This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json) Hash identifier: sQHKEJGP7PKsK/UEcfSdvnv/Ug/Yru+s0Fc2TQZ1xsk= Subject key identifier: 90:1B:43:8E:2D:F9:2F:43:69:CB:EA:19:60:4B:7D:16:F9:AD:E1:E2 Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76 Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976 Certificate serial: 019AF1D1AE6B89E923EA574BB45E63D7CA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft Manifest number: 1691 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=) 2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: 4WWfk20ky+R3XtJi2giNE5qMZea22SV5hYDuNL38Hpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:6b:89:e9:23:ea:57:4b:b4:5e:63:d7:ca:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=901b438e2df92f4369cbea19604b7d16f9ade1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:23:78:c4:04:07:34:2d:db:34:cd:2a:ea: 70:a0:82:1f:2e:9a:f8:c8:ca:7e:41:06:5e:bf:0d: ba:4d:5c:c4:bc:09:ba:d6:d9:31:82:e0:e8:f8:a5: 95:2c:e1:e8:e1:6e:41:b8:8a:4f:ba:0d:01:87:78: cc:4f:35:36:1b:ad:08:ca:be:c2:32:1c:a5:ed:4e: 3a:ee:9c:f2:48:a0:3c:9a:db:39:e0:6c:9c:f1:e4: 9a:84:a1:cf:22:bf:cc:87:d9:89:db:a2:7f:b5:2f: 65:9e:99:ad:40:45:53:2b:d7:b1:d5:85:b6:61:4a: 48:f0:ed:0f:21:1e:51:e8:7e:64:f6:f2:3d:09:d2: 63:5a:01:ef:3b:f7:e1:97:41:12:84:ff:c7:4c:da: 5b:90:03:77:7b:bb:74:f7:8f:2d:c6:a6:b2:0c:6c: 0a:5f:59:d6:6e:86:1a:5a:a4:25:3c:8a:85:48:b6: 97:82:b4:5c:0d:3e:f1:58:1f:54:29:85:7b:be:fa: 8e:3f:57:a6:3b:32:d3:d0:8b:1b:cc:5b:46:38:7e: 9a:b1:34:7f:b4:b0:63:52:33:e0:da:95:9b:4f:43: 9e:de:e4:b8:f5:1a:ca:b7:28:e6:56:40:c8:a1:47: 99:e8:59:4f:f1:43:c3:7b:53:3e:8e:fc:0a:ba:eb: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1B:43:8E:2D:F9:2F:43:69:CB:EA:19:60:4B:7D:16:F9:AD:E1:E2 X509v3 Authority Key Identifier: keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:26:bc:42:bf:67:1d:bc:e7:25:80:58:cf:b4:26:b3:b6:7f: 33:27:a7:f2:c5:5f:2d:53:bf:5c:4e:3a:2f:63:9c:ba:8a:92: 2c:6b:43:09:d8:dc:5b:cc:03:ab:61:81:94:3f:48:1d:6d:3a: 09:34:87:cd:ea:70:4e:86:ba:2b:a9:ba:d8:eb:3a:19:76:f2: 4c:f2:ce:3c:11:16:e3:1e:58:7c:c0:5d:02:6c:9e:cf:4f:1a: 95:2f:e0:3a:66:01:c1:bf:e5:b3:36:1c:5a:d7:55:ff:92:f5: 06:36:48:08:5c:c6:96:00:43:d9:7f:d7:32:5e:36:e5:b9:21: 12:cb:e2:7c:82:c4:5e:65:02:f3:a6:40:b9:a6:c2:c6:27:43: 7f:f2:28:75:a7:ca:5c:18:94:7b:f7:49:22:ba:21:61:77:13: e6:9c:6a:8e:88:23:35:64:4e:1d:42:54:c1:96:85:41:3e:c0: 42:bc:0f:16:85:9e:e1:e3:8a:20:af:68:40:0c:9f:9a:00:d5: 8a:b2:a8:25:82:30:16:67:cc:f2:0d:f4:53:f8:b7:cc:3b:a1: e7:26:bb:d6:2a:c5:e1:04:d4:7f:a6:dc:f4:fe:82:4b:c5:1f: cb:78:cf:5f:07:46:72:a4:24:ec:c0:c4:b5:48:b7:e0:51:6e: d9:49:7f:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a5riekj6ldLtF5j18oCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWUwMTg2YzY4MjMwMTRiYzJjNDJkMDRlYTY1MGJmNWNj Yjk5NzYwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD Eyg5MDFiNDM4ZTJkZjkyZjQzNjljYmVhMTk2MDRiN2QxNmY5YWRlMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikAjeMQEBzQt2zTNKupwoIIfLpr4 yMp+QQZevw26TVzEvAm61tkxguDo+KWVLOHo4W5BuIpPug0Bh3jMTzU2G60Iyr7C Mhyl7U467pzySKA8mts54Gyc8eSahKHPIr/Mh9mJ26J/tS9lnpmtQEVTK9ex1YW2 YUpI8O0PIR5R6H5k9vI9CdJjWgHvO/fhl0EShP/HTNpbkAN3e7t0948txqayDGwK X1nWboYaWqQlPIqFSLaXgrRcDT7xWB9UKYV7vvqOP1emOzLT0IsbzFtGOH6asTR/ tLBjUjPg2pWbT0Oe3uS49RrKtyjmVkDIoUeZ6FlP8UPDe1M+jvwKuuuXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAbQ44t+S9DacvqGWBLfRb5reHiMB8GA1UdIwQY MBaAFO2uAYbGgjAUvCxC0E6mUL9cy5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEt OGI3YTRhYmYxY2EyLzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEtOGI3YTRhYmYxY2Ey LzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANya8Qr9n HbznJYBYz7Qms7Z/Myen8sVfLVO/XE46L2OcuoqSLGtDCdjcW8wDq2GBlD9IHW06 CTSHzepwToa6K6m62Os6GXbyTPLOPBEW4x5YfMBdAmyez08alS/gOmYBwb/lszYc WtdV/5L1BjZICFzGlgBD2X/XMl425bkhEsvifILEXmUC86ZAuabCxidDf/IodafK XBiUe/dJIrohYXcT5pxqjogjNWROHUJUwZaFQT7AQrwPFoWe4eOKIK9oQAyfmgDV irKoJYIwFmfM8g30U/i3zDuh5ya71irF4QTUf6bc9P6CS8Ufy3jPXwdGcqQk7MDE tUi34FFu2Ul/Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:50 2025 by rpki-client