This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json) Hash identifier: 87g3LMN2KIYbe1U6TeE3eXgJV1UzOZ7fTcNWyvhmbIc= Subject key identifier: AF:CE:FE:A9:28:C6:96:DA:FF:A7:AD:DD:91:75:12:86:EC:ED:A7:12 Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019AF19B05430AC08CF65602E90753D5C942 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft Manifest number: 177D Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: ymsst6aZaq/bwfdlQGDJ7f37ODfJsxmpmX0DcFS0u8g=) 2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=) 3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=) 4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=) 5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=) 6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=) 7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=) 8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:05:43:0a:c0:8c:f6:56:02:e9:07:53:d5:c9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=afcefea928c696daffa7addd91751286eceda712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:95:5b:90:9f:cc:f1:96:37:2b:e1:f7:86: c0:3c:d4:40:2f:70:1a:bb:18:7b:6a:ee:6b:56:c4: 05:86:1a:0e:88:4e:08:ef:5b:c5:5f:ba:aa:e2:cb: eb:c5:0a:5e:d4:d7:5f:09:03:4b:b6:f6:2d:f7:06: 7e:14:cb:57:6e:0a:42:0b:fa:e1:8a:8a:aa:38:02: 7d:01:49:5b:57:3b:22:bb:32:49:57:43:19:d5:90: 24:b7:95:8c:e4:5c:cb:b0:e7:72:ec:2a:26:55:b0: e2:b9:0c:a2:b8:8d:e9:3c:36:1a:3b:85:67:b2:2b: ea:cc:5c:52:7f:72:7c:df:6e:3f:ab:da:80:2d:ef: a0:a8:17:9c:ee:df:7c:f9:9a:20:f7:82:33:11:26: 5c:f7:5a:e7:de:d8:7a:3b:34:28:e3:87:6b:ee:a1: 67:8a:33:1a:f5:66:d9:70:58:62:66:d7:90:ae:39: 29:60:9e:a7:0f:95:01:ee:91:0c:6c:7a:a2:46:f8: 79:b5:f4:ac:dd:94:37:37:80:20:f2:a9:b4:e3:58: 66:e5:d1:a5:34:0c:78:16:b1:5f:0a:73:1d:5e:81: c1:9e:a6:f9:0d:b1:77:d3:89:52:b9:f5:d5:d3:94: e0:0d:39:50:86:86:67:90:cb:ef:70:98:8c:88:35: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CE:FE:A9:28:C6:96:DA:FF:A7:AD:DD:91:75:12:86:EC:ED:A7:12 X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bd:2e:7f:c5:db:c0:3f:16:d4:59:05:09:a4:3d:05:33:70: 33:3e:1c:fc:a1:d9:41:d9:a2:6f:89:6a:9d:64:64:e4:e5:03: 85:5e:72:3d:f3:ad:b0:28:b9:b0:6d:b5:b1:e9:2d:10:8b:7d: ec:35:3b:50:51:4d:d2:b1:8f:ae:e7:77:0e:c0:9a:c4:b4:46: ad:65:16:6e:15:ba:bc:f6:63:9e:1f:24:f1:78:f6:b5:46:e0: 42:be:c5:a4:18:70:1e:6d:2c:89:30:26:59:ba:e2:02:81:17: 57:e8:a1:2e:f3:db:55:14:c0:8e:13:2e:b1:50:83:a6:e9:82: 04:54:87:90:e5:7f:69:1b:d6:82:37:6f:84:c8:cc:2b:83:34: ca:8f:a9:f2:82:2c:5b:65:5d:74:1d:0c:a6:80:c7:55:90:47: 52:9e:ab:1a:6b:d2:89:8d:21:20:70:c2:8f:cd:15:8a:39:b3: 4a:33:04:8c:00:88:cd:79:23:91:16:52:e0:e6:48:46:80:02: cf:f4:d9:06:64:ca:2a:f4:20:0a:d3:0c:a8:1b:12:85:b7:a7: 47:fc:73:a3:f0:da:08:82:6e:5c:6f:ff:77:bf:c4:64:85:db: b8:b6:d6:ca:ef:70:27:04:dd:77:e8:56:37:52:c7:85:da:d6: 26:53:71:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwVDCsCM9lYC6QdT1clCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EyhhZmNlZmVhOTI4YzY5NmRhZmZhN2FkZGQ5MTc1MTI4NmVjZWRhNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV2VW5CfzPGWNyvh94bAPNRAL3Aa uxh7au5rVsQFhhoOiE4I71vFX7qq4svrxQpe1NdfCQNLtvYt9wZ+FMtXbgpCC/rh ioqqOAJ9AUlbVzsiuzJJV0MZ1ZAkt5WM5FzLsOdy7ComVbDiuQyiuI3pPDYaO4Vn sivqzFxSf3J8324/q9qALe+gqBec7t98+Zog94IzESZc91rn3th6OzQo44dr7qFn ijMa9WbZcFhiZteQrjkpYJ6nD5UB7pEMbHqiRvh5tfSs3ZQ3N4Ag8qm041hm5dGl NAx4FrFfCnMdXoHBnqb5DbF304lSufXV05TgDTlQhoZnkMvvcJiMiDURIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/O/qkoxpba/6et3ZF1Eobs7acSMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr0uf8Xb wD8W1FkFCaQ9BTNwMz4c/KHZQdmib4lqnWRk5OUDhV5yPfOtsCi5sG21sektEIt9 7DU7UFFN0rGPrud3DsCaxLRGrWUWbhW6vPZjnh8k8Xj2tUbgQr7FpBhwHm0siTAm WbriAoEXV+ihLvPbVRTAjhMusVCDpumCBFSHkOV/aRvWgjdvhMjMK4M0yo+p8oIs W2VddB0MpoDHVZBHUp6rGmvSiY0hIHDCj80VijmzSjMEjACIzXkjkRZS4OZIRoAC z/TZBmTKKvQgCtMMqBsShbenR/xzo/DaCIJuXG//d7/EZIXbuLbWyu9wJwTdd+hW N1LHhdrWJlNxVw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:27 2025 by rpki-client