This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json) Hash identifier: MSHS6VoyRoIix6iNEIYk+BZYHjjf8hlshxQzw8D4E8o= Subject key identifier: EA:B9:A5:10:45:1C:EC:D5:4E:13:BA:32:4A:ED:4D:59:A4:95:E3:D5 Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5 Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5 Certificate serial: 019AF19AED34A60290734D4EA10E6743AD94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft Manifest number: 0C40 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: myICIFDU4prBQFEg6KaNvmZrk35NQi9za7yvEb4psI0=) 2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ed:34:a6:02:90:73:4d:4e:a1:0e:67:43:ad:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=eab9a510451cecd54e13ba324aed4d59a495e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:30:90:97:25:cb:1d:b5:60:91:5a:8e:ed: 4a:a8:bd:bf:73:e5:2a:d5:f1:8d:57:54:fc:ec:59: 39:e1:5a:e7:cd:8c:11:cc:60:c3:cc:e3:f5:f9:e7: 4e:fa:64:72:f0:97:62:08:16:4d:22:ed:82:33:c7: 4f:8c:60:1f:8a:3e:aa:9b:64:58:9c:f8:56:12:00: 8f:7e:eb:d0:f2:63:c8:8b:b1:1f:62:f3:75:9f:98: e4:af:f4:dd:25:58:b6:fc:20:c1:4f:01:b4:cf:57: 0d:af:b4:49:a9:5f:7d:90:a0:ae:f0:e9:da:31:c6: 12:b6:c5:0c:2b:7a:31:e5:87:96:4c:f1:ae:18:a6: d0:4f:5a:bc:3c:72:3f:48:ce:5c:ea:01:2f:8f:d8: 34:3a:ce:29:89:5e:31:11:90:4e:dc:90:83:1a:f4: 31:8e:bb:57:a1:01:72:5f:b6:76:c3:41:58:08:52: 6a:5c:fb:94:ad:31:9a:55:91:0b:ac:72:3a:c9:40: f9:72:ba:5b:12:35:05:25:b7:36:06:b1:9e:9f:f9: d8:cf:d1:25:2b:22:61:18:1e:7e:c8:b4:16:32:fe: ed:90:5e:ff:4f:9d:c8:4d:0f:14:50:72:c8:95:de: ba:c4:0b:f8:c1:69:61:bc:f1:b0:ff:2a:9c:81:68: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B9:A5:10:45:1C:EC:D5:4E:13:BA:32:4A:ED:4D:59:A4:95:E3:D5 X509v3 Authority Key Identifier: keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f6:52:23:03:63:f5:60:c0:1a:98:f9:3d:58:f3:72:73:0d: 11:99:9c:a5:06:ac:c9:8e:04:ae:a3:99:84:93:90:90:95:a4: 42:4e:96:5c:ae:ae:d3:8d:03:92:c5:c8:af:60:b3:89:bf:57: ab:c0:e5:44:64:6d:e1:02:2f:41:e6:bf:84:8f:0f:58:ee:f9: b6:7f:f0:bc:f9:fb:d7:70:47:26:58:f7:8e:a8:ce:36:04:75: 65:f3:9a:3d:fd:60:0b:27:42:70:f8:1d:16:41:7a:64:ee:2b: 2e:af:1d:3c:0a:3d:75:60:b6:58:c4:4d:f2:f8:82:94:f3:c8: 7c:91:0e:74:be:56:c9:4f:43:64:aa:d6:17:e3:14:06:d2:32: 94:9a:ef:af:63:83:48:92:34:67:30:3b:fc:ea:15:b6:94:3c: 72:e2:7f:d8:e0:20:02:1f:f3:47:51:6c:78:b1:83:80:d4:fe: 4f:20:86:7c:53:7e:04:14:b2:94:d7:db:82:c0:f4:32:0d:78: 3d:fe:0c:9f:89:3b:0a:a4:b6:75:cf:c1:19:47:e4:be:4f:c5: 83:3e:a7:24:c1:5c:dd:e5:1b:c4:cd:f4:0c:b0:8f:f5:08:37: df:f8:fd:ef:86:66:64:97:97:12:fc:70:0f:f0:bb:9e:91:c1: a1:31:9d:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu00pgKQc01OoQ5nQ62UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTJhMTIyZGNmZmMyMjJmYTk5ODRiZjE2YjZmOWYxM2Y3 OGE1YTUwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD EyhlYWI5YTUxMDQ1MWNlY2Q1NGUxM2JhMzI0YWVkNGQ1OWE0OTVlM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P8wkJclyx21YJFaju1KqL2/c+Uq 1fGNV1T87Fk54VrnzYwRzGDDzOP1+edO+mRy8JdiCBZNIu2CM8dPjGAfij6qm2RY nPhWEgCPfuvQ8mPIi7EfYvN1n5jkr/TdJVi2/CDBTwG0z1cNr7RJqV99kKCu8Ona McYStsUMK3ox5YeWTPGuGKbQT1q8PHI/SM5c6gEvj9g0Os4piV4xEZBO3JCDGvQx jrtXoQFyX7Z2w0FYCFJqXPuUrTGaVZELrHI6yUD5crpbEjUFJbc2BrGen/nYz9El KyJhGB5+yLQWMv7tkF7/T53ITQ8UUHLIld66xAv4wWlhvPGw/yqcgWinyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq5pRBFHOzVThO6MkrtTVmklePVMB8GA1UdIwQY MBaAFO3ioSLc/8Ii+pmEvxa2+fE/eKWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgt MjM1OWNiNjBhNTc0LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgtMjM1OWNiNjBhNTc0 LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvZSIwNj 9WDAGpj5PVjzcnMNEZmcpQasyY4ErqOZhJOQkJWkQk6WXK6u040DksXIr2Czib9X q8DlRGRt4QIvQea/hI8PWO75tn/wvPn713BHJlj3jqjONgR1ZfOaPf1gCydCcPgd FkF6ZO4rLq8dPAo9dWC2WMRN8viClPPIfJEOdL5WyU9DZKrWF+MUBtIylJrvr2OD SJI0ZzA7/OoVtpQ8cuJ/2OAgAh/zR1FseLGDgNT+TyCGfFN+BBSylNfbgsD0Mg14 Pf4Mn4k7CqS2dc/BGUfkvk/Fgz6nJMFc3eUbxM30DLCP9Qg33/j974ZmZJeXEvxw D/C7npHBoTGdvA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:14 2025 by rpki-client