This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json) Hash identifier: dNWMGuwrAu4wT95mf1zV9zqnreWZIn+mpeSoj647zCk= Subject key identifier: D2:6F:B6:1F:87:E3:72:AC:33:DE:0A:94:54:AD:97:D1:BD:4F:DB:C0 Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Certificate serial: 019AF208F69806F5927BF3780217415F2E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft Manifest number: 05B5 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=) 2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: cE+FiA6Q5pquBxlgSjEONpH11cJYDj5JA49SegLBeL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f6:98:06:f5:92:7b:f3:78:02:17:41:5f:2e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=d26fb61f87e372ac33de0a9454ad97d1bd4fdbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:c0:5f:af:e1:82:00:5a:cf:97:16:73:24: 3a:a1:05:d9:7d:8a:0a:4b:ce:ba:50:6f:d8:ea:b9: 21:e5:c8:50:6b:43:74:2b:01:3c:45:43:62:48:39: ef:eb:71:e6:e3:c6:23:83:3e:fa:84:77:39:e1:84: a1:b6:db:e1:03:0c:36:a0:19:2a:e0:5f:96:33:58: c5:a2:7f:53:15:ab:d8:57:6f:49:08:17:4d:eb:91: 2c:9f:59:a9:56:74:a4:0e:70:0a:ff:6e:fa:c2:92: 4b:40:af:db:3a:e9:38:88:a0:1a:84:72:00:53:17: 11:f8:a9:cd:17:62:b3:b7:ea:5f:2b:77:c6:aa:fb: 23:53:76:ce:5e:7b:17:32:e8:03:e5:e4:e1:dd:38: a6:6a:34:dc:6d:9d:2e:f8:2f:98:d2:2a:14:ab:5d: 28:4e:7c:c5:98:05:ec:95:8b:8f:a9:8e:c7:c7:e3: a3:da:76:2e:41:d4:ff:29:55:4a:59:50:51:bd:1d: 99:62:d0:46:d1:36:96:0d:a3:85:74:c4:4a:c0:1a: d0:1e:e2:20:49:7f:67:dc:fa:8b:3d:df:7e:83:e5: f1:16:71:bd:ec:6e:83:15:5f:c9:e7:f3:2c:be:83: de:55:38:d2:0a:7c:a0:dc:87:4c:4b:7e:0e:6e:c4: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6F:B6:1F:87:E3:72:AC:33:DE:0A:94:54:AD:97:D1:BD:4F:DB:C0 X509v3 Authority Key Identifier: keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:d2:2c:3a:28:b7:28:89:58:81:76:b8:ec:0d:2f:db:80: 2f:84:d9:5d:9f:6a:6e:cb:17:dd:e0:2a:ff:c7:76:5e:16:e2: 08:17:61:2e:2a:3e:39:a8:45:3c:76:4a:6b:89:71:6c:38:39: a1:65:b7:5e:2d:6e:5b:82:aa:3b:b1:18:9c:77:b8:6e:5c:8a: 8f:af:e6:62:91:7a:5f:98:33:eb:3e:b5:9c:b6:ae:8e:28:44: ba:a9:fd:3a:34:50:63:f0:9f:84:8f:1b:58:46:72:9d:76:a1: b9:37:18:7d:65:c5:94:6b:ee:88:6f:06:95:6f:96:d3:04:82: 0a:5e:02:7e:a2:26:71:d7:0d:ac:27:55:52:1f:45:a0:9d:88: 2f:29:ba:17:1c:d4:7d:a0:53:09:18:9e:8b:a4:fe:f6:78:cf: 9f:72:0c:c3:af:d2:fd:fe:af:23:7a:1d:56:ab:ca:72:10:67: 39:da:40:4a:d6:1d:9a:40:ee:f2:69:ee:22:7d:18:50:34:cd: bb:50:43:63:f6:7e:2e:72:d5:18:fa:4b:42:b5:84:e1:3c:8a: a1:7a:f8:dd:a6:09:5d:78:73:53:38:a7:fc:cc:28:0f:91:35: 84:63:6c:1b:c0:6c:0e:b9:7a:30:e2:62:aa:eb:d9:16:fa:f4: ac:d5:8f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPaYBvWSe/N4AhdBXy5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjkyYmRlYTViOTdhY2FiYzJmNjU4YzQxMmJmNzQ2ZWUw ZTIwN2QwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhkMjZmYjYxZjg3ZTM3MmFjMzNkZTBhOTQ1NGFkOTdkMWJkNGZkYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbrAX6/hggBaz5cWcyQ6oQXZfYoK S866UG/Y6rkh5chQa0N0KwE8RUNiSDnv63Hm48Yjgz76hHc54YShttvhAww2oBkq 4F+WM1jFon9TFavYV29JCBdN65Esn1mpVnSkDnAK/276wpJLQK/bOuk4iKAahHIA UxcR+KnNF2Kzt+pfK3fGqvsjU3bOXnsXMugD5eTh3TimajTcbZ0u+C+Y0ioUq10o TnzFmAXslYuPqY7Hx+Oj2nYuQdT/KVVKWVBRvR2ZYtBG0TaWDaOFdMRKwBrQHuIg SX9n3PqLPd9+g+XxFnG97G6DFV/J5/MsvoPeVTjSCnyg3IdMS34ObsQPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJvth+H43KsM94KlFStl9G9T9vAMB8GA1UdIwQY MBaAFLe5K96luXrKvC9ljEEr90buDiB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODIt ZGQ5MDA5YjMzMTdkLzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODItZGQ5MDA5YjMzMTdk LzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOPSLDoo tyiJWIF2uOwNL9uAL4TZXZ9qbssX3eAq/8d2XhbiCBdhLio+OahFPHZKa4lxbDg5 oWW3Xi1uW4KqO7EYnHe4blyKj6/mYpF6X5gz6z61nLaujihEuqn9OjRQY/CfhI8b WEZynXahuTcYfWXFlGvuiG8GlW+W0wSCCl4CfqImcdcNrCdVUh9FoJ2ILym6FxzU faBTCRiei6T+9njPn3IMw6/S/f6vI3odVqvKchBnOdpAStYdmkDu8mnuIn0YUDTN u1BDY/Z+LnLVGPpLQrWE4TyKoXr43aYJXXhzUzin/MwoD5E1hGNsG8BsDrl6MOJi quvZFvr0rNWPdw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:25 2025 by rpki-client