This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json) Hash identifier: YxEo8eUnYF67lUfEev2ZcdTdtZIX9sJp/f5SP/svxbE= Subject key identifier: C0:68:11:53:84:2C:EC:E7:1B:46:EA:80:3B:3D:B4:2F:A3:89:B4:DB Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22 Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322 Certificate serial: 019AF2AD45E059AF08BC754E27018111F558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: zTi6uaxwNrxCk0QUZczH5R7654Dm06BSJPvqjrRItoQ=) 2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:45:e0:59:af:08:bc:75:4e:27:01:81:11:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322 Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=c0681153842cece71b46ea803b3db42fa389b4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:9f:31:27:e6:60:a8:f8:13:47:55:ac:f2: ec:d4:93:16:36:d5:c1:4c:a0:74:63:23:63:d8:69: d9:59:ca:fa:9e:6f:41:36:40:8f:ab:42:3e:de:89: a1:67:b5:54:d2:69:39:59:9d:46:e0:c9:be:e5:59: 37:ee:4a:48:94:21:60:a8:b7:36:de:3c:53:1f:d9: 32:07:ce:2c:ee:90:3e:d8:26:97:dd:77:e3:e8:a6: 57:f0:aa:81:7d:35:20:43:63:29:87:e5:a9:74:62: c2:b7:13:2d:dc:b1:d6:74:a1:74:d1:2d:a6:bc:f7: 68:3a:3e:88:6e:fc:9f:af:dc:1c:ae:71:9f:8c:59: 1d:e6:ae:cd:e9:2c:9b:96:18:2f:3f:6b:3f:42:28: ce:37:c2:b3:f7:ca:61:5a:43:d5:50:20:ee:b0:26: 02:81:10:42:b8:c0:d8:b4:3c:0c:6b:a8:49:fe:8c: 01:22:5c:82:51:4a:e5:aa:a9:a0:b4:29:bc:94:fe: 6f:91:74:5a:55:6e:1d:65:09:7c:30:10:4f:4c:3c: 51:ee:19:3d:ae:56:de:58:b7:98:db:cb:ac:14:1a: 68:e2:f2:ee:15:54:0e:82:06:3b:f2:c6:da:4c:12: ac:c2:76:01:85:dd:8e:62:f0:eb:ee:b2:58:c9:2a: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:68:11:53:84:2C:EC:E7:1B:46:EA:80:3B:3D:B4:2F:A3:89:B4:DB X509v3 Authority Key Identifier: keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e3:cb:80:f4:84:fb:4b:d8:20:d9:4b:02:d5:82:3d:d3:cb: 64:8a:30:1b:d5:ac:ab:b4:97:7f:b7:73:ea:80:4c:58:b7:bc: 3f:14:f8:b0:51:39:ba:06:1a:13:5e:90:c4:6b:6f:43:82:12: b5:e6:eb:29:e1:2e:e3:23:d8:19:77:71:8d:fb:f9:c5:f2:6f: 96:45:51:14:76:7c:79:2c:4e:c2:59:a7:90:39:98:00:88:a8: 1a:a5:92:8f:c0:ea:5c:d1:fc:42:31:65:ba:a0:b3:26:a0:07: b5:e0:ea:80:f6:6d:0e:12:24:9f:f4:fc:a8:35:6d:9e:af:6d: 30:91:44:12:b9:35:73:03:79:8a:90:bb:9a:23:6f:79:d6:fb: f2:79:85:e8:d6:9b:a6:62:0d:82:99:cb:5f:6f:d5:b0:10:15: 0d:5b:ec:92:f7:ac:07:ff:7e:41:5f:33:3d:4b:0f:b8:4f:c8: 83:82:cc:12:02:d3:f3:cd:50:a2:49:30:32:a6:86:e2:05:94: ba:21:ae:73:8d:9c:54:9a:56:8a:0e:01:6b:5c:6b:00:60:81: 5e:40:72:ff:cf:83:d2:b5:4f:3b:38:70:dd:3a:52:cf:a3:6e: 1b:f8:0c:97:a5:e7:4d:e2:be:af:7a:10:0e:86:6d:4b:f4:39: 59:2b:2c:66 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrUXgWa8IvHVOJwGBEfVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk OGQzMjIwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD EyhjMDY4MTE1Mzg0MmNlY2U3MWI0NmVhODAzYjNkYjQyZmEzODliNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF6fMSfmYKj4E0dVrPLs1JMWNtXB TKB0YyNj2GnZWcr6nm9BNkCPq0I+3omhZ7VU0mk5WZ1G4Mm+5Vk37kpIlCFgqLc2 3jxTH9kyB84s7pA+2CaX3Xfj6KZX8KqBfTUgQ2Mph+WpdGLCtxMt3LHWdKF00S2m vPdoOj6Ibvyfr9wcrnGfjFkd5q7N6SyblhgvP2s/QijON8Kz98phWkPVUCDusCYC gRBCuMDYtDwMa6hJ/owBIlyCUUrlqqmgtCm8lP5vkXRaVW4dZQl8MBBPTDxR7hk9 rlbeWLeY28usFBpo4vLuFVQOggY78sbaTBKswnYBhd2OYvDr7rJYySqC4QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMBoEVOELOznG0bqgDs9tC+jibTbMB8GA1UdIwQY MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOPL gPSE+0vYINlLAtWCPdPLZIowG9Wsq7SXf7dz6oBMWLe8PxT4sFE5ugYaE16QxGtv Q4IStebrKeEu4yPYGXdxjfv5xfJvlkVRFHZ8eSxOwlmnkDmYAIioGqWSj8DqXNH8 QjFluqCzJqAHteDqgPZtDhIkn/T8qDVtnq9tMJFEErk1cwN5ipC7miNvedb78nmF 6NabpmINgpnLX2/VsBAVDVvskvesB/9+QV8zPUsPuE/Ig4LMEgLT881QokkwMqaG 4gWUuiGuc42cVJpWig4Ba1xrAGCBXkBy/8+D0rVPOzhw3TpSz6NuG/gMl6XnTeK+ r3oQDoZtS/Q5WSssZg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:07 2025 by rpki-client