This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json) Hash identifier: z9PoreKbSiN+vIdzJTJBoNalAOpoop8Z8un3IW/rpz4= Subject key identifier: 27:A9:21:D0:3A:39:5C:9D:9C:1C:02:A9:31:4E:39:2C:B3:9C:09:76 Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Certificate serial: 019AF19B0F96CB76EFF7B3A460AB0E66E77A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft Manifest number: 03F4 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: XpVTrs3RtVGNgcYQRlH8G39pvtdIe+cp8xLxIrWpXqI=) 2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0f:96:cb:76:ef:f7:b3:a4:60:ab:0e:66:e7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=27a921d03a395c9d9c1c02a9314e392cb39c0976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:46:6b:ac:b6:2b:97:56:3b:cf:7c:cc:a9: b4:e8:a9:1f:6c:18:20:1b:10:21:c9:45:81:00:55: 65:b4:b7:f9:57:80:20:a5:30:4c:66:b0:9a:39:84: 70:24:a1:20:26:57:66:c4:ac:e9:52:8a:94:5d:e9: 2f:6e:10:b2:22:3a:d7:15:80:37:db:46:55:c6:7f: 8b:5a:ed:7e:aa:fd:f0:71:f2:73:28:77:0c:2d:70: 70:0e:df:30:15:d8:fa:ad:21:d6:4e:12:69:fe:f1: a4:00:8d:ab:be:63:1e:c8:db:dc:a9:93:ce:bd:cf: d7:88:0f:b2:2f:8d:3e:d1:ad:7c:9f:97:72:12:fe: 2c:93:55:b8:e5:63:b1:3e:60:b8:6d:3f:fd:14:91: 69:99:70:59:d4:11:ee:48:42:b1:56:a0:90:b5:26: 27:a6:10:34:84:dd:58:10:c4:eb:5e:25:70:63:c7: 17:98:35:7b:b3:f3:61:cd:16:81:cf:32:b7:27:e4: 47:59:78:5a:6d:71:b6:d1:d1:aa:f2:82:ff:aa:36: 92:b1:23:e6:53:62:d5:b4:88:15:8f:83:f2:64:40: c0:1e:94:1d:0a:01:a8:ac:dc:03:79:41:15:a8:75: 89:15:cb:7a:eb:e3:a6:2a:e8:21:eb:6e:f3:bc:96: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A9:21:D0:3A:39:5C:9D:9C:1C:02:A9:31:4E:39:2C:B3:9C:09:76 X509v3 Authority Key Identifier: keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:83:f1:f9:86:13:a2:9b:d3:aa:54:f5:41:ef:48:04:c7:5f: aa:38:0d:fa:76:da:9a:c6:b7:54:23:9c:5a:d9:6d:b6:57:ee: b7:d5:cf:27:94:2e:1a:3a:d3:b3:7e:5a:9b:df:91:c4:85:68: b6:db:ed:a8:17:77:81:7e:8d:80:a3:54:f2:66:5e:1a:68:33: 84:1d:96:0b:29:a2:88:ab:7a:c8:65:46:3d:58:3b:8b:c7:03: 02:83:32:15:39:28:23:7a:91:8e:37:dd:85:75:3e:a2:44:15: dd:f8:cc:91:17:11:50:52:92:d5:4a:6e:c3:e9:1d:9f:1c:b9: 24:d0:1f:6c:97:fd:dd:48:0c:48:b7:ad:83:b0:99:99:34:c5: 06:d0:43:3f:ec:1a:5d:b0:0b:8b:ae:0d:ec:e3:1d:22:cb:e4: b9:28:92:2b:6e:f0:1f:fe:27:cf:8c:8f:9c:a8:ce:a1:14:37: c1:cc:41:ce:76:98:84:bf:8f:97:bb:3a:bd:f7:81:a1:13:3b: 79:0e:51:e8:c1:8c:9a:af:66:f6:a6:05:39:29:19:98:18:e3: 81:f3:25:bc:2d:45:57:3a:79:20:08:f1:d1:26:5b:b7:68:62: 5a:fb:ae:00:86:7a:cd:dd:d3:03:e1:3e:e3:c4:bf:0d:e4:c2: 61:1a:f5:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw+Wy3bv97OkYKsOZud6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk NTQyMTIwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EygyN2E5MjFkMDNhMzk1YzlkOWMxYzAyYTkzMTRlMzkyY2IzOWMwOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLJGa6y2K5dWO898zKm06KkfbBgg GxAhyUWBAFVltLf5V4AgpTBMZrCaOYRwJKEgJldmxKzpUoqUXekvbhCyIjrXFYA3 20ZVxn+LWu1+qv3wcfJzKHcMLXBwDt8wFdj6rSHWThJp/vGkAI2rvmMeyNvcqZPO vc/XiA+yL40+0a18n5dyEv4sk1W45WOxPmC4bT/9FJFpmXBZ1BHuSEKxVqCQtSYn phA0hN1YEMTrXiVwY8cXmDV7s/NhzRaBzzK3J+RHWXhabXG20dGq8oL/qjaSsSPm U2LVtIgVj4PyZEDAHpQdCgGorNwDeUEVqHWJFct66+OmKugh627zvJZx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCepIdA6OVydnBwCqTFOOSyznAl2MB8GA1UdIwQY MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4Px+YYT opvTqlT1Qe9IBMdfqjgN+nbamsa3VCOcWtlttlfut9XPJ5QuGjrTs35am9+RxIVo ttvtqBd3gX6NgKNU8mZeGmgzhB2WCymiiKt6yGVGPVg7i8cDAoMyFTkoI3qRjjfd hXU+okQV3fjMkRcRUFKS1Upuw+kdnxy5JNAfbJf93UgMSLetg7CZmTTFBtBDP+wa XbALi64N7OMdIsvkuSiSK27wH/4nz4yPnKjOoRQ3wcxBznaYhL+Pl7s6vfeBoRM7 eQ5R6MGMmq9m9qYFOSkZmBjjgfMlvC1FVzp5IAjx0SZbt2hiWvuuAIZ6zd3TA+E+ 48S/DeTCYRr10A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:08 2025 by rpki-client