This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json) Hash identifier: 0WkT6+i6J2buI0Z6P3pb4g7apXPI+uWqeI9okl7X3ys= Subject key identifier: 8B:FA:6D:72:FE:0A:BE:9E:91:FD:93:8B:A8:B3:66:E0:FC:89:F0:5D Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d Certificate serial: 019AF19AE2444A2D2CA6636B9B53A42B8DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft Manifest number: 0742 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=) 2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: JiRCikAjvmClfATaWz6zWLkH+DchSqagDiyhitwTL9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e2:44:4a:2d:2c:a6:63:6b:9b:53:a4:2b:8d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=8bfa6d72fe0abe9e91fd938ba8b366e0fc89f05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:ad:8b:05:4a:24:9f:25:2c:fe:5c:86:a7: 4b:31:1c:e5:3d:7c:45:de:2c:57:cd:fe:67:54:a9: 92:e8:c5:c3:2c:ad:f9:87:cd:e6:bf:c1:73:9b:7e: 38:ec:85:ad:60:24:cc:52:97:3b:97:ae:23:1b:cb: 3f:ca:a1:1a:9e:ac:cb:bf:e8:6b:0d:66:f5:71:ff: 0f:59:5b:7c:1e:eb:a4:99:4d:a1:8b:40:80:41:f9: 9e:4c:2c:32:14:e9:8b:38:25:75:61:12:4b:d0:a3: 4e:a8:1f:47:06:1c:e7:86:73:18:fe:af:ba:31:05: e8:3d:04:9a:48:ec:2a:30:a9:c0:99:26:65:61:fc: 79:d8:7e:87:92:10:62:f3:58:55:e2:c1:07:eb:88: 16:23:ff:d9:a6:ac:54:d9:14:8a:8a:27:e0:9d:38: 33:1b:6c:4c:e5:35:2c:04:a2:8a:e8:95:01:f5:09: 43:f8:b0:15:6f:df:e4:f3:0f:de:8b:ac:f9:29:2a: aa:fe:a3:c7:b3:62:e3:df:96:5f:a1:7c:23:44:16: 73:b5:16:b0:de:cf:41:79:aa:4e:40:94:f4:ea:af: 88:1d:56:05:2d:8b:0d:cd:d0:0e:25:2c:96:78:f9: 1f:6f:46:e8:68:2d:01:75:ed:18:13:e9:17:88:25: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FA:6D:72:FE:0A:BE:9E:91:FD:93:8B:A8:B3:66:E0:FC:89:F0:5D X509v3 Authority Key Identifier: keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6d:c2:69:2f:8f:5e:ce:de:fd:5c:4d:09:f2:42:a0:18:d2: 7e:3f:8c:50:c4:23:3b:3d:27:39:96:a6:30:85:d5:dc:bd:59: 7b:75:47:df:46:95:f0:f2:de:46:f9:90:49:46:19:6b:82:c0: 4a:d8:96:58:c4:a5:65:b9:40:97:11:99:41:5a:31:bd:c6:7f: 88:06:26:e2:e5:d7:cd:2a:5c:9f:9e:fe:a6:16:17:dc:10:f5: 8b:e3:92:90:1d:2a:73:c4:bd:2c:7e:3a:35:84:eb:7a:6e:02: ed:d3:76:63:17:2c:51:68:23:a9:ab:ae:08:e8:c5:9b:fd:24: bf:46:78:49:65:4d:34:5f:42:ac:2f:90:d2:e9:30:26:d0:88: f9:3d:e8:a7:43:95:b7:e0:c4:e7:15:f7:5c:13:b3:88:af:14: 75:d7:6a:26:37:d0:ef:55:cc:12:42:a5:fe:54:18:86:5b:3a: e7:bc:66:a1:cb:a6:2a:75:71:75:fb:75:a6:dd:d5:80:93:38: a1:a4:f3:6d:c4:42:cb:e0:ee:5e:26:79:58:55:1d:d3:5d:28: f5:7c:de:d6:a9:43:79:96:bb:fb:69:e8:2f:65:1b:0e:af:5f: 08:7a:37:08:d5:ab:0c:2e:ff:81:06:74:c5:e7:6b:23:13:1f: bf:cc:33:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuJESi0spmNrm1OkK42vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjhiNjEyNzIxZDRkNGMyZDA3Y2JmZTJlNDk1ZTk4NmEw ZjAyNmQwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD Eyg4YmZhNmQ3MmZlMGFiZTllOTFmZDkzOGJhOGIzNjZlMGZjODlmMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0itiwVKJJ8lLP5chqdLMRzlPXxF 3ixXzf5nVKmS6MXDLK35h83mv8Fzm3447IWtYCTMUpc7l64jG8s/yqEanqzLv+hr DWb1cf8PWVt8HuukmU2hi0CAQfmeTCwyFOmLOCV1YRJL0KNOqB9HBhznhnMY/q+6 MQXoPQSaSOwqMKnAmSZlYfx52H6HkhBi81hV4sEH64gWI//ZpqxU2RSKiifgnTgz G2xM5TUsBKKK6JUB9QlD+LAVb9/k8w/ei6z5KSqq/qPHs2Lj35ZfoXwjRBZztRaw 3s9BeapOQJT06q+IHVYFLYsNzdAOJSyWePkfb0boaC0Bde0YE+kXiCWPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv6bXL+Cr6ekf2Ti6izZuD8ifBdMB8GA1UdIwQY MBaAFIu4thJyHU1MLQfL/i5JXphqDwJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmIt YmI0OTNjNDZkZjNlLzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmItYmI0OTNjNDZkZjNl LzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG3CaS+P Xs7e/VxNCfJCoBjSfj+MUMQjOz0nOZamMIXV3L1Ze3VH30aV8PLeRvmQSUYZa4LA StiWWMSlZblAlxGZQVoxvcZ/iAYm4uXXzSpcn57+phYX3BD1i+OSkB0qc8S9LH46 NYTrem4C7dN2YxcsUWgjqauuCOjFm/0kv0Z4SWVNNF9CrC+Q0ukwJtCI+T3op0OV t+DE5xX3XBOziK8UdddqJjfQ71XMEkKl/lQYhls657xmocumKnVxdft1pt3VgJM4 oaTzbcRCy+DuXiZ5WFUd010o9Xze1qlDeZa7+2noL2UbDq9fCHo3CNWrDC7/gQZ0 xedrIxMfv8wzgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:41 2025 by rpki-client