This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json) Hash identifier: qtTpf0EwiKzM3hnCxUddWK7vJrzWZYsFVCv0uLQ1hB0= Subject key identifier: 77:89:BA:9A:4E:0A:24:AC:AD:94:6A:22:24:58:07:3C:04:40:2B:35 Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae Certificate serial: 019AF19AD7B2BA797D5083742380CD6BF546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft Manifest number: 02E2 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: w7aqIOfyyEpdIUtukf62zCBXPLSvij9cxcusvlkjkDU=) 2: Br2XYkCHvC72aVRHi890y0oAZCY.roa (hash: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d7:b2:ba:79:7d:50:83:74:23:80:cd:6b:f5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=7789ba9a4e0a24acad946a222458073c04402b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:11:38:f0:45:75:ba:2c:ba:70:d6:0f:9e: 18:20:8f:63:04:a0:8b:b0:73:87:be:5d:f2:57:e5: 4b:ae:48:51:6f:40:16:de:93:76:57:e2:c4:4b:8d: 38:5e:99:bf:f6:80:de:bb:ed:24:b1:fc:80:93:84: 05:69:2d:fb:b7:06:d8:fc:98:86:be:8c:ec:ef:2e: 0f:08:79:a6:45:1c:b4:dd:aa:b8:94:f0:d5:6b:95: 2b:f0:2d:4e:f8:45:62:01:d2:82:f0:24:a0:f5:7f: cc:08:dc:ce:3e:16:ee:3e:d3:d4:0f:ed:83:a0:ab: 84:56:3e:75:51:f8:76:1e:a8:ea:f4:52:6d:02:e1: 73:6a:9e:00:73:17:05:30:4a:01:e8:76:a3:fc:db: 91:af:1c:69:72:23:ad:df:b8:00:5a:a6:6f:96:95: 5a:0b:93:63:86:8a:53:fa:1e:36:83:4e:d2:ca:55: 6b:f6:60:9f:6a:cb:45:c0:ca:cc:68:c1:ab:63:5d: 4f:76:4f:d8:c8:7e:6c:33:19:5d:94:a1:e4:5c:88: 2c:df:39:f4:c8:58:69:36:7e:2b:10:e3:c7:39:98: 24:29:2d:4e:1a:42:97:fc:92:1a:d7:82:82:7a:49: db:07:d4:76:d1:0f:be:b9:ea:4f:49:e4:72:97:5b: e7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:89:BA:9A:4E:0A:24:AC:AD:94:6A:22:24:58:07:3C:04:40:2B:35 X509v3 Authority Key Identifier: keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:67:4f:d5:8e:36:91:57:7e:cd:10:28:76:5b:22:7c:66:c1: a0:d9:1a:2a:58:61:12:23:67:e7:4e:f3:83:e8:5d:d8:1c:64: 15:d9:d4:5c:65:dc:19:a8:a4:fd:cc:5b:01:18:15:02:9c:59: 9c:a3:df:f5:48:98:ad:24:3f:b2:41:0a:d5:c0:12:d0:35:04: 4a:5b:e9:f7:86:77:9c:af:52:05:a0:fa:0d:3c:a5:11:83:16: 00:be:99:0b:7d:e3:ba:96:ab:29:73:ae:bb:27:ee:aa:a6:99: e9:0e:a8:d5:39:86:f2:5e:9d:a4:c1:55:37:99:fc:c4:9a:51: 09:95:40:9e:29:c3:27:19:d2:85:ea:28:a5:de:2a:a5:d0:fb: 10:2b:5e:87:0d:b3:c1:13:b0:2c:80:1d:c8:13:2f:b3:0d:f5: 1e:a0:3b:ba:49:6f:69:31:01:87:c5:ed:76:f6:58:63:e1:c3: fa:90:07:eb:c5:87:ad:87:74:a6:2c:e4:de:6d:fe:2b:55:00: 99:6e:6b:59:b1:7b:73:c0:64:59:54:38:a0:05:9b:5b:de:22: 3e:44:08:06:39:b7:13:95:80:87:b7:ba:ba:29:07:bb:c0:b3: 33:5d:3e:2c:1d:59:50:b7:57:2b:5a:38:03:ea:e6:bf:5b:4f: 05:2c:53:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmteyunl9UIN0I4DNa/VGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx NjdkYWUwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD Eyg3Nzg5YmE5YTRlMGEyNGFjYWQ5NDZhMjIyNDU4MDczYzA0NDAyYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfMROPBFdbosunDWD54YII9jBKCL sHOHvl3yV+VLrkhRb0AW3pN2V+LES404Xpm/9oDeu+0ksfyAk4QFaS37twbY/JiG vozs7y4PCHmmRRy03aq4lPDVa5Ur8C1O+EViAdKC8CSg9X/MCNzOPhbuPtPUD+2D oKuEVj51Ufh2Hqjq9FJtAuFzap4AcxcFMEoB6Haj/NuRrxxpciOt37gAWqZvlpVa C5NjhopT+h42g07SylVr9mCfastFwMrMaMGrY11Pdk/YyH5sMxldlKHkXIgs3zn0 yFhpNn4rEOPHOZgkKS1OGkKX/JIa14KCeknbB9R20Q++uepPSeRyl1vnhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeJuppOCiSsrZRqIiRYBzwEQCs1MB8GA1UdIwQY MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4 LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmdP1Y42 kVd+zRAodlsifGbBoNkaKlhhEiNn507zg+hd2BxkFdnUXGXcGaik/cxbARgVApxZ nKPf9UiYrSQ/skEK1cAS0DUESlvp94Z3nK9SBaD6DTylEYMWAL6ZC33juparKXOu uyfuqqaZ6Q6o1TmG8l6dpMFVN5n8xJpRCZVAninDJxnSheoopd4qpdD7ECtehw2z wROwLIAdyBMvsw31HqA7uklvaTEBh8XtdvZYY+HD+pAH68WHrYd0pizk3m3+K1UA mW5rWbF7c8BkWVQ4oAWbW94iPkQIBjm3E5WAh7e6uikHu8CzM10+LB1ZULdXK1o4 A+rmv1tPBSxTgg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:26 2025 by rpki-client