This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json) Hash identifier: oo9vBopQMnu8POzCwdJEhv/OksT5eiVjA3cvmc38shU= Subject key identifier: 62:24:DB:D8:7F:EC:CF:DF:83:E2:7B:D3:C6:96:20:3A:BA:65:98:CB Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Certificate serial: 019AF509E83B47D7C8B15BE4A6988D228D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:00:58 +0000 Manifest this update: Sat 06 Dec 2025 19:00:58 +0000 Manifest next update: Sun 07 Dec 2025 19:00:58 +0000 Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: zZIoS1s5XpoirmwFShqKXz6bAygWmtXbP57ejZl6xtg=) 2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:e8:3b:47:d7:c8:b1:5b:e4:a6:98:8d:22:8d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Validity Not Before: Dec 6 19:00:58 2025 GMT Not After : Dec 7 19:00:58 2025 GMT Subject: CN=6224dbd87feccfdf83e27bd3c696203aba6598cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:85:bb:2b:c5:77:b9:dd:f6:42:ea:7b:ef: 48:bf:68:fa:fa:d6:91:18:3a:10:d2:0e:7c:d0:2e: 63:03:b2:55:9b:d9:2e:ef:b6:0e:d0:77:ca:22:fe: c2:af:6a:3d:d1:d7:df:ae:04:f0:c6:d9:ef:e8:70: 9e:72:a8:3b:90:7e:52:a8:27:29:db:fe:ad:07:22: e3:84:94:d2:a4:3e:c2:75:6f:ff:7f:55:5d:9b:e0: f1:93:8a:82:e1:c3:2c:c0:2b:f7:58:f6:97:1d:3f: 3c:72:0a:9f:35:d2:4d:3d:0e:eb:8d:2b:ec:02:b8: 2e:e3:f6:2a:4e:e5:f4:92:c3:9b:0a:94:92:2f:2e: 36:c0:41:75:e2:14:a5:3e:e0:43:9a:a2:21:7b:78: a4:11:bd:73:4c:ce:69:7a:cd:c0:da:84:1c:29:d7: ca:e9:92:28:7a:76:2d:43:38:75:86:2f:62:f6:a1: b0:a3:3d:49:90:35:63:7f:a3:b7:52:b0:07:a2:34: 3d:9c:1f:be:a5:04:0c:a6:93:22:ea:ca:39:3d:50: 3c:27:a9:f6:4f:be:0a:3a:37:99:54:d8:28:00:bd: 88:8b:e4:3e:81:50:30:9e:60:20:c5:52:0f:73:1b: ea:be:d7:24:97:9e:c5:fd:84:ec:20:b4:dc:96:4d: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:DB:D8:7F:EC:CF:DF:83:E2:7B:D3:C6:96:20:3A:BA:65:98:CB X509v3 Authority Key Identifier: keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5f:26:27:e6:f3:ed:2f:b8:8e:85:da:d3:2c:69:fc:58:d9: 59:8a:7f:77:4a:71:47:8e:94:ad:dd:c1:3f:1f:d8:5a:0b:8e: 12:7f:f1:f7:01:da:81:48:7e:ca:aa:2c:d4:7b:bc:dd:c4:d1: d0:93:12:4d:a8:ff:1a:b4:a0:2f:67:d3:bf:2e:52:2c:df:77: 6d:80:fd:c1:d9:46:21:d3:0f:2f:db:39:57:68:16:1a:42:e4: 7e:22:bc:7d:70:b3:1d:d9:1f:35:6f:44:68:cd:a6:dd:0e:e5: a2:94:c7:cc:78:71:ee:16:6c:a2:43:a2:73:82:92:4f:54:41: 14:e0:8d:62:f9:78:37:ce:d5:71:9d:5b:90:d7:98:c3:97:6e: b7:11:7a:a9:e9:32:b1:11:df:04:9a:16:68:b2:00:71:ef:f2: ce:d6:ed:58:a8:0b:6b:d3:87:69:66:79:ba:79:90:2c:0b:7a: 77:4b:61:2a:c3:c5:a4:55:47:8c:a5:4f:31:be:e6:6e:28:c3: e8:4a:2a:25:89:86:f6:9d:14:7c:3a:49:0b:6d:c2:1d:3a:fa: e5:8c:69:f4:55:52:21:fe:e2:17:87:df:7d:1e:c3:a0:81:3c: bc:4c:ed:17:84:d5:14:01:0f:0a:ae:20:af:dd:71:76:a3:ca: e7:54:3e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ceg7R9fIsVvkppiNIo2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5 NmYxOTcwHhcNMjUxMjA2MTkwMDU4WhcNMjUxMjA3MTkwMDU4WjAzMTEwLwYDVQQD Eyg2MjI0ZGJkODdmZWNjZmRmODNlMjdiZDNjNjk2MjAzYWJhNjU5OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2eFuyvFd7nd9kLqe+9Iv2j6+taR GDoQ0g580C5jA7JVm9ku77YO0HfKIv7Cr2o90dffrgTwxtnv6HCecqg7kH5SqCcp 2/6tByLjhJTSpD7CdW//f1Vdm+Dxk4qC4cMswCv3WPaXHT88cgqfNdJNPQ7rjSvs Argu4/YqTuX0ksObCpSSLy42wEF14hSlPuBDmqIhe3ikEb1zTM5pes3A2oQcKdfK 6ZIoenYtQzh1hi9i9qGwoz1JkDVjf6O3UrAHojQ9nB++pQQMppMi6so5PVA8J6n2 T74KOjeZVNgoAL2Ii+Q+gVAwnmAgxVIPcxvqvtckl57F/YTsILTclk2FfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIk29h/7M/fg+J708aWIDq6ZZjLMB8GA1UdIwQY MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1 LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl8mJ+bz 7S+4joXa0yxp/FjZWYp/d0pxR46Urd3BPx/YWguOEn/x9wHagUh+yqos1Hu83cTR 0JMSTaj/GrSgL2fTvy5SLN93bYD9wdlGIdMPL9s5V2gWGkLkfiK8fXCzHdkfNW9E aM2m3Q7lopTHzHhx7hZsokOic4KST1RBFOCNYvl4N87VcZ1bkNeYw5dutxF6qeky sRHfBJoWaLIAce/yztbtWKgLa9OHaWZ5unmQLAt6d0thKsPFpFVHjKVPMb7mbijD 6EoqJYmG9p0UfDpJC23CHTr65Yxp9FVSIf7iF4fffR7DoIE8vEztF4TVFAEPCq4g r91xdqPK51Q+Ww== -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:09 2025 by rpki-client