This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json) Hash identifier: kdElJXibJ1GRBLzzVdIeevf8UkNSWr7zEN48XMKIGdg= Subject key identifier: 1A:E5:BC:57:95:AF:F5:83:EB:75:5E:D9:89:9D:AF:68:CE:73:41:9E Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1 Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1 Certificate serial: 019AF19B6FB6CF2A8CF6AEB6E9A5DCC09EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft Manifest number: 12A6 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: wHy1xpqJKvS/QXnEum21V4cvxjaKrgnyRQG3OuuHpzI=) 2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6f:b6:cf:2a:8c:f6:ae:b6:e9:a5:dc:c0:9e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=1ae5bc5795aff583eb755ed9899daf68ce73419e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:27:9a:0c:83:8c:00:56:91:09:fb:a7:36: 3a:d9:ab:6a:fc:f9:fd:54:16:1b:d9:97:dd:ef:b9: ae:a1:0a:a4:cd:21:2e:cf:58:ef:bb:9c:f8:c3:b1: 76:fc:26:51:93:60:75:83:15:52:2b:79:7d:0a:ab: 84:cb:a4:f7:58:bd:6b:f3:5c:af:8d:c8:3d:d7:30: 27:f9:09:f7:60:ff:07:db:c0:99:47:9d:50:2b:8f: b9:1d:8a:84:ff:92:23:b8:99:4e:86:e7:65:b0:92: b0:b9:41:de:32:7d:09:7e:a1:6a:7c:78:65:dc:98: a8:ed:77:dc:c4:63:b6:5a:bf:12:e0:af:c6:49:7e: f8:fd:1c:7d:06:09:4a:e5:f8:b0:a6:69:f8:cf:ba: fe:e4:ac:12:8f:05:67:bd:a5:cb:09:75:b8:77:2e: 87:66:35:8a:4d:a3:9b:0f:9c:bc:7f:ce:ba:04:cf: d7:cf:94:6e:07:65:ce:0c:94:58:a4:95:82:e3:2a: 8c:7b:ee:41:89:02:4a:1f:fb:98:e0:45:ad:40:8d: 92:ae:59:e6:a0:53:c3:e2:c2:fd:a0:3b:12:7e:6f: 29:e5:f7:66:69:bf:2a:fd:e1:eb:15:4e:2f:4f:3b: ad:c9:35:6e:95:d1:d5:35:ab:09:63:d6:1b:ce:0d: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E5:BC:57:95:AF:F5:83:EB:75:5E:D9:89:9D:AF:68:CE:73:41:9E X509v3 Authority Key Identifier: keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:00:c7:91:a8:3c:f4:89:a9:24:62:67:eb:dd:04:5c:84:b9: d7:c3:1a:5f:75:14:7a:7f:55:08:c4:55:ba:a5:d9:f7:de:55: 9c:75:96:2c:5a:b8:9e:54:99:8f:59:8f:bd:fe:b1:81:96:0f: 7a:8e:2b:12:fb:b0:88:61:26:5f:71:7e:db:9a:51:3f:67:e7: 61:5e:c3:74:52:b8:d7:0d:4c:ec:d1:2a:45:a6:8f:12:cf:29: 51:79:06:be:b7:dc:de:66:3b:11:e7:9b:59:b9:c5:25:23:74: 9c:38:52:43:fb:78:ec:02:e7:62:56:94:ca:fc:c6:a0:13:6d: 24:d9:ae:95:5d:52:3d:66:15:62:6b:77:a9:c1:e5:aa:3c:5f: ae:39:95:18:ca:ba:21:d6:fc:0b:e1:6a:a7:bf:e4:62:b2:1c: 6d:dc:58:07:0b:f2:c6:39:df:0b:14:64:61:b5:2e:07:4d:4d: 53:1c:be:76:05:00:a3:92:5a:6b:19:04:2f:45:64:f2:8e:bc: f1:64:7d:5e:4f:90:ec:99:7d:fa:87:61:d2:2f:88:86:e3:30: 75:e3:83:79:1f:f7:b5:d5:08:e0:6e:1c:10:f3:b9:37:84:f4: 60:d8:45:4e:ed:b9:8a:98:c1:6c:06:05:15:ae:f5:89:de:6b: 9a:14:3e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2+2zyqM9q626aXcwJ7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOGZmOTZlYWUyZDQ0OGVjNzg0OWQxNzNiNTUyZjE1ZjBm NzA0YzEwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EygxYWU1YmM1Nzk1YWZmNTgzZWI3NTVlZDk4OTlkYWY2OGNlNzM0MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvsnmgyDjABWkQn7pzY62atq/Pn9 VBYb2Zfd77muoQqkzSEuz1jvu5z4w7F2/CZRk2B1gxVSK3l9CquEy6T3WL1r81yv jcg91zAn+Qn3YP8H28CZR51QK4+5HYqE/5IjuJlOhudlsJKwuUHeMn0JfqFqfHhl 3Jio7XfcxGO2Wr8S4K/GSX74/Rx9BglK5fiwpmn4z7r+5KwSjwVnvaXLCXW4dy6H ZjWKTaObD5y8f866BM/Xz5RuB2XODJRYpJWC4yqMe+5BiQJKH/uY4EWtQI2Srlnm oFPD4sL9oDsSfm8p5fdmab8q/eHrFU4vTzutyTVuldHVNasJY9Ybzg0ZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrlvFeVr/WD63Ve2Ymdr2jOc0GeMB8GA1UdIwQY MBaAFOyP+W6uLUSOx4SdFztVLxXw9wTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMt NmYxYzk3NGU4NjM3LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMtNmYxYzk3NGU4NjM3 LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgDHkag8 9ImpJGJn690EXIS518MaX3UUen9VCMRVuqXZ995VnHWWLFq4nlSZj1mPvf6xgZYP eo4rEvuwiGEmX3F+25pRP2fnYV7DdFK41w1M7NEqRaaPEs8pUXkGvrfc3mY7Eeeb WbnFJSN0nDhSQ/t47ALnYlaUyvzGoBNtJNmulV1SPWYVYmt3qcHlqjxfrjmVGMq6 Idb8C+Fqp7/kYrIcbdxYBwvyxjnfCxRkYbUuB01NUxy+dgUAo5JaaxkEL0Vk8o68 8WR9Xk+Q7Jl9+odh0i+IhuMwdeODeR/3tdUI4G4cEPO5N4T0YNhFTu25ipjBbAYF Fa71id5rmhQ+DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:13 2025 by rpki-client