This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json) Hash identifier: 4VIr7ZVZDkCp/KxBma27bygngv2lllofBGtDJR5AJ8k= Subject key identifier: C1:1D:6D:44:0F:03:5D:70:0A:D4:C3:87:68:70:E3:32:A4:54:F2:6D Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6 Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6 Certificate serial: 019AF49C6ED4C231586F377A7D14AF5E579B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:01:23 +0000 Manifest this update: Sat 06 Dec 2025 17:01:23 +0000 Manifest next update: Sun 07 Dec 2025 17:01:23 +0000 Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: eJIqxWB3kGxw/xgetHAMcxJ4J0KB5iM/Lb/L8x99F9I=) 2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:6e:d4:c2:31:58:6f:37:7a:7d:14:af:5e:57:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6 Validity Not Before: Dec 6 17:01:23 2025 GMT Not After : Dec 7 17:01:23 2025 GMT Subject: CN=c11d6d440f035d700ad4c3876870e332a454f26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:44:b8:0d:4a:48:5c:1d:3c:6f:38:0a:36: fc:5f:d5:ea:4a:e4:f1:66:0f:17:2f:39:06:43:71: fd:b4:29:a1:d7:53:b6:fd:77:53:c1:d4:c9:01:b8: 94:77:44:c8:ed:0f:61:c2:2b:e1:ee:8a:d1:51:92: 3e:9c:29:ae:d2:c6:7a:00:7f:fb:73:0e:c8:27:ae: 2b:c1:a1:c8:fb:4e:78:0d:f9:40:d9:a7:a3:4e:34: 67:f7:73:86:8b:ed:92:5b:e6:2e:71:f5:05:71:8d: 40:98:2e:18:0b:45:dc:53:4a:87:2b:e2:6b:ac:4a: 08:1c:3f:ba:d5:bb:e3:50:6b:78:77:5c:ad:63:74: a8:f5:74:74:f7:1d:bc:20:03:44:be:37:28:39:37: ea:18:02:d9:d3:fd:e0:c5:5a:ee:8d:77:dd:7a:fe: 86:72:55:6c:7e:3f:66:dd:1a:74:d6:d1:b2:12:d4: ae:ae:84:9f:a8:10:36:51:de:33:48:af:99:e6:5f: 88:63:87:c3:74:12:0f:9a:70:77:9b:7d:23:99:7b: cf:82:1b:61:8c:46:0c:fb:b1:b5:2a:a8:0a:fd:8c: 87:dc:dd:6c:14:b0:04:48:89:ad:c1:24:06:aa:09: 37:f9:6f:e7:40:c6:cc:d8:66:7b:af:bd:4b:c0:83: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1D:6D:44:0F:03:5D:70:0A:D4:C3:87:68:70:E3:32:A4:54:F2:6D X509v3 Authority Key Identifier: keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:f7:a5:03:80:c3:00:8f:68:94:64:c1:0a:10:89:84:aa: 1d:ea:19:1b:00:9d:6c:4a:3b:c4:25:9f:0d:59:fa:26:87:0c: 0d:3c:5d:87:6c:f2:fc:2d:3b:c5:30:b9:72:4b:1e:f1:9c:25: c4:49:cf:56:c3:0b:ed:13:e8:a9:8b:bf:ee:d0:8f:cc:d7:dc: 3d:e6:42:b3:bb:67:64:a2:4b:81:76:10:94:e0:ea:d7:45:14: 3a:d5:8c:1c:47:11:aa:74:1f:fc:85:9a:09:81:ad:df:1c:28: d1:f7:3b:54:b7:10:0f:6e:a0:0d:2c:04:10:48:37:03:6c:91: 34:2c:2a:f4:1b:94:94:d2:05:47:3a:06:f5:9a:25:d1:3d:95: 68:63:84:0a:73:06:82:83:d7:da:10:3b:3b:8c:b7:0b:30:b2: 2a:94:01:38:2b:50:36:c5:2f:b4:01:26:98:e0:ec:83:4c:1c: 11:c9:47:d4:6b:d5:13:5e:5e:56:8f:af:df:93:5f:bc:27:f3: 39:7e:07:44:ea:72:d5:83:e7:28:d2:23:ea:fd:28:1f:90:5a: 45:d7:d9:8f:bd:a6:5d:75:69:6a:a5:53:2d:87:d0:da:04:04: bf:3b:ed:44:53:db:73:e1:73:3f:c7:90:a3:fa:1e:dc:ac:64: 88:bb:04:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nG7UwjFYbzd6fRSvXlebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDEzZDM3NDFlNGIzZjNhM2EzZTM0NzIxZjEyNDZlNGIy N2M3YTYwHhcNMjUxMjA2MTcwMTIzWhcNMjUxMjA3MTcwMTIzWjAzMTEwLwYDVQQD EyhjMTFkNmQ0NDBmMDM1ZDcwMGFkNGMzODc2ODcwZTMzMmE0NTRmMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD5EuA1KSFwdPG84Cjb8X9XqSuTx Zg8XLzkGQ3H9tCmh11O2/XdTwdTJAbiUd0TI7Q9hwivh7orRUZI+nCmu0sZ6AH/7 cw7IJ64rwaHI+054DflA2aejTjRn93OGi+2SW+YucfUFcY1AmC4YC0XcU0qHK+Jr rEoIHD+61bvjUGt4d1ytY3So9XR09x28IANEvjcoOTfqGALZ0/3gxVrujXfdev6G clVsfj9m3Rp01tGyEtSuroSfqBA2Ud4zSK+Z5l+IY4fDdBIPmnB3m30jmXvPghth jEYM+7G1KqgK/YyH3N1sFLAESImtwSQGqgk3+W/nQMbM2GZ7r71LwIM2nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEdbUQPA11wCtTDh2hw4zKkVPJtMB8GA1UdIwQY MBaAFO3RPTdB5LPzo6PjRyHxJG5LJ8emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ODA4YmMtOTc2ZC00MjEyLWFkMmYt MWE4ZjIzZTJjZWJiLzEvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ODA4YmMtOTc2ZC00MjEyLWFkMmYtMWE4ZjIzZTJjZWJi LzEvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFj3pQOA wwCPaJRkwQoQiYSqHeoZGwCdbEo7xCWfDVn6JocMDTxdh2zy/C07xTC5ckse8Zwl xEnPVsML7RPoqYu/7tCPzNfcPeZCs7tnZKJLgXYQlODq10UUOtWMHEcRqnQf/IWa CYGt3xwo0fc7VLcQD26gDSwEEEg3A2yRNCwq9BuUlNIFRzoG9Zol0T2VaGOECnMG goPX2hA7O4y3CzCyKpQBOCtQNsUvtAEmmODsg0wcEclH1GvVE15eVo+v35NfvCfz OX4HROpy1YPnKNIj6v0oH5BaRdfZj72mXXVpaqVTLYfQ2gQEvzvtRFPbc+FzP8eQ o/oe3KxkiLsEdg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:01 2025 by rpki-client