This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft File: 7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json) Hash identifier: xtPilmPluh+T6t/NtNoIL64bllQ+/rPwySUe6zZveMA= Subject key identifier: C4:39:A8:A1:25:E1:38:F7:E5:C7:0B:80:4A:9D:37:0E:B4:EB:91:E1 Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE Certificate issuer: /CN=ee182424b484197dc304524092dcdd992fcbe4be Certificate serial: 019AF16419070EB014BB0A69282DBBF64630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: j21xPkhz9xoIimeaHKHg4LvbW4JpMBKpbXCKo7iATdE=) 2: F0v3ZdAWJMgM-NX7fWdPVPvmHtw.roa (hash: 5lz4KZFI8B9Thk9y5Q0cmh/EUM6SOuSnTkJHbk1d9g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:19:07:0e:b0:14:bb:0a:69:28:2d:bb:f6:46:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=c439a8a125e138f7e5c70b804a9d370eb4eb91e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:a9:13:9b:9a:19:8f:1f:7b:fb:ec:78:58: 47:c6:2d:4b:d1:cf:7a:2c:67:fe:02:2c:2b:35:c8: 72:5a:41:93:05:e8:5d:3b:24:8c:d1:11:69:25:31: 4f:fa:9f:d4:87:6e:95:23:fa:db:12:74:be:f5:e7: fc:6a:89:80:ad:9f:bb:21:3d:5c:d2:1e:ae:c7:5f: ce:1f:27:bd:a0:7e:24:70:e6:51:e1:30:a5:b9:49: 5b:54:b6:1b:6d:55:c0:f2:8e:85:43:79:66:82:0b: 62:7e:5d:8c:77:af:fd:8a:2c:ab:f3:8f:a9:11:e9: 3d:83:a8:8e:a1:84:1f:c6:21:be:b4:8b:b9:5c:e9: ba:38:ef:a6:63:5e:c5:60:68:ce:74:51:92:ec:0f: cd:a1:b7:a2:c1:ea:6a:79:6b:6e:5d:77:02:a1:ac: 19:0e:76:a8:9a:41:98:73:28:b4:d2:b1:85:e5:d5: fd:85:37:ae:d8:b7:3e:ce:e5:7e:c7:02:71:7f:c0: 24:37:bd:39:5e:73:84:e8:39:ff:9e:7c:c3:05:71: 29:89:89:43:f3:ca:e8:8d:79:e9:f2:69:e3:1d:64: be:1c:29:cc:e4:ec:52:4c:29:fc:17:15:3a:7e:61: df:04:5b:56:1a:17:53:c9:33:b1:42:8d:be:c5:40: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:39:A8:A1:25:E1:38:F7:E5:C7:0B:80:4A:9D:37:0E:B4:EB:91:E1 X509v3 Authority Key Identifier: keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:28:42:60:d6:ca:e1:85:7c:4d:b5:85:88:16:4a:e6:45:fe: 55:56:a1:35:2a:8f:45:01:dd:d8:39:3c:91:2a:e7:d6:39:c5: a2:ef:af:12:19:d1:82:f6:25:4f:9b:ed:63:42:b5:75:b1:14: 78:cc:4d:a4:d9:5b:38:d9:6a:eb:b7:e5:84:2f:3e:88:28:be: 2f:18:91:b6:bb:55:7c:ba:c3:02:c9:39:a6:74:63:da:23:1f: ff:65:c2:cc:6a:b3:8a:a5:50:f8:d2:65:75:23:fe:ad:3f:fa: b9:fe:e9:25:be:19:c1:f8:be:4a:21:30:61:d0:a8:7d:52:a2: e5:27:ad:25:e8:2a:d8:9e:6f:bf:fa:e4:b6:0a:e8:ed:fe:39: c6:14:e8:fd:2b:b8:39:80:e0:8c:86:2a:81:a5:c7:43:cd:3f: ad:7b:ee:9d:72:ec:7e:f3:9f:76:dc:9a:87:0c:11:9d:f5:8d: 28:af:65:f0:e8:d2:15:4d:59:84:55:3c:05:a5:90:75:c1:fc: f4:66:cb:90:fd:7e:6f:5c:ab:ba:fe:b9:73:bf:89:54:7c:4d: e5:e4:3c:d1:84:27:81:f3:66:0e:88:69:3d:ab:e4:6e:ff:cf: 34:d9:87:ae:2f:02:37:8a:f7:65:54:26:6b:2b:92:e0:20:58: bd:4f:91:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBkHDrAUuwppKC279kYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMTgyNDI0YjQ4NDE5N2RjMzA0NTI0MDkyZGNkZDk5MmZj YmU0YmUwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD EyhjNDM5YThhMTI1ZTEzOGY3ZTVjNzBiODA0YTlkMzcwZWI0ZWI5MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGGpE5uaGY8fe/vseFhHxi1L0c96 LGf+AiwrNchyWkGTBehdOySM0RFpJTFP+p/Uh26VI/rbEnS+9ef8aomArZ+7IT1c 0h6ux1/OHye9oH4kcOZR4TCluUlbVLYbbVXA8o6FQ3lmggtifl2Md6/9iiyr84+p Eek9g6iOoYQfxiG+tIu5XOm6OO+mY17FYGjOdFGS7A/NobeiwepqeWtuXXcCoawZ DnaomkGYcyi00rGF5dX9hTeu2Lc+zuV+xwJxf8AkN705XnOE6Dn/nnzDBXEpiYlD 88rojXnp8mnjHWS+HCnM5OxSTCn8FxU6fmHfBFtWGhdTyTOxQo2+xUCoVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQ5qKEl4Tj35ccLgEqdNw6065HhMB8GA1UdIwQY MBaAFO4YJCS0hBl9wwRSQJLc3Zkvy+S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2hna0pMU0VHWDNEQkZKQWt0emRtU19MNUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YzQwNTgtOGVlMy00ZTNlLWEzMGMt YmFjNDc2Yjk3ZWVlLzEvN2hna0pMU0VHWDNEQkZKQWt0emRtU19MNUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80YzQwNTgtOGVlMy00ZTNlLWEzMGMtYmFjNDc2Yjk3ZWVl LzEvN2hna0pMU0VHWDNEQkZKQWt0emRtU19MNUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiChCYNbK 4YV8TbWFiBZK5kX+VVahNSqPRQHd2Dk8kSrn1jnFou+vEhnRgvYlT5vtY0K1dbEU eMxNpNlbONlq67flhC8+iCi+LxiRtrtVfLrDAsk5pnRj2iMf/2XCzGqziqVQ+NJl dSP+rT/6uf7pJb4Zwfi+SiEwYdCofVKi5SetJegq2J5vv/rktgro7f45xhTo/Su4 OYDgjIYqgaXHQ80/rXvunXLsfvOfdtyahwwRnfWNKK9l8OjSFU1ZhFU8BaWQdcH8 9GbLkP1+b1yruv65c7+JVHxN5eQ80YQngfNmDohpPavkbv/PNNmHri8CN4r3ZVQm ayuS4CBYvU+RpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:38 2025 by rpki-client