This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json) Hash identifier: WwE+zpvEvfahalGb7AbjzGujvosd1E2OE1a9QrsjOMU= Subject key identifier: 3D:9E:70:9D:AC:81:5A:80:9C:D5:12:47:F9:7A:FF:C4:10:CE:79:D4 Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b Certificate serial: 019AF2AD71283E7F50B8D9B0260F3E7C1697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft Manifest number: 0704 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: h9gDZvYmRw00KPgUYmXOhWrkKvU+qJa0auZF9DwDj9A=) 2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:71:28:3e:7f:50:b8:d9:b0:26:0f:3e:7c:16:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=3d9e709dac815a809cd51247f97affc410ce79d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:da:42:e9:77:4b:7b:a0:0c:7f:cd:92:f2: a5:2c:05:df:1f:8e:ef:62:21:c1:1f:87:d2:b1:dc: b7:63:ef:77:ac:d0:7d:75:cd:58:c3:51:e0:d2:7a: fb:7e:85:c3:e0:f2:38:83:36:bd:cf:4d:bd:cd:0a: 6f:d4:9c:b1:0d:e5:4a:ba:f1:fe:11:33:29:17:98: 5f:e3:1f:c0:20:20:29:ba:e6:8f:fd:01:70:65:08: 51:3c:ca:99:54:8b:55:5b:1b:39:79:a7:84:28:38: c1:57:29:72:7c:ef:f3:9a:cf:6a:31:23:30:ec:a9: 0f:71:4e:3a:b0:27:7d:75:73:a6:0e:3c:3c:60:20: 9e:e4:04:c8:bc:e2:f2:30:9f:3b:24:40:9a:2b:dc: c8:98:33:c1:19:88:73:d4:69:7a:73:76:cf:ac:29: 12:f5:d5:49:42:10:76:8e:a5:a7:29:a8:4f:14:60: 4a:b0:87:30:05:0f:56:d7:e5:28:52:ec:2a:25:14: fe:df:a6:cb:c6:c1:a5:21:b2:51:a5:28:2d:4a:3e: c5:e1:fb:08:60:7b:eb:77:1a:6b:3d:06:14:38:3d: 65:57:80:45:80:7a:59:1d:16:ba:0c:d5:69:a5:78: 24:de:a7:ea:fa:51:6d:9e:02:48:80:87:75:2a:3d: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:70:9D:AC:81:5A:80:9C:D5:12:47:F9:7A:FF:C4:10:CE:79:D4 X509v3 Authority Key Identifier: keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1b:49:86:2a:2f:05:cf:fd:d8:b4:c9:14:8b:a1:cb:d8:2d: 49:a0:02:74:3b:cb:e5:57:92:e1:2b:c7:75:e3:76:d8:04:53: 93:7b:ea:b2:99:fd:03:e4:db:8c:cd:5e:a5:3d:f8:f9:81:d7: 55:fd:89:b5:29:ed:89:6a:a2:61:36:99:2c:57:cc:34:42:67: 02:01:e7:1e:91:ab:ff:35:21:50:39:de:48:c7:ee:8a:66:c4: 6b:f5:c1:d4:5f:25:f3:f0:74:cb:6a:a3:b9:a2:0c:ad:e7:14: 9a:33:ef:14:5f:f6:f1:53:d2:c3:3f:d0:e6:d7:bf:6c:5d:51: 68:4e:fd:e9:76:03:64:ca:31:e4:9b:54:74:1c:e1:10:96:72: 5b:0c:6f:81:c9:5f:4e:c5:95:85:31:53:b6:55:8f:00:39:87: 6b:0b:cd:cc:a4:bf:ec:88:06:65:41:67:92:ea:de:fd:1f:aa: 6f:65:93:14:2e:61:10:d9:13:11:a7:fd:51:1a:c9:24:21:a7: da:34:46:9c:a3:c5:f3:6f:8d:9c:69:13:c0:7c:19:1f:b6:1c: 8d:cf:52:0e:cb:76:1a:8e:34:8a:8b:76:8a:84:f8:9d:cd:dd: 32:52:f0:9a:14:cb:f2:a3:ff:f7:c1:6f:2c:21:db:9b:84:2b: 5c:5b:05:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXEoPn9QuNmwJg8+fBaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjY1NzZlY2RhMjUyNDZkZjcwZDdhNzJlMWNmZmZhZDg4 OGVhM2IwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EygzZDllNzA5ZGFjODE1YTgwOWNkNTEyNDdmOTdhZmZjNDEwY2U3OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO/aQul3S3ugDH/NkvKlLAXfH47v YiHBH4fSsdy3Y+93rNB9dc1Yw1Hg0nr7foXD4PI4gza9z029zQpv1JyxDeVKuvH+ ETMpF5hf4x/AICApuuaP/QFwZQhRPMqZVItVWxs5eaeEKDjBVylyfO/zms9qMSMw 7KkPcU46sCd9dXOmDjw8YCCe5ATIvOLyMJ87JECaK9zImDPBGYhz1Gl6c3bPrCkS 9dVJQhB2jqWnKahPFGBKsIcwBQ9W1+UoUuwqJRT+36bLxsGlIbJRpSgtSj7F4fsI YHvrdxprPQYUOD1lV4BFgHpZHRa6DNVppXgk3qfq+lFtngJIgId1Kj11awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2ecJ2sgVqAnNUSR/l6/8QQznnUMB8GA1UdIwQY MBaAFE+2V27NolJG33DXpy4c//rYiOo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MDFlYmYtNWZmZC00Y2RhLWE2NmQt MDYyZDcwZTNhYTIzLzEvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81MDFlYmYtNWZmZC00Y2RhLWE2NmQtMDYyZDcwZTNhYTIz LzEvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxtJhiov Bc/92LTJFIuhy9gtSaACdDvL5VeS4SvHdeN22ARTk3vqspn9A+TbjM1epT34+YHX Vf2JtSntiWqiYTaZLFfMNEJnAgHnHpGr/zUhUDneSMfuimbEa/XB1F8l8/B0y2qj uaIMrecUmjPvFF/28VPSwz/Q5te/bF1RaE796XYDZMox5JtUdBzhEJZyWwxvgclf TsWVhTFTtlWPADmHawvNzKS/7IgGZUFnkure/R+qb2WTFC5hENkTEaf9URrJJCGn 2jRGnKPF82+NnGkTwHwZH7Ycjc9SDst2Go40iot2ioT4nc3dMlLwmhTL8qP/98Fv LCHbm4QrXFsFEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:59 2025 by rpki-client