This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft File: 7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json) Hash identifier: LY+XnGB4iwig89Gi1+n28xkUPR65p+q6f9cPdL98XrM= Subject key identifier: 5E:81:36:3D:58:AE:BA:F9:76:E0:8F:72:A0:BC:0D:BA:55:87:21:73 Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5 Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5 Certificate serial: 019AF209A63BC686442761B0B03EA29BBE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft Manifest number: 41 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: WII22BpvIm2MBEgMI10JQBOQwlOVZRc3I49CuqFdqYo=) 2: yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa (hash: 0urLdAxAXMiQAjxSg9VTaO6Zv/VpbeFMPkfaHibD4No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a6:3b:c6:86:44:27:61:b0:b0:3e:a2:9b:be:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=5e81363d58aebaf976e08f72a0bc0dba55872173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:91:68:b9:a6:33:14:5e:7c:60:ec:a2:81: ff:5d:2f:80:f8:18:b7:7d:40:08:e7:44:d9:3f:30: 36:7c:87:bd:24:03:b3:84:aa:6c:66:cb:f8:3a:ce: 3d:7a:6d:23:f6:f4:0c:14:56:9f:cd:44:14:a8:82: bb:51:f2:c1:b4:5c:e1:db:ff:23:db:c6:f9:33:b8: 7e:bd:9f:fe:8c:61:73:57:27:14:a1:f5:7a:65:14: 26:9e:53:33:61:51:62:4f:d2:1f:0c:85:43:8b:06: 0e:67:43:1f:34:ec:05:7a:85:62:c4:f7:01:a7:fb: 97:bd:13:e5:9c:24:35:e5:f4:d7:44:64:78:86:2d: 06:e4:01:ad:39:17:a3:76:96:1e:7e:5f:93:6f:ae: 14:57:7a:4e:e9:2e:2b:70:8f:e5:33:ea:30:f4:1c: 65:9b:c1:1b:f1:04:0d:43:42:45:d8:47:4d:66:f0: 5a:12:f6:a7:f2:72:af:be:18:82:db:f0:f5:0a:e1: 1d:6a:8b:e0:34:46:7b:65:ea:5f:18:0a:5f:62:85: dd:ef:4b:01:58:b7:4f:6d:7d:81:a8:a8:bf:e6:3b: c9:0b:85:d3:58:29:44:8d:0f:03:a8:95:1a:95:0f: 95:8c:7d:14:50:59:c7:f7:88:cd:13:2a:18:46:f7: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:81:36:3D:58:AE:BA:F9:76:E0:8F:72:A0:BC:0D:BA:55:87:21:73 X509v3 Authority Key Identifier: keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:c6:e1:65:ed:8c:d4:55:67:f5:2c:be:f6:52:0b:15:f5: 73:1d:c8:cb:f1:80:5a:34:3b:7b:4e:ce:80:fb:46:ef:45:da: 93:45:8d:6f:bf:68:cb:31:0c:2b:db:ad:02:4e:90:f6:24:b4: 85:08:49:26:9f:52:7d:78:b7:39:42:b1:67:0c:20:d5:4a:c0: 7e:e7:92:6d:88:b4:7e:db:bc:25:9d:f4:05:26:b0:2c:a7:ea: aa:e5:70:1c:45:96:fb:db:6c:50:08:c6:df:c3:c2:6e:09:69: b5:1e:cc:1d:07:d6:a6:c9:5d:9b:9d:3e:eb:29:a6:2b:16:d3: 9e:c1:2c:4e:c5:81:de:14:94:82:71:0b:16:23:75:f3:86:4d: e3:81:a0:18:d5:29:b4:31:90:cd:e0:db:25:a8:13:92:cd:bb: 68:30:94:23:e0:d9:74:9e:a5:bd:50:1b:36:84:31:78:10:c1: 0a:5a:60:91:47:39:a4:ee:1b:41:6d:7b:87:bd:cc:e0:0b:f5: ce:bd:ba:0f:8c:0e:39:c9:86:a6:d5:8a:34:71:c9:98:67:31: 77:8e:31:5f:a0:06:d4:a8:9b:4f:9c:cb:8a:1b:c4:c4:95:d9: 44:bf:76:cb:92:5e:01:91:2a:b3:0f:5c:7a:60:77:c8:a2:63: 5d:ff:2f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaY7xoZEJ2GwsD6im74PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZmZmNDBkOGJiNGEyNDg3MmUwMWJhN2Y0MmUzYWU2M2Vl MDg1ZjUwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD Eyg1ZTgxMzYzZDU4YWViYWY5NzZlMDhmNzJhMGJjMGRiYTU1ODcyMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMSRaLmmMxRefGDsooH/XS+A+Bi3 fUAI50TZPzA2fIe9JAOzhKpsZsv4Os49em0j9vQMFFafzUQUqIK7UfLBtFzh2/8j 28b5M7h+vZ/+jGFzVycUofV6ZRQmnlMzYVFiT9IfDIVDiwYOZ0MfNOwFeoVixPcB p/uXvRPlnCQ15fTXRGR4hi0G5AGtORejdpYefl+Tb64UV3pO6S4rcI/lM+ow9Bxl m8Eb8QQNQ0JF2EdNZvBaEvan8nKvvhiC2/D1CuEdaovgNEZ7ZepfGApfYoXd70sB WLdPbX2BqKi/5jvJC4XTWClEjQ8DqJUalQ+VjH0UUFnH94jNEyoYRvfZGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6BNj1Yrrr5duCPcqC8DbpVhyFzMB8GA1UdIwQY MBaAFO7/9A2LtKJIcuAbp/QuOuY+4IX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQt MTQxZDMzYzc0M2RmLzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQtMTQxZDMzYzc0M2Rm LzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTHG4WXt jNRVZ/UsvvZSCxX1cx3Iy/GAWjQ7e07OgPtG70Xak0WNb79oyzEMK9utAk6Q9iS0 hQhJJp9SfXi3OUKxZwwg1UrAfueSbYi0ftu8JZ30BSawLKfqquVwHEWW+9tsUAjG 38PCbglptR7MHQfWpsldm50+6ymmKxbTnsEsTsWB3hSUgnELFiN184ZN44GgGNUp tDGQzeDbJagTks27aDCUI+DZdJ6lvVAbNoQxeBDBClpgkUc5pO4bQW17h73M4Av1 zr26D4wOOcmGptWKNHHJmGcxd44xX6AG1KibT5zLihvExJXZRL92y5JeAZEqsw9c emB3yKJjXf8vrw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:32 2025 by rpki-client