This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json) Hash identifier: OQKXGil1AR1WxgqU3dZGFoXnsPUH6qUv7ctb38DBNRw= Subject key identifier: 15:F1:D0:86:39:2A:D9:D4:55:83:9E:AF:87:C0:2E:37:6C:9F:1A:B4 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019AF208B9A7D1B22CA0C81CB1F7BE74DFCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft Manifest number: 1776 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=) 2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=) 3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: bRLe9OgvR8JVxkWhqCUMBTJX9nk6SA0/e/7e4ji4hb0=) 4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=) 5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=) 6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=) 7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=) 8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=) 9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b9:a7:d1:b2:2c:a0:c8:1c:b1:f7:be:74:df:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=15f1d086392ad9d455839eaf87c02e376c9f1ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:46:0a:c0:6c:8f:29:87:23:7e:1d:65:6c: 72:09:08:7b:66:18:b3:28:14:ab:28:27:3e:12:e7: a3:9b:b2:63:8f:7b:4c:9b:20:d4:c5:e5:07:39:43: c9:01:01:1e:a1:26:3c:1c:64:3c:9b:d7:dd:75:c9: 6e:09:10:83:4c:08:80:3e:c1:97:48:04:0c:0e:71: 5a:72:e1:d3:39:6d:2d:cf:b2:a5:97:1c:7d:f9:e5: 58:d8:55:c4:d5:de:4c:42:5b:54:cd:5f:a5:3b:bc: e9:bf:10:8e:e9:66:ca:b4:11:01:4b:77:1d:d7:4b: 0d:c3:72:36:44:57:71:8b:14:08:18:cf:66:8d:f4: 3a:80:3d:20:e6:ba:94:5b:48:88:cf:d8:48:f8:04: c3:d8:85:70:cf:18:0b:f8:e8:e3:af:84:48:46:d5: 27:17:cd:67:86:a8:cf:e9:84:af:5a:2f:39:6a:51: f3:f7:5a:87:48:61:df:61:0c:08:db:54:c9:d4:3f: a6:1e:d9:79:c7:55:50:c3:37:72:9d:2a:84:51:af: b3:bd:a1:30:cd:04:05:b8:10:f0:0d:1b:e1:67:d0: d2:fe:ea:98:db:6a:8b:94:6c:f7:cc:84:2b:fb:eb: 73:d4:ba:a5:88:44:f9:c0:b5:ea:27:8d:59:a8:a5: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F1:D0:86:39:2A:D9:D4:55:83:9E:AF:87:C0:2E:37:6C:9F:1A:B4 X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b7:23:3f:c6:8f:0c:cd:c8:38:bb:5b:04:6b:ce:09:64:91: 50:8e:6b:3a:4b:ef:0b:2e:31:0e:8b:31:e1:dd:74:67:6f:3b: a9:9f:14:bb:9b:69:b3:48:f8:05:86:7f:58:ec:71:52:ed:85: c1:de:e5:50:bd:91:f1:ee:f0:17:48:19:ba:3a:1b:cc:f9:c6: 89:c8:e3:0d:5d:5a:c0:30:0e:6a:3d:39:a8:53:a7:b3:a2:c2: 6e:c3:7e:c6:d9:a0:18:58:5b:29:f5:58:b5:88:0b:83:b7:5a: ff:07:67:7a:5e:ef:d9:f2:b4:c0:5d:8b:4d:2c:ca:0c:00:28: f6:0b:ff:d3:ba:bb:a7:fe:0d:f4:c7:61:24:bc:84:9c:c6:e6: d5:f8:4a:56:84:c9:23:49:93:ff:f0:5b:dd:90:e0:a5:eb:82: 86:4e:1b:ca:09:9e:c8:49:53:33:2e:0c:93:e5:4a:bb:b8:3a: 1d:a6:f1:b7:20:6b:0b:dd:d6:61:cb:c4:ab:7a:1a:1c:23:1e: 38:b3:71:c8:82:82:e9:90:cf:60:89:21:af:39:a0:8f:43:ce: cc:17:d4:45:eb:3b:c7:c4:ae:be:bf:0b:e0:ca:c1:51:b0:8c: 44:a3:c6:35:be:07:59:ca:91:fa:02:43:63:f1:de:8f:3e:f8: 09:64:d0:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLmn0bIsoMgcsfe+dN/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygxNWYxZDA4NjM5MmFkOWQ0NTU4MzllYWY4N2MwMmUzNzZjOWYxYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDdGCsBsjymHI34dZWxyCQh7Zhiz KBSrKCc+Euejm7Jjj3tMmyDUxeUHOUPJAQEeoSY8HGQ8m9fddcluCRCDTAiAPsGX SAQMDnFacuHTOW0tz7Kllxx9+eVY2FXE1d5MQltUzV+lO7zpvxCO6WbKtBEBS3cd 10sNw3I2RFdxixQIGM9mjfQ6gD0g5rqUW0iIz9hI+ATD2IVwzxgL+Ojjr4RIRtUn F81nhqjP6YSvWi85alHz91qHSGHfYQwI21TJ1D+mHtl5x1VQwzdynSqEUa+zvaEw zQQFuBDwDRvhZ9DS/uqY22qLlGz3zIQr++tz1LqliET5wLXqJ41ZqKUnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXx0IY5KtnUVYOer4fALjdsnxq0MB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbcjP8aP DM3IOLtbBGvOCWSRUI5rOkvvCy4xDosx4d10Z287qZ8Uu5tps0j4BYZ/WOxxUu2F wd7lUL2R8e7wF0gZujobzPnGicjjDV1awDAOaj05qFOns6LCbsN+xtmgGFhbKfVY tYgLg7da/wdnel7v2fK0wF2LTSzKDAAo9gv/07q7p/4N9MdhJLyEnMbm1fhKVoTJ I0mT//Bb3ZDgpeuChk4bygmeyElTMy4Mk+VKu7g6HabxtyBrC93WYcvEq3oaHCMe OLNxyIKC6ZDPYIkhrzmgj0POzBfURes7x8Suvr8L4MrBUbCMRKPGNb4HWcqR+gJD Y/Hejz74CWTQ+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:52 2025 by rpki-client