This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json) Hash identifier: otCzIX6TMg2yBW0F4GgMvjZ4kQUVAU+sR9zFUPIeQpc= Subject key identifier: 04:E0:CF:35:F9:93:45:6F:0E:FB:8B:E0:DA:DF:A3:18:21:54:D2:5C Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Certificate serial: 019AF19B394BE88E4B91977DDA581074C9D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft Manifest number: 1331 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: qT7mDfs+niF4ou/IMs798jswEXeaDsoHOtKY0CYTl48=) 2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:4b:e8:8e:4b:91:97:7d:da:58:10:74:c9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=04e0cf35f993456f0efb8be0dadfa3182154d25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:69:79:db:80:f2:1e:df:b3:32:69:f0:0a: de:a0:3c:cc:88:56:5a:59:0e:ba:b0:93:c9:bb:50: 1c:e2:e8:02:93:56:fa:7c:84:61:24:1d:37:5a:c7: ce:bf:a6:34:be:59:46:31:27:f2:f1:53:1c:83:62: ef:19:9f:77:29:9d:9a:a4:6c:39:73:6b:0a:dd:8c: 72:94:e5:4a:18:7f:c4:e8:19:bb:6d:9f:fd:98:a2: cc:d3:c1:3d:82:cf:e4:4a:a7:6c:ba:11:81:7f:07: 8d:a3:59:1f:a3:2c:21:71:f9:c8:e9:23:d3:de:cb: ba:c3:84:91:8a:22:c4:c0:79:a6:d1:87:31:2d:28: 4e:62:ec:6c:8c:11:54:c4:98:a6:3e:2e:4d:7d:9b: 01:bc:9a:ab:32:b4:4e:35:2f:ef:e2:0f:b7:7c:99: 37:32:05:c1:b6:74:85:9d:64:67:36:76:61:17:f7: 37:45:18:01:b0:62:0a:4e:7c:6e:e4:59:89:3f:05: 65:c9:36:c9:8d:9c:be:d2:b6:19:ff:43:fb:32:e2: f9:ae:24:6c:a3:14:b7:2b:89:17:57:11:e2:68:27: 1b:57:e5:bb:5e:68:1e:a4:55:6b:82:b0:fb:56:48: fb:6a:8d:64:21:8b:2d:6e:25:b5:79:0c:1f:aa:af: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E0:CF:35:F9:93:45:6F:0E:FB:8B:E0:DA:DF:A3:18:21:54:D2:5C X509v3 Authority Key Identifier: keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fd:85:32:ff:53:4f:b3:c7:bc:c3:a4:b3:de:ec:bc:bf:17: c9:7e:42:c7:03:75:98:e3:56:77:2f:8e:d0:5a:b1:48:a3:67: 1e:47:19:78:42:ac:26:6e:5d:18:fb:a6:c8:34:63:ee:4d:46: 91:a6:a7:f1:18:b6:cc:39:62:50:98:69:10:5d:19:da:a0:5f: 04:bf:0d:d0:ae:77:22:e8:be:e1:74:60:3f:d9:3e:3c:9f:d0: 33:66:6d:4b:44:df:35:e5:cc:21:ef:6e:29:53:ed:7a:78:40: 03:4f:c8:83:2a:a8:6b:ab:dd:e6:d9:0b:50:42:7b:67:a7:3a: 80:d2:6f:92:8b:de:91:4c:c2:a7:43:d7:8b:e6:3f:d9:2a:9d: 11:1a:c7:f7:64:0f:e1:32:1b:d6:b8:63:2d:3d:eb:d7:2d:5c: 7a:e8:78:c5:8e:ab:ec:e9:fe:b4:46:b9:e1:da:27:04:13:ae: a6:ac:ce:42:a0:cb:0f:a6:b3:3f:05:26:1b:65:12:59:18:3d: 05:e5:78:3c:8e:e1:08:89:ba:1f:2e:e0:26:ac:24:bb:50:52: 1a:3e:1f:71:f9:c6:c0:d4:7a:51:2f:10:77:3f:df:53:3f:87: 94:2a:12:95:11:5b:94:22:6c:0f:36:48:76:22:64:93:5e:c6: 6b:80:ed:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzlL6I5LkZd92lgQdMnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh ZWYzY2MwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EygwNGUwY2YzNWY5OTM0NTZmMGVmYjhiZTBkYWRmYTMxODIxNTRkMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxURpeduA8h7fszJp8AreoDzMiFZa WQ66sJPJu1Ac4ugCk1b6fIRhJB03WsfOv6Y0vllGMSfy8VMcg2LvGZ93KZ2apGw5 c2sK3YxylOVKGH/E6Bm7bZ/9mKLM08E9gs/kSqdsuhGBfweNo1kfoywhcfnI6SPT 3su6w4SRiiLEwHmm0YcxLShOYuxsjBFUxJimPi5NfZsBvJqrMrRONS/v4g+3fJk3 MgXBtnSFnWRnNnZhF/c3RRgBsGIKTnxu5FmJPwVlyTbJjZy+0rYZ/0P7MuL5riRs oxS3K4kXVxHiaCcbV+W7XmgepFVrgrD7Vkj7ao1kIYstbiW1eQwfqq+sCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATgzzX5k0VvDvuL4NrfoxghVNJcMB8GA1UdIwQY MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/2FMv9T T7PHvMOks97svL8XyX5CxwN1mONWdy+O0FqxSKNnHkcZeEKsJm5dGPumyDRj7k1G kaan8Ri2zDliUJhpEF0Z2qBfBL8N0K53Iui+4XRgP9k+PJ/QM2ZtS0TfNeXMIe9u KVPtenhAA0/Igyqoa6vd5tkLUEJ7Z6c6gNJvkovekUzCp0PXi+Y/2SqdERrH92QP 4TIb1rhjLT3r1y1ceuh4xY6r7On+tEa54donBBOupqzOQqDLD6azPwUmG2USWRg9 BeV4PI7hCIm6Hy7gJqwku1BSGj4fcfnGwNR6US8Qdz/fUz+HlCoSlRFblCJsDzZI diJkk17Ga4DtqA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:01 2025 by rpki-client