This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json) Hash identifier: MNQPrKrRFFC4InoVU7IeOmZy/2ryK1K2H7Mqc/qoJys= Subject key identifier: DA:B6:F1:C9:CE:0A:74:5E:C2:BD:63:31:9A:83:FF:B9:C2:5E:76:6F Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20 Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920 Certificate serial: 019B3D232D2907916556E78214D41DC82A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft Manifest number: 152B Signing time: Sat 20 Dec 2025 19:01:13 +0000 Manifest this update: Sat 20 Dec 2025 19:01:13 +0000 Manifest next update: Sun 21 Dec 2025 19:01:13 +0000 Files and hashes: 1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: ZMIPls273aDaCitzV1kNLoWNA3vvSWq+yLHCPbZc0To=) 2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:2d:29:07:91:65:56:e7:82:14:d4:1d:c8:2a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920 Validity Not Before: Dec 20 19:01:13 2025 GMT Not After : Dec 21 19:01:13 2025 GMT Subject: CN=dab6f1c9ce0a745ec2bd63319a83ffb9c25e766f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:01:4a:11:02:cc:60:75:41:12:7c:b4:2b: 36:5f:8a:c1:43:a5:cc:98:f1:a9:57:5c:4f:6a:59: 9a:b1:db:02:ce:01:6e:3c:b1:d5:12:4e:bd:92:74: 47:58:db:0d:d0:55:52:79:92:5a:d4:f7:50:9c:82: 97:8c:cc:03:1d:2e:11:7c:c0:94:47:57:33:50:94: a8:c9:d9:e5:d8:29:2d:9f:c4:10:86:97:88:b7:6b: 12:ef:98:a3:03:37:ea:ae:47:4b:ff:6a:48:2e:8b: af:4f:c6:01:21:68:14:3e:76:14:dd:21:ad:4d:ed: 00:6b:7d:9b:02:47:54:66:c0:a9:5f:06:85:73:3c: 59:45:22:ca:d8:8d:11:e5:44:fe:f1:7d:10:b9:58: 34:2f:77:63:b2:5d:04:79:0b:fb:39:0b:f3:56:fe: 87:f7:ea:40:31:5c:90:f2:75:6c:b9:ae:e1:b9:3a: 0e:f6:56:a4:59:d4:de:6a:84:38:16:f3:11:2a:f2: ce:90:6e:b8:54:95:9e:1e:6a:ab:0c:8d:24:1a:20: e0:5c:7f:17:d9:af:60:32:cc:ce:82:b0:12:27:56: dd:5f:af:e8:d7:96:09:c7:6a:42:f9:32:b3:59:07: d9:db:c2:82:6e:85:96:1b:da:ad:74:3a:c1:98:d7: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B6:F1:C9:CE:0A:74:5E:C2:BD:63:31:9A:83:FF:B9:C2:5E:76:6F X509v3 Authority Key Identifier: keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2d:60:9a:e5:61:a6:c9:41:79:70:27:8d:e9:23:8f:25:5f: ec:95:8f:0f:bf:81:7e:c9:d9:48:4e:86:f4:50:da:e1:1f:a2: 81:40:6d:3e:9a:fd:9e:7e:56:32:0e:f1:5d:29:0e:e4:31:fd: 08:fc:ac:5e:4b:9e:e2:2e:6f:da:4c:4d:62:13:b8:cc:b8:54: eb:5b:4d:3f:54:74:ad:ce:da:00:0b:3c:bb:fb:29:8c:12:3d: 32:0b:31:af:79:90:36:14:4e:8e:94:b1:2a:23:a8:3e:ca:eb: 44:31:b4:78:ff:2a:27:9b:9f:bd:76:97:ee:70:40:36:2d:b5: af:74:3b:d9:16:50:e7:ab:bd:74:72:51:0a:ff:8c:34:5a:5d: ed:9a:cc:82:78:28:6f:40:70:a3:f2:25:b6:14:98:e8:9c:ef: a4:eb:b4:68:10:a1:37:03:cd:d4:98:a2:2e:d2:54:02:e3:62: 15:dd:ad:d8:ca:b7:f4:16:e9:5c:b3:29:ee:76:9f:84:b3:a1: 86:f7:2c:91:be:52:b9:3d:da:9f:51:3e:d4:7a:2f:93:48:ff: 7f:9b:b5:fa:a3:91:5d:5f:96:72:d3:49:2b:4d:7e:8f:d3:a3: 84:ba:08:f6:5a:8b:e9:0f:de:c2:7c:f8:12:34:3a:f9:de:c6: 16:ae:b8:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iy0pB5FlVueCFNQdyCpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGE5NTMyNzE4N2MzMDg4MGY1YmJmM2MzNzI4OWVlMzEx YzU5MjAwHhcNMjUxMjIwMTkwMTEzWhcNMjUxMjIxMTkwMTEzWjAzMTEwLwYDVQQD EyhkYWI2ZjFjOWNlMGE3NDVlYzJiZDYzMzE5YTgzZmZiOWMyNWU3NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+8BShECzGB1QRJ8tCs2X4rBQ6XM mPGpV1xPalmasdsCzgFuPLHVEk69knRHWNsN0FVSeZJa1PdQnIKXjMwDHS4RfMCU R1czUJSoydnl2Cktn8QQhpeIt2sS75ijAzfqrkdL/2pILouvT8YBIWgUPnYU3SGt Te0Aa32bAkdUZsCpXwaFczxZRSLK2I0R5UT+8X0QuVg0L3djsl0EeQv7OQvzVv6H 9+pAMVyQ8nVsua7huToO9lakWdTeaoQ4FvMRKvLOkG64VJWeHmqrDI0kGiDgXH8X 2a9gMszOgrASJ1bdX6/o15YJx2pC+TKzWQfZ28KCboWWG9qtdDrBmNe7HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq28cnOCnRewr1jMZqD/7nCXnZvMB8GA1UdIwQY MBaAFO6KlTJxh8MIgPW788Nyie4xHFkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYt NTQ3NTEzNWYxOTA1LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYtNTQ3NTEzNWYxOTA1 LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy1gmuVh pslBeXAnjekjjyVf7JWPD7+BfsnZSE6G9FDa4R+igUBtPpr9nn5WMg7xXSkO5DH9 CPysXkue4i5v2kxNYhO4zLhU61tNP1R0rc7aAAs8u/spjBI9Mgsxr3mQNhROjpSx KiOoPsrrRDG0eP8qJ5ufvXaX7nBANi21r3Q72RZQ56u9dHJRCv+MNFpd7ZrMgngo b0Bwo/IlthSY6JzvpOu0aBChNwPN1JiiLtJUAuNiFd2t2Mq39BbpXLMp7nafhLOh hvcskb5SuT3an1E+1Hovk0j/f5u1+qORXV+WctNJK01+j9OjhLoI9lqL6Q/ewnz4 EjQ6+d7GFq64/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:44 2025 by rpki-client