This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json) Hash identifier: c8oNxifOYXHD697Ane+GNX0+QhIQAiDECcuys0HtjWI= Subject key identifier: BE:49:6A:2C:8F:54:9B:34:62:2C:15:B0:5A:28:47:21:3A:1A:A7:07 Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b Certificate serial: 019AF2ADDF3A9FC626CC46552641621B3FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft Manifest number: 05CF Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: RefmAJ8+eMnJuGMoK+Lp8uFgUHyinfAJQ5Zi0ei4nf0=) 2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:df:3a:9f:c6:26:cc:46:55:26:41:62:1b:3f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=be496a2c8f549b34622c15b05a2847213a1aa707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:4b:f9:20:82:cd:5b:37:e7:58:3e:da:45: e1:da:3a:3f:5a:24:1e:ac:f3:b3:87:05:88:97:fc: a0:63:93:1f:25:5f:ef:aa:20:1c:f8:5e:7b:c4:bc: 24:7b:ac:fa:71:91:ea:01:86:30:06:05:f2:76:9e: 80:8b:bc:c5:d0:52:e4:4d:5c:d2:e5:2f:39:ca:3a: 82:03:aa:e0:39:21:ca:f9:47:bc:b4:46:b9:b4:bd: 23:bd:d9:13:0a:98:ef:ac:20:7c:03:1d:f7:bb:69: 23:4b:c3:d4:b5:78:58:ac:45:bd:2b:b2:15:c3:a3: 7b:f6:09:37:ab:4a:ff:ab:f0:70:e8:06:e3:70:3c: e5:96:38:06:1d:26:3c:17:26:80:9c:f1:af:40:ae: 3e:f9:70:d6:09:5d:ad:4b:0d:d5:36:60:b6:1d:71: 5a:87:72:ea:7f:1f:82:61:ac:64:c8:07:5b:f9:10: 43:31:03:f7:3f:d1:c7:1b:ec:64:6c:9e:c4:14:57: 3c:cf:2d:f5:d6:98:7e:f3:6a:ed:65:5f:d4:86:60: 6b:97:00:98:68:da:03:db:a6:6a:62:d1:d3:96:ae: 6d:a3:10:52:13:ae:3c:86:bd:d1:aa:1d:ea:e6:ae: ae:19:7a:45:d0:5a:25:87:09:74:2a:84:6b:4b:01: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:6A:2C:8F:54:9B:34:62:2C:15:B0:5A:28:47:21:3A:1A:A7:07 X509v3 Authority Key Identifier: keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9c:cb:c7:48:3a:5a:67:3e:07:16:5f:f7:e7:88:cf:be:c3: 1a:d9:b0:c9:d6:94:c3:21:b2:92:88:46:4f:70:4a:ce:41:69: 2c:ab:48:a5:79:6a:17:bb:a6:33:00:a9:88:81:3c:4a:ce:97: f3:b5:79:6b:ee:84:bd:b2:30:7a:86:20:99:e0:be:46:61:55: d6:32:23:62:ec:87:06:ec:1e:fd:e3:ba:8a:4a:50:ae:e8:14: dd:d2:d4:df:7b:dc:69:15:8a:15:81:89:20:4a:ac:85:47:7a: fd:ae:ab:41:ad:4d:39:4d:5d:39:a4:17:6e:40:24:49:d7:0d: 17:c6:ef:ec:5f:6b:bb:be:83:b5:9a:72:f3:43:64:95:c7:24: 99:ac:b4:8a:04:6b:ac:03:d6:91:d6:b7:81:fa:3b:fa:7a:3f: a7:00:e7:74:a6:16:03:31:e8:d9:b4:da:2a:41:66:a6:d6:74: 70:37:bc:f4:fc:66:7b:83:38:5d:a9:8a:33:b1:3b:93:a3:37: 80:83:15:8b:2c:af:8d:a2:82:ae:4c:6f:78:7a:41:4d:ff:01: 88:fa:b3:87:a2:5c:24:53:db:fc:4e:35:73:a1:26:29:a1:52: 5c:0d:88:11:f6:01:5d:82:c2:42:d8:54:8c:f1:fc:cc:4b:c6: 17:cf:09:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrd86n8YmzEZVJkFiGz/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjUwMjZlNTk1NWRjZGQxMTE0NzZmOWI2ODQ5ZDcyODE4 NTQ2OWIwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EyhiZTQ5NmEyYzhmNTQ5YjM0NjIyYzE1YjA1YTI4NDcyMTNhMWFhNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovxL+SCCzVs351g+2kXh2jo/WiQe rPOzhwWIl/ygY5MfJV/vqiAc+F57xLwke6z6cZHqAYYwBgXydp6Ai7zF0FLkTVzS 5S85yjqCA6rgOSHK+Ue8tEa5tL0jvdkTCpjvrCB8Ax33u2kjS8PUtXhYrEW9K7IV w6N79gk3q0r/q/Bw6AbjcDzlljgGHSY8FyaAnPGvQK4++XDWCV2tSw3VNmC2HXFa h3Lqfx+CYaxkyAdb+RBDMQP3P9HHG+xkbJ7EFFc8zy311ph+82rtZV/UhmBrlwCY aNoD26ZqYtHTlq5toxBSE648hr3Rqh3q5q6uGXpF0Folhwl0KoRrSwHhzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5JaiyPVJs0YiwVsFooRyE6GqcHMB8GA1UdIwQY MBaAFO4lAm5ZVdzdERR2+baEnXKBhUabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTct MmE0NmY2ZmFjNGNhLzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTctMmE0NmY2ZmFjNGNh LzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpzLx0g6 Wmc+BxZf9+eIz77DGtmwydaUwyGykohGT3BKzkFpLKtIpXlqF7umMwCpiIE8Ss6X 87V5a+6EvbIweoYgmeC+RmFV1jIjYuyHBuwe/eO6ikpQrugU3dLU33vcaRWKFYGJ IEqshUd6/a6rQa1NOU1dOaQXbkAkSdcNF8bv7F9ru76DtZpy80Nklcckmay0igRr rAPWkda3gfo7+no/pwDndKYWAzHo2bTaKkFmptZ0cDe89Pxme4M4XamKM7E7k6M3 gIMViyyvjaKCrkxveHpBTf8BiPqzh6JcJFPb/E41c6EmKaFSXA2IEfYBXYLCQthU jPH8zEvGF88JUw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:41 2025 by rpki-client