This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json) Hash identifier: Z68Dp1SbjbmVoazbXvFgqVrLq3WCLS07XtLzT3eubho= Subject key identifier: DE:24:62:84:43:60:BB:38:24:17:B3:33:22:CD:2B:F3:F7:D1:D7:E4 Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Certificate serial: 019AF1D21CA8A31983DA9D33C46B99A0B098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft Manifest number: 0A2D Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: FhOYmQ/pRGikAmmrUG5QVU0Jpu4U+4FCINSAYpGF07w=) 2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1c:a8:a3:19:83:da:9d:33:c4:6b:99:a0:b0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=de2462844360bb382417b33322cd2bf3f7d1d7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:4e:1d:2c:8d:ae:b5:bf:9e:52:66:04:2a: 5d:57:57:c1:ca:a6:de:e7:1a:a0:b5:45:b2:f7:70: 82:33:76:59:42:cc:1a:cc:3a:22:f7:c1:32:ab:de: 47:08:61:06:cc:df:d2:cc:92:6b:7a:c2:5f:ac:6d: ee:ca:b3:cb:c5:1f:bf:b2:6a:7d:8b:ce:75:1b:22: 00:2d:2f:b6:51:9d:4d:b8:7d:73:5e:b7:70:06:d8: ce:bf:02:6f:9e:48:d8:7b:64:77:54:7e:53:3a:6f: 64:7a:b2:d4:49:02:45:19:2f:2c:c0:a9:7e:d8:41: 05:d9:6c:24:c6:e2:22:6e:69:64:89:fb:0f:31:af: 84:cb:7c:84:2b:aa:1b:dc:77:5a:0c:22:9e:a2:5d: 01:9a:1f:f1:46:af:d1:61:3f:47:9a:d1:8c:b1:75: 05:0c:cf:00:6a:c6:5c:61:e4:3c:45:9f:03:83:fb: 60:d1:3d:d7:e6:37:cc:52:26:08:25:fb:d3:fd:a6: 7c:f2:a2:00:6b:ec:28:4e:35:9c:29:01:aa:41:a0: 54:40:a7:65:0b:8f:9a:72:86:e3:5b:0e:e5:1c:4a: 7c:3e:c8:3c:0c:81:2a:33:2c:2f:f1:eb:bc:fd:0c: b7:ac:5d:3e:2b:e6:da:f6:e7:60:e5:6c:1f:72:93: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:24:62:84:43:60:BB:38:24:17:B3:33:22:CD:2B:F3:F7:D1:D7:E4 X509v3 Authority Key Identifier: keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:24:41:10:17:8f:23:cc:33:2d:c7:17:18:cc:68:7f:ff:4e: 6d:75:40:9d:a6:ea:f8:aa:09:32:ff:83:5b:eb:24:f1:3e:08: 5e:e2:7d:64:2f:97:a0:89:c8:d1:a6:81:96:00:06:79:71:0b: 7b:fb:1d:2c:84:cd:7d:3d:ce:07:e2:06:5c:e7:4f:f4:d6:d2: 9d:33:7d:70:76:15:44:0d:b6:b7:38:78:c5:4e:b2:51:f0:8b: e1:9a:7c:be:e5:9d:e3:37:40:c6:0f:eb:e6:f1:a1:39:cc:63: ac:c1:d6:c4:29:bf:0a:aa:cf:ba:d2:97:9f:d4:25:5d:8a:5a: 57:36:f8:7a:73:a3:a6:ac:87:5e:a9:ea:91:54:89:55:2c:af: 23:08:8e:b7:38:b3:2f:50:1c:4a:ef:51:b7:e8:1a:d6:3b:ee: 33:d5:89:c9:02:ce:07:6a:b8:ec:2b:02:2f:87:15:62:4f:7a: 57:d7:8a:6f:da:8f:b8:ea:17:17:3b:99:1a:57:ae:81:f4:2c: f9:a9:12:74:00:38:91:54:ea:10:12:29:c8:0a:9d:28:4c:5c: bc:0f:00:37:29:33:db:74:9f:8f:62:2c:4d:4c:8a:33:f3:10: 87:2e:88:3d:ca:90:e8:b6:c0:96:5e:6d:a2:f0:b6:03:b7:43: 16:5f:82:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hyooxmD2p0zxGuZoLCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNzQ1MGIyMzAxNzJlM2U4YWQzNTI4ODExMGVmOGFiZDI0 ZmY5MmQwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD EyhkZTI0NjI4NDQzNjBiYjM4MjQxN2IzMzMyMmNkMmJmM2Y3ZDFkN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ1OHSyNrrW/nlJmBCpdV1fByqbe 5xqgtUWy93CCM3ZZQswazDoi98Eyq95HCGEGzN/SzJJresJfrG3uyrPLxR+/smp9 i851GyIALS+2UZ1NuH1zXrdwBtjOvwJvnkjYe2R3VH5TOm9kerLUSQJFGS8swKl+ 2EEF2WwkxuIibmlkifsPMa+Ey3yEK6ob3HdaDCKeol0Bmh/xRq/RYT9HmtGMsXUF DM8AasZcYeQ8RZ8Dg/tg0T3X5jfMUiYIJfvT/aZ88qIAa+woTjWcKQGqQaBUQKdl C4+acobjWw7lHEp8Psg8DIEqMywv8eu8/Qy3rF0+K+ba9udg5WwfcpOoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4kYoRDYLs4JBezMyLNK/P30dfkMB8GA1UdIwQY MBaAFO50ULIwFy4+itNSiBEO+KvST/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZTI1N2UtZGY2NC00NjY4LTg2M2It ZjRkZWE4NjkyOWFlLzEvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZTI1N2UtZGY2NC00NjY4LTg2M2ItZjRkZWE4NjkyOWFl LzEvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCRBEBeP I8wzLccXGMxof/9ObXVAnabq+KoJMv+DW+sk8T4IXuJ9ZC+XoInI0aaBlgAGeXEL e/sdLITNfT3OB+IGXOdP9NbSnTN9cHYVRA22tzh4xU6yUfCL4Zp8vuWd4zdAxg/r 5vGhOcxjrMHWxCm/CqrPutKXn9QlXYpaVzb4enOjpqyHXqnqkVSJVSyvIwiOtziz L1AcSu9Rt+ga1jvuM9WJyQLOB2q47CsCL4cVYk96V9eKb9qPuOoXFzuZGleugfQs +akSdAA4kVTqEBIpyAqdKExcvA8ANykz23Sfj2IsTUyKM/MQhy6IPcqQ6LbAll5t ovC2A7dDFl+CHg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:52 2025 by rpki-client