This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json) Hash identifier: xZaqUhlrB9oTSDW4o68PDmYIwlvfQ7vwyzF9jKjN/l0= Subject key identifier: A5:50:02:73:C7:7B:56:75:75:5B:1F:BA:0A:BC:89:4D:35:89:8C:98 Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7 Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7 Certificate serial: 019AF2400CF76BFBFE32EC9B5F93C9432032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft Manifest number: 0BC5 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: XFPsu2QwJPo4GaFmirLyVpsKnXl2ID1UWpQqaIyKvP4=) 2: UVCnnFZZjUR9w6yDQp9NPqjljfo.roa (hash: f6rKRc94PJnhp1qRU3+PGFxmR5pPPhe+G7K5mMW7jGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0c:f7:6b:fb:fe:32:ec:9b:5f:93:c9:43:20:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=a5500273c77b5675755b1fba0abc894d35898c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:be:88:ea:e5:3b:67:72:b8:c6:c7:d5:7d: ff:40:04:05:de:14:5e:12:47:c9:b5:b1:9f:a4:54: 2f:4c:d2:b0:45:13:85:6b:91:34:4e:0b:2c:d9:b7: 94:bd:e7:8b:cc:84:2b:5f:27:a8:a6:06:69:68:08: 63:54:36:65:e1:b3:52:5a:f5:66:cd:13:a6:b7:5b: 52:2b:91:ad:80:e7:eb:a0:64:a8:97:19:70:1a:7f: 5b:9c:42:24:44:b2:55:ad:3a:fc:d7:d9:89:8c:c5: ab:07:80:8d:e8:92:97:a6:49:16:a1:65:7c:db:73: b7:33:7b:89:89:2b:b6:3c:50:83:da:7e:cc:e4:3e: 19:c2:75:56:4e:c2:2f:03:c2:43:9b:07:80:29:31: 3c:fe:5d:87:ff:4d:a0:16:c2:94:ac:dd:a5:6f:10: 5e:94:fa:07:90:7b:e0:2c:5b:db:88:f1:c0:62:d7: a3:42:28:77:28:b1:9a:cc:c5:11:05:7c:28:1c:06: cd:5f:eb:7a:7c:16:54:04:38:2b:21:35:7d:2e:5d: 7e:06:5a:7c:36:98:fa:38:d4:06:a3:5f:3c:bf:22: df:64:c1:63:15:aa:bb:9d:34:2c:93:9b:ac:cc:1e: 2f:55:cc:3a:80:ee:12:b0:ac:c0:20:39:ec:b0:7e: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:50:02:73:C7:7B:56:75:75:5B:1F:BA:0A:BC:89:4D:35:89:8C:98 X509v3 Authority Key Identifier: keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3c:2b:5e:b3:3e:c0:2b:d8:59:f8:d4:84:e6:8c:dd:7c:a6: 7f:65:c1:1b:a5:47:c8:3c:17:65:1d:e1:83:28:c1:2a:e2:c2: 6f:68:fe:2b:22:d9:b1:83:73:d0:d1:2f:7d:ac:59:8c:50:a1: 23:57:9a:af:b8:83:d1:11:7b:82:fa:d1:c1:d2:c0:36:ed:8a: 20:15:83:01:44:08:86:60:17:af:08:47:a0:a1:86:a3:ce:97: a2:98:77:1b:9b:e9:59:46:46:06:43:b3:31:c9:f3:fc:a7:6f: 46:68:3b:28:ae:ac:a8:0d:6b:9a:fc:e9:2a:91:4a:27:86:f4: 26:47:15:b6:72:94:3f:24:81:2c:da:51:4e:64:79:b0:f3:d2: b6:d8:a7:c6:45:ab:2d:84:9c:14:af:97:e8:f4:ed:3c:74:47: b3:ac:6d:58:fe:07:70:a4:f2:f8:0b:a5:bd:58:e0:11:0c:32: 32:a1:57:59:d5:ab:41:e6:01:4c:f6:16:ae:33:12:d9:5e:c2: 66:47:44:65:a5:3f:0b:d8:e1:ab:f5:de:d1:d0:e8:fd:c7:00: 4c:14:58:30:4b:0c:21:65:81:4a:df:c9:4e:22:01:41:a5:bf: 06:31:cc:e8:7b:bd:90:ce:0b:9b:62:8c:45:65:d4:a3:40:40: d2:1d:f8:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAz3a/v+MuybX5PJQyAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZWJhMmU2NTk3OTRiMTIyMTVkZjFmYThhYmUzZmNiZDY2 ODZkZjcwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EyhhNTUwMDI3M2M3N2I1Njc1NzU1YjFmYmEwYWJjODk0ZDM1ODk4Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+q+iOrlO2dyuMbH1X3/QAQF3hRe EkfJtbGfpFQvTNKwRROFa5E0Tgss2beUveeLzIQrXyeopgZpaAhjVDZl4bNSWvVm zROmt1tSK5GtgOfroGSolxlwGn9bnEIkRLJVrTr819mJjMWrB4CN6JKXpkkWoWV8 23O3M3uJiSu2PFCD2n7M5D4ZwnVWTsIvA8JDmweAKTE8/l2H/02gFsKUrN2lbxBe lPoHkHvgLFvbiPHAYtejQih3KLGazMURBXwoHAbNX+t6fBZUBDgrITV9Ll1+Blp8 Npj6ONQGo188vyLfZMFjFaq7nTQsk5uszB4vVcw6gO4SsKzAIDnssH6bnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVQAnPHe1Z1dVsfugq8iU01iYyYMB8GA1UdIwQY MBaAFOzrouZZeUsSIV3x+oq+P8vWaG33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2Qt ZWJlMmRjNDAxNjE2LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2QtZWJlMmRjNDAxNjE2 LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTwrXrM+ wCvYWfjUhOaM3Xymf2XBG6VHyDwXZR3hgyjBKuLCb2j+KyLZsYNz0NEvfaxZjFCh I1ear7iD0RF7gvrRwdLANu2KIBWDAUQIhmAXrwhHoKGGo86Xoph3G5vpWUZGBkOz Mcnz/KdvRmg7KK6sqA1rmvzpKpFKJ4b0JkcVtnKUPySBLNpRTmR5sPPSttinxkWr LYScFK+X6PTtPHRHs6xtWP4HcKTy+AulvVjgEQwyMqFXWdWrQeYBTPYWrjMS2V7C ZkdEZaU/C9jhq/Xe0dDo/ccATBRYMEsMIWWBSt/JTiIBQaW/BjHM6Hu9kM4Lm2KM RWXUo0BA0h34Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:24 2025 by rpki-client