This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json) Hash identifier: gye0DHGqdPKLsMta3PISImmell/6mBdywv0AFcZhMSw= Subject key identifier: 2D:65:87:CD:40:58:C2:BB:5B:C3:4C:5A:15:07:19:39:09:E4:A1:53 Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80 Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580 Certificate serial: 019AF3F79C4B66A4601BA6B2C2571E06A92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft Manifest number: 03AB Signing time: Sat 06 Dec 2025 14:01:22 +0000 Manifest this update: Sat 06 Dec 2025 14:01:22 +0000 Manifest next update: Sun 07 Dec 2025 14:01:22 +0000 Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: CKy+602jI/4kuN7MEHqph4kePX/FGmHdxZTQLaMgVKY=) 2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:9c:4b:66:a4:60:1b:a6:b2:c2:57:1e:06:a9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580 Validity Not Before: Dec 6 14:01:22 2025 GMT Not After : Dec 7 14:01:22 2025 GMT Subject: CN=2d6587cd4058c2bb5bc34c5a1507193909e4a153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:f8:37:91:67:84:58:bf:88:8f:81:31:47: 68:6f:a9:b0:6f:1b:1d:9c:8d:88:51:38:df:cf:78: e6:fb:91:70:6a:12:74:a3:3a:1e:da:cb:b8:7b:90: d4:84:45:e2:ce:83:8d:2b:7c:61:07:c7:ab:e3:72: 8f:a9:21:55:c0:d9:8d:ba:ca:df:11:1f:3e:e3:94: 62:0d:4c:0c:59:49:2d:8f:37:70:64:0e:ef:8d:4c: 43:0c:dc:9a:c0:dd:3f:ef:14:a5:20:5e:c0:b6:66: b3:4d:5e:2d:43:4b:a1:dd:c8:60:14:d2:34:ce:84: 2b:7f:06:b1:e4:81:f8:41:03:17:4a:32:0f:a3:1f: 5f:90:10:4f:36:a5:fa:0a:47:63:3d:7e:13:d3:dc: 8d:1d:d6:e6:00:98:c2:90:19:a8:c9:16:29:15:44: ce:cb:9c:0a:95:c7:6d:b4:74:bf:cf:73:3b:df:83: 70:fa:28:70:c0:21:4e:ea:df:72:86:da:8b:de:b4: c7:8b:cc:a0:b9:87:c8:bb:0c:ea:b1:73:6b:28:49: cd:8f:f8:f2:cd:bf:cc:0b:de:b1:82:75:03:7a:3a: 4b:f4:34:a0:63:08:a2:9c:da:1c:40:ea:26:69:a3: a6:e3:4e:5f:28:9b:6e:6a:61:03:f1:df:ba:e4:24: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:87:CD:40:58:C2:BB:5B:C3:4C:5A:15:07:19:39:09:E4:A1:53 X509v3 Authority Key Identifier: keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:c4:d5:14:df:f1:ce:6b:dd:a1:3e:54:94:3f:d9:0e:6a: 8e:0c:11:68:b4:cd:26:a1:53:9e:e1:18:41:f2:b2:93:d6:ed: 11:aa:4e:d8:ac:b3:78:3f:47:91:c7:65:e5:4b:b5:2c:ff:87: 9a:7f:50:6f:98:ca:57:a7:6a:e1:aa:68:d1:71:0f:5a:04:6f: bf:05:af:4b:f9:50:b9:79:3c:81:f9:18:32:04:ac:ec:61:73: 7b:44:75:95:a0:db:50:2c:f2:00:7d:94:08:a3:af:61:bf:13: ad:08:c0:bf:61:c1:06:6d:43:90:e4:bb:77:2a:f3:e3:39:e2: 81:ab:13:75:22:d2:61:72:cd:dc:ff:15:62:7c:d4:17:c8:31: f8:de:b8:c1:6b:9f:93:dd:dd:09:e8:d0:0a:26:d5:dd:54:d0: bf:dc:5a:9a:d7:9a:1f:7d:99:3c:18:6b:48:b3:f3:1e:91:74: e7:ea:3b:97:61:1d:ad:25:d8:1f:2f:71:97:7f:54:68:1c:fc: c3:0b:1c:ec:83:4e:41:6e:a6:55:21:1e:76:78:97:6f:0c:29: cf:0f:63:d6:f5:35:df:3d:bb:60:d3:26:72:96:99:ed:72:1d: 91:90:b4:bc:96:56:cb:f4:5f:0d:bd:2a:f8:a3:37:5f:d9:a0: 14:5b:22:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95xLZqRgG6aywlceBqksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWFiY2ExMTZiNGU3M2E5OTQ0YWI5NzAyY2Y5ODY2NTc4 MDM1ODAwHhcNMjUxMjA2MTQwMTIyWhcNMjUxMjA3MTQwMTIyWjAzMTEwLwYDVQQD EygyZDY1ODdjZDQwNThjMmJiNWJjMzRjNWExNTA3MTkzOTA5ZTRhMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDn4N5FnhFi/iI+BMUdob6mwbxsd nI2IUTjfz3jm+5FwahJ0ozoe2su4e5DUhEXizoONK3xhB8er43KPqSFVwNmNusrf ER8+45RiDUwMWUktjzdwZA7vjUxDDNyawN0/7xSlIF7AtmazTV4tQ0uh3chgFNI0 zoQrfwax5IH4QQMXSjIPox9fkBBPNqX6CkdjPX4T09yNHdbmAJjCkBmoyRYpFUTO y5wKlcdttHS/z3M734Nw+ihwwCFO6t9yhtqL3rTHi8yguYfIuwzqsXNrKEnNj/jy zb/MC96xgnUDejpL9DSgYwiinNocQOomaaOm405fKJtuamED8d+65CRe+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1lh81AWMK7W8NMWhUHGTkJ5KFTMB8GA1UdIwQY MBaAFO6qvKEWtOc6mUSrlwLPmGZXgDWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDct ZGI0MTVhOWJlYmY1LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDctZGI0MTVhOWJlYmY1 LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSrE1RTf 8c5r3aE+VJQ/2Q5qjgwRaLTNJqFTnuEYQfKyk9btEapO2KyzeD9Hkcdl5Uu1LP+H mn9Qb5jKV6dq4apo0XEPWgRvvwWvS/lQuXk8gfkYMgSs7GFze0R1laDbUCzyAH2U CKOvYb8TrQjAv2HBBm1DkOS7dyrz4znigasTdSLSYXLN3P8VYnzUF8gx+N64wWuf k93dCejQCibV3VTQv9xamteaH32ZPBhrSLPzHpF05+o7l2EdrSXYHy9xl39UaBz8 wwsc7INOQW6mVSEedniXbwwpzw9j1vU13z27YNMmcpaZ7XIdkZC0vJZWy/RfDb0q +KM3X9mgFFsiuA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:55:33 2025 by rpki-client