This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json) Hash identifier: gA9v6O7kzV+fa86a7ocjRySORso9cpad9VMlSGVEHBg= Subject key identifier: 4E:2B:06:12:77:F0:DD:12:E9:54:E1:39:3D:F1:3D:EA:76:C6:A3:BB Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87 Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287 Certificate serial: 019AF16449E849B40D65AB0E2EC8FDE03DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: jsUfUk+whwgwiAnK43shmHZ+Wn30HCIr/R6m9l2aDPQ=) 2: Lob4QDIP2dfLNefIfHCH-elGr6w.roa (hash: gcr1vfLV1uOvIBLUDtdkrAdiHkI7eAoGXpU8ShFCIEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:49:e8:49:b4:0d:65:ab:0e:2e:c8:fd:e0:3d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287 Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=4e2b061277f0dd12e954e1393df13dea76c6a3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:b9:bc:76:c2:d4:98:81:50:91:29:93:e1: b5:62:27:08:6e:97:64:ba:81:a5:50:54:d9:60:2b: 07:e2:0a:d3:c8:e2:75:c6:c5:be:7c:0f:a9:49:1b: cb:50:49:1e:56:18:f2:cd:ea:f8:05:cc:bb:6e:69: d8:f4:d1:2c:49:96:c7:11:2e:b2:5b:76:07:50:c0: db:9e:70:63:fe:22:a9:cf:49:9f:5b:15:69:25:15: d4:ab:a7:81:65:f4:74:69:4d:c9:3a:4b:d5:a0:ab: 53:e1:4f:5c:33:de:af:0c:87:31:a5:09:0b:71:4c: 5c:86:9c:cd:0a:de:ad:b6:e8:97:cd:8f:89:52:43: 6e:f6:1c:70:31:91:1b:c1:ab:a7:1c:79:2b:29:83: bd:87:f0:96:cd:7d:2f:71:ce:23:4a:a2:07:18:df: df:a2:ec:d4:99:d9:5b:7d:85:84:4d:36:ad:d1:b2: dd:af:f8:cf:d1:a1:ef:b5:8c:d7:ab:c3:fc:dc:05: b7:e2:48:d3:7b:26:5c:68:ea:6e:8a:b8:14:4e:84: a2:e7:70:aa:93:6c:a2:72:b7:5f:53:93:6a:90:10: 17:64:4d:13:5c:72:09:59:52:a3:f0:97:b1:d4:93: 81:13:98:1c:6c:9d:48:bc:b5:c8:71:e9:54:ee:e5: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2B:06:12:77:F0:DD:12:E9:54:E1:39:3D:F1:3D:EA:76:C6:A3:BB X509v3 Authority Key Identifier: keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:71:90:aa:28:fe:7f:d2:e1:d9:06:8c:d0:fe:f4:a2:44: 81:6b:24:39:e3:69:bb:3a:ed:08:bf:50:f7:d6:11:dd:fa:50: 6e:78:1a:af:b4:2e:bf:d1:47:e3:af:02:02:b1:2b:9f:b8:8f: 0d:1c:b4:a2:3a:e9:ba:73:53:6a:49:3e:ee:2d:31:20:b5:58: cd:c8:39:b5:6e:bc:09:73:8e:a2:a5:62:a7:26:ed:09:d7:0b: 85:dc:64:eb:b8:57:e9:0c:3c:76:ad:6b:85:8e:58:8b:1b:b5: 77:83:b8:0c:ad:28:9e:76:0e:72:6c:df:ca:54:2e:a3:14:a4: b4:d3:c7:9f:8e:93:52:62:59:d6:df:7b:7a:23:9d:74:76:7f: 8b:38:b6:70:37:89:e9:8d:45:46:9a:9d:28:a4:eb:eb:fc:03: 2e:97:f7:52:d6:37:96:18:17:f0:81:77:71:ed:c5:cf:74:81: fb:70:a7:6a:18:69:39:5d:92:3e:f6:11:e5:c5:47:e7:c7:13: 4b:b3:ee:16:77:71:dc:cc:ce:fe:03:0d:f9:67:ee:bc:d0:92: 6a:d8:08:10:8f:10:d9:b1:96:68:d4:4d:57:44:c6:98:c4:c1: 48:5d:31:ca:f7:72:07:45:0a:31:f8:6e:33:2c:d3:0a:f2:07: 6e:69:82:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEnoSbQNZasOLsj94D3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZmJlODM2OWE3YmJjMDNhODZmYmU2MzliN2VmYWEwMmI3 MTcyODcwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD Eyg0ZTJiMDYxMjc3ZjBkZDEyZTk1NGUxMzkzZGYxM2RlYTc2YzZhM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNS5vHbC1JiBUJEpk+G1YicIbpdk uoGlUFTZYCsH4grTyOJ1xsW+fA+pSRvLUEkeVhjyzer4Bcy7bmnY9NEsSZbHES6y W3YHUMDbnnBj/iKpz0mfWxVpJRXUq6eBZfR0aU3JOkvVoKtT4U9cM96vDIcxpQkL cUxchpzNCt6ttuiXzY+JUkNu9hxwMZEbwaunHHkrKYO9h/CWzX0vcc4jSqIHGN/f ouzUmdlbfYWETTat0bLdr/jP0aHvtYzXq8P83AW34kjTeyZcaOpuirgUToSi53Cq k2yicrdfU5NqkBAXZE0TXHIJWVKj8Jex1JOBE5gcbJ1IvLXIcelU7uV2NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4rBhJ38N0S6VThOT3xPep2xqO7MB8GA1UdIwQY MBaAFO776Daae7wDqG++Y5t++qArcXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmU5OTktNWE1OS00YzEwLTkyZmYt ZGExYjU4NjE4ODQxLzEvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xYmU5OTktNWE1OS00YzEwLTkyZmYtZGExYjU4NjE4ODQx LzEvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXVxkKoo /n/S4dkGjND+9KJEgWskOeNpuzrtCL9Q99YR3fpQbngar7Quv9FH468CArErn7iP DRy0ojrpunNTakk+7i0xILVYzcg5tW68CXOOoqVipybtCdcLhdxk67hX6Qw8dq1r hY5Yixu1d4O4DK0onnYOcmzfylQuoxSktNPHn46TUmJZ1t97eiOddHZ/izi2cDeJ 6Y1FRpqdKKTr6/wDLpf3UtY3lhgX8IF3ce3Fz3SB+3CnahhpOV2SPvYR5cVH58cT S7PuFndx3MzO/gMN+WfuvNCSatgIEI8Q2bGWaNRNV0TGmMTBSF0xyvdyB0UKMfhu MyzTCvIHbmmC7w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:07 2025 by rpki-client