This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft File: 7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json) Hash identifier: 9bv237IQb1e9QHgl5NO2G+JyM7kdj5TCmV72QAo/qr0= Subject key identifier: EC:F1:E7:FF:EF:9E:A9:71:DC:30:3A:41:58:D0:71:B2:87:03:D4:48 Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B Certificate issuer: /CN=edafdca6eace4f1293223b02eebc278243869b7b Certificate serial: 019B3343E09F5D56E710E8238C9DD340336B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:00:44 +0000 Manifest this update: Thu 18 Dec 2025 21:00:44 +0000 Manifest next update: Fri 19 Dec 2025 21:00:44 +0000 Files and hashes: 1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: 97LrsOp12RqKcYj4ijSokjuYbJcLvOsYP+9L7dSIaDI=) 2: zMEZwInn6qsQsb3EuTqc1XMLlMs.roa (hash: c5HbgBUG/gYeARGBH8gV4wwyAcZTcsGV67Ia/kHFnGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:e0:9f:5d:56:e7:10:e8:23:8c:9d:d3:40:33:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b Validity Not Before: Dec 18 21:00:44 2025 GMT Not After : Dec 19 21:00:44 2025 GMT Subject: CN=ecf1e7ffef9ea971dc303a4158d071b28703d448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:2a:67:01:fc:27:01:d2:ba:02:80:e5:3f: e7:7d:98:4b:92:eb:ea:b2:63:1a:7b:74:19:b3:20: 0f:9f:97:c1:76:8d:e1:7d:2c:88:48:2b:7a:3b:38: 69:e2:c6:2b:53:cf:36:95:0d:15:3a:b0:d0:40:58: 51:ce:6d:52:93:11:db:a0:9c:ed:9d:97:e7:f7:eb: c5:d0:e2:7d:f7:e7:51:a1:bb:a0:6d:15:7f:84:0d: 6d:6c:9a:04:c7:4b:76:bc:5c:55:3a:a8:c4:99:7c: 72:6b:da:96:e4:c3:09:99:ba:a0:a7:bc:cc:3b:07: e2:ff:44:d2:7e:4e:a7:f1:0c:b3:b8:10:66:95:57: f9:35:59:ae:35:76:05:83:fb:93:9d:45:ff:69:16: 6a:55:84:55:7c:7d:df:b9:79:d0:9d:8c:53:12:9a: c5:44:aa:e7:a1:b4:fe:09:ac:71:ce:dd:9c:46:2b: 99:b7:fc:b8:bf:28:4c:6e:d5:31:27:8e:64:c4:b0: 46:86:6b:13:2f:07:a5:c9:ee:79:b6:9a:50:15:32: 38:5c:c6:45:26:b8:ae:59:47:ef:ef:b7:f5:2b:86: f8:97:ba:e1:21:bb:1e:a1:2a:dc:8e:bd:33:7e:fd: b5:bf:4f:d2:fb:8c:8e:f9:42:23:d3:28:f1:fc:39: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F1:E7:FF:EF:9E:A9:71:DC:30:3A:41:58:D0:71:B2:87:03:D4:48 X509v3 Authority Key Identifier: keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:54:01:19:f2:27:4d:25:2b:7f:d5:65:9e:47:3e:47:30: 3b:43:30:83:f2:e8:7d:ef:8b:db:57:a1:a5:c9:8a:6f:c7:d2: 23:eb:12:4c:73:e1:67:7e:31:67:98:f1:f6:56:a5:2c:26:7c: 95:89:fc:ac:56:4f:2b:c9:0d:25:ff:64:ec:59:ef:f3:e9:6f: 5c:91:08:f9:1f:1a:4b:c4:ad:45:cb:a5:44:22:7e:93:ae:8c: c6:29:1b:c3:e4:8c:44:37:04:59:71:66:a1:32:f4:28:59:a4: cf:ef:12:c9:6e:87:71:8e:f7:b0:98:b3:1a:d5:29:34:eb:40: f6:01:80:81:22:45:ca:45:fc:08:f5:34:23:83:9a:cd:71:34: a4:74:49:03:dd:1d:21:6d:2c:e2:2e:74:69:90:53:d5:a2:e2: 92:1a:e3:db:bb:12:50:e5:3c:73:ff:c5:ea:2d:b8:36:ca:d9: ee:a1:02:97:e5:d8:f4:c0:16:63:5e:c2:eb:49:68:c7:97:80: df:3d:ad:93:ae:4f:41:42:a8:9c:d9:28:ec:29:df:fa:03:4e: 82:e6:21:d9:48:7c:79:a4:62:29:02:80:9b:d0:03:b4:f0:b6: d2:98:b6:e4:35:2b:90:98:11:35:d1:e4:a0:66:72:de:a5:ce: 1f:5e:41:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+CfXVbnEOgjjJ3TQDNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWZkY2E2ZWFjZTRmMTI5MzIyM2IwMmVlYmMyNzgyNDM4 NjliN2IwHhcNMjUxMjE4MjEwMDQ0WhcNMjUxMjE5MjEwMDQ0WjAzMTEwLwYDVQQD EyhlY2YxZTdmZmVmOWVhOTcxZGMzMDNhNDE1OGQwNzFiMjg3MDNkNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OIqZwH8JwHSugKA5T/nfZhLkuvq smMae3QZsyAPn5fBdo3hfSyISCt6Ozhp4sYrU882lQ0VOrDQQFhRzm1SkxHboJzt nZfn9+vF0OJ99+dRobugbRV/hA1tbJoEx0t2vFxVOqjEmXxya9qW5MMJmbqgp7zM Owfi/0TSfk6n8QyzuBBmlVf5NVmuNXYFg/uTnUX/aRZqVYRVfH3fuXnQnYxTEprF RKrnobT+Caxxzt2cRiuZt/y4vyhMbtUxJ45kxLBGhmsTLwelye55tppQFTI4XMZF JriuWUfv77f1K4b4l7rhIbseoSrcjr0zfv21v0/S+4yO+UIj0yjx/DkMEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzx5//vnqlx3DA6QVjQcbKHA9RIMB8GA1UdIwQY MBaAFO2v3Kbqzk8SkyI7Au68J4JDhpt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgt NWYxZGMwYTBiZmNmLzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgtNWYxZGMwYTBiZmNm LzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTVUARny J00lK3/VZZ5HPkcwO0Mwg/Lofe+L21ehpcmKb8fSI+sSTHPhZ34xZ5jx9lalLCZ8 lYn8rFZPK8kNJf9k7Fnv8+lvXJEI+R8aS8StRculRCJ+k66Mxikbw+SMRDcEWXFm oTL0KFmkz+8SyW6HcY73sJizGtUpNOtA9gGAgSJFykX8CPU0I4OazXE0pHRJA90d IW0s4i50aZBT1aLikhrj27sSUOU8c//F6i24NsrZ7qECl+XY9MAWY17C60lox5eA 3z2tk65PQUKonNko7Cnf+gNOguYh2Uh8eaRiKQKAm9ADtPC20pi25DUrkJgRNdHk oGZy3qXOH15BeA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:26:51 2025 by rpki-client