This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json) Hash identifier: hUDqvRcs6Jh/QWC3AoQ5MU6Zp6jefksIaxnSCO/WgP4= Subject key identifier: 8E:EC:24:84:E4:AA:2F:D7:98:4C:CC:19:B0:DA:93:C5:CA:4B:64:FC Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8 Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8 Certificate serial: 019AF12CF86119AB9EDB5A55FEB7F0E3111B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft Manifest number: 04BF Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=) 2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: a9z8b7ZOJa9kE+97er4c0DkgAMO3VxdApTTy6N8AqL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f8:61:19:ab:9e:db:5a:55:fe:b7:f0:e3:11:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8 Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=8eec2484e4aa2fd7984ccc19b0da93c5ca4b64fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:c9:ff:37:39:03:12:97:00:9a:3b:76:46: f5:b0:89:6a:54:75:4e:ed:b5:3f:88:30:e9:5b:02: 9d:6b:7f:c5:28:ab:f7:e2:9a:90:12:05:6b:17:07: 6f:6f:33:07:a9:68:0c:cb:a0:b1:4d:79:16:a9:a8: be:d0:a0:6a:93:c1:7d:73:e9:ef:53:4a:34:d9:cb: fd:53:0e:54:e3:09:df:15:6a:8d:77:31:55:27:61: 44:1c:92:4d:b6:45:94:d5:94:42:05:32:cd:43:fd: 48:79:1b:84:e6:1d:97:3c:0b:bd:af:11:a0:e0:43: 17:aa:fa:fb:00:94:dc:1c:d8:dc:f6:b7:3b:19:ac: 8d:80:38:a7:d4:a1:f9:a2:87:3b:e4:10:97:a8:66: 7e:f0:b6:33:dc:ff:0d:5d:c7:79:20:58:81:22:1a: 9d:27:99:3c:c0:83:12:92:bd:cd:e0:ef:32:dc:2b: 32:a5:56:d3:58:cf:79:2b:ca:56:8e:a1:ac:9c:c9: a5:34:50:77:ed:50:9c:0e:b8:90:c2:1f:cf:04:96: 03:ec:58:b2:7f:4f:12:4e:e1:bc:4b:2c:87:5a:d1: c5:3c:f3:7f:8e:34:bc:c8:5e:76:81:ae:b1:72:c1: f4:d4:f4:b4:7c:35:68:30:e2:b3:ed:8a:05:9a:54: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:24:84:E4:AA:2F:D7:98:4C:CC:19:B0:DA:93:C5:CA:4B:64:FC X509v3 Authority Key Identifier: keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:87:ff:74:98:24:fe:4c:1e:f7:2d:46:1a:db:a5:eb:ab:d1: ba:bf:76:88:61:ac:ea:d3:e0:ac:c1:b5:f5:4d:13:6f:0b:39: ca:88:5f:e1:cc:92:6c:cd:f3:da:4d:4c:45:51:3d:42:f7:40: 8c:8d:35:9e:65:0e:0a:c4:46:cc:38:45:aa:a1:2c:01:98:41: 1e:62:09:6a:96:30:af:7d:2e:5d:52:a8:32:d6:9f:84:32:a2: 7d:c2:bf:06:95:1b:f7:86:1f:e9:63:5d:58:8e:5b:ec:51:bd: 8f:e7:86:94:df:e2:a3:e0:e4:7d:0d:67:b8:bb:a5:a6:e6:87: 74:ce:75:b9:07:81:ed:ea:1b:20:81:1e:15:4b:c1:1a:70:e8: 76:ac:ca:77:5a:82:b7:a4:2c:01:d7:ff:17:83:a1:56:fc:4f: 69:18:39:47:22:fa:75:0b:85:05:ed:3c:dc:6c:20:77:4e:84: fa:61:3a:8c:52:ce:df:4f:2b:5f:82:66:b5:39:53:05:fa:b9: cb:1e:7f:52:bd:ad:35:a4:6f:56:b9:a1:5a:18:73:51:66:f4: 40:58:93:40:a7:cb:d2:7e:13:70:06:c5:04:ff:1e:b8:d0:3e: bc:9c:ca:18:f3:53:30:bf:cd:87:b7:41:87:79:81:c9:e3:a5: 80:5c:4c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPhhGaue21pV/rfw4xEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjlmYzUwNGE0ZDIxNzhhZTRmNzNjODc3YzVmOTA3YmI0 NzZiZjgwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD Eyg4ZWVjMjQ4NGU0YWEyZmQ3OTg0Y2NjMTliMGRhOTNjNWNhNGI2NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYnJ/zc5AxKXAJo7dkb1sIlqVHVO 7bU/iDDpWwKda3/FKKv34pqQEgVrFwdvbzMHqWgMy6CxTXkWqai+0KBqk8F9c+nv U0o02cv9Uw5U4wnfFWqNdzFVJ2FEHJJNtkWU1ZRCBTLNQ/1IeRuE5h2XPAu9rxGg 4EMXqvr7AJTcHNjc9rc7GayNgDin1KH5ooc75BCXqGZ+8LYz3P8NXcd5IFiBIhqd J5k8wIMSkr3N4O8y3CsypVbTWM95K8pWjqGsnMmlNFB37VCcDriQwh/PBJYD7Fiy f08STuG8SyyHWtHFPPN/jjS8yF52ga6xcsH01PS0fDVoMOKz7YoFmlSrxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7sJITkqi/XmEzMGbDak8XKS2T8MB8GA1UdIwQY MBaAFLe5/FBKTSF4rk9zyHfF+Qe7R2v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zMjE4ODktYWJjNi00M2E4LWIyOGEt YmIyOTA2M2Y0ODgxLzEvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zMjE4ODktYWJjNi00M2E4LWIyOGEtYmIyOTA2M2Y0ODgx LzEvdDduOFVFcE5JWGl1VDNQSWQ4WDVCN3RIYV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuof/dJgk /kwe9y1GGtul66vRur92iGGs6tPgrMG19U0Tbws5yohf4cySbM3z2k1MRVE9QvdA jI01nmUOCsRGzDhFqqEsAZhBHmIJapYwr30uXVKoMtafhDKifcK/BpUb94Yf6WNd WI5b7FG9j+eGlN/io+DkfQ1nuLulpuaHdM51uQeB7eobIIEeFUvBGnDodqzKd1qC t6QsAdf/F4OhVvxPaRg5RyL6dQuFBe083Gwgd06E+mE6jFLO308rX4JmtTlTBfq5 yx5/Ur2tNaRvVrmhWhhzUWb0QFiTQKfL0n4TcAbFBP8euNA+vJzKGPNTML/Nh7dB h3mByeOlgFxMkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:23 2025 by rpki-client