This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json) Hash identifier: 19V78BCMQla6U61zfONI9pbDG5hIovBWqrjOW8CSkZc= Subject key identifier: 9A:9F:C3:CF:87:B9:66:6A:0D:0C:A1:AA:94:4C:8D:FA:0C:1A:81:1D Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Certificate serial: 019AF50A98DEC0AEE87819CE2C138E795D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft Manifest number: 1474 Signing time: Sat 06 Dec 2025 19:01:43 +0000 Manifest this update: Sat 06 Dec 2025 19:01:43 +0000 Manifest next update: Sun 07 Dec 2025 19:01:43 +0000 Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=) 2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: WWX+YomLQuFL8njfCVLI6NkGVO8d0QU6LdSivDutcd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:98:de:c0:ae:e8:78:19:ce:2c:13:8e:79:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Validity Not Before: Dec 6 19:01:43 2025 GMT Not After : Dec 7 19:01:43 2025 GMT Subject: CN=9a9fc3cf87b9666a0d0ca1aa944c8dfa0c1a811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:a7:ad:d4:e8:0a:9d:9c:84:77:ad:e7:c2: 50:a5:60:b8:01:53:93:bb:3e:51:55:03:be:3f:20: 0e:67:ab:3a:19:04:f7:3b:fd:d0:c9:c6:be:66:1b: b3:2e:4b:e5:90:25:45:ac:a5:46:40:52:65:71:f7: 7b:38:5b:91:68:88:44:f4:3a:63:21:4d:00:36:11: 72:61:c7:f4:b1:33:55:db:9f:d9:2d:ee:9f:bf:d2: cf:fb:5f:62:71:a1:c3:6a:06:26:92:da:b4:5d:cc: bd:77:26:b8:1a:25:55:ec:15:78:84:ca:85:72:ff: 15:24:17:86:fd:e9:e4:d3:b6:d4:b1:65:e2:f5:5f: 13:c7:c9:b9:c3:26:0c:49:64:1a:43:d3:4f:ef:db: 3d:41:67:40:f7:8f:74:77:a1:56:d7:de:4f:a8:7a: df:5c:d8:e3:26:4b:84:ef:c1:7d:83:98:72:6d:fd: 65:b6:05:64:e0:c9:6a:02:73:7d:1d:0b:b0:3c:3b: 90:54:c0:89:f0:94:cf:08:ed:80:98:5d:e6:90:52: 68:49:e4:4d:61:ce:96:50:fb:3c:07:29:6e:c2:6a: 92:a8:48:f2:4a:93:6c:92:22:41:b3:fd:44:97:48: a1:55:f6:8e:b4:fa:2f:35:14:84:40:e7:a5:43:49: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:C3:CF:87:B9:66:6A:0D:0C:A1:AA:94:4C:8D:FA:0C:1A:81:1D X509v3 Authority Key Identifier: keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:01:26:1b:11:a8:c6:1f:47:eb:51:5a:8b:48:a2:23:5a:87: 16:c6:7f:41:7e:17:d0:02:f7:e8:a1:ad:c8:4c:f0:49:f6:cc: 5e:40:16:17:c4:0a:96:75:04:56:ec:79:e5:dc:aa:0f:e2:f8: 9f:58:fb:8a:41:78:63:aa:3e:33:0e:2f:c5:ba:3f:50:a0:2e: b3:06:d0:14:d5:72:20:ab:35:7f:41:2e:67:d7:ec:3e:5c:8b: 15:2e:df:04:08:16:7f:3c:93:ac:78:10:e8:62:74:53:8d:e9: 79:7b:f1:e3:20:0a:a0:4d:77:6b:eb:0f:e6:6b:ad:9a:bc:95: 30:9e:87:f2:41:bc:fa:a3:11:29:e1:3e:a3:e1:b6:f2:bc:65: e5:14:15:83:f8:f0:0d:ec:e9:cf:e8:cd:7e:6c:c3:c6:dd:9d: 92:31:09:4b:db:ac:45:29:79:17:a1:32:f8:1d:ee:82:04:d0: 65:bf:19:80:a4:4f:95:ea:90:80:03:19:12:5f:26:9b:25:12: 3e:f7:8e:d3:da:ba:89:af:c1:a9:f9:3d:ec:a2:be:7f:28:f6: e0:d2:9c:ab:24:59:98:da:5f:fb:f8:00:b8:d1:1d:14:fb:f9: 17:06:0e:d4:a0:3b:f9:c6:87:86:ea:da:85:5b:ad:c0:c4:0b: 77:76:db:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpjewK7oeBnOLBOOeV2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4 NzdiNmYwHhcNMjUxMjA2MTkwMTQzWhcNMjUxMjA3MTkwMTQzWjAzMTEwLwYDVQQD Eyg5YTlmYzNjZjg3Yjk2NjZhMGQwY2ExYWE5NDRjOGRmYTBjMWE4MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/+nrdToCp2chHet58JQpWC4AVOT uz5RVQO+PyAOZ6s6GQT3O/3Qyca+ZhuzLkvlkCVFrKVGQFJlcfd7OFuRaIhE9Dpj IU0ANhFyYcf0sTNV25/ZLe6fv9LP+19icaHDagYmktq0Xcy9dya4GiVV7BV4hMqF cv8VJBeG/enk07bUsWXi9V8Tx8m5wyYMSWQaQ9NP79s9QWdA9490d6FW195PqHrf XNjjJkuE78F9g5hybf1ltgVk4MlqAnN9HQuwPDuQVMCJ8JTPCO2AmF3mkFJoSeRN Yc6WUPs8ByluwmqSqEjySpNskiJBs/1El0ihVfaOtPovNRSEQOelQ0lBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqfw8+HuWZqDQyhqpRMjfoMGoEdMB8GA1UdIwQY MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQEmGxGo xh9H61Fai0iiI1qHFsZ/QX4X0AL36KGtyEzwSfbMXkAWF8QKlnUEVux55dyqD+L4 n1j7ikF4Y6o+Mw4vxbo/UKAuswbQFNVyIKs1f0EuZ9fsPlyLFS7fBAgWfzyTrHgQ 6GJ0U43peXvx4yAKoE13a+sP5mutmryVMJ6H8kG8+qMRKeE+o+G28rxl5RQVg/jw Dezpz+jNfmzDxt2dkjEJS9usRSl5F6Ey+B3uggTQZb8ZgKRPleqQgAMZEl8mmyUS PveO09q6ia/Bqfk97KK+fyj24NKcqyRZmNpf+/gAuNEdFPv5FwYO1KA7+caHhura hVutwMQLd3bbAg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:20 2025 by rpki-client