This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft File: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json) Hash identifier: IJETMohWwssAtiyYwpHztoi1rbv0E11s43vKz6zbUcg= Subject key identifier: 4A:F1:71:4E:31:83:02:A3:0E:23:E8:32:4F:59:A0:34:EC:A2:D9:F5 Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41 Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541 Certificate serial: 019AF209124D971FFA9D3C3D7803E6EB98C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: KjUe3MQtXDf0DmjT47D9mM/xcXH5WG3SswlhltYYi7o=) 2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:12:4d:97:1f:fa:9d:3c:3d:78:03:e6:eb:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=4af1714e318302a30e23e8324f59a034eca2d9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:f5:25:5f:e0:2a:16:90:7d:a3:d2:66:d1: 01:79:4a:a5:99:b9:b3:66:f8:20:6f:14:77:2c:a9: 81:45:91:09:23:c8:f9:fc:c7:2b:de:e4:7f:0a:b7: f7:c4:b1:ec:29:03:5d:8c:5d:b2:40:47:16:07:b2: f4:25:ee:21:21:01:7b:d4:63:ba:06:ad:e2:9d:50: da:f4:1e:1c:8b:d7:b8:64:49:8d:37:f4:dc:fc:d2: 47:97:f1:e5:21:38:55:d5:f2:9c:e7:c2:7f:1e:5c: 6c:39:77:d4:c4:d5:76:3c:d0:0b:44:6a:b2:4e:fd: 45:50:8f:a2:d0:df:17:0d:50:1c:08:9e:d2:5d:d0: 07:2e:73:11:5d:0b:cb:b6:eb:35:cc:39:c0:bd:6d: e5:90:b0:64:14:1b:8a:36:51:ab:97:49:17:fe:12: 9d:1f:66:69:64:7a:6f:0e:ef:84:3f:6e:f7:91:d7: ba:16:41:95:86:0c:d5:5e:ac:51:3b:37:a0:1c:0a: bb:c0:03:10:03:d9:93:6c:b7:ba:22:55:c7:f8:63: f2:61:54:df:96:0b:80:77:8c:c0:8c:e0:98:84:88: be:b0:39:d1:a4:bd:d1:ed:a8:fe:7e:cf:f4:bd:75: 02:5a:c1:48:61:08:4a:f5:0c:3a:34:c1:12:86:ba: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F1:71:4E:31:83:02:A3:0E:23:E8:32:4F:59:A0:34:EC:A2:D9:F5 X509v3 Authority Key Identifier: keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7a:8c:02:dd:bc:e8:59:aa:ca:3f:87:83:63:6f:30:e6:7f: ac:3d:be:c1:75:61:11:50:9e:81:c5:d7:72:91:aa:8a:1b:35: ba:6c:e1:18:4e:5c:3b:d8:96:53:3e:2f:56:0b:5f:ac:2f:a5: 2e:ad:7c:3b:56:59:98:d6:ac:42:3e:95:1f:bc:42:e2:d6:6f: 09:4a:af:0a:0d:10:28:65:f2:81:6a:1a:0c:c7:e1:72:b9:1a: 24:ee:bd:56:d4:12:9d:a7:05:62:3e:5e:6a:ce:0a:b9:3b:e5: 7b:cd:27:b7:80:dc:04:0b:15:1c:5b:e0:15:3f:d9:8f:ca:b7: 0f:ed:db:8a:90:dd:78:12:2f:3f:31:9e:e9:a0:c5:85:08:9d: ac:31:a7:64:d6:a3:6e:ba:91:ee:e3:a0:36:bf:7e:f1:98:ca: 50:95:9e:d3:8d:81:63:6c:c0:76:db:74:09:04:97:65:68:68: 83:ca:cc:81:f2:01:5d:0b:d1:ae:af:cc:da:f1:14:9d:02:30: d7:36:7c:69:dd:aa:f1:2e:8e:2f:e7:15:8c:2e:29:e7:81:88: b8:23:73:b1:23:c7:65:89:9b:26:1b:38:10:7d:db:c3:67:40: b8:dc:0a:4f:78:34:75:35:a0:59:09:3b:e9:9d:96:d5:ed:a0: b9:15:b2:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRJNlx/6nTw9eAPm65jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0 ZTE1NDEwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD Eyg0YWYxNzE0ZTMxODMwMmEzMGUyM2U4MzI0ZjU5YTAzNGVjYTJkOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWr1JV/gKhaQfaPSZtEBeUqlmbmz ZvggbxR3LKmBRZEJI8j5/Mcr3uR/Crf3xLHsKQNdjF2yQEcWB7L0Je4hIQF71GO6 Bq3inVDa9B4ci9e4ZEmNN/Tc/NJHl/HlIThV1fKc58J/HlxsOXfUxNV2PNALRGqy Tv1FUI+i0N8XDVAcCJ7SXdAHLnMRXQvLtus1zDnAvW3lkLBkFBuKNlGrl0kX/hKd H2ZpZHpvDu+EP273kde6FkGVhgzVXqxROzegHAq7wAMQA9mTbLe6IlXH+GPyYVTf lguAd4zAjOCYhIi+sDnRpL3R7aj+fs/0vXUCWsFIYQhK9Qw6NMEShroXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErxcU4xgwKjDiPoMk9ZoDTsotn1MB8GA1UdIwQY MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt YWUxYjBhY2QyOGE4LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4 LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHqMAt28 6Fmqyj+Hg2NvMOZ/rD2+wXVhEVCegcXXcpGqihs1umzhGE5cO9iWUz4vVgtfrC+l Lq18O1ZZmNasQj6VH7xC4tZvCUqvCg0QKGXygWoaDMfhcrkaJO69VtQSnacFYj5e as4KuTvle80nt4DcBAsVHFvgFT/Zj8q3D+3bipDdeBIvPzGe6aDFhQidrDGnZNaj brqR7uOgNr9+8ZjKUJWe042BY2zAdtt0CQSXZWhog8rMgfIBXQvRrq/M2vEUnQIw 1zZ8ad2q8S6OL+cVjC4p54GIuCNzsSPHZYmbJhs4EH3bw2dAuNwKT3g0dTWgWQk7 6Z2W1e2guRWyAA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:51 2025 by rpki-client