This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json) Hash identifier: nVdgIgeU3MD/QTi6kzP5woXOAW08tSitdXmdn403tYE= Subject key identifier: 55:BB:6F:8B:96:6E:4B:9F:55:2A:F8:12:E8:AF:B1:38:64:39:C5:46 Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d Certificate serial: 019AF19AE7624F9875B0847E347D2C0FD12E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=) 2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: MoL5ejqh5Zt/ahv0HZBAtruyARTyG14bf8b23VFulOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e7:62:4f:98:75:b0:84:7e:34:7d:2c:0f:d1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=55bb6f8b966e4b9f552af812e8afb1386439c546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6a:b9:38:2a:06:f3:a9:91:84:3a:81:36:b6: c8:b1:6c:42:12:30:fb:f7:33:22:34:09:3c:f9:76: 44:ee:bb:b6:52:77:a6:ae:d1:04:95:70:93:20:b7: fc:b1:96:6e:f1:51:8e:70:0f:4a:c9:be:fc:b3:a4: e7:e6:34:f0:cd:ab:a4:1c:27:ad:87:ab:e2:11:a0: df:48:c5:be:e6:a2:67:72:e6:7d:94:33:a3:cc:24: 90:ab:f6:2b:25:1e:06:d2:01:ea:97:91:d1:27:b3: 5f:b4:44:7e:70:b4:ba:6b:a0:e0:6c:08:50:90:54: bf:dc:f8:c0:ec:21:84:a0:07:df:07:96:96:4a:63: 1e:90:f5:6b:15:1b:d9:3c:2f:f7:95:53:39:85:84: f5:f0:a2:8e:77:7c:8b:c9:c4:e1:48:6e:a1:46:1c: bb:b4:ff:b6:eb:ac:a5:56:ad:63:bc:8d:44:46:f8: e8:28:ec:27:d7:81:2e:76:a2:f2:8e:8d:bb:bb:8e: 31:9d:0c:95:01:d4:f3:1c:ca:c1:f5:c0:e6:c3:21: 61:3b:ed:5f:15:4e:8d:9c:82:1c:51:35:eb:da:d4: 49:48:31:5b:b0:0e:bb:32:9a:a2:f5:19:ba:3f:9e: 42:bf:f5:87:87:d1:1f:db:ec:6b:8c:22:ec:be:08: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BB:6F:8B:96:6E:4B:9F:55:2A:F8:12:E8:AF:B1:38:64:39:C5:46 X509v3 Authority Key Identifier: keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b1:ff:58:70:ad:7f:53:ad:1b:45:90:c4:99:cb:93:fc:ec: d9:64:95:0f:ed:85:ef:a7:24:ee:53:b0:89:ec:3b:ee:ee:51: a0:13:3e:27:d1:85:c3:ba:9d:25:a7:bf:a3:d2:af:b0:60:08: 37:1a:d7:14:9c:6c:35:04:68:9e:11:ff:6f:9e:b8:e0:60:0c: 07:06:7f:47:17:6b:92:91:c4:ce:97:67:a6:c5:48:50:ba:fb: d6:57:c2:a3:64:8b:e4:63:73:6b:94:6d:c1:6b:0c:f0:8d:aa: dd:aa:d5:11:05:60:f6:63:d2:94:d7:42:8f:17:78:b4:a1:3a: 8f:c9:07:4f:69:ab:e7:50:3e:fe:6e:06:59:19:23:14:c2:f5: dd:cc:46:b4:3b:08:9d:38:72:77:cb:2d:4e:cb:72:92:ef:9e: 24:54:ff:9b:c0:63:8d:f1:62:66:92:9c:26:8a:6d:07:66:b3: f9:87:55:73:fc:22:69:18:fc:fc:ba:86:1a:9f:06:5e:96:66: ab:42:75:00:58:46:4f:77:d8:bf:96:fd:c8:38:e9:40:1e:ad: ef:65:ba:5a:98:46:9b:8a:da:6b:2e:c8:ab:76:3c:d4:d9:5f: 45:f1:34:3e:ae:4c:aa:5c:d3:73:a3:02:fd:f7:c8:71:c6:2d: fa:af:39:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmudiT5h1sIR+NH0sD9EuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmJhOWQ3Yjg2NjEyZDRmODdjZjE2MTcxZmY4MmIyYjQ0 MTM2NGQwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg1NWJiNmY4Yjk2NmU0YjlmNTUyYWY4MTJlOGFmYjEzODY0MzljNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Wq5OCoG86mRhDqBNrbIsWxCEjD7 9zMiNAk8+XZE7ru2UnemrtEElXCTILf8sZZu8VGOcA9Kyb78s6Tn5jTwzaukHCet h6viEaDfSMW+5qJncuZ9lDOjzCSQq/YrJR4G0gHql5HRJ7NftER+cLS6a6DgbAhQ kFS/3PjA7CGEoAffB5aWSmMekPVrFRvZPC/3lVM5hYT18KKOd3yLycThSG6hRhy7 tP+266ylVq1jvI1ERvjoKOwn14EudqLyjo27u44xnQyVAdTzHMrB9cDmwyFhO+1f FU6NnIIcUTXr2tRJSDFbsA67Mpqi9Rm6P55Cv/WHh9Ef2+xrjCLsvgheCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW7b4uWbkufVSr4EuivsThkOcVGMB8GA1UdIwQY MBaAFP+7qde4ZhLU+HzxYXH/grK0QTZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUt NjhlODEzNDIwYWU2LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUtNjhlODEzNDIwYWU2 LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7H/WHCt f1OtG0WQxJnLk/zs2WSVD+2F76ck7lOwiew77u5RoBM+J9GFw7qdJae/o9KvsGAI NxrXFJxsNQRonhH/b5644GAMBwZ/RxdrkpHEzpdnpsVIULr71lfCo2SL5GNza5Rt wWsM8I2q3arVEQVg9mPSlNdCjxd4tKE6j8kHT2mr51A+/m4GWRkjFML13cxGtDsI nThyd8stTstyku+eJFT/m8BjjfFiZpKcJoptB2az+YdVc/wiaRj8/LqGGp8GXpZm q0J1AFhGT3fYv5b9yDjpQB6t72W6WphGm4raay7Iq3Y81NlfRfE0Pq5MqlzTc6MC /ffIccYt+q85gw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:11 2025 by rpki-client