This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json) Hash identifier: l4aGdT3FQOtW4oHOH6+D7ArjhPfmzHnCEmIgSv91ROE= Subject key identifier: 02:F7:A2:74:1D:1C:81:A8:4D:5A:6E:95:85:68:E3:C2:54:A1:F3:7E Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43 Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043 Certificate serial: 019AF16448FAFD3623EBA684A38F8CE941F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft Manifest number: 0DE5 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: FtP4PynqHxFeucj96e2Gz3snRiOHGyyPHIC0WNQ1mHk=) 2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:48:fa:fd:36:23:eb:a6:84:a3:8f:8c:e9:41:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043 Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=02f7a2741d1c81a84d5a6e958568e3c254a1f37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:30:9f:2f:43:a7:c8:5d:42:e8:c2:ae:e2: 7e:0a:8c:f1:c8:5b:24:49:19:40:84:36:54:c0:bc: 37:44:29:e0:c3:41:c4:1c:e5:06:48:59:92:59:92: 0e:97:76:3e:c2:79:e2:57:be:04:b3:ff:a9:ab:2c: 16:c2:55:7f:3a:c3:e4:18:7c:1a:94:2b:6d:ea:bc: e4:01:68:b4:9e:21:f9:d7:e0:71:09:01:88:41:4c: 11:95:69:73:9f:54:56:1b:51:32:10:63:0e:44:54: a1:27:b2:2c:59:68:d5:46:b0:f2:75:59:3b:48:18: 52:85:12:07:97:9b:30:44:81:52:92:d5:b0:4b:24: 19:31:c5:2a:20:27:43:3b:b5:ed:86:07:f7:8a:d9: d6:bc:4f:17:12:02:50:74:19:49:53:9b:a7:8f:e9: 6d:c0:bc:dd:3e:a9:1b:c5:8a:73:d5:85:20:16:ee: 3e:54:d2:fb:d6:ca:03:a8:a6:9b:7e:fe:2d:fb:fe: 43:52:35:6b:8b:fa:65:e5:82:39:d7:25:07:67:8b: b9:a4:e2:5d:45:a8:83:d2:c6:42:78:e8:fd:b4:c3: 5e:92:d6:43:88:d4:48:58:e5:7d:4b:e4:c0:a2:d7: 53:48:82:39:0c:62:69:0c:cd:a5:73:dc:e5:dd:ac: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:A2:74:1D:1C:81:A8:4D:5A:6E:95:85:68:E3:C2:54:A1:F3:7E X509v3 Authority Key Identifier: keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a2:7a:ef:a4:0b:6f:48:dd:86:01:dd:2c:7b:45:98:4d:15: 7b:5c:75:f3:83:ae:3b:a3:7f:dd:7c:d1:e6:c0:76:62:15:9b: f8:48:96:56:81:1c:58:19:75:42:7a:79:2f:70:c2:5c:ab:83: 1a:f9:64:98:76:20:37:d1:6e:c2:64:7f:1c:f9:24:50:c6:53: eb:f0:f9:82:a7:6f:c4:c8:68:62:a9:bc:16:92:d9:07:37:fd: 02:2b:2f:21:12:b6:c6:80:fa:11:99:12:d6:a4:c7:4d:99:e3: bb:b1:fb:6d:21:a9:2d:f5:3a:c1:93:2c:8c:90:87:53:02:b4: 50:b1:57:20:10:26:88:42:d8:2b:75:37:c5:10:78:fb:99:b8: 99:9b:06:88:77:d2:d7:20:a3:ff:c7:dd:29:29:38:b8:72:30: be:f1:42:d9:b0:54:6b:69:a4:26:cd:18:b2:8e:ed:3f:58:11: cf:66:76:1b:65:b6:a8:5f:85:38:3d:b1:83:1e:84:8f:2c:6e: 4c:b6:5f:a8:7f:2d:4b:02:9a:c8:1b:73:7e:3b:05:b9:5b:1b: 0c:a5:31:7f:e3:7c:00:bf:2c:6c:4c:57:2f:75:66:81:bf:2e: e3:6b:c2:1e:c0:d8:68:4b:18:06:a3:90:d9:21:28:02:44:cb: 32:c3:a2:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEj6/TYj66aEo4+M6UHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2 MmMwNDMwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EygwMmY3YTI3NDFkMWM4MWE4NGQ1YTZlOTU4NTY4ZTNjMjU0YTFmMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcIwny9Dp8hdQujCruJ+CozxyFsk SRlAhDZUwLw3RCngw0HEHOUGSFmSWZIOl3Y+wnniV74Es/+pqywWwlV/OsPkGHwa lCtt6rzkAWi0niH51+BxCQGIQUwRlWlzn1RWG1EyEGMORFShJ7IsWWjVRrDydVk7 SBhShRIHl5swRIFSktWwSyQZMcUqICdDO7Xthgf3itnWvE8XEgJQdBlJU5unj+lt wLzdPqkbxYpz1YUgFu4+VNL71soDqKabfv4t+/5DUjVri/pl5YI51yUHZ4u5pOJd RaiD0sZCeOj9tMNektZDiNRIWOV9S+TAotdTSII5DGJpDM2lc9zl3ayLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL3onQdHIGoTVpulYVo48JUofN+MB8GA1UdIwQY MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt YTI2NWYzODA5M2EwLzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKJ676QL b0jdhgHdLHtFmE0Ve1x184OuO6N/3XzR5sB2YhWb+EiWVoEcWBl1Qnp5L3DCXKuD GvlkmHYgN9FuwmR/HPkkUMZT6/D5gqdvxMhoYqm8FpLZBzf9AisvIRK2xoD6EZkS 1qTHTZnju7H7bSGpLfU6wZMsjJCHUwK0ULFXIBAmiELYK3U3xRB4+5m4mZsGiHfS 1yCj/8fdKSk4uHIwvvFC2bBUa2mkJs0Yso7tP1gRz2Z2G2W2qF+FOD2xgx6Ejyxu TLZfqH8tSwKayBtzfjsFuVsbDKUxf+N8AL8sbExXL3Vmgb8u42vCHsDYaEsYBqOQ 2SEoAkTLMsOiQw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:29 2025 by rpki-client