This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json) Hash identifier: 9Lp40kJ2WEMu3+QS8w4D6YYAkGlxeksB2vfbJQe9vUU= Subject key identifier: 35:F3:FF:74:B8:2A:C3:18:E0:A3:A5:AB:C0:F0:F8:26:06:DE:27:86 Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69 Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69 Certificate serial: 019B2FD4E25D8F0EF3DF7BC98E03F1CD6487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft Manifest number: 0FE7 Signing time: Thu 18 Dec 2025 05:00:39 +0000 Manifest this update: Thu 18 Dec 2025 05:00:39 +0000 Manifest next update: Fri 19 Dec 2025 05:00:39 +0000 Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: 5K2J2in2a+lvZtDTJrtWFJGd3xOONSRLpuIdkOZ0w00=) 2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:e2:5d:8f:0e:f3:df:7b:c9:8e:03:f1:cd:64:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69 Validity Not Before: Dec 18 05:00:39 2025 GMT Not After : Dec 19 05:00:39 2025 GMT Subject: CN=35f3ff74b82ac318e0a3a5abc0f0f82606de2786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:96:f2:5e:51:6e:d8:f7:b3:b6:0c:33:ea: 0c:df:19:8d:e8:47:b4:75:3a:ac:52:f0:ef:8e:b1: 25:37:27:59:9e:31:8d:42:78:c7:06:40:25:de:1e: fc:b9:f3:67:a5:db:68:0d:6f:81:7b:03:24:b1:53: 0d:c1:3f:76:47:3f:5d:d1:dd:5f:75:c3:3e:93:3b: 8c:f1:a2:8a:6e:57:b5:b8:5f:31:d9:28:b8:82:9b: d7:88:f7:63:13:44:b9:f6:e6:3c:e0:03:84:8b:23: 4d:3c:9b:62:5e:ac:19:94:99:56:72:32:be:c6:c2: d4:62:d2:24:27:1a:ed:fe:43:72:39:b2:98:f3:e0: 89:ae:e7:6e:60:27:df:44:81:d1:07:5e:0f:76:00: 66:6c:64:2a:78:88:c9:c0:dc:24:06:66:e8:58:02: 9f:70:e3:44:47:5a:f2:3f:73:92:68:5c:a3:29:bd: 32:c5:ac:f1:f3:5d:29:53:01:84:d8:69:7c:65:6d: ac:07:62:a4:6a:a5:cd:f4:17:65:03:12:7b:2d:a4: 38:01:5b:30:e5:40:1f:a2:c4:b4:f1:a1:bd:1e:04: 37:96:92:73:6d:1c:a7:3a:db:8c:15:f1:69:2e:e0: a2:a4:ed:b4:28:13:44:17:05:46:e5:5c:29:a5:25: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F3:FF:74:B8:2A:C3:18:E0:A3:A5:AB:C0:F0:F8:26:06:DE:27:86 X509v3 Authority Key Identifier: keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:39:8a:8e:0f:e0:4e:04:44:b7:ba:1d:6d:58:1d:3d:63:ce: 5a:6a:7d:90:0d:e2:79:9e:08:b1:93:90:62:7e:ef:fe:3f:e9: 85:a5:ed:79:26:9e:47:c6:8a:be:cd:a4:a5:90:2d:94:3b:4c: bc:15:06:aa:7a:d2:1f:8c:ba:f6:df:7b:bb:ec:88:11:a0:61: 4e:45:13:94:b8:a2:a7:1e:26:ed:2d:7e:20:dc:cf:e9:e3:a0: 1d:00:25:78:c8:f0:87:96:fb:a5:d3:d7:e6:1c:7b:2f:f1:c8: 66:5c:c4:4e:b1:47:07:64:53:41:b3:d7:26:91:1c:c4:07:23: f2:02:ac:4f:63:2c:4d:ba:5b:0d:f5:3f:fc:2a:97:63:07:ee: 46:e9:8c:7d:f6:b1:96:93:1c:04:ec:28:52:3d:6e:3f:f4:81: 24:5b:61:40:3e:e0:7f:ef:ae:f9:58:2f:1a:1b:e6:cb:c5:7c: 7e:28:86:ac:5f:08:b1:0b:c9:07:5a:d9:c7:27:f8:2a:e3:93: b4:07:c6:e1:56:41:2d:0f:e3:d9:c5:61:74:49:b1:d7:39:45: 4e:1c:01:48:e3:84:fc:3a:58:f6:f1:79:4b:9e:92:d5:e4:37: c8:cc:41:2c:3d:d5:f0:3c:43:fa:06:14:fd:9e:f3:67:6d:24: d6:86:41:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1OJdjw7z33vJjgPxzWSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZWExNzdiY2MyYjBlZjY0Y2FiNjA0ZTZlNjQyN2IxYWRl MGJmNjkwHhcNMjUxMjE4MDUwMDM5WhcNMjUxMjE5MDUwMDM5WjAzMTEwLwYDVQQD EygzNWYzZmY3NGI4MmFjMzE4ZTBhM2E1YWJjMGYwZjgyNjA2ZGUyNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAeW8l5Rbtj3s7YMM+oM3xmN6Ee0 dTqsUvDvjrElNydZnjGNQnjHBkAl3h78ufNnpdtoDW+BewMksVMNwT92Rz9d0d1f dcM+kzuM8aKKble1uF8x2Si4gpvXiPdjE0S59uY84AOEiyNNPJtiXqwZlJlWcjK+ xsLUYtIkJxrt/kNyObKY8+CJruduYCffRIHRB14PdgBmbGQqeIjJwNwkBmboWAKf cONER1ryP3OSaFyjKb0yxazx810pUwGE2Gl8ZW2sB2KkaqXN9BdlAxJ7LaQ4AVsw 5UAfosS08aG9HgQ3lpJzbRynOtuMFfFpLuCipO20KBNEFwVG5VwppSXxxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXz/3S4KsMY4KOlq8Dw+CYG3ieGMB8GA1UdIwQY MBaAFO/qF3vMKw72TKtgTm5kJ7Gt4L9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZWYwOWItODAyYS00NWY3LTllN2Yt MDZkNTMwY2VmZDhhLzEvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ZWYwOWItODAyYS00NWY3LTllN2YtMDZkNTMwY2VmZDhh LzEvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDmKjg/g TgREt7odbVgdPWPOWmp9kA3ieZ4IsZOQYn7v/j/phaXteSaeR8aKvs2kpZAtlDtM vBUGqnrSH4y69t97u+yIEaBhTkUTlLiipx4m7S1+INzP6eOgHQAleMjwh5b7pdPX 5hx7L/HIZlzETrFHB2RTQbPXJpEcxAcj8gKsT2MsTbpbDfU//CqXYwfuRumMffax lpMcBOwoUj1uP/SBJFthQD7gf++u+VgvGhvmy8V8fiiGrF8IsQvJB1rZxyf4KuOT tAfG4VZBLQ/j2cVhdEmx1zlFThwBSOOE/DpY9vF5S56S1eQ3yMxBLD3V8DxD+gYU /Z7zZ20k1oZBVA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:39 2025 by rpki-client