This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json) Hash identifier: pwo6RbN+wbDBeNCKx9j4mZjky06asxY8pvAt+lEewSY= Subject key identifier: 41:4D:2E:1E:0E:14:5C:09:F9:AE:0D:8E:CC:6A:A4:8C:9F:8D:38:B6 Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0 Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0 Certificate serial: 019AF2094B6079A5D694ACD5985BC985A9AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft Manifest number: 11ED Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: VhX7Go5XFGzqV2ZJlmBTY13LTJWDoScRg6Un5Vv0iOk=) 2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4b:60:79:a5:d6:94:ac:d5:98:5b:c9:85:a9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=414d2e1e0e145c09f9ae0d8ecc6aa48c9f8d38b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:83:7e:03:a9:87:71:df:db:93:70:88:ca: c4:84:39:42:19:81:58:81:d4:86:cb:0a:ec:6b:bb: 4f:ac:33:db:43:5b:6d:f6:d4:62:7c:64:52:88:8a: 86:9e:ee:d5:33:2a:5f:e6:bd:d5:aa:1b:49:f7:9c: 39:6a:e0:ab:c8:bb:17:4f:f9:fe:35:fd:69:d3:3f: 21:a9:68:7c:53:55:6e:b4:b8:7c:24:f4:a5:d9:45: c7:fc:08:aa:32:ac:3d:ec:c1:51:56:28:3b:8f:96: a4:83:70:de:aa:39:11:1c:81:22:3d:06:7e:ee:0e: 5b:5b:ca:14:2d:31:86:f3:07:9d:e0:34:c4:c0:f5: e1:9b:53:5d:79:71:f3:2e:cb:28:5e:89:1c:f0:67: 02:7b:52:78:2f:a5:3c:36:e0:94:db:e3:e7:b1:71: 90:f5:92:ea:2f:44:58:e4:cf:d5:ba:9e:91:a8:a9: 93:3e:05:47:f9:94:cc:61:cb:6c:7c:0b:0a:30:b6: 29:bd:9d:77:6f:3d:3d:cc:60:76:50:96:52:19:8f: 56:ea:f4:72:46:80:81:ab:f2:e7:d5:1c:41:af:d4: 6f:6a:4e:66:7c:f0:bf:09:df:20:0d:e8:60:b1:c0: 83:27:12:21:50:df:81:e7:36:5a:e5:92:85:8a:bf: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4D:2E:1E:0E:14:5C:09:F9:AE:0D:8E:CC:6A:A4:8C:9F:8D:38:B6 X509v3 Authority Key Identifier: keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:83:1c:07:a5:57:2f:93:cd:e5:7e:cd:b1:98:be:0a:f4:02: 6c:35:91:84:d5:24:42:7a:24:2e:a9:53:ff:b0:ed:f6:64:2d: 4f:b0:6f:34:60:86:75:2d:60:01:63:47:7e:8e:34:e6:81:fb: cf:46:41:14:96:f5:73:0d:ec:51:86:a6:36:36:98:0a:1e:87: fc:a3:c3:94:24:e5:d4:cf:66:fe:3d:77:ea:85:ef:c2:e3:24: 6e:1a:7e:4a:8d:d8:af:fc:c5:f9:22:16:e3:5a:80:ac:66:e7: 02:3e:97:78:8c:02:d7:29:97:f7:39:1c:90:f4:f2:0d:fc:e5: 83:1d:db:b4:f0:0f:8b:5b:f2:78:ca:e3:68:52:e3:e4:c7:2a: 30:8d:91:29:72:f9:9b:09:08:0e:af:cc:b4:85:a8:09:a8:3f: 20:4e:8c:5b:80:a7:8e:0f:1f:84:19:28:88:ca:b8:13:e0:34: 98:79:5d:12:62:41:f3:c1:79:bf:15:b2:d4:43:e6:4f:ce:95: 8f:1f:71:47:ae:60:3f:2d:26:9a:e5:38:77:0b:68:45:07:f1: f4:12:44:dc:73:e1:ad:75:27:b7:ea:b3:1b:5a:d9:54:b5:67: 2d:32:20:4b:3b:10:20:59:9e:68:62:64:90:2a:4f:a8:6f:4d: 92:b3:6e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUtgeaXWlKzVmFvJhamqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz N2I0ZDAwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg0MTRkMmUxZTBlMTQ1YzA5ZjlhZTBkOGVjYzZhYTQ4YzlmOGQzOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEyDfgOph3Hf25NwiMrEhDlCGYFY gdSGywrsa7tPrDPbQ1tt9tRifGRSiIqGnu7VMypf5r3VqhtJ95w5auCryLsXT/n+ Nf1p0z8hqWh8U1VutLh8JPSl2UXH/AiqMqw97MFRVig7j5akg3DeqjkRHIEiPQZ+ 7g5bW8oULTGG8wed4DTEwPXhm1NdeXHzLssoXokc8GcCe1J4L6U8NuCU2+PnsXGQ 9ZLqL0RY5M/Vup6RqKmTPgVH+ZTMYctsfAsKMLYpvZ13bz09zGB2UJZSGY9W6vRy RoCBq/Ln1RxBr9Rvak5mfPC/Cd8gDehgscCDJxIhUN+B5zZa5ZKFir81OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFNLh4OFFwJ+a4NjsxqpIyfjTi2MB8GA1UdIwQY MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYMcB6VX L5PN5X7NsZi+CvQCbDWRhNUkQnokLqlT/7Dt9mQtT7BvNGCGdS1gAWNHfo405oH7 z0ZBFJb1cw3sUYamNjaYCh6H/KPDlCTl1M9m/j136oXvwuMkbhp+So3Yr/zF+SIW 41qArGbnAj6XeIwC1ymX9zkckPTyDfzlgx3btPAPi1vyeMrjaFLj5McqMI2RKXL5 mwkIDq/MtIWoCag/IE6MW4Cnjg8fhBkoiMq4E+A0mHldEmJB88F5vxWy1EPmT86V jx9xR65gPy0mmuU4dwtoRQfx9BJE3HPhrXUnt+qzG1rZVLVnLTIgSzsQIFmeaGJk kCpPqG9NkrNueg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:41 2025 by rpki-client