This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json) Hash identifier: oowo3Lqv2lGR8U+Vk8SxQQGKcZRhtYZJeMXVQEtENrk= Subject key identifier: 85:9B:18:10:7D:4E:D3:66:0C:7A:23:C7:B4:CB:F0:5E:B8:12:37:97 Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0 Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0 Certificate serial: 019AF541244D5A0C968C02EFC2ACF9EC70A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft Manifest number: 03B3 Signing time: Sat 06 Dec 2025 20:01:18 +0000 Manifest this update: Sat 06 Dec 2025 20:01:18 +0000 Manifest next update: Sun 07 Dec 2025 20:01:18 +0000 Files and hashes: 1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=) 2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: ambTzCCQK9vowYVj/NVJlyzyOerZtaBrEl6gLlZJLrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:24:4d:5a:0c:96:8c:02:ef:c2:ac:f9:ec:70:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0 Validity Not Before: Dec 6 20:01:18 2025 GMT Not After : Dec 7 20:01:18 2025 GMT Subject: CN=859b18107d4ed3660c7a23c7b4cbf05eb8123797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:af:a6:85:13:27:42:1a:f2:ee:01:29:43: e9:93:60:85:9f:71:12:93:19:f5:75:bb:9a:c4:b8: 9b:2b:32:a1:e4:96:59:65:10:88:32:6b:d3:89:ad: 73:3c:d8:a5:95:be:f8:5a:f6:c1:9e:af:bb:da:e6: 6b:9b:cc:4e:c9:1d:43:46:14:67:8b:c5:4c:34:e7: a4:c0:d8:dd:13:f4:b8:86:2b:4b:51:57:20:be:49: 0f:e6:13:b6:ed:d0:b9:85:e4:9e:14:d4:12:17:ec: 5e:50:07:30:97:fd:aa:91:e8:a5:e1:b5:5e:15:c5: 6f:db:b4:23:e7:a7:ce:9b:9b:d3:44:7f:0b:ae:b0: 3f:32:9c:c2:72:bd:d7:62:b2:af:d3:2d:0c:24:72: 03:95:10:34:19:3d:17:33:99:aa:7a:32:8f:b1:35: 18:cc:13:c6:a3:53:95:0a:c2:49:d6:11:e3:b4:42: 74:b2:0b:88:8b:ff:d3:10:e2:8c:53:b9:65:d7:24: 7d:0c:5f:63:c1:74:c4:6a:8a:50:a7:9f:76:e5:b7: e4:b3:8b:fd:06:10:ea:29:f3:54:49:0a:2b:d6:bf: c8:a0:88:8a:cf:d3:27:05:1f:25:82:a5:b7:99:06: 2e:d9:f8:11:54:fc:a0:0a:d4:5b:d5:65:db:60:88: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9B:18:10:7D:4E:D3:66:0C:7A:23:C7:B4:CB:F0:5E:B8:12:37:97 X509v3 Authority Key Identifier: keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0f:a7:7e:b9:42:8e:c6:7f:42:35:c9:be:32:39:97:22:7e: 6e:1b:ab:a1:7a:3a:13:3d:f1:d7:d8:8b:48:6d:d9:07:6a:ad: 45:48:e8:24:65:8a:49:59:f0:8a:c7:c0:f2:a2:09:d2:56:b7: fc:26:3c:4f:3e:82:1e:80:2e:89:ac:ee:8f:44:cb:74:dd:ee: 27:1b:48:6c:82:ac:39:9c:d1:ab:a1:6f:0f:f7:b1:d3:3f:fb: c9:29:c6:9e:2b:75:c3:26:f6:dd:dc:2b:0f:a7:ec:94:4f:44: 45:cc:74:07:4b:d3:e0:61:80:da:63:b5:65:ae:61:e8:b8:15: 87:41:93:56:e0:1b:07:18:cc:da:a8:d2:e9:e8:f1:71:60:a0: 80:33:54:16:9e:5e:59:f1:80:a1:89:e4:64:d6:1e:c7:25:4e: 2f:ec:71:9f:ac:02:2a:b8:49:b1:17:25:56:83:28:d6:3e:28: ec:d7:58:51:6a:a0:08:23:1a:c8:d3:41:62:02:31:a9:94:e3: 7d:87:3d:32:2e:16:18:14:f4:98:73:d6:12:b1:0f:98:09:bc: f2:f4:4c:72:10:d1:bc:d7:cc:56:64:c0:91:3f:ad:51:ab:a0: 5a:09:fc:5c:d4:0d:06:ae:d3:a3:3e:a3:7e:96:3d:65:cc:75: 27:bc:a7:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSRNWgyWjALvwqz57HCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzY0ZWRmZGIxYjgyMWQ1ZDI1YWM4YjdhMDgwYTZhOTA2 ZmE2YjAwHhcNMjUxMjA2MjAwMTE4WhcNMjUxMjA3MjAwMTE4WjAzMTEwLwYDVQQD Eyg4NTliMTgxMDdkNGVkMzY2MGM3YTIzYzdiNGNiZjA1ZWI4MTIzNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZivpoUTJ0Ia8u4BKUPpk2CFn3ES kxn1dbuaxLibKzKh5JZZZRCIMmvTia1zPNillb74WvbBnq+72uZrm8xOyR1DRhRn i8VMNOekwNjdE/S4hitLUVcgvkkP5hO27dC5heSeFNQSF+xeUAcwl/2qkeil4bVe FcVv27Qj56fOm5vTRH8LrrA/MpzCcr3XYrKv0y0MJHIDlRA0GT0XM5mqejKPsTUY zBPGo1OVCsJJ1hHjtEJ0sguIi//TEOKMU7ll1yR9DF9jwXTEaopQp5925bfks4v9 BhDqKfNUSQor1r/IoIiKz9MnBR8lgqW3mQYu2fgRVPygCtRb1WXbYIhj2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWbGBB9TtNmDHojx7TL8F64EjeXMB8GA1UdIwQY MBaAFO12Tt/bG4IdXSWsi3oICmqQb6awMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1haTzM5c2JnaDFkSmF5TGVnZ0thcEJ2cHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lZWRiMzktMDM4NS00YTk4LTg5NjMt ZDM0OGVkZWE4MzdiLzEvN1haTzM5c2JnaDFkSmF5TGVnZ0thcEJ2cHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9lZWRiMzktMDM4NS00YTk4LTg5NjMtZDM0OGVkZWE4Mzdi LzEvN1haTzM5c2JnaDFkSmF5TGVnZ0thcEJ2cHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbg+nfrlC jsZ/QjXJvjI5lyJ+bhuroXo6Ez3x19iLSG3ZB2qtRUjoJGWKSVnwisfA8qIJ0la3 /CY8Tz6CHoAuiazuj0TLdN3uJxtIbIKsOZzRq6FvD/ex0z/7ySnGnit1wyb23dwr D6fslE9ERcx0B0vT4GGA2mO1Za5h6LgVh0GTVuAbBxjM2qjS6ejxcWCggDNUFp5e WfGAoYnkZNYexyVOL+xxn6wCKrhJsRclVoMo1j4o7NdYUWqgCCMayNNBYgIxqZTj fYc9Mi4WGBT0mHPWErEPmAm88vRMchDRvNfMVmTAkT+tUaugWgn8XNQNBq7Toz6j fpY9Zcx1J7ynZA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:58 2025 by rpki-client