This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json) Hash identifier: sagYU0PWPpjJxgei0shRB+2VyPhH4fhiCHnlWsm3IvI= Subject key identifier: 42:8C:7C:94:D6:D2:67:0D:23:A7:E3:7F:7E:7D:2E:36:A0:CD:71:D2 Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0 Certificate serial: 019AF578109A58FA82B3AB7763F327275207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:17 +0000 Manifest this update: Sat 06 Dec 2025 21:01:17 +0000 Manifest next update: Sun 07 Dec 2025 21:01:17 +0000 Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: 2kexXjfF5G8pgD+T8/kA2pG28Bj2QXucLFuivaJuhxc=) 2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:10:9a:58:fa:82:b3:ab:77:63:f3:27:27:52:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0 Validity Not Before: Dec 6 21:01:17 2025 GMT Not After : Dec 7 21:01:17 2025 GMT Subject: CN=428c7c94d6d2670d23a7e37f7e7d2e36a0cd71d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:2f:85:8d:62:cd:9e:cf:4a:44:a5:54:6e: f0:2b:41:c5:55:c5:0e:e1:73:28:80:e8:2b:38:15: d4:70:87:27:07:eb:8d:79:86:ed:ca:29:2a:db:6d: b0:35:b5:32:aa:d0:1d:3a:ee:2b:39:22:c8:bb:e2: 1f:99:5a:d0:3b:f5:1d:b4:20:9a:10:98:ac:cd:94: ca:c3:c6:75:af:d3:ea:cd:0d:d0:b2:58:e1:b3:4f: 72:67:87:a9:fa:9e:90:f5:a5:c8:0b:ac:54:e5:6d: 49:13:a9:e6:0a:67:25:0a:94:39:7b:1f:60:79:41: 73:9a:e9:42:df:c3:96:d6:5b:05:21:51:84:8b:1e: c5:37:62:ad:4c:af:09:64:ab:c6:2f:a0:24:78:12: d6:ad:02:ef:d4:e4:c9:7a:12:8c:4d:7e:b5:b1:75: c2:3a:81:c1:28:be:71:3b:c9:70:ba:13:82:9c:a3: f7:15:09:34:42:8a:67:ab:a6:99:d1:6f:ce:e0:70: 7e:7d:4d:3c:55:16:9b:dd:ce:0b:e9:9d:ea:65:ee: 11:9a:c5:c3:48:c7:22:3e:b1:9f:64:9e:7b:81:27: 2f:68:77:13:75:0e:b0:fa:9f:22:39:ea:f7:41:3e: f7:7b:ba:1c:7c:54:92:ff:9f:27:55:e6:f8:aa:7a: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:7C:94:D6:D2:67:0D:23:A7:E3:7F:7E:7D:2E:36:A0:CD:71:D2 X509v3 Authority Key Identifier: keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:69:f6:eb:16:ba:05:26:97:60:fe:90:15:c2:ec:d2:2a: 9b:38:81:b6:95:9d:43:d6:a9:5f:b0:cc:1a:60:5e:44:cf:ab: 52:e7:5b:7b:09:00:ba:2c:33:39:0e:a6:fe:c4:1a:06:5a:b7: b5:2f:6b:81:f1:c5:6f:05:1b:e2:4d:9a:54:56:2a:37:ca:6b: c1:1f:47:3f:c7:00:6e:92:b4:10:0f:2a:5d:cb:1f:c7:25:b3: 5a:34:3c:ee:66:97:8a:98:28:59:15:0a:90:3b:c6:73:62:d5: 43:57:d8:95:67:5d:e4:7b:e2:8f:18:38:96:98:ca:ae:23:b4: de:9b:e4:fb:f6:fc:f2:42:12:71:a9:8f:95:62:66:03:0b:6c: c9:e9:34:b5:52:46:63:81:fa:f9:cd:e3:3f:88:c5:c6:aa:e5: 0f:6d:57:ec:3f:ca:a3:5d:d8:13:12:4a:1d:60:da:e8:04:2a: e8:c5:04:cc:dd:88:4d:aa:53:df:17:84:4e:7c:cf:ec:32:e4: 73:b3:ef:35:ed:8a:01:a6:70:33:e9:e6:b6:b5:4c:d3:02:5d: 35:a8:c9:83:62:e4:94:cd:dd:33:3e:1d:13:68:f7:62:b2:fc: 31:2d:47:ce:54:41:a8:00:9e:87:57:9e:b5:3e:d8:0f:a4:00: 6f:e7:9a:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBCaWPqCs6t3Y/MnJ1IHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz NzU4YzAwHhcNMjUxMjA2MjEwMTE3WhcNMjUxMjA3MjEwMTE3WjAzMTEwLwYDVQQD Eyg0MjhjN2M5NGQ2ZDI2NzBkMjNhN2UzN2Y3ZTdkMmUzNmEwY2Q3MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLQvhY1izZ7PSkSlVG7wK0HFVcUO 4XMogOgrOBXUcIcnB+uNeYbtyikq222wNbUyqtAdOu4rOSLIu+IfmVrQO/UdtCCa EJiszZTKw8Z1r9PqzQ3Qsljhs09yZ4ep+p6Q9aXIC6xU5W1JE6nmCmclCpQ5ex9g eUFzmulC38OW1lsFIVGEix7FN2KtTK8JZKvGL6AkeBLWrQLv1OTJehKMTX61sXXC OoHBKL5xO8lwuhOCnKP3FQk0Qopnq6aZ0W/O4HB+fU08VRab3c4L6Z3qZe4RmsXD SMciPrGfZJ57gScvaHcTdQ6w+p8iOer3QT73e7ocfFSS/58nVeb4qnqxhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKMfJTW0mcNI6fjf359LjagzXHSMB8GA1UdIwQY MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV1p9usW ugUml2D+kBXC7NIqmziBtpWdQ9apX7DMGmBeRM+rUudbewkAuiwzOQ6m/sQaBlq3 tS9rgfHFbwUb4k2aVFYqN8prwR9HP8cAbpK0EA8qXcsfxyWzWjQ87maXipgoWRUK kDvGc2LVQ1fYlWdd5Hvijxg4lpjKriO03pvk+/b88kIScamPlWJmAwtsyek0tVJG Y4H6+c3jP4jFxqrlD21X7D/Ko13YExJKHWDa6AQq6MUEzN2ITapT3xeETnzP7DLk c7PvNe2KAaZwM+nmtrVM0wJdNajJg2LklM3dMz4dE2j3YrL8MS1HzlRBqACeh1ee tT7YD6QAb+ea5g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:27:31 2025 by rpki-client