This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json) Hash identifier: dL/q+99D8VlRokRZDqawzclgqpqJ3awwulrN9RSiRes= Subject key identifier: 53:4A:D4:85:66:18:39:A8:EF:21:68:BC:D1:59:A3:6E:D7:B7:B9:6B Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Certificate serial: 019AF5E624448188AC75DA2EAC84867BEA9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 23:01:31 +0000 Manifest this update: Sat 06 Dec 2025 23:01:31 +0000 Manifest next update: Sun 07 Dec 2025 23:01:31 +0000 Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=) 2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: g6tRrGZqNgHyRD6L7X5SVsGRQ2qyOaWq4h3M8wcjPSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:24:44:81:88:ac:75:da:2e:ac:84:86:7b:ea:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Validity Not Before: Dec 6 23:01:31 2025 GMT Not After : Dec 7 23:01:31 2025 GMT Subject: CN=534ad485661839a8ef2168bcd159a36ed7b7b96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:c5:39:ae:0d:3e:d8:80:80:ef:7f:f9:1a: 76:e5:ad:d7:77:e4:c5:5f:23:2a:72:5f:e4:0e:65: 92:95:8f:cc:82:9c:46:cc:43:27:99:b5:5b:df:b7: 03:36:1b:57:6e:92:87:c6:c8:df:cc:89:bb:ef:80: 95:ae:f5:d0:33:d9:27:15:97:36:6c:e3:f4:7f:db: 7a:f1:13:53:4b:5e:54:25:03:a4:2f:24:b4:4c:69: 3e:60:47:e5:09:36:c0:4d:2c:1b:66:1b:48:01:63: 9d:6a:3b:d3:db:45:53:df:8c:5f:0e:0e:a8:63:b9: 09:e6:86:c0:22:53:12:ef:97:8c:ff:18:f1:d7:b9: 98:e9:08:c0:82:c8:ec:47:b9:97:c7:c5:4b:4d:31: 8a:9f:e9:74:f0:c6:46:94:08:f3:3f:2d:22:45:da: fb:28:1a:c3:81:4d:06:40:e8:7b:07:50:c6:3b:be: d9:fa:4d:a5:c8:94:69:ac:2e:a2:54:3a:ca:fc:48: bc:56:99:11:85:8d:c3:5f:a1:46:c7:36:9c:68:23: aa:18:9c:fe:1b:e6:78:7e:27:48:73:7b:98:ab:6e: b7:23:17:15:d4:e1:30:73:54:7a:4f:ef:2b:c4:33: 50:39:e4:ad:46:a7:23:5a:9f:0a:14:92:a7:cd:5d: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:D4:85:66:18:39:A8:EF:21:68:BC:D1:59:A3:6E:D7:B7:B9:6B X509v3 Authority Key Identifier: keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:74:6b:dd:cd:85:2c:24:a9:b2:4a:d2:f7:6b:04:3e:52: f6:9d:67:a9:cd:74:e4:ac:d7:c2:b4:4d:35:3f:4c:02:76:ca: 65:3f:db:70:7e:2a:08:93:d2:48:0e:58:d1:b4:a9:30:0d:ac: 11:ea:aa:84:0d:d3:3a:4b:e9:e0:e5:ed:a6:e8:f1:e6:68:be: de:91:f7:c8:8d:8e:86:96:36:92:c3:e4:c6:1c:dc:9d:42:33: d6:f4:ab:7f:e5:f6:61:00:43:d8:e4:63:6e:af:46:a3:84:c6: b3:f0:7e:f5:c2:79:00:71:ed:5b:c4:ce:46:82:6e:64:aa:0c: 87:53:8f:45:de:2c:ed:e2:94:08:2a:8d:aa:7e:f6:c1:6e:f0: a9:b2:c1:dd:61:1c:1f:70:88:88:ad:29:a4:42:53:81:45:e4: 39:d5:a5:0a:5c:f4:91:a8:f2:a7:8c:c3:fd:4f:97:cf:28:81: f2:c4:cb:7f:a3:99:39:41:b8:b3:42:54:28:b9:f2:0c:cb:63: 0d:42:be:fb:d9:de:a0:57:6b:97:a2:e6:46:5c:97:90:0e:be: 04:66:c0:98:b9:a9:5a:93:73:35:cb:ab:c4:93:2f:be:58:ef: 81:f0:7d:7f:a1:99:01:83:d9:f5:2e:ef:13:26:4f:11:9f:1c: dc:e9:b6:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iREgYisddourISGe+qdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi MGYzODUwHhcNMjUxMjA2MjMwMTMxWhcNMjUxMjA3MjMwMTMxWjAzMTEwLwYDVQQD Eyg1MzRhZDQ4NTY2MTgzOWE4ZWYyMTY4YmNkMTU5YTM2ZWQ3YjdiOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hrFOa4NPtiAgO9/+Rp25a3Xd+TF XyMqcl/kDmWSlY/MgpxGzEMnmbVb37cDNhtXbpKHxsjfzIm774CVrvXQM9knFZc2 bOP0f9t68RNTS15UJQOkLyS0TGk+YEflCTbATSwbZhtIAWOdajvT20VT34xfDg6o Y7kJ5obAIlMS75eM/xjx17mY6QjAgsjsR7mXx8VLTTGKn+l08MZGlAjzPy0iRdr7 KBrDgU0GQOh7B1DGO77Z+k2lyJRprC6iVDrK/Ei8VpkRhY3DX6FGxzacaCOqGJz+ G+Z4fidIc3uYq263IxcV1OEwc1R6T+8rxDNQOeStRqcjWp8KFJKnzV0VoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNK1IVmGDmo7yFovNFZo27Xt7lrMB8GA1UdIwQY MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0 LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO490a93N hSwkqbJK0vdrBD5S9p1nqc105KzXwrRNNT9MAnbKZT/bcH4qCJPSSA5Y0bSpMA2s EeqqhA3TOkvp4OXtpujx5mi+3pH3yI2OhpY2ksPkxhzcnUIz1vSrf+X2YQBD2ORj bq9Go4TGs/B+9cJ5AHHtW8TORoJuZKoMh1OPRd4s7eKUCCqNqn72wW7wqbLB3WEc H3CIiK0ppEJTgUXkOdWlClz0kajyp4zD/U+XzyiB8sTLf6OZOUG4s0JUKLnyDMtj DUK++9neoFdrl6LmRlyXkA6+BGbAmLmpWpNzNcurxJMvvljvgfB9f6GZAYPZ9S7v EyZPEZ8c3Om2qQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:28 2025 by rpki-client