This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json) Hash identifier: qXIqnXCx2VJ8fLzPfwdd0WT5PV9GfU3ZVzGWFMRD/HA= Subject key identifier: EA:3F:47:96:57:FB:73:89:4D:4B:7C:BE:5E:4E:2D:12:89:CD:43:85 Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa Certificate serial: 019AF2099F61D637C02C982F4AAD7965F051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: mhDJg4V1iH/Tt4FpAwjRkOekB2OpyT54m96hGBCENps=) 2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9f:61:d6:37:c0:2c:98:2f:4a:ad:79:65:f0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=ea3f479657fb73894d4b7cbe5e4e2d1289cd4385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:b4:d8:56:ee:d0:46:5e:61:2c:a3:98:9b: 53:ab:40:77:02:90:46:cb:ee:40:bc:7a:63:c3:a9: db:50:72:aa:6f:c6:64:7a:c8:2e:b5:4c:7e:5b:77: c1:17:ba:71:e5:2f:a5:21:05:8b:17:a4:b1:c6:58: b1:4c:f6:e8:01:90:6f:5a:8f:04:f8:70:71:d9:9e: c1:98:6a:fc:a6:4c:de:52:21:bb:60:91:6e:56:3d: 4e:cc:d7:9f:78:08:51:3c:43:a7:63:19:65:06:35: 7a:d6:8e:ec:2c:77:05:53:f5:a2:9c:d7:8c:3d:2f: 55:1e:5b:32:c3:af:0b:d4:e8:18:d9:33:80:b8:3d: 80:79:9d:d7:b9:65:ba:d4:fe:a3:bf:41:61:51:63: 3f:68:ab:53:e4:e7:ed:08:48:72:a0:df:39:de:1b: 54:1d:a1:fb:83:63:d6:da:95:be:d0:53:79:43:23: 55:68:6d:ed:9b:a8:f0:2f:10:71:cd:1b:2c:5a:31: 16:43:1a:ec:24:39:64:9f:36:be:55:0b:22:5f:d4: 42:83:5c:e6:c2:f8:2f:a1:09:dc:0f:b2:5d:38:7e: 54:fa:45:82:34:0d:c5:aa:44:b0:52:fc:bb:e7:d1: 50:c8:51:ad:77:95:15:80:80:03:39:86:ac:42:3e: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3F:47:96:57:FB:73:89:4D:4B:7C:BE:5E:4E:2D:12:89:CD:43:85 X509v3 Authority Key Identifier: keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:a4:d6:ff:76:4f:74:98:12:f1:4c:f8:8c:ce:d4:dd:7f: 5c:ad:a6:65:2f:4e:57:9b:dd:bb:4a:20:b4:33:50:e5:70:8b: 89:34:49:ec:3e:6f:16:ed:5a:b1:22:4e:b3:10:0d:4e:e6:0c: b2:dc:d0:b3:86:0a:d0:b9:68:76:3e:e3:a3:bd:f9:93:f4:44: 10:ff:40:fb:f5:ca:1e:31:cc:6d:d5:a1:1d:00:a4:22:8d:64: 9b:c1:75:b5:63:83:ec:f9:a2:95:6c:5b:84:f0:9b:9d:e3:44: f0:90:a5:78:b6:ce:cf:cc:0f:27:22:09:e2:18:62:05:14:d3: 7c:d3:9a:90:ef:1d:05:32:bb:a2:44:78:60:3a:69:cd:8e:48: 81:c1:b4:07:62:41:ed:c9:87:cb:34:bc:ce:62:48:61:9c:2e: 0d:f7:57:16:dc:05:65:7e:d5:8f:2f:08:2f:50:2b:9c:25:80: dc:6a:91:c5:32:79:96:23:53:43:7d:76:11:ab:d8:14:7f:f0: f2:85:76:76:b1:ef:3b:61:a8:64:a6:d7:59:09:6f:c3:21:7f: b8:a4:8b:16:e9:9e:ff:99:1c:bf:45:34:08:11:ac:40:ba:13: 8e:31:40:b9:8f:c6:42:d4:80:07:4b:86:25:43:37:b5:df:b3: 87:4e:61:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ9h1jfALJgvSq15ZfBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm ZThlYWEwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EyhlYTNmNDc5NjU3ZmI3Mzg5NGQ0YjdjYmU1ZTRlMmQxMjg5Y2Q0Mzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2602Fbu0EZeYSyjmJtTq0B3ApBG y+5AvHpjw6nbUHKqb8ZkesgutUx+W3fBF7px5S+lIQWLF6SxxlixTPboAZBvWo8E +HBx2Z7BmGr8pkzeUiG7YJFuVj1OzNefeAhRPEOnYxllBjV61o7sLHcFU/WinNeM PS9VHlsyw68L1OgY2TOAuD2AeZ3XuWW61P6jv0FhUWM/aKtT5OftCEhyoN853htU HaH7g2PW2pW+0FN5QyNVaG3tm6jwLxBxzRssWjEWQxrsJDlknza+VQsiX9RCg1zm wvgvoQncD7JdOH5U+kWCNA3FqkSwUvy759FQyFGtd5UVgIADOYasQj4YhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo/R5ZX+3OJTUt8vl5OLRKJzUOFMB8GA1UdIwQY MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+Kk1v92 T3SYEvFM+IzO1N1/XK2mZS9OV5vdu0ogtDNQ5XCLiTRJ7D5vFu1asSJOsxANTuYM stzQs4YK0Llodj7jo735k/REEP9A+/XKHjHMbdWhHQCkIo1km8F1tWOD7PmilWxb hPCbneNE8JCleLbOz8wPJyIJ4hhiBRTTfNOakO8dBTK7okR4YDppzY5IgcG0B2JB 7cmHyzS8zmJIYZwuDfdXFtwFZX7Vjy8IL1ArnCWA3GqRxTJ5liNTQ312EavYFH/w 8oV2drHvO2GoZKbXWQlvwyF/uKSLFume/5kcv0U0CBGsQLoTjjFAuY/GQtSAB0uG JUM3td+zh05h6A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:05 2025 by rpki-client