This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft File: u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json) Hash identifier: sUqAvr3Lmz3/kL8shrtv9GxHNA/5xUPjzZNC7IKw6eU= Subject key identifier: 7A:E3:EC:AF:50:FD:CC:68:5E:E9:79:B4:CE:2C:3E:AC:7B:01:F6:0D Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3 Certificate issuer: /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3 Certificate serial: 019AF19B88257353742E7A0E4551966A0B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft Manifest number: 0AE1 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: ldjIS70Dh/EuKXZFDPa+y0/sjQi6uJkOll/7cnvmEqg=) 2: yfiu2M8plrtU3UaE1tSWQlOfqzM.roa (hash: LGvgYonneT46G/xf4FgiBrT7VrnKx0OUEEnLR8etqrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:88:25:73:53:74:2e:7a:0e:45:51:96:6a:0b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=7ae3ecaf50fdcc685ee979b4ce2c3eac7b01f60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:bb:16:6e:76:e7:2b:8a:fb:9d:f0:0f:97: 6a:ae:61:31:64:d2:ee:4b:3a:ea:62:57:d8:49:d1: 1d:38:74:01:b2:d4:ec:9a:c1:78:4c:be:50:63:ce: 6f:db:78:05:62:29:08:06:64:9b:d1:e9:d3:ed:a4: 49:c5:e0:89:b0:49:03:a6:12:50:42:42:74:73:ba: 38:cc:50:47:8a:78:ea:ea:d6:f5:c2:eb:6d:6a:05: b9:cd:27:d0:99:d8:69:90:8f:b9:b9:25:c6:35:7f: 50:20:52:57:89:a8:40:d5:72:a2:8e:ad:9f:f5:f4: de:ac:a8:de:cc:6a:c6:e2:e4:ea:c0:e0:96:a4:26: 62:fe:48:aa:39:69:63:af:8b:a3:17:36:72:d1:94: 6f:b0:39:9d:d8:3c:da:fd:a4:d7:39:ac:6d:e2:0f: 2c:a7:12:a1:8d:dc:5f:c0:2d:48:2b:ee:cf:1b:a4: ac:99:96:2a:97:7d:58:19:bc:ed:ed:8a:eb:8a:87: 07:f0:b7:05:a3:4b:ff:9d:9a:2c:fb:08:6f:1a:a5: d6:ea:20:8c:56:f5:cf:5c:e1:5f:46:e5:58:15:c1: f1:63:03:24:ac:e5:de:7f:0a:88:61:90:4b:2c:80: 00:d5:e1:cf:fd:01:0d:92:24:57:ea:5c:41:ac:64: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E3:EC:AF:50:FD:CC:68:5E:E9:79:B4:CE:2C:3E:AC:7B:01:F6:0D X509v3 Authority Key Identifier: keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f0:78:93:c5:7b:cc:24:43:79:02:c1:9c:27:5d:13:ad:e6: 67:a9:5d:5d:05:ac:52:b3:8d:ea:24:97:d7:24:54:e1:06:50: 9b:2f:d0:d6:80:7f:b3:b3:b1:54:a1:80:f1:06:a8:1a:43:fb: 13:fa:9e:cc:9c:03:d7:10:4a:6d:ec:f3:6a:2a:d3:9a:76:55: 87:dd:9c:aa:91:aa:32:f3:b9:80:62:23:72:99:9a:86:4f:94: bb:a7:6d:a5:2f:83:95:c9:81:3b:f9:f9:89:ba:45:36:76:03: 9e:bc:04:88:ee:02:63:ba:b0:d0:03:15:3a:c6:51:fb:dd:cb: 27:26:05:f1:ae:3b:c4:49:19:03:72:d3:14:69:3e:5a:d4:1b: 0e:63:7c:c7:c3:a9:ca:4c:8a:c4:d7:cf:a2:0a:c6:b1:27:40: d1:c7:39:99:8c:60:83:f4:bd:df:fa:24:8b:af:2f:0b:6d:55: 62:89:b7:86:f7:de:ab:18:85:18:c2:cb:3b:b6:62:89:1f:32: ff:4c:4e:8e:17:18:97:67:db:e6:e8:01:a0:bd:82:e3:5c:ea: 03:96:5d:20:bb:b4:15:d3:31:09:28:d9:c3:10:a4:a9:cf:96: 79:b7:b4:8f:98:10:02:2f:b5:81:2b:de:2f:3f:37:38:bc:e5: a3:76:50:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4glc1N0LnoORVGWaguZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYjMxNGQ3ZTM2OTAxZjZkZWE3YzAyOTFhNTE1MzNiYjIy NGYzYjMwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD Eyg3YWUzZWNhZjUwZmRjYzY4NWVlOTc5YjRjZTJjM2VhYzdiMDFmNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQG7Fm525yuK+53wD5dqrmExZNLu SzrqYlfYSdEdOHQBstTsmsF4TL5QY85v23gFYikIBmSb0enT7aRJxeCJsEkDphJQ QkJ0c7o4zFBHinjq6tb1wuttagW5zSfQmdhpkI+5uSXGNX9QIFJXiahA1XKijq2f 9fTerKjezGrG4uTqwOCWpCZi/kiqOWljr4ujFzZy0ZRvsDmd2Dza/aTXOaxt4g8s pxKhjdxfwC1IK+7PG6SsmZYql31YGbzt7YrriocH8LcFo0v/nZos+whvGqXW6iCM VvXPXOFfRuVYFcHxYwMkrOXefwqIYZBLLIAA1eHP/QENkiRX6lxBrGTeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrj7K9Q/cxoXul5tM4sPqx7AfYNMB8GA1UdIwQY MBaAFLuzFNfjaQH23qfAKRpRUzuyJPOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83YWMzN2ItMDIwYi00OWFlLWFjOWIt Zjk4ZWM3NGFiZmQ1LzEvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83YWMzN2ItMDIwYi00OWFlLWFjOWItZjk4ZWM3NGFiZmQ1 LzEvdTdNVTEtTnBBZmJlcDhBcEdsRlRPN0lrODdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfB4k8V7 zCRDeQLBnCddE63mZ6ldXQWsUrON6iSX1yRU4QZQmy/Q1oB/s7OxVKGA8QaoGkP7 E/qezJwD1xBKbezzairTmnZVh92cqpGqMvO5gGIjcpmahk+Uu6dtpS+DlcmBO/n5 ibpFNnYDnrwEiO4CY7qw0AMVOsZR+93LJyYF8a47xEkZA3LTFGk+WtQbDmN8x8Op ykyKxNfPogrGsSdA0cc5mYxgg/S93/oki68vC21VYom3hvfeqxiFGMLLO7ZiiR8y /0xOjhcYl2fb5ugBoL2C41zqA5ZdILu0FdMxCSjZwxCkqc+Webe0j5gQAi+1gSve Lz83OLzlo3ZQ6g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:11 2025 by rpki-client