This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft File: 7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json) Hash identifier: R39QYyx/3UKMaKLY7ErRbKu5rJePT6pNGPdJAStBshU= Subject key identifier: F0:86:9A:91:2B:EA:B5:58:85:22:0D:78:38:63:43:47:10:E9:1D:92 Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49 Certificate issuer: /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749 Certificate serial: 019AF5411919CB319A25A84ABB941C20216D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 20:01:15 +0000 Manifest this update: Sat 06 Dec 2025 20:01:15 +0000 Manifest next update: Sun 07 Dec 2025 20:01:15 +0000 Files and hashes: 1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: 6Xh5S58+/gEWaA2DTksL96dOkJZAlzkOJGhRhdS+3hk=) 2: tFhiLjE_x6ntaURfWA3IYuyQkY8.roa (hash: ro3HfbcTzO9HdiyA8mU/a+hvQqF1uykWHi+tS+T8Jt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:19:19:cb:31:9a:25:a8:4a:bb:94:1c:20:21:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749 Validity Not Before: Dec 6 20:01:15 2025 GMT Not After : Dec 7 20:01:15 2025 GMT Subject: CN=f0869a912beab55885220d783863434710e91d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:d8:b4:21:98:a9:69:95:ca:87:fd:87:52: 78:2d:d3:f8:bb:ba:84:1c:f9:9b:5c:63:88:c7:29: ae:96:56:55:3d:1b:90:df:6f:7c:58:ab:f6:e7:a1: 37:1e:7b:3d:76:80:fd:4c:86:89:1f:5f:bc:0e:1e: 90:67:89:94:7a:67:c1:af:28:ae:d7:d3:e7:b4:f8: 06:6c:17:29:33:f9:e4:a2:2a:b8:bf:a7:cd:0d:8a: f7:d6:91:68:af:84:72:c5:cc:d6:9e:9a:5e:5d:20: 9f:68:3d:f8:33:1c:f0:b3:d6:89:ec:e5:37:a8:ee: 3e:e7:5a:bb:5a:dc:eb:5a:c2:43:0c:56:76:a8:15: 35:0c:03:3d:aa:40:75:3e:aa:d9:6c:0d:9e:b1:58: 14:cf:60:39:f3:30:41:cb:4b:c6:20:a2:73:36:9f: d6:25:5d:4b:40:4f:25:65:41:de:39:b8:a7:59:7f: 16:5c:c2:56:d9:ad:d8:29:c6:4c:75:27:ed:27:1d: 26:3f:b9:34:dc:73:fc:6a:2d:c6:5b:38:f3:88:ff: c3:bf:a5:49:88:da:c8:a4:e7:85:b7:76:ea:6b:9c: 82:f2:b5:16:c7:14:03:f9:d3:a4:6e:06:c0:b1:9c: 2b:7c:fe:59:62:56:86:7e:18:d2:55:5b:bb:1a:29: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:86:9A:91:2B:EA:B5:58:85:22:0D:78:38:63:43:47:10:E9:1D:92 X509v3 Authority Key Identifier: keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c8:4a:c4:d3:3a:60:b7:1f:b6:6e:68:de:c6:cf:be:37:6f: 28:88:96:ec:1a:1b:37:66:1b:31:71:4e:a8:8c:51:e9:f2:81: 7e:b9:bf:1c:a9:b4:fe:31:ca:cf:39:dc:2d:65:91:34:20:e8: 18:2a:f3:3d:db:76:63:3c:f0:d6:aa:d3:7c:5c:e4:5e:c1:4c: 9c:89:8b:1a:0c:d3:c5:53:b8:41:12:3b:66:6a:43:a9:c4:9c: 4b:e5:27:f3:ad:9b:8e:81:76:b0:3f:6c:1c:42:10:b1:91:b2: 79:2d:cc:2d:e3:f8:31:7f:e9:01:e7:c8:41:2f:bc:09:b9:3b: 09:5b:18:0a:bb:2f:6f:8a:b0:dc:f3:5d:3f:26:39:ef:72:04: 6a:7c:b4:20:be:b0:95:44:e5:cf:cf:44:5d:eb:90:db:89:0a: d0:51:e8:a8:98:a2:30:b6:c4:f8:9c:ed:a2:39:3b:6b:4a:13: 8c:8a:7d:e7:ac:42:ab:fd:86:15:67:2e:da:51:a9:91:05:b2: f2:f6:92:82:2c:8d:86:ff:03:0b:9a:65:bb:17:14:a5:ac:3c: 57:1b:83:86:46:cc:f3:80:b3:72:3c:0d:9b:f3:5d:f4:47:02: 95:c3:99:70:41:b0:19:20:54:fc:0c:62:7c:4b:e0:0d:03:05: 27:a6:38:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRkZyzGaJahKu5QcICFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDk5ZDc0MWNmN2E2ODhmZmMyYzk3NjgxM2RiN2M1MWVi YzQ3NDkwHhcNMjUxMjA2MjAwMTE1WhcNMjUxMjA3MjAwMTE1WjAzMTEwLwYDVQQD EyhmMDg2OWE5MTJiZWFiNTU4ODUyMjBkNzgzODYzNDM0NzEwZTkxZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy17YtCGYqWmVyof9h1J4LdP4u7qE HPmbXGOIxymullZVPRuQ3298WKv256E3Hns9doD9TIaJH1+8Dh6QZ4mUemfBryiu 19PntPgGbBcpM/nkoiq4v6fNDYr31pFor4RyxczWnppeXSCfaD34Mxzws9aJ7OU3 qO4+51q7WtzrWsJDDFZ2qBU1DAM9qkB1PqrZbA2esVgUz2A58zBBy0vGIKJzNp/W JV1LQE8lZUHeObinWX8WXMJW2a3YKcZMdSftJx0mP7k03HP8ai3GWzjziP/Dv6VJ iNrIpOeFt3bqa5yC8rUWxxQD+dOkbgbAsZwrfP5ZYlaGfhjSVVu7Gin89QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCGmpEr6rVYhSINeDhjQ0cQ6R2SMB8GA1UdIwQY MBaAFO5JnXQc96aI/8LJdoE9t8UevEdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjct YTY3MzJkY2QxMzk4LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjctYTY3MzJkY2QxMzk4 LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8hKxNM6 YLcftm5o3sbPvjdvKIiW7BobN2YbMXFOqIxR6fKBfrm/HKm0/jHKzzncLWWRNCDo GCrzPdt2Yzzw1qrTfFzkXsFMnImLGgzTxVO4QRI7ZmpDqcScS+Un862bjoF2sD9s HEIQsZGyeS3MLeP4MX/pAefIQS+8Cbk7CVsYCrsvb4qw3PNdPyY573IEany0IL6w lUTlz89EXeuQ24kK0FHoqJiiMLbE+Jztojk7a0oTjIp956xCq/2GFWcu2lGpkQWy 8vaSgiyNhv8DC5pluxcUpaw8VxuDhkbM84CzcjwNm/Nd9EcClcOZcEGwGSBU/Axi fEvgDQMFJ6Y4Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:49 2025 by rpki-client