This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json) Hash identifier: inMpLsl+IaRQvOFkkw+lT/S2iJZmLiIJtdphOFK8dDc= Subject key identifier: 38:49:76:01:EB:89:3B:C9:63:28:29:8F:05:03:D8:56:D6:7A:13:04 Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Certificate serial: 019AF1D1CA8C21CC2AB9680E707F316E772A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: DgeNROyw2Q5UPJj+w3iImRVGKtFIpnizX+dDycnQiWA=) 2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:8c:21:cc:2a:b9:68:0e:70:7f:31:6e:77:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=38497601eb893bc96328298f0503d856d67a1304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:4c:71:2c:75:f9:45:b1:d6:6d:7e:ea:a4: 29:9a:71:e8:98:32:bc:94:57:b9:20:c6:1e:df:91: 54:e8:26:9d:96:61:5c:56:72:3d:89:2d:79:dd:7f: dc:d3:ad:1d:61:4f:d5:3b:46:ba:98:71:75:44:59: 99:bc:45:89:3c:47:4d:01:f6:f7:11:43:50:cf:86: 3f:ef:34:50:68:9b:d0:f4:d0:34:4c:97:b1:b6:fd: ba:fc:ea:a5:40:b2:7d:cd:39:05:7c:aa:7e:f6:97: 17:6b:57:39:2e:38:fe:97:f4:8e:2b:d1:83:69:31: 2d:4b:ff:7b:6e:86:0e:0a:ad:2d:5c:5b:16:91:d3: c9:55:3a:1a:f7:aa:81:17:c9:3c:2b:29:00:0b:5f: 51:db:ef:b4:40:f5:ef:ad:df:a6:64:e5:22:42:43: 8b:8e:40:3f:1a:28:86:8c:11:74:c9:67:e6:bc:e1: 96:82:f0:ee:4f:ac:e7:6f:ab:04:f8:dd:a3:1b:8e: 60:ca:55:d2:d5:b3:9a:2c:fb:1f:40:9a:c9:bc:38: 9f:da:5d:93:df:7d:e6:45:ed:a1:34:c7:da:5e:87: d9:0d:df:70:7a:53:5c:7e:43:5b:4d:43:06:e8:13: e0:89:11:88:56:1c:3a:47:c9:35:34:a5:eb:51:c9: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:49:76:01:EB:89:3B:C9:63:28:29:8F:05:03:D8:56:D6:7A:13:04 X509v3 Authority Key Identifier: keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:37:67:ae:86:64:2a:50:51:f9:28:27:be:e8:65:c4:9a:d1: ba:49:d5:28:32:83:ec:a7:26:8a:79:4d:67:66:6e:e8:5d:48: b2:e6:ee:c6:58:9b:17:a2:98:42:a1:18:4d:bf:a6:20:81:84: 7c:75:73:4b:83:80:c0:0f:5d:6c:fb:a9:46:97:55:18:ba:4c: 02:aa:7f:7a:a2:98:b7:81:f2:10:ab:36:8a:4a:9c:68:61:fb: 65:79:34:22:03:0d:33:e9:59:c2:b0:98:93:43:ee:fb:04:b7: b7:8f:db:36:9a:7e:ca:a8:8a:f8:91:54:d5:55:50:62:c0:32: d6:65:63:92:d9:01:05:65:44:b3:cf:e6:d4:12:17:f2:be:42: 95:a3:e6:27:d0:0e:33:19:77:a8:e9:4c:5f:e0:c2:9d:f6:48: d5:44:63:49:ae:e9:c7:5e:98:6a:01:a0:09:59:be:41:b7:8f: ef:b7:3d:95:13:19:99:cd:32:17:80:5c:77:68:a1:5f:ba:aa: 2a:d0:a1:bc:50:4f:14:09:b6:1c:27:c2:1d:d8:a9:3e:67:61: 99:94:ac:e6:c7:8d:bc:cc:c2:43:8e:27:4c:23:2c:49:c4:01: f0:26:02:72:a8:c9:b9:07:f5:11:5d:63:18:9d:f1:fb:1f:45: b2:6f:c5:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cqMIcwquWgOcH8xbncqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYzhhMWFhZDAyMDU5NDNhNDU3MjM4OWJiNzQzMzRlMWNh Mjg0ODUwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EygzODQ5NzYwMWViODkzYmM5NjMyODI5OGYwNTAzZDg1NmQ2N2ExMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGFMcSx1+UWx1m1+6qQpmnHomDK8 lFe5IMYe35FU6CadlmFcVnI9iS153X/c060dYU/VO0a6mHF1RFmZvEWJPEdNAfb3 EUNQz4Y/7zRQaJvQ9NA0TJextv26/OqlQLJ9zTkFfKp+9pcXa1c5Ljj+l/SOK9GD aTEtS/97boYOCq0tXFsWkdPJVToa96qBF8k8KykAC19R2++0QPXvrd+mZOUiQkOL jkA/GiiGjBF0yWfmvOGWgvDuT6znb6sE+N2jG45gylXS1bOaLPsfQJrJvDif2l2T 333mRe2hNMfaXofZDd9welNcfkNbTUMG6BPgiRGIVhw6R8k1NKXrUclBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhJdgHriTvJYygpjwUD2FbWehMEMB8GA1UdIwQY MBaAFOzIoarQIFlDpFcjibt0M04cooSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEt NGE2OGYyMzVjMzg4LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEtNGE2OGYyMzVjMzg4 LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjdnroZk KlBR+SgnvuhlxJrRuknVKDKD7KcminlNZ2Zu6F1IsubuxlibF6KYQqEYTb+mIIGE fHVzS4OAwA9dbPupRpdVGLpMAqp/eqKYt4HyEKs2ikqcaGH7ZXk0IgMNM+lZwrCY k0Pu+wS3t4/bNpp+yqiK+JFU1VVQYsAy1mVjktkBBWVEs8/m1BIX8r5ClaPmJ9AO Mxl3qOlMX+DCnfZI1URjSa7px16YagGgCVm+QbeP77c9lRMZmc0yF4Bcd2ihX7qq KtChvFBPFAm2HCfCHdipPmdhmZSs5seNvMzCQ44nTCMsScQB8CYCcqjJuQf1EV1j GJ3x+x9Fsm/FjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:38 2025 by rpki-client