This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json) Hash identifier: ybzocgU03AhjL8JoK6y6M9NwftG3opPAUSezVOSu4ck= Subject key identifier: D7:E1:41:19:86:11:FB:A4:8A:EB:62:46:D3:05:83:D6:0A:7B:23:23 Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Certificate serial: 019AF0BF18E358B7C3E5694012045EE857C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=) 2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: 11n1T/QDtRf3q+7QHm4B/TMy1A2tfZ29RYvIjHvLLPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:18:e3:58:b7:c3:e5:69:40:12:04:5e:e8:57:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=d7e141198611fba48aeb6246d30583d60a7b2323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:e2:6e:34:aa:de:09:ed:9d:f4:43:37:d7: ff:68:48:a5:9c:fb:c4:f2:6e:4c:73:bd:3b:c5:f1: 19:0d:26:a7:17:0b:e6:ca:cf:7b:d0:f3:77:6a:e4: 2f:dd:47:65:99:97:7b:66:8b:ea:b8:bb:65:c9:57: 9c:97:5b:2e:b5:d3:d8:fe:d8:f5:c0:f5:7e:d6:3b: ea:55:a1:10:d4:e6:a4:2d:27:2b:02:5e:52:14:d1: 96:e8:e0:e0:1b:f1:55:5a:32:9b:51:59:5d:64:b9: c4:de:c6:14:79:d6:23:df:9f:fc:8f:93:63:5e:6f: 3c:0a:bb:38:60:5e:f9:5b:d3:61:03:3d:2c:22:09: 99:59:53:a2:51:5e:49:2a:37:bf:20:1d:3b:3a:01: 55:3f:6d:cb:a3:91:73:a1:ca:2f:8a:ba:af:d6:27: 0c:6a:6f:c9:6e:5e:65:4e:e6:e3:49:37:e4:f7:bb: c8:a1:ac:53:d4:f8:8c:75:5d:fd:e2:dc:51:d9:0f: ec:36:5c:68:5b:55:6d:62:6a:01:67:1f:89:c9:e0: 62:66:a0:0a:14:ac:61:17:8e:27:bc:f0:26:0c:7e: cb:c8:b4:11:ae:67:e2:a7:53:14:4d:cd:e6:37:c7: 10:57:ed:1b:7b:ad:22:8f:49:08:d4:93:00:0f:13: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E1:41:19:86:11:FB:A4:8A:EB:62:46:D3:05:83:D6:0A:7B:23:23 X509v3 Authority Key Identifier: keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:e9:c0:aa:0e:ab:67:55:a5:21:dc:b5:e5:a9:42:e0:e2: 9a:6c:33:b3:09:d3:8e:ef:0f:59:f6:0f:f2:3d:75:3d:d2:de: 71:df:b8:8d:61:aa:39:ae:92:c1:5e:db:44:38:3f:25:33:5e: 8c:1e:b9:4b:2d:9d:ac:0f:32:0a:c8:45:9b:04:3d:dd:6f:5c: d1:47:8e:3f:05:33:e3:88:ec:68:bc:b4:a0:e1:5b:bc:83:90: b4:0f:7d:28:55:6a:5e:88:99:35:c7:3e:8b:45:61:2d:41:e4: 06:4f:d8:69:a1:19:76:2b:21:74:0b:d9:b3:1f:ec:14:f1:34: 10:30:a5:9c:5e:d8:73:91:79:96:cf:ce:28:e1:1d:2a:c5:66: f0:27:b2:ea:91:02:c9:fb:9b:5e:9a:00:9a:ce:5f:d1:13:cb: c9:b0:61:b0:fc:69:21:36:0c:21:45:2a:b8:44:51:18:5f:75: bf:92:d5:3e:5f:0c:e0:e4:cf:ed:fd:16:d5:db:43:3c:f3:0b: d6:6a:e8:89:a2:54:f2:31:e2:ad:2e:f2:af:85:70:61:1c:cc: 3a:4a:19:d7:9d:37:2d:f8:e7:97:46:4d:24:68:6c:be:4d:03: 3b:6f:30:d3:68:c7:aa:b5:57:92:10:0c:20:8d:b8:da:c0:89: 27:cd:83:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxjjWLfD5WlAEgRe6FfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz OWFlZTEwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EyhkN2UxNDExOTg2MTFmYmE0OGFlYjYyNDZkMzA1ODNkNjBhN2IyMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vXibjSq3gntnfRDN9f/aEilnPvE 8m5Mc707xfEZDSanFwvmys970PN3auQv3UdlmZd7ZovquLtlyVecl1sutdPY/tj1 wPV+1jvqVaEQ1OakLScrAl5SFNGW6ODgG/FVWjKbUVldZLnE3sYUedYj35/8j5Nj Xm88Crs4YF75W9NhAz0sIgmZWVOiUV5JKje/IB07OgFVP23Lo5Fzocovirqv1icM am/Jbl5lTubjSTfk97vIoaxT1PiMdV394txR2Q/sNlxoW1VtYmoBZx+JyeBiZqAK FKxhF44nvPAmDH7LyLQRrmfip1MUTc3mN8cQV+0be60ij0kI1JMADxON5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfhQRmGEfukiutiRtMFg9YKeyMjMB8GA1UdIwQY MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnDpwKoO q2dVpSHcteWpQuDimmwzswnTju8PWfYP8j11PdLecd+4jWGqOa6SwV7bRDg/JTNe jB65Sy2drA8yCshFmwQ93W9c0UeOPwUz44jsaLy0oOFbvIOQtA99KFVqXoiZNcc+ i0VhLUHkBk/YaaEZdishdAvZsx/sFPE0EDClnF7Yc5F5ls/OKOEdKsVm8Cey6pEC yfubXpoAms5f0RPLybBhsPxpITYMIUUquERRGF91v5LVPl8M4OTP7f0W1dtDPPML 1mroiaJU8jHirS7yr4VwYRzMOkoZ1503Lfjnl0ZNJGhsvk0DO28w02jHqrVXkhAM II242sCJJ82DDg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:40 2025 by rpki-client