzc3ODc3YTg0NGI0 MTNjMTAwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD Eyg0OGMzN2VlOGEzNDM3ZDMxMjlkMmM4NTE0YzQzOGM0ZjU5MTM4NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ7iazW6C0+phqXTC9RuHzuowP0I Vo12NVb5zrmHDMoNcJI5F4RGIF7imr7VV4UguDbnt0o5PngHSkOpXo1nWcrMX+pR wq6MMhlXMtQarapj+gPqJH48pPjc80PhbDG6gqzmmagmNaUZUjEkY2KgVmNHLp0J Yx+SfNyzwUd5b5vxjUu7vt5hvlfU1FXrRbTuvzfSqeXt39Ko9izIK1CA2gzoyZE2 NvZc6cVMGtlKAZ3/35WN/XYXNTTGJJU+LIcifmJHvF/wyFIfDXii85AdRH7Hbm5x W3dsWgkPsfuOexhMme8vy/lRxFI+qxG1H7YxXeDpdb7z7g2NO9Y3viYFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjDfuijQ30xKdLIUUxDjE9ZE4RMMB8GA1UdIwQY MBaAFAe3oMG6vWIegiDQ13eHeoRLQTwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYt ZmI5MjE3MDI4YzVjLzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYtZmI5MjE3MDI4YzVj LzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+VRbOas 3/KgAiLhJUg8mkuxrzAtzCKfqcoCTmUkRDauu+Fzy30n2N/FPKLvQHO25ZDrArPQ 8EG/Y1P5ff+y+YIYxKL/td/jZ30gfhT7TH1zgWP6RVcXApxTXJTS4WBV5wY13lTk 0rAClODhoKenQx0ZY3Fo75bYW3flyzewJxiDa7FOoRj3K8dZvl/MaHEV2IcH0j+s hddnE9uIjwxYAr4RLCTdoY8Nm0iNju2ag1oIpvpFC/4VMOKeTm/3eJx42LEbShpm rhIumhqNglpX+Vd+x37S3QRUWageHaOh+82DImqwrngWnz2C5h+T/kI6gBIr/Ym1 gMk/h+hoOw01kg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:25 2025 by rpki-client