This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft File: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json) Hash identifier: M635KbZvFFeVS0e+mGOd2FoGt4avyMljQgHlwFjaza4= Subject key identifier: 0F:FA:65:58:6A:2D:65:EC:E2:51:C2:C0:48:05:6E:D1:25:44:56:A9 Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40 Certificate issuer: /CN=ee0abba552f46b94edf22394feec1d0459f20140 Certificate serial: 019AF540BCD342303E95FA6238B7B8F9EDC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft Manifest number: 0639 Signing time: Sat 06 Dec 2025 20:00:51 +0000 Manifest this update: Sat 06 Dec 2025 20:00:51 +0000 Manifest next update: Sun 07 Dec 2025 20:00:51 +0000 Files and hashes: 1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: p3EnqcZ0owrPbJlguULZ6SL8N4p0slrh1Ptw+Wyi8ZQ=) 2: ZSfnZXfCOs8x_SKnrQS-DfOeOBs.roa (hash: k4WlesxZPYjMy2rKnlrfZMvi67C/I6Pliai9HgbVxyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:bc:d3:42:30:3e:95:fa:62:38:b7:b8:f9:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140 Validity Not Before: Dec 6 20:00:51 2025 GMT Not After : Dec 7 20:00:51 2025 GMT Subject: CN=0ffa65586a2d65ece251c2c048056ed1254456a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:98:d9:0b:d5:de:f7:53:f4:f6:4d:92:3d: a8:9d:94:13:82:a3:c1:7c:24:96:4a:06:80:f4:e5: 4e:fe:2a:86:e5:bc:8b:c3:d9:dc:6b:98:55:3d:42: 3b:02:76:ce:e9:2d:37:73:87:93:49:f1:de:56:de: 9e:53:f1:42:e2:9d:75:1b:46:81:44:d6:2c:ac:d0: b4:b2:64:0d:fe:c0:82:de:00:03:21:22:e9:d1:18: fe:3d:f8:f9:6c:24:e0:3a:44:e9:5a:2e:71:c4:f5: f5:cd:fd:b6:75:8c:6a:5e:40:f0:fd:19:e8:41:93: a8:2a:fc:28:a4:17:3e:2f:bc:cc:b6:1c:67:12:83: e2:5a:74:93:d3:ac:b9:8b:d8:a4:56:9c:dc:75:9d: 23:04:ff:e2:91:9d:6c:c8:6d:16:7a:37:2c:34:08: c6:1a:23:f0:15:9f:56:d8:29:5a:d9:6f:ac:86:af: 70:3b:3e:ad:9f:c0:25:b4:cc:32:3d:e4:72:8e:a7: fd:39:b7:b5:a0:e3:43:c1:a0:09:3e:5e:5e:d2:18: bd:72:92:b7:59:8e:fe:e4:c3:6f:ac:94:e4:2b:7b: 9a:a2:21:56:7b:d9:1d:33:a2:ed:b1:3d:07:dd:0e: e6:b9:51:51:ef:31:90:c7:87:4d:67:89:6c:ee:ed: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:65:58:6A:2D:65:EC:E2:51:C2:C0:48:05:6E:D1:25:44:56:A9 X509v3 Authority Key Identifier: keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:83:2d:8d:1f:a5:b3:e3:fe:ad:01:19:fe:05:21:04:c9:32: bf:f5:69:f8:83:d4:de:6d:10:0c:e3:d9:b3:e3:99:4e:0e:4d: d9:ca:b2:da:17:f2:2e:e6:ec:40:e8:29:f6:cb:12:eb:bc:1e: b6:8c:15:7d:b3:87:66:3f:71:80:e7:94:75:bc:ac:87:eb:2b: 76:76:7c:bc:18:35:b1:c0:57:28:bb:6c:85:ae:2d:14:b7:d1: 32:fb:5d:08:31:5b:2a:c6:58:f3:33:b0:79:a3:f8:8c:75:c9: 09:ce:25:12:a0:0d:c3:76:06:ea:46:83:80:62:a9:58:28:21: 37:a7:2b:2f:7f:b3:bd:c5:ec:82:08:35:63:6a:e1:6a:24:ba: 8f:3f:9b:5f:ab:ea:59:49:58:44:7f:bd:53:e5:18:d0:57:8f: 41:39:db:69:c7:53:27:23:b0:db:bf:01:b3:c0:ae:90:24:9a: 8e:61:37:dd:0c:02:e7:d7:4f:45:b7:b6:37:06:17:1f:ec:03: cb:54:98:1e:74:ef:e4:f4:ce:70:e1:00:64:6d:6b:11:18:1d: 74:08:7f:5f:7d:77:06:aa:09:10:b0:0c:9e:bc:09:67:0a:e0: 95:5f:e6:03:78:96:3e:a1:44:79:95:29:d9:85:7b:ce:83:85: 99:42:a6:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLzTQjA+lfpiOLe4+e3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMGFiYmE1NTJmNDZiOTRlZGYyMjM5NGZlZWMxZDA0NTlm MjAxNDAwHhcNMjUxMjA2MjAwMDUxWhcNMjUxMjA3MjAwMDUxWjAzMTEwLwYDVQQD EygwZmZhNjU1ODZhMmQ2NWVjZTI1MWMyYzA0ODA1NmVkMTI1NDQ1NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTGY2QvV3vdT9PZNkj2onZQTgqPB fCSWSgaA9OVO/iqG5byLw9nca5hVPUI7AnbO6S03c4eTSfHeVt6eU/FC4p11G0aB RNYsrNC0smQN/sCC3gADISLp0Rj+Pfj5bCTgOkTpWi5xxPX1zf22dYxqXkDw/Rno QZOoKvwopBc+L7zMthxnEoPiWnST06y5i9ikVpzcdZ0jBP/ikZ1syG0WejcsNAjG GiPwFZ9W2Cla2W+shq9wOz6tn8AltMwyPeRyjqf9Obe1oONDwaAJPl5e0hi9cpK3 WY7+5MNvrJTkK3uaoiFWe9kdM6LtsT0H3Q7muVFR7zGQx4dNZ4ls7u3EIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/6ZVhqLWXs4lHCwEgFbtElRFapMB8GA1UdIwQY MBaAFO4Ku6VS9GuU7fIjlP7sHQRZ8gFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dxN3BWTDBhNVR0OGlPVV91d2RCRm55QVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYTVkODQtMjBiNy00MTA4LTliNjIt M2I3NzNlNWVlNjYzLzEvN2dxN3BWTDBhNVR0OGlPVV91d2RCRm55QVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lYTVkODQtMjBiNy00MTA4LTliNjItM2I3NzNlNWVlNjYz LzEvN2dxN3BWTDBhNVR0OGlPVV91d2RCRm55QVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4MtjR+l s+P+rQEZ/gUhBMkyv/Vp+IPU3m0QDOPZs+OZTg5N2cqy2hfyLubsQOgp9ssS67we towVfbOHZj9xgOeUdbysh+srdnZ8vBg1scBXKLtsha4tFLfRMvtdCDFbKsZY8zOw eaP4jHXJCc4lEqANw3YG6kaDgGKpWCghN6crL3+zvcXsggg1Y2rhaiS6jz+bX6vq WUlYRH+9U+UY0FePQTnbacdTJyOw278Bs8CukCSajmE33QwC59dPRbe2NwYXH+wD y1SYHnTv5PTOcOEAZG1rERgddAh/X313BqoJELAMnrwJZwrglV/mA3iWPqFEeZUp 2YV7zoOFmUKm0Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:34 2025 by rpki-client