This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json) Hash identifier: g0FW8FLqfwDRXUEy0RIcKSrs7HuiWYtZ7AHmBQNWOZY= Subject key identifier: 54:0A:D2:1D:0B:01:81:24:45:0D:D9:1A:F9:DA:58:A0:36:0C:F7:94 Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96 Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96 Certificate serial: 019AF12E0439458B37A253C5FF5F00CC2ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft Manifest number: 031D Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: 4zb7XiVtO73THRW5h57eCHfX48pxb2bHr33fglvmEoo=) 2: zUvaZsb6AAcGs5bszD-Bq4oB3BE.roa (hash: 2T5+Ho1mw99m4EQU26GsTeUM3Ju0dbCS0haz/aa2sBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:04:39:45:8b:37:a2:53:c5:ff:5f:00:cc:2e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96 Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=540ad21d0b018124450dd91af9da58a0360cf794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:e8:54:d4:90:0d:de:6e:78:3e:ec:f0:64: 14:ae:9a:44:20:77:79:36:03:6a:16:4b:f7:0e:1e: de:d7:a8:c0:e8:40:61:98:01:c3:3f:88:e8:01:4b: 75:f8:5d:ab:c7:42:b5:f5:06:cb:55:37:e2:a0:ad: b1:a7:06:66:80:06:0d:cd:22:a5:88:9d:4a:26:37: af:84:5e:2e:6b:a9:d0:73:f1:49:72:6b:4a:59:9e: a6:30:07:22:2c:e8:94:1f:73:8f:2b:51:71:13:b4: f7:f9:b9:fa:ef:e6:50:7d:2d:17:bf:5d:dd:16:22: aa:85:f7:47:f5:86:05:33:38:6f:6b:07:05:a4:64: b0:7b:a1:e1:ae:15:44:e3:55:32:3d:24:35:6a:cd: 7e:7b:73:b3:c2:50:61:27:b8:dc:11:f3:63:43:39: ea:26:2f:27:57:09:f8:80:3b:4d:53:f1:ee:4d:bb: 85:18:f9:4a:f8:7a:b9:ce:1b:b9:7f:83:8a:8f:49: 33:5f:09:d7:ba:52:72:98:4b:9e:22:3f:8c:a4:94: 6d:2d:0d:88:e8:0a:1d:30:36:25:5a:99:91:f5:d3: 2f:8a:85:45:16:3c:54:bc:49:b1:44:cd:7f:42:c3: 64:c2:fb:52:c4:0e:da:fd:54:39:e9:30:b3:9a:9b: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0A:D2:1D:0B:01:81:24:45:0D:D9:1A:F9:DA:58:A0:36:0C:F7:94 X509v3 Authority Key Identifier: keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d9:1b:ea:7e:f8:bc:41:a7:d0:48:28:d9:1d:c4:ec:95:ce: 8f:27:7d:fc:a0:ba:d8:72:a4:96:c1:5f:04:76:ea:b5:e0:0b: 69:0d:75:9e:50:5c:91:0b:fd:c3:ad:2e:84:28:c9:ae:e0:10: 52:1b:22:8a:ee:86:44:6c:d6:ed:a7:f1:72:d3:4e:ea:5c:a1: 5b:c7:22:cf:40:a0:04:67:8f:d9:23:51:72:bd:93:b3:a7:84: 81:79:7f:a8:40:44:6a:81:e6:b2:e6:7c:29:0b:a3:02:bb:f5: 0a:88:ea:5e:e1:62:5d:75:96:6a:f3:98:09:d3:da:12:cf:08: 18:06:6a:9a:9a:45:39:1b:c3:9f:4a:e6:8d:68:33:3d:98:c4: 85:ee:72:5c:31:ee:63:a3:ec:40:71:eb:43:56:7e:d9:48:35: 47:80:b1:f0:15:00:1f:f3:77:81:d7:9f:25:91:60:fa:4c:4d: cd:eb:26:b9:b8:fb:7d:77:a6:08:ec:4d:b6:0b:3a:1b:01:86: 3c:40:82:b1:30:49:8d:90:a5:b0:7b:11:dd:5b:90:27:2f:37: 4e:1e:32:1a:e4:da:77:e8:19:ec:47:a9:36:5b:51:96:0f:cf: 21:72:6c:bd:74:b2:23:8d:5e:2a:2c:dd:0e:7b:cf:72:24:96: 03:b3:1e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgQ5RYs3olPF/18AzC7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOWNjZDM4YTVkNjQ5Njg4MGJjMDk0NzA2ZTY4ZmEwNGZh MmNkOTYwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD Eyg1NDBhZDIxZDBiMDE4MTI0NDUwZGQ5MWFmOWRhNThhMDM2MGNmNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UnoVNSQDd5ueD7s8GQUrppEIHd5 NgNqFkv3Dh7e16jA6EBhmAHDP4joAUt1+F2rx0K19QbLVTfioK2xpwZmgAYNzSKl iJ1KJjevhF4ua6nQc/FJcmtKWZ6mMAciLOiUH3OPK1FxE7T3+bn67+ZQfS0Xv13d FiKqhfdH9YYFMzhvawcFpGSwe6HhrhVE41UyPSQ1as1+e3OzwlBhJ7jcEfNjQznq Ji8nVwn4gDtNU/HuTbuFGPlK+Hq5zhu5f4OKj0kzXwnXulJymEueIj+MpJRtLQ2I 6AodMDYlWpmR9dMvioVFFjxUvEmxRM1/QsNkwvtSxA7a/VQ56TCzmptWOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQK0h0LAYEkRQ3ZGvnaWKA2DPeUMB8GA1UdIwQY MBaAFO6czTil1klogLwJRwbmj6BPos2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNWY5NWMtYjBiNi00NTIyLThlYTAt NTViZWFmYTRiYjI5LzEvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xNWY5NWMtYjBiNi00NTIyLThlYTAtNTViZWFmYTRiYjI5 LzEvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdkb6n74 vEGn0Ego2R3E7JXOjyd9/KC62HKklsFfBHbqteALaQ11nlBckQv9w60uhCjJruAQ Uhsiiu6GRGzW7afxctNO6lyhW8ciz0CgBGeP2SNRcr2Ts6eEgXl/qEBEaoHmsuZ8 KQujArv1CojqXuFiXXWWavOYCdPaEs8IGAZqmppFORvDn0rmjWgzPZjEhe5yXDHu Y6PsQHHrQ1Z+2Ug1R4Cx8BUAH/N3gdefJZFg+kxNzesmubj7fXemCOxNtgs6GwGG PECCsTBJjZClsHsR3VuQJy83Th4yGuTad+gZ7EepNltRlg/PIXJsvXSyI41eKizd DnvPciSWA7MeXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:18 2025 by rpki-client