This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft File: 7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json) Hash identifier: dzdEngg2X+q+OdwNeYC30AjklWi97TUz1pzoJjcTiU4= Subject key identifier: AE:B5:5B:6A:87:90:A2:2F:E2:3E:DF:28:E6:81:62:81:14:4E:41:7F Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B Certificate issuer: /CN=edafdca6eace4f1293223b02eebc278243869b7b Certificate serial: 019AF19B476B59FBAD51CF70C07AE3381C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: Wm7UTUYTOytSZfbarxgS/eKkaJCkiCgd3wAYfJJE3kk=) 2: zMEZwInn6qsQsb3EuTqc1XMLlMs.roa (hash: c5HbgBUG/gYeARGBH8gV4wwyAcZTcsGV67Ia/kHFnGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:47:6b:59:fb:ad:51:cf:70:c0:7a:e3:38:1c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=aeb55b6a8790a22fe23edf28e6816281144e417f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:d1:ec:61:98:e7:60:62:de:23:29:51:9f: 55:18:b2:ba:4d:56:04:2b:12:58:75:3c:d4:de:89: c0:2c:6f:10:77:fe:eb:e8:ae:d9:e2:4a:d8:49:71: ca:aa:32:11:46:3d:cc:1d:84:99:0d:1e:0b:a1:c7: b1:6e:11:dd:66:1e:cb:90:ff:31:47:07:fa:70:d2: 49:93:d8:0d:e6:7d:77:71:b4:dc:25:48:e6:4f:77: a5:e1:41:48:a1:bd:96:67:f7:0d:5e:d3:6c:6f:45: 08:aa:bc:ae:e0:01:29:7c:58:01:98:30:0f:26:7b: c3:1c:03:8f:aa:c7:d9:5a:4a:d4:6d:69:2a:c4:49: 12:93:58:6c:9c:37:ca:4c:c5:f9:f4:50:fb:68:17: 1b:61:bd:14:08:dd:83:d2:10:4b:dd:eb:89:a7:9e: c6:e2:45:16:68:50:f0:45:a6:08:8b:fa:d9:bb:6b: 10:81:8f:5a:5d:15:75:fb:34:16:ca:c7:66:7d:86: 2b:16:69:5d:ec:25:69:e8:43:67:c2:e4:06:65:5c: f4:55:e7:91:90:4c:ec:4f:50:36:af:ee:8c:dc:cd: fc:91:d4:78:cd:c3:cc:fa:ec:b5:fe:ac:96:4e:65: da:95:52:a3:5d:2f:67:4d:1e:fb:98:c6:21:55:d2: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B5:5B:6A:87:90:A2:2F:E2:3E:DF:28:E6:81:62:81:14:4E:41:7F X509v3 Authority Key Identifier: keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a4:ec:bd:7f:de:33:db:93:07:5e:3e:21:f4:f1:17:1f:94: fe:7c:ff:4e:ae:01:5c:f1:f7:01:0b:59:7e:98:a8:41:30:30: c7:68:db:80:cd:f0:65:7d:52:a4:a8:86:0f:80:cf:53:0e:e2: 91:36:54:1e:01:76:83:92:1d:33:26:6f:da:71:e6:ea:a4:70: 63:24:8e:d5:32:18:96:18:77:1d:59:4d:c7:ad:e0:a5:3d:48: 98:24:1c:38:56:77:20:6e:09:df:d8:94:6f:21:93:62:ed:6c: 1e:80:41:bb:82:7a:1c:66:38:3b:e5:b1:4a:4d:1d:09:cc:68: 59:ca:c7:71:dd:30:1f:90:89:b3:ab:24:69:8b:2e:2d:72:12: d0:63:4a:2f:13:c2:df:06:af:7d:5e:e5:c1:7d:14:97:ab:26: 97:c5:5a:94:7f:0e:3c:de:f7:5f:b1:68:f1:5e:58:e6:1e:82: 9d:53:19:5f:43:0e:e6:c6:70:ab:9d:42:08:30:e2:2e:0f:f3: e2:8e:4a:5b:34:66:d9:ca:86:d6:dd:aa:0a:38:58:fd:c9:d6: d5:10:f6:1b:09:0b:23:e3:56:e5:b5:f5:b1:6c:9f:ae:54:12: 00:26:ef:38:de:4d:6e:71:cc:4f:36:23:ff:24:81:42:17:1f: 59:43:bd:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0drWfutUc9wwHrjOBwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWZkY2E2ZWFjZTRmMTI5MzIyM2IwMmVlYmMyNzgyNDM4 NjliN2IwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhhZWI1NWI2YTg3OTBhMjJmZTIzZWRmMjhlNjgxNjI4MTE0NGU0MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvnR7GGY52Bi3iMpUZ9VGLK6TVYE KxJYdTzU3onALG8Qd/7r6K7Z4krYSXHKqjIRRj3MHYSZDR4LocexbhHdZh7LkP8x Rwf6cNJJk9gN5n13cbTcJUjmT3el4UFIob2WZ/cNXtNsb0UIqryu4AEpfFgBmDAP JnvDHAOPqsfZWkrUbWkqxEkSk1hsnDfKTMX59FD7aBcbYb0UCN2D0hBL3euJp57G 4kUWaFDwRaYIi/rZu2sQgY9aXRV1+zQWysdmfYYrFmld7CVp6ENnwuQGZVz0VeeR kEzsT1A2r+6M3M38kdR4zcPM+uy1/qyWTmXalVKjXS9nTR77mMYhVdL9YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK61W2qHkKIv4j7fKOaBYoEUTkF/MB8GA1UdIwQY MBaAFO2v3Kbqzk8SkyI7Au68J4JDhpt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgt NWYxZGMwYTBiZmNmLzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgtNWYxZGMwYTBiZmNm LzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqTsvX/e M9uTB14+IfTxFx+U/nz/Tq4BXPH3AQtZfpioQTAwx2jbgM3wZX1SpKiGD4DPUw7i kTZUHgF2g5IdMyZv2nHm6qRwYySO1TIYlhh3HVlNx63gpT1ImCQcOFZ3IG4J39iU byGTYu1sHoBBu4J6HGY4O+WxSk0dCcxoWcrHcd0wH5CJs6skaYsuLXIS0GNKLxPC 3wavfV7lwX0Ul6sml8ValH8OPN73X7Fo8V5Y5h6CnVMZX0MO5sZwq51CCDDiLg/z 4o5KWzRm2cqG1t2qCjhY/cnW1RD2GwkLI+NW5bX1sWyfrlQSACbvON5NbnHMTzYj /ySBQhcfWUO9ow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:34 2025 by rpki-client