This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json) Hash identifier: +eRPsCoAuonPhDTHcY0zz3qhs9STsLV2P+an9jacckc= Subject key identifier: 0F:6D:DE:7F:5D:67:FB:96:BD:4E:4A:FE:90:E2:EE:1A:76:43:EE:59 Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Certificate serial: 019AF653B53059FEB1989831C8DCBDE728EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft Manifest number: 0E4B Signing time: Sun 07 Dec 2025 01:01:12 +0000 Manifest this update: Sun 07 Dec 2025 01:01:12 +0000 Manifest next update: Mon 08 Dec 2025 01:01:12 +0000 Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: zxkJ7xcByP3v3iFPQlDqRm3GPwetK4MwZjfClw6HJmU=) 2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:b5:30:59:fe:b1:98:98:31:c8:dc:bd:e7:28:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Validity Not Before: Dec 7 01:01:12 2025 GMT Not After : Dec 8 01:01:12 2025 GMT Subject: CN=0f6dde7f5d67fb96bd4e4afe90e2ee1a7643ee59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:9d:60:09:8e:e5:84:67:12:58:30:08:92: ca:27:8b:d3:2c:c2:6d:17:d0:a1:bf:f9:d8:9d:33: 94:46:6e:66:7c:9a:84:6a:b9:4a:4c:0f:85:c8:33: 8d:2e:dd:b8:ac:7f:da:bd:56:2c:13:d3:ff:50:c4: 54:0a:ab:c1:1e:c1:91:00:68:0f:09:f7:19:f3:9e: d1:5f:d3:c3:41:0a:b0:30:a1:31:ae:24:84:86:30: 98:c8:36:b9:03:4b:a4:73:88:f2:0e:3a:60:26:1d: e0:bb:d7:44:6c:7f:10:20:65:69:0f:38:7c:61:83: 33:7e:da:79:29:35:3f:8a:59:8a:56:40:b4:33:1f: b0:51:81:97:d5:4b:8a:0f:2f:5a:78:30:60:e3:bf: 01:0e:e7:db:65:be:fe:bb:0f:64:5a:d1:a5:cf:95: 83:64:f1:8e:6b:1f:d9:e3:e3:4b:d3:04:00:ef:0c: ed:ea:41:d7:5d:b0:ab:24:a0:7d:9d:13:e4:15:4f: fa:ee:49:7f:7d:03:34:02:42:87:f4:5c:9b:27:84: 60:24:a6:b3:33:91:8a:14:99:ec:45:74:ee:2b:82: 5d:21:4d:5e:03:69:41:3b:96:a0:66:9c:22:1a:7f: dc:15:41:d4:4a:32:49:d8:63:e4:79:95:95:ab:71: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6D:DE:7F:5D:67:FB:96:BD:4E:4A:FE:90:E2:EE:1A:76:43:EE:59 X509v3 Authority Key Identifier: keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ed:a0:1a:c4:91:45:dc:1e:ce:d3:04:29:01:d0:52:64:05: d6:e2:c2:04:00:3a:24:3a:de:dd:4b:08:cb:9f:28:ee:89:3f: 09:8a:34:44:62:c0:8a:07:d8:3d:66:83:3e:2c:3e:be:bf:33: 71:42:e5:43:e2:29:c8:22:26:3a:89:8a:8d:d9:ec:c3:98:a8: 67:d3:95:d7:52:c7:f0:75:2d:9a:a2:9a:2d:5b:2a:f9:ae:17: f0:a5:7d:96:f4:a2:7a:82:4a:d0:71:24:f6:42:6d:ee:5a:bd: f9:df:5b:fc:d9:26:35:c9:e0:2e:3f:fe:d4:7b:c9:93:0a:aa: f6:3b:0c:c9:08:2d:61:3f:82:c5:9a:6a:c0:44:7c:e9:21:81: ed:a1:a5:51:9e:95:ae:b7:c4:a6:c1:eb:cf:17:5e:b4:02:ee: e3:20:11:73:89:67:0e:18:c9:9b:59:c8:bc:a6:5e:94:4c:6d: 45:89:a9:d4:4d:7f:c8:e3:de:01:5b:b3:23:c4:c0:fc:fe:73: a3:4f:97:35:bb:fc:82:3c:c0:c0:29:a5:48:37:94:38:e1:52: 0b:f5:40:9b:b6:c5:07:d0:d0:9b:25:88:b9:84:58:13:7f:b7: 89:10:7d:fd:4b:d2:b1:e5:58:cb:cb:b8:a6:d0:e0:33:41:f3: e8:d3:c4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U7UwWf6xmJgxyNy95yjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmY1YjUxOTk5NjM3YzgwYmY5M2M4YTkwM2QxNmMzYWVj MjUzNDEwHhcNMjUxMjA3MDEwMTEyWhcNMjUxMjA4MDEwMTEyWjAzMTEwLwYDVQQD EygwZjZkZGU3ZjVkNjdmYjk2YmQ0ZTRhZmU5MGUyZWUxYTc2NDNlZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJydYAmO5YRnElgwCJLKJ4vTLMJt F9Chv/nYnTOURm5mfJqEarlKTA+FyDONLt24rH/avVYsE9P/UMRUCqvBHsGRAGgP CfcZ857RX9PDQQqwMKExriSEhjCYyDa5A0ukc4jyDjpgJh3gu9dEbH8QIGVpDzh8 YYMzftp5KTU/ilmKVkC0Mx+wUYGX1UuKDy9aeDBg478BDufbZb7+uw9kWtGlz5WD ZPGOax/Z4+NL0wQA7wzt6kHXXbCrJKB9nRPkFU/67kl/fQM0AkKH9FybJ4RgJKaz M5GKFJnsRXTuK4JdIU1eA2lBO5agZpwiGn/cFUHUSjJJ2GPkeZWVq3E2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9t3n9dZ/uWvU5K/pDi7hp2Q+5ZMB8GA1UdIwQY MBaAFO6/W1GZljfIC/k8ipA9FsOuwlNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAt NTQyNGRjNjNlMmFjLzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAtNTQyNGRjNjNlMmFj LzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+2gGsSR RdweztMEKQHQUmQF1uLCBAA6JDre3UsIy58o7ok/CYo0RGLAigfYPWaDPiw+vr8z cULlQ+IpyCImOomKjdnsw5ioZ9OV11LH8HUtmqKaLVsq+a4X8KV9lvSieoJK0HEk 9kJt7lq9+d9b/NkmNcngLj/+1HvJkwqq9jsMyQgtYT+CxZpqwER86SGB7aGlUZ6V rrfEpsHrzxdetALu4yARc4lnDhjJm1nIvKZelExtRYmp1E1/yOPeAVuzI8TA/P5z o0+XNbv8gjzAwCmlSDeUOOFSC/VAm7bFB9DQmyWIuYRYE3+3iRB9/UvSseVYy8u4 ptDgM0Hz6NPEPA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:26 2025 by rpki-client