This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json) Hash identifier: Z7bg+WWTgnUOccAT/0+ActUGeCApuJBGNMqytr5czqA= Subject key identifier: D3:FC:77:47:7B:32:FB:F8:BC:DB:82:35:35:F6:59:FA:87:D3:2A:D0 Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Certificate serial: 019AF19A97AA397F32C5FD34E3E96534F565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=) 2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: 13o3+K2O1BGzD7n4ssTzDV1A0V9Vs6lLPDKwNAiX1qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:97:aa:39:7f:32:c5:fd:34:e3:e9:65:34:f5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=d3fc77477b32fbf8bcdb823535f659fa87d32ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:98:ae:5e:8c:9d:1a:22:09:b6:08:bb:0e: 87:3b:7a:62:3f:bf:a1:e6:e5:45:ce:1c:1b:6e:59: a4:89:ea:a2:e4:c7:3f:bf:b8:75:08:cc:dc:3f:0f: 27:b3:55:5a:80:31:eb:6c:1e:3b:94:15:a4:dd:2c: f9:5e:cf:36:50:c1:21:53:31:a5:e4:ef:58:7c:e2: 94:29:4a:ee:6a:d9:2a:20:b6:12:6d:de:4d:59:bd: 0d:c6:39:fe:d2:19:d8:07:51:a4:fb:bb:f4:ce:be: d4:7e:ae:ae:87:c0:9a:5e:a0:c1:ec:93:af:f3:84: ec:98:b1:c3:9d:cf:c4:34:12:7b:ab:09:f3:8c:40: f8:5a:53:dd:2e:7d:84:54:bc:ec:89:31:7a:bc:4e: 5d:07:25:1c:4c:a1:ba:d1:c5:07:58:2b:f1:c4:1a: 7c:30:96:89:17:07:33:b2:46:14:9a:e7:2c:eb:68: 44:24:40:89:0c:ba:49:7b:46:18:c6:1d:f5:af:8f: 6b:0a:b1:f2:22:07:84:c5:ab:69:40:a0:c1:8b:53: 36:74:05:49:42:12:a4:13:a6:bc:bb:d5:22:a8:fa: a9:9d:60:09:87:4d:93:64:74:8e:07:49:12:d3:8b: 71:93:f0:57:4e:60:a5:95:0d:f9:06:51:08:43:98: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FC:77:47:7B:32:FB:F8:BC:DB:82:35:35:F6:59:FA:87:D3:2A:D0 X509v3 Authority Key Identifier: keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:57:fc:04:44:33:e4:c7:86:67:07:63:06:df:29:6e:68:11: e6:80:b0:85:71:50:6d:5b:e5:73:6c:29:11:1d:70:39:ca:a2: 8e:94:5f:11:42:96:16:63:e1:57:e9:c3:66:b8:a3:19:6d:f3: 49:08:02:24:d0:38:fb:e6:9b:88:01:de:4f:d7:68:e3:a2:51: 27:e7:f5:16:3f:37:cd:95:4f:68:30:74:2e:ca:a1:8d:70:f1: 4d:1f:99:ab:0b:2e:c6:14:7c:ef:45:9f:c4:dc:93:d0:8c:2f: 90:c8:59:0e:72:62:77:c5:48:b7:2d:52:2c:ac:6b:a0:44:95: e2:7c:35:05:58:0e:e2:78:2c:31:7b:19:69:16:57:d6:05:bf: 29:e1:14:43:54:dd:0e:ca:87:a2:6f:26:8a:72:59:bb:ed:e3: 2e:fc:28:a3:79:4f:0f:d6:83:cd:bb:47:ed:d8:35:96:50:0e: 70:dd:8e:6a:bb:75:55:53:58:6a:13:89:f0:3c:68:1a:e5:bf: a2:ea:67:f2:e4:09:8b:99:37:7b:23:90:8e:82:70:c9:67:21: ed:c2:a2:d5:1d:7f:b0:ba:6b:d2:dc:d9:68:e6:4a:21:32:b0: 17:6f:06:a7:a8:b5:b0:6a:50:f0:a3:6c:c8:d6:68:6c:42:27: d5:47:df:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpeqOX8yxf004+llNPVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTVi MjliMjEwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhkM2ZjNzc0NzdiMzJmYmY4YmNkYjgyMzUzNWY2NTlmYTg3ZDMyYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSiYrl6MnRoiCbYIuw6HO3piP7+h 5uVFzhwbblmkieqi5Mc/v7h1CMzcPw8ns1VagDHrbB47lBWk3Sz5Xs82UMEhUzGl 5O9YfOKUKUruatkqILYSbd5NWb0Nxjn+0hnYB1Gk+7v0zr7Ufq6uh8CaXqDB7JOv 84TsmLHDnc/ENBJ7qwnzjED4WlPdLn2EVLzsiTF6vE5dByUcTKG60cUHWCvxxBp8 MJaJFwczskYUmucs62hEJECJDLpJe0YYxh31r49rCrHyIgeExatpQKDBi1M2dAVJ QhKkE6a8u9UiqPqpnWAJh02TZHSOB0kS04txk/BXTmCllQ35BlEIQ5juCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNP8d0d7Mvv4vNuCNTX2WfqH0yrQMB8GA1UdIwQY MBaAFHp+zpTeXfaho0yY7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEt ZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2Jk LzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFf8BEQz 5MeGZwdjBt8pbmgR5oCwhXFQbVvlc2wpER1wOcqijpRfEUKWFmPhV+nDZrijGW3z SQgCJNA4++abiAHeT9do46JRJ+f1Fj83zZVPaDB0LsqhjXDxTR+ZqwsuxhR870Wf xNyT0IwvkMhZDnJid8VIty1SLKxroESV4nw1BVgO4ngsMXsZaRZX1gW/KeEUQ1Td DsqHom8minJZu+3jLvwoo3lPD9aDzbtH7dg1llAOcN2Oart1VVNYahOJ8DxoGuW/ oupn8uQJi5k3eyOQjoJwyWch7cKi1R1/sLpr0tzZaOZKITKwF28Gp6i1sGpQ8KNs yNZobEIn1Uffig== -----END CERTIFICATE-----Generated at Sat Dec 6 10:47:05 2025 by rpki-client