This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json) Hash identifier: 9JOYYyVvYX40hplfpvMSvuaNbNz3PIh/nE3PmryKEQo= Subject key identifier: A5:37:34:33:6E:2C:59:BD:95:78:FA:4D:54:D3:F1:B5:6F:EE:06:B3 Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96 Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796 Certificate serial: 019AF16488494F1DAE57EFCAB8D41CA94E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=) 2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: adjwrAR1dFiDnOaj0KbPN1hextBJDbU3KWPZ8asN8sY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:88:49:4f:1d:ae:57:ef:ca:b8:d4:1c:a9:4e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796 Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=a53734336e2c59bd9578fa4d54d3f1b56fee06b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:4d:02:f6:bf:39:2e:c2:c4:00:25:45:0a: 27:7b:9a:ad:ba:bb:60:af:14:bf:74:bb:e9:51:eb: d5:fe:59:71:7e:4d:73:65:52:35:fa:db:5c:68:a9: dd:38:da:97:77:1d:66:f0:2a:79:55:7a:54:e9:97: 64:d5:3f:61:63:26:12:1c:c0:11:dc:97:f7:28:4e: 85:e5:c9:7f:b4:2c:e0:40:9d:6a:45:8b:87:5b:68: 5f:e0:14:77:c4:79:0a:5b:37:47:13:f8:fe:42:62: 81:b7:f4:ea:6e:3a:df:e5:bb:a3:69:77:81:52:25: 00:f6:92:33:63:2d:db:43:03:d7:aa:69:b6:f3:22: e4:50:64:a0:fc:7f:2f:93:69:b7:6b:6d:b7:e2:49: d7:5c:f0:06:54:78:70:62:a7:94:d6:d2:c8:58:d4: b2:34:0f:8d:99:eb:57:ce:d7:ad:c8:9c:91:e8:73: d9:cf:51:27:d2:e7:b7:a0:d5:04:2e:8a:ac:ca:67: d9:d6:e0:f9:3a:a4:1d:36:74:45:e9:f3:b9:d4:c4: eb:58:24:01:18:65:c0:24:e2:d2:c1:6a:17:31:03: 77:9f:7c:73:3b:c0:10:9a:e8:ed:70:3a:15:7f:c4: 42:36:df:3b:e4:bb:1a:77:ea:52:f9:04:e5:2e:b2: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:37:34:33:6E:2C:59:BD:95:78:FA:4D:54:D3:F1:B5:6F:EE:06:B3 X509v3 Authority Key Identifier: keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:db:33:fe:8a:6f:02:f7:ce:f9:7a:f1:93:cc:7b:60:8b:5b: 6e:dc:56:1a:66:55:2f:aa:7f:7c:0f:73:9c:4b:62:c4:4a:d3: 66:b9:07:20:f7:a8:90:dc:93:7b:5d:17:96:65:d8:09:07:e7: f4:b3:55:e6:cf:50:4d:ab:61:a1:17:b7:a2:54:15:ac:ca:51: e9:af:1a:9d:ae:53:ac:70:aa:1b:e5:78:68:95:1f:58:02:65: f9:c5:14:01:d8:40:bf:56:fc:4b:5b:c8:78:4f:24:e5:07:81: c4:86:ac:f9:47:7c:e3:27:73:f6:4a:19:8d:49:f0:75:40:0e: d5:f6:61:e5:33:00:92:29:f6:04:7b:19:71:f4:5d:aa:15:35: fe:c8:c1:d9:40:fc:1e:46:70:eb:64:d3:ef:b4:60:a7:be:79: 58:a7:e5:be:bb:22:39:61:1d:11:94:b0:05:e6:a2:1e:85:ed: 5f:b9:9d:c4:cd:35:08:b4:24:37:ef:05:7e:3e:05:24:dc:f0: 88:f0:ad:2c:3f:be:17:a4:51:4a:3f:4e:6a:d8:dd:00:a3:f1: 1e:2d:58:ef:96:de:6b:a7:5c:de:92:eb:b8:8e:69:7b:47:72: ef:07:9c:5a:f2:8a:d2:60:78:6c:1f:8d:16:b6:f2:9e:d4:46: fa:ec:02:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIhJTx2uV+/KuNQcqU5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw NTQ3OTYwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD EyhhNTM3MzQzMzZlMmM1OWJkOTU3OGZhNGQ1NGQzZjFiNTZmZWUwNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1lNAva/OS7CxAAlRQone5qturtg rxS/dLvpUevV/llxfk1zZVI1+ttcaKndONqXdx1m8Cp5VXpU6Zdk1T9hYyYSHMAR 3Jf3KE6F5cl/tCzgQJ1qRYuHW2hf4BR3xHkKWzdHE/j+QmKBt/Tqbjrf5bujaXeB UiUA9pIzYy3bQwPXqmm28yLkUGSg/H8vk2m3a2234knXXPAGVHhwYqeU1tLIWNSy NA+NmetXztetyJyR6HPZz1En0ue3oNUELoqsymfZ1uD5OqQdNnRF6fO51MTrWCQB GGXAJOLSwWoXMQN3n3xzO8AQmujtcDoVf8RCNt875Lsad+pS+QTlLrITAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU3NDNuLFm9lXj6TVTT8bVv7gazMB8GA1UdIwQY MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtsz/opv AvfO+Xrxk8x7YItbbtxWGmZVL6p/fA9znEtixErTZrkHIPeokNyTe10XlmXYCQfn 9LNV5s9QTathoRe3olQVrMpR6a8ana5TrHCqG+V4aJUfWAJl+cUUAdhAv1b8S1vI eE8k5QeBxIas+Ud84ydz9koZjUnwdUAO1fZh5TMAkin2BHsZcfRdqhU1/sjB2UD8 HkZw62TT77Rgp755WKflvrsiOWEdEZSwBeaiHoXtX7mdxM01CLQkN+8Ffj4FJNzw iPCtLD++F6RRSj9OatjdAKPxHi1Y75bea6dc3pLruI5pe0dy7wecWvKK0mB4bB+N FrbyntRG+uwCrA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:50 2025 by rpki-client