This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft File: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json) Hash identifier: PZpkPEAa1gs5mOVdbVAbiOGDhVg1NPEnh7eK06RU0dw= Subject key identifier: BD:8D:72:47:9F:48:6B:26:97:E5:6B:E1:0E:7A:0B:72:5E:BE:C0:32 Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35 Certificate issuer: /CN=ee9f79ab1d59847ff1f2e961218c159af264d835 Certificate serial: 019AF12CCD24CED602C3580F6B290256F1FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft Manifest number: 107F Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=) 2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: k4UWZxC74r7ofmHhxt7Y5uAwBFTIomsrAP9XmEwnh7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cd:24:ce:d6:02:c3:58:0f:6b:29:02:56:f1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=bd8d72479f486b2697e56be10e7a0b725ebec032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:86:b7:cb:90:55:52:bb:21:ba:db:08:bc: 1e:02:4e:53:54:1b:b1:76:f8:22:b6:81:06:a6:75: d4:ca:b5:2a:2a:38:6e:88:d6:34:6e:7e:fe:56:eb: 67:c4:03:a2:97:c6:43:3e:f0:e1:87:b7:a1:dd:3a: 1e:de:56:17:6c:87:ec:1c:87:a0:c3:63:a9:14:e7: 96:0d:b6:e2:6f:d3:5e:5b:56:2e:11:dc:ff:74:b7: 6d:3c:72:da:1e:65:53:56:14:a6:fe:5b:a9:56:0d: 81:2c:a3:77:34:04:78:01:82:a7:2d:28:2c:1c:3b: 9b:ae:10:f8:a0:45:f7:9b:55:8b:57:29:d2:89:b1: 89:5d:89:b7:60:94:b5:11:02:c8:a2:df:09:67:89: 74:a4:e8:2b:79:87:35:71:5e:40:f8:55:a2:bb:bc: 53:8d:b3:e6:52:a0:62:b3:eb:c6:5f:1b:4d:ea:c3: d9:bf:c8:34:aa:df:e3:ca:c4:55:5b:51:15:7d:f3: 98:de:39:1c:ed:18:89:70:8e:2d:29:6d:1f:dd:83: 01:a2:b8:15:35:b0:1a:82:98:17:9c:62:8d:30:9a: d5:6d:82:c2:5e:be:14:48:1f:d8:19:4e:1a:45:bc: 6b:46:bf:16:11:c3:dd:b9:e5:8f:51:6b:00:49:88: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8D:72:47:9F:48:6B:26:97:E5:6B:E1:0E:7A:0B:72:5E:BE:C0:32 X509v3 Authority Key Identifier: keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:93:08:b6:da:d9:01:1f:22:c7:b8:8c:4c:b1:3d:d3:2b:83: 2c:e4:14:3e:b3:6c:ab:86:74:f0:62:14:89:59:26:c2:bc:63: 86:70:9d:a5:99:08:b2:fc:ce:d0:7b:3c:e4:35:e7:cd:57:61: 06:85:5a:e9:a8:b9:7a:30:17:e8:01:b8:72:bb:2e:b6:58:e1: 05:ec:29:f4:74:ba:20:1c:c4:c2:5e:6d:c2:07:8f:b3:36:4f: c5:7f:9a:98:a7:ae:e3:e6:62:1f:f4:6e:0f:f1:fc:7b:99:dd: 80:b9:6b:10:63:64:9a:32:1d:f6:2f:19:f6:03:53:01:d0:16: 15:a3:77:08:49:36:69:26:af:7c:11:4e:a8:9b:07:62:41:10: b3:e0:92:bf:71:59:bf:f9:ac:5f:8c:ac:7b:a1:0d:95:40:7a: 47:c0:e8:53:4c:2b:0b:6c:fc:74:0a:87:f3:0e:14:a6:06:21: 1c:d6:97:cd:e2:3e:7a:04:37:19:32:f1:7e:a8:72:86:9a:e7: 39:62:8a:b9:49:33:fa:5d:a0:81:6c:35:f8:71:a4:d1:4c:47: 19:82:bf:e5:65:78:02:fa:b1:25:e7:18:db:dc:d3:c7:3b:e1: 64:9a:49:c8:90:3a:05:14:af:cb:4f:38:d9:ab:4c:97:45:28: 9d:0b:8f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM0kztYCw1gPaykCVvH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOWY3OWFiMWQ1OTg0N2ZmMWYyZTk2MTIxOGMxNTlhZjI2 NGQ4MzUwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EyhiZDhkNzI0NzlmNDg2YjI2OTdlNTZiZTEwZTdhMGI3MjVlYmVjMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgiGt8uQVVK7IbrbCLweAk5TVBux dvgitoEGpnXUyrUqKjhuiNY0bn7+VutnxAOil8ZDPvDhh7eh3Toe3lYXbIfsHIeg w2OpFOeWDbbib9NeW1YuEdz/dLdtPHLaHmVTVhSm/lupVg2BLKN3NAR4AYKnLSgs HDubrhD4oEX3m1WLVynSibGJXYm3YJS1EQLIot8JZ4l0pOgreYc1cV5A+FWiu7xT jbPmUqBis+vGXxtN6sPZv8g0qt/jysRVW1EVffOY3jkc7RiJcI4tKW0f3YMBorgV NbAagpgXnGKNMJrVbYLCXr4USB/YGU4aRbxrRr8WEcPdueWPUWsASYg6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2NckefSGsml+Vr4Q56C3JevsAyMB8GA1UdIwQY MBaAFO6feasdWYR/8fLpYSGMFZryZNg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3A5NXF4MVpoSF94OHVsaElZd1ZtdkprMkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81N2NhNzYtMzQ1Ny00NmVkLTkzMjQt ZWE3YTE3MTI4YTA1LzEvN3A5NXF4MVpoSF94OHVsaElZd1ZtdkprMkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81N2NhNzYtMzQ1Ny00NmVkLTkzMjQtZWE3YTE3MTI4YTA1 LzEvN3A5NXF4MVpoSF94OHVsaElZd1ZtdkprMkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJMIttrZ AR8ix7iMTLE90yuDLOQUPrNsq4Z08GIUiVkmwrxjhnCdpZkIsvzO0Hs85DXnzVdh BoVa6ai5ejAX6AG4crsutljhBewp9HS6IBzEwl5twgePszZPxX+amKeu4+ZiH/Ru D/H8e5ndgLlrEGNkmjId9i8Z9gNTAdAWFaN3CEk2aSavfBFOqJsHYkEQs+CSv3FZ v/msX4yse6ENlUB6R8DoU0wrC2z8dAqH8w4UpgYhHNaXzeI+egQ3GTLxfqhyhprn OWKKuUkz+l2ggWw1+HGk0UxHGYK/5WV4AvqxJecY29zTxzvhZJpJyJA6BRSvy084 2atMl0UonQuPcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:33 2025 by rpki-client