This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json) Hash identifier: rwxEXWIGBW8h+j67mNPYrrdZHG84AV0dWxNVyUI84+4= Subject key identifier: E2:2F:E5:5A:01:63:03:6E:C6:2E:57:50:9D:A3:C0:8B:12:9A:93:B4 Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c Certificate serial: 019AF2091A39832D9CEABA50E07CB83E2505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft Manifest number: 09B2 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=) 2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: m/kmBHN4d3RcM923i72ZnhGq5vZ9ItEQkLLWENqmVQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:39:83:2d:9c:ea:ba:50:e0:7c:b8:3e:25:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=e22fe55a0163036ec62e57509da3c08b129a93b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:2d:22:8c:cf:63:e1:c3:7b:cb:70:94:e3: b8:ea:af:ea:c5:ef:07:62:c6:d8:7b:83:95:94:27: 22:42:45:19:b7:99:b2:b2:1e:8e:a8:16:57:d0:60: 64:3f:20:f8:5d:89:51:20:79:3c:92:2e:f4:b6:da: c3:4a:85:c6:15:2f:77:98:08:78:87:f1:2c:7a:45: ad:e8:b0:e9:49:be:6f:00:83:a2:7f:41:62:b2:29: 46:ca:23:59:99:4b:41:ce:e6:61:39:91:0b:5d:40: 80:a4:ff:4a:e2:f7:85:5f:af:27:52:13:40:e8:2d: 44:cb:76:23:0e:03:fd:5c:07:7c:8d:fe:cc:0d:e7: d8:eb:16:03:e1:5b:5b:30:a4:3c:d6:35:31:6b:12: c0:35:5b:33:33:fc:fd:f9:f8:45:b2:f0:8b:d1:e1: c9:d3:e4:bb:32:24:84:0c:2b:cf:c1:06:bb:54:d0: 57:52:f0:7c:c6:de:f3:91:f8:28:9e:61:25:bb:60: 6f:e3:58:79:6a:6f:b3:65:5e:db:bd:c4:9e:11:3c: f7:b5:1a:e2:42:8a:34:a5:17:f2:8d:40:be:ce:92: ab:34:7c:f0:b1:c2:29:45:df:d7:fd:ac:1e:08:bd: fe:0f:85:6d:28:94:26:82:2f:f0:46:92:a1:35:33: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:E5:5A:01:63:03:6E:C6:2E:57:50:9D:A3:C0:8B:12:9A:93:B4 X509v3 Authority Key Identifier: keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0c:eb:e7:43:c3:f2:6e:ec:97:67:85:9e:b9:ad:36:91:32: 60:78:14:94:0c:10:ee:c8:a0:3a:fb:af:5e:29:eb:ab:df:1b: 64:a7:d6:cd:17:d9:b8:fe:24:a6:76:a9:76:14:e4:d3:ba:e2: dc:fa:8e:a0:aa:af:cf:8a:6c:c9:ed:31:a1:b3:be:d3:b9:45: aa:00:52:9b:5d:8c:38:df:91:a9:22:e5:5f:b3:eb:19:85:96: eb:7d:1a:7b:75:f3:e9:51:4d:d3:4f:11:ac:ba:07:48:d1:64: f8:cf:6f:84:c4:1f:27:5f:53:6d:8c:b7:0c:d6:1b:a7:b3:da: 2b:f6:d8:12:e1:30:33:0d:fa:d6:57:6b:2d:80:6b:f5:ac:13: 9b:96:96:8c:0c:d9:07:6f:19:92:6d:6b:fa:a6:c1:d9:e2:53: 14:62:23:30:c9:38:6c:19:14:f0:b9:31:bf:d6:3d:8b:e1:45: 1b:87:82:66:8e:41:8d:3e:a8:3a:ff:07:fc:e3:7f:42:5a:54: da:12:d8:5e:2b:d5:91:3a:d8:e3:60:b0:2c:e0:92:e9:7d:f3: 49:46:73:48:f1:b7:af:38:a4:93:03:9d:6a:a3:01:8f:2b:bf: 55:25:b9:35:ad:50:cc:92:f8:dc:0a:5e:1d:42:b2:9b:3c:11: 68:3e:7c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRo5gy2c6rpQ4Hy4PiUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YjFkZWY2OTU4ODVlYWRlNWNjYzhiNGJlMmEwMmJiMTYw NzllOWMwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EyhlMjJmZTU1YTAxNjMwMzZlYzYyZTU3NTA5ZGEzYzA4YjEyOWE5M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hUtIozPY+HDe8twlOO46q/qxe8H YsbYe4OVlCciQkUZt5mysh6OqBZX0GBkPyD4XYlRIHk8ki70ttrDSoXGFS93mAh4 h/EsekWt6LDpSb5vAIOif0FisilGyiNZmUtBzuZhOZELXUCApP9K4veFX68nUhNA 6C1Ey3YjDgP9XAd8jf7MDefY6xYD4VtbMKQ81jUxaxLANVszM/z9+fhFsvCL0eHJ 0+S7MiSEDCvPwQa7VNBXUvB8xt7zkfgonmElu2Bv41h5am+zZV7bvcSeETz3tRri Qoo0pRfyjUC+zpKrNHzwscIpRd/X/aweCL3+D4VtKJQmgi/wRpKhNTPyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIv5VoBYwNuxi5XUJ2jwIsSmpO0MB8GA1UdIwQY MBaAFKex3vaViF6t5czItL4qArsWB56cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ODhjYWUtNWY5Ni00ODc1LTg3MDEt OTQ0ZWNlYzdhNDIzLzEvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ODhjYWUtNWY5Ni00ODc1LTg3MDEtOTQ0ZWNlYzdhNDIz LzEvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAzr50PD 8m7sl2eFnrmtNpEyYHgUlAwQ7sigOvuvXinrq98bZKfWzRfZuP4kpnapdhTk07ri 3PqOoKqvz4psye0xobO+07lFqgBSm12MON+RqSLlX7PrGYWW630ae3Xz6VFN008R rLoHSNFk+M9vhMQfJ19TbYy3DNYbp7PaK/bYEuEwMw361ldrLYBr9awTm5aWjAzZ B28Zkm1r+qbB2eJTFGIjMMk4bBkU8Lkxv9Y9i+FFG4eCZo5BjT6oOv8H/ON/QlpU 2hLYXivVkTrY42CwLOCS6X3zSUZzSPG3rzikkwOdaqMBjyu/VSW5Na1QzJL43Ape HUKymzwRaD58Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:13 2025 by rpki-client