This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json) Hash identifier: fsMsnIHlnYxv1gcpy2EN/nO+iAu5DgoZ8JUSAGdUkOs= Subject key identifier: EF:E1:57:04:39:DA:01:78:37:F2:44:23:AB:3C:7E:A7:55:63:53:91 Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa Certificate serial: 019AF842058457A62293C26103A84B4F4D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft Manifest number: 0A58 Signing time: Sun 07 Dec 2025 10:01:07 +0000 Manifest this update: Sun 07 Dec 2025 10:01:07 +0000 Manifest next update: Mon 08 Dec 2025 10:01:07 +0000 Files and hashes: 1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: Mvung8Sx69c8JPx7YSBzdy/E6hHYZl/JnXhc9vMRhJY=) 2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:42:05:84:57:a6:22:93:c2:61:03:a8:4b:4f:4d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa Validity Not Before: Dec 7 10:01:07 2025 GMT Not After : Dec 8 10:01:07 2025 GMT Subject: CN=efe1570439da017837f24423ab3c7ea755635391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:18:88:2d:ee:30:cf:88:74:5f:ea:a4:a1: 21:3e:24:fa:66:3d:72:44:0d:a7:28:57:5e:1a:5a: 81:7a:86:5c:09:a6:10:6a:1e:6d:42:2e:e5:9c:08: 33:69:6f:d9:34:3f:8e:22:39:b8:a7:9d:52:81:11: 8d:32:ba:b2:41:82:bf:b3:3d:80:26:aa:e7:bc:b6: 57:3b:b1:6a:e2:3e:1a:f4:a6:83:bc:17:d8:46:d6: e5:81:c0:e2:88:53:67:f6:12:07:a1:10:6b:81:6a: c3:05:6d:1c:71:bc:bd:c5:48:74:ba:1b:e7:d5:57: 54:c7:cb:fa:cb:02:81:cf:45:63:8e:36:b5:24:0e: e0:c9:15:43:46:95:df:cd:97:89:43:6d:1f:c5:f9: 62:c6:d5:65:0f:e9:02:31:08:dd:59:f8:61:97:1b: 60:12:1b:b2:29:c7:54:c3:e2:59:6c:26:34:e4:9b: 99:56:0a:36:40:6e:f3:02:58:1d:32:b3:6d:58:cf: ea:2a:68:09:11:41:40:db:99:ea:bd:1d:23:cc:97: 30:8e:0e:f0:8e:2a:26:8e:5c:49:55:4b:a9:fb:df: fc:44:01:43:d6:96:52:e9:08:25:12:6e:13:6e:d1: ba:6e:77:5b:2c:e4:b8:08:84:03:aa:f4:34:7f:8b: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E1:57:04:39:DA:01:78:37:F2:44:23:AB:3C:7E:A7:55:63:53:91 X509v3 Authority Key Identifier: keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:91:2c:35:d4:2a:48:0e:10:ad:10:3b:6e:2e:88:6b:30:e8: c5:08:b1:e7:17:0d:cb:d8:fa:e3:1a:4c:a0:9d:8f:76:d9:76: 2c:e0:9f:56:80:5c:70:1f:c6:24:e8:99:04:bd:00:bc:c3:77: c4:83:dd:f4:bd:9f:ee:dc:4b:74:96:97:a8:96:af:14:74:cc: 02:3b:d3:99:f1:2a:64:2a:a6:e3:92:84:51:ea:86:96:7b:f3: df:7d:30:0a:c1:64:eb:66:d4:de:b4:5f:56:99:98:ef:76:90: be:0e:3c:f9:98:e0:8f:28:bb:64:49:92:73:3f:28:bb:5d:95: 0d:b7:1f:fd:01:0e:8e:39:71:29:aa:b7:2c:0a:17:a3:6d:ec: 88:16:bf:d8:17:7c:80:a1:26:25:d0:6c:e9:58:0d:bc:8f:0e: 30:af:2a:f0:06:72:ae:8d:7f:f1:59:11:cf:8a:42:9d:1c:4c: bf:c6:1c:20:cd:20:aa:ca:b2:57:a4:88:a7:37:ca:65:1c:e1: c5:3a:63:7b:19:e4:19:b8:d3:8f:5a:41:34:d7:52:d2:fa:d3: f7:f9:31:86:6e:eb:0b:1b:ab:20:1c:3e:62:25:54:36:89:e2: 93:71:f2:37:b5:97:f8:7a:d2:f0:c2:0e:0e:11:48:11:4d:d5: 2d:0a:49:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4QgWEV6Yik8JhA6hLT00eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYjMzODJjMTZhMGE1NjE1OTkwZDRiY2U2MzRkYzUxNjgy ZjJlYWEwHhcNMjUxMjA3MTAwMTA3WhcNMjUxMjA4MTAwMTA3WjAzMTEwLwYDVQQD EyhlZmUxNTcwNDM5ZGEwMTc4MzdmMjQ0MjNhYjNjN2VhNzU1NjM1MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fEYiC3uMM+IdF/qpKEhPiT6Zj1y RA2nKFdeGlqBeoZcCaYQah5tQi7lnAgzaW/ZND+OIjm4p51SgRGNMrqyQYK/sz2A JqrnvLZXO7Fq4j4a9KaDvBfYRtblgcDiiFNn9hIHoRBrgWrDBW0ccby9xUh0uhvn 1VdUx8v6ywKBz0Vjjja1JA7gyRVDRpXfzZeJQ20fxflixtVlD+kCMQjdWfhhlxtg EhuyKcdUw+JZbCY05JuZVgo2QG7zAlgdMrNtWM/qKmgJEUFA25nqvR0jzJcwjg7w jiomjlxJVUup+9/8RAFD1pZS6QglEm4TbtG6bndbLOS4CIQDqvQ0f4teLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/hVwQ52gF4N/JEI6s8fqdVY1ORMB8GA1UdIwQY MBaAFHuzOCwWoKVhWZDUvOY03FFoLy6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEt OTU1NGE1YWMzNmJiLzEvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEtOTU1NGE1YWMzNmJi LzEvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5EsNdQq SA4QrRA7bi6IazDoxQix5xcNy9j64xpMoJ2Pdtl2LOCfVoBccB/GJOiZBL0AvMN3 xIPd9L2f7txLdJaXqJavFHTMAjvTmfEqZCqm45KEUeqGlnvz330wCsFk62bU3rRf VpmY73aQvg48+Zjgjyi7ZEmScz8ou12VDbcf/QEOjjlxKaq3LAoXo23siBa/2Bd8 gKEmJdBs6VgNvI8OMK8q8AZyro1/8VkRz4pCnRxMv8YcIM0gqsqyV6SIpzfKZRzh xTpjexnkGbjTj1pBNNdS0vrT9/kxhm7rCxurIBw+YiVUNonik3HyN7WX+HrS8MIO DhFIEU3VLQpJ7g== -----END CERTIFICATE-----Generated at Sun Dec 7 15:29:32 2025 by rpki-client