This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json) Hash identifier: 8EeMa9KZwh0rpQu4iU9U9U266Km2ETJEtNULKkbrGhY= Subject key identifier: CB:C4:9F:0B:FF:18:A1:DE:00:DF:A0:59:9E:4B:E3:C2:7F:76:BA:00 Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca Certificate serial: 019AF2E440A88A8805BC91EE1FD2D4723E82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 09:00:36 +0000 Manifest this update: Sat 06 Dec 2025 09:00:36 +0000 Manifest next update: Sun 07 Dec 2025 09:00:36 +0000 Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: Ctj6OTxSgkR3Y8EiADkEdgImpocqNTGAvUVCwT7+lPE=) 2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:40:a8:8a:88:05:bc:91:ee:1f:d2:d4:72:3e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca Validity Not Before: Dec 6 09:00:36 2025 GMT Not After : Dec 7 09:00:36 2025 GMT Subject: CN=cbc49f0bff18a1de00dfa0599e4be3c27f76ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:29:66:58:4f:c3:c8:e1:a2:ca:28:4d:35: d6:0f:ce:e4:f8:84:b1:d8:10:4e:81:d7:ee:d4:f8: a5:5b:cd:04:0d:d1:e6:a4:d5:b7:9e:06:35:42:87: 31:d0:61:02:bc:dd:61:02:0e:17:06:ba:64:27:cc: c7:94:ef:1d:a1:7b:0f:7f:f0:2b:a6:f5:9c:93:81: 96:4e:07:84:07:58:cf:34:cb:79:0e:51:48:5f:65: 7f:f2:33:5a:2c:19:36:04:72:66:d4:4e:b7:ef:f4: 50:57:5a:29:e3:d0:6a:c4:93:8a:8d:60:bd:96:01: ae:9b:4c:48:b5:27:7e:c9:b2:b5:87:a6:db:08:88: 50:f1:b3:9d:9d:dd:c2:9a:94:17:36:08:9f:87:27: 1a:79:29:71:38:c1:99:9e:70:3c:2d:5f:ae:fd:6a: 0c:2c:fa:b9:c1:17:bb:21:5d:c1:b8:8c:50:d4:f0: b7:80:e7:6c:5d:3d:8e:68:b1:12:82:ea:19:23:41: 2d:f8:b1:70:a7:21:82:ab:94:65:24:b4:b0:cc:8c: a7:27:10:75:88:64:4e:60:f5:30:b3:01:92:c0:28: d0:9c:36:28:83:07:a2:4d:2b:ca:8d:02:ac:86:ac: b2:13:eb:4b:a2:25:1f:71:8d:12:41:53:d4:f5:79: 7c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C4:9F:0B:FF:18:A1:DE:00:DF:A0:59:9E:4B:E3:C2:7F:76:BA:00 X509v3 Authority Key Identifier: keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:4e:26:47:14:b0:64:82:99:0f:1d:ab:21:e9:b4:01:4b: f3:e6:7a:f4:78:12:d5:eb:df:cd:92:6c:69:f1:94:4e:88:b6: 9d:6c:a5:c4:0a:e9:1f:bf:a1:a1:eb:6d:cb:ab:59:ba:d5:4f: f0:15:cb:f8:7e:8c:42:2e:47:24:eb:16:12:9a:58:7a:69:81: 25:09:12:5b:ad:1b:85:f9:06:66:1f:a7:f1:a0:9f:f4:3f:1f: f8:8f:18:80:84:a8:38:e3:c0:b9:bc:a4:2c:ca:bd:79:d7:aa: 5d:8b:05:d7:0a:3f:87:49:c0:5a:49:00:ca:bc:a5:30:ac:da: 0a:6d:04:d8:f2:81:ef:2d:54:e4:7d:5f:04:d0:16:bf:b0:bb: ca:6a:20:a2:70:80:83:48:2f:0c:87:1c:51:bd:fa:2f:57:b7: e6:50:38:0d:06:79:46:6b:50:22:b9:13:b3:c9:81:58:c3:b3: c3:88:94:62:07:69:1d:55:67:de:e7:07:f7:4f:55:26:c1:0a: 18:63:4c:8e:40:6d:f7:b2:1a:98:e3:a7:e2:08:9d:af:b2:5b: 7f:68:48:ce:88:09:a5:e4:e9:10:c6:4a:ef:98:eb:29:5a:95: b0:5c:e1:08:48:3c:58:92:e0:e5:a9:80:1c:79:5f:f8:c9:f8: a0:a9:f1:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5ECoiogFvJHuH9LUcj6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODlkMTdiMzlhNzY4NGE2OTU0Yjk3YjhiMGZiYWM3ZDQ4 OTU0Y2EwHhcNMjUxMjA2MDkwMDM2WhcNMjUxMjA3MDkwMDM2WjAzMTEwLwYDVQQD EyhjYmM0OWYwYmZmMThhMWRlMDBkZmEwNTk5ZTRiZTNjMjdmNzZiYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40IpZlhPw8jhosooTTXWD87k+ISx 2BBOgdfu1PilW80EDdHmpNW3ngY1Qocx0GECvN1hAg4XBrpkJ8zHlO8doXsPf/Ar pvWck4GWTgeEB1jPNMt5DlFIX2V/8jNaLBk2BHJm1E637/RQV1op49BqxJOKjWC9 lgGum0xItSd+ybK1h6bbCIhQ8bOdnd3CmpQXNgifhycaeSlxOMGZnnA8LV+u/WoM LPq5wRe7IV3BuIxQ1PC3gOdsXT2OaLESguoZI0Et+LFwpyGCq5RlJLSwzIynJxB1 iGROYPUwswGSwCjQnDYogweiTSvKjQKshqyyE+tLoiUfcY0SQVPU9Xl8ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvEnwv/GKHeAN+gWZ5L48J/droAMB8GA1UdIwQY MBaAFO6J0Xs5p2hKaVS5e4sPusfUiVTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29uUmV6bW5hRXBwVkxsN2l3LTZ4OVNKVk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lMTFiNTMtMWNkNi00NzQ3LTkyMzIt ZjE5YjRlN2IyN2NiLzEvN29uUmV6bW5hRXBwVkxsN2l3LTZ4OVNKVk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lMTFiNTMtMWNkNi00NzQ3LTkyMzItZjE5YjRlN2IyN2Ni LzEvN29uUmV6bW5hRXBwVkxsN2l3LTZ4OVNKVk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZhOJkcU sGSCmQ8dqyHptAFL8+Z69HgS1evfzZJsafGUToi2nWylxArpH7+hoetty6tZutVP 8BXL+H6MQi5HJOsWEppYemmBJQkSW60bhfkGZh+n8aCf9D8f+I8YgISoOOPAubyk LMq9edeqXYsF1wo/h0nAWkkAyrylMKzaCm0E2PKB7y1U5H1fBNAWv7C7ymogonCA g0gvDIccUb36L1e35lA4DQZ5RmtQIrkTs8mBWMOzw4iUYgdpHVVn3ucH909VJsEK GGNMjkBt97IamOOn4gidr7Jbf2hIzogJpeTpEMZK75jrKVqVsFzhCEg8WJLg5amA HHlf+Mn4oKnxwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:10 2025 by rpki-client