This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json) Hash identifier: IwvZWlPp7dUXrywF5D0J2qOkhtpow2YSWn18sKPHPJg= Subject key identifier: 9A:9C:BD:D4:1E:3C:E3:C7:6E:4D:86:91:37:5C:38:C6:41:B0:C5:DA Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3 Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3 Certificate serial: 019AF12EA665937F4E1A9338C63047FF5CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft Manifest number: 12A5 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: LJ9316/TJEpWidE9AUBMTtBxCBailqUb81EzffEnY3M=) 2: DYtZ-mqw6oNlIGZ4UJkyBpBrIuQ.roa (hash: hy9DSVfaehQXQmBRqqc5gZr2CYEFnu9h17oPiFVHPic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a6:65:93:7f:4e:1a:93:38:c6:30:47:ff:5c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=9a9cbdd41e3ce3c76e4d8691375c38c641b0c5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:37:ae:d0:74:ea:f3:39:a9:9b:f1:54:6c: 4b:3c:a7:1d:3d:43:04:ba:9a:e4:3e:d8:66:a3:59: a7:2c:98:36:8b:bd:71:b6:c9:86:84:7a:30:9a:9a: f1:09:49:9a:58:6a:96:7e:52:12:59:95:99:06:cc: 05:82:a5:57:e6:05:78:69:5c:ea:b2:5e:9f:c3:48: 31:cc:e7:20:b1:b0:c7:18:bc:8d:56:45:f5:8d:fa: 73:81:ef:b2:ca:7a:af:b8:ce:3e:73:79:c5:1e:3b: d7:4f:c8:a8:98:bd:41:d8:24:c7:cb:80:98:a1:7f: 39:0d:cc:c3:d4:e1:f4:5d:0f:bc:ec:9a:0d:5d:76: cf:d2:fd:9c:01:52:b1:1c:2c:76:9a:75:0a:94:c1: 4b:cf:d7:20:68:15:09:8b:4f:8d:71:34:3d:62:0c: 3c:4f:2d:8e:6d:a2:b5:ca:89:1b:02:cf:c1:d4:7f: c3:86:a6:22:6b:06:c7:c9:50:da:09:c0:f5:13:1b: 3f:83:aa:88:95:a0:ae:61:05:11:6e:17:81:0c:07: 57:d4:d1:90:15:f9:36:f9:37:91:07:47:a3:3d:88: 79:cb:74:b8:eb:ec:7c:60:e3:2b:fd:c4:64:4a:7c: 7a:3f:fa:69:05:d1:b0:9f:80:eb:74:ce:67:31:8d: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9C:BD:D4:1E:3C:E3:C7:6E:4D:86:91:37:5C:38:C6:41:B0:C5:DA X509v3 Authority Key Identifier: keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:21:a5:fe:64:27:e8:b7:9c:70:22:98:9e:e4:b2:be:1d:50: 75:9e:17:1a:6c:4b:8d:4b:97:8f:fe:fb:31:d5:51:f5:7a:77: 91:19:05:c9:a5:a1:10:a7:b3:83:23:86:ee:87:d9:d9:3e:b6: 0e:3d:3a:e9:13:2e:22:39:38:99:44:09:f3:34:ca:43:f2:74: bb:b1:24:78:51:24:d2:0d:f4:1f:1c:0a:33:67:69:06:b7:c9: ff:c7:56:bb:82:7e:45:62:d0:e3:f8:1c:6d:4e:28:9d:b0:4a: 1e:75:db:1c:b8:d3:3c:79:15:f1:65:9e:26:f7:14:46:88:1c: ce:57:9a:ec:f7:f8:94:c5:40:b7:92:ea:6f:1e:21:69:49:93: dc:3b:3b:63:cc:1c:35:8d:0c:5e:ce:04:6d:3e:e5:59:04:a5: aa:50:17:58:18:ee:28:16:e7:35:52:34:79:d8:17:bc:a9:c6: 00:d3:93:5b:51:4b:98:64:3d:ae:12:75:18:c2:77:98:a0:6e: 92:f9:12:27:1a:3b:b8:6b:b6:fa:45:ce:3c:55:e4:5e:30:51: af:95:e6:a1:f3:9e:be:05:45:af:4b:8b:44:1c:a6:04:d1:12: 88:64:16:b4:e5:51:41:18:53:ec:a3:ae:73:17:11:53:13:43: 89:65:64:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqZlk39OGpM4xjBH/1z7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzNjMjY2MDliMWIyMWQ4N2E2ODEzMDJlZjJkMjZmYzBh MDBmYTMwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD Eyg5YTljYmRkNDFlM2NlM2M3NmU0ZDg2OTEzNzVjMzhjNjQxYjBjNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomI3rtB06vM5qZvxVGxLPKcdPUME uprkPthmo1mnLJg2i71xtsmGhHowmprxCUmaWGqWflISWZWZBswFgqVX5gV4aVzq sl6fw0gxzOcgsbDHGLyNVkX1jfpzge+yynqvuM4+c3nFHjvXT8iomL1B2CTHy4CY oX85DczD1OH0XQ+87JoNXXbP0v2cAVKxHCx2mnUKlMFLz9cgaBUJi0+NcTQ9Ygw8 Ty2ObaK1yokbAs/B1H/DhqYiawbHyVDaCcD1Exs/g6qIlaCuYQURbheBDAdX1NGQ Ffk2+TeRB0ejPYh5y3S46+x8YOMr/cRkSnx6P/ppBdGwn4DrdM5nMY0HRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqcvdQePOPHbk2GkTdcOMZBsMXaMB8GA1UdIwQY MBaAFO1zwmYJsbIdh6aBMC7y0m/AoA+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOGVhNDYtOWRjMi00MDM2LTkwOTYt NGNkNzdiMzhmMWIxLzEvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jOGVhNDYtOWRjMi00MDM2LTkwOTYtNGNkNzdiMzhmMWIx LzEvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiGl/mQn 6LeccCKYnuSyvh1QdZ4XGmxLjUuXj/77MdVR9Xp3kRkFyaWhEKezgyOG7ofZ2T62 Dj066RMuIjk4mUQJ8zTKQ/J0u7EkeFEk0g30HxwKM2dpBrfJ/8dWu4J+RWLQ4/gc bU4onbBKHnXbHLjTPHkV8WWeJvcURogczlea7Pf4lMVAt5Lqbx4haUmT3Ds7Y8wc NY0MXs4EbT7lWQSlqlAXWBjuKBbnNVI0edgXvKnGANOTW1FLmGQ9rhJ1GMJ3mKBu kvkSJxo7uGu2+kXOPFXkXjBRr5XmofOevgVFr0uLRBymBNESiGQWtOVRQRhT7KOu cxcRUxNDiWVkjw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:09 2025 by rpki-client