This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json) Hash identifier: q2b1OJo7jP46pSkHkAwvzMR+iFsXGpvjVG4+37ap1pU= Subject key identifier: 5F:61:C7:66:E2:77:C8:6E:6F:7F:CA:C5:82:6A:54:9F:74:CF:67:3D Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Certificate serial: 019B3DC7E69A9818D63EBE231E939A5555B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:09 +0000 Manifest this update: Sat 20 Dec 2025 22:01:09 +0000 Manifest next update: Sun 21 Dec 2025 22:01:09 +0000 Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=) 2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: NFUqkDHhBh6ROgiPeNR/DO0GrNQJeXrfZl8/aOHIa3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e6:9a:98:18:d6:3e:be:23:1e:93:9a:55:55:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Validity Not Before: Dec 20 22:01:09 2025 GMT Not After : Dec 21 22:01:09 2025 GMT Subject: CN=5f61c766e277c86e6f7fcac5826a549f74cf673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:ae:d8:f9:ad:75:6a:5d:34:b9:40:37:d8: e7:14:d4:a5:65:4c:b3:1f:b6:c7:cd:af:de:09:55: cf:e9:7e:9a:07:6b:85:bf:14:b5:6c:15:42:83:93: 64:97:6b:31:eb:84:65:8a:22:50:3c:d1:95:98:83: cc:cd:7f:ae:87:7b:42:75:a2:2b:41:d8:d1:8a:84: fa:de:5d:ae:39:92:0f:86:b4:78:6f:c5:36:b2:46: e7:2c:b3:99:ec:1d:98:aa:c6:d4:e7:ce:19:c3:ef: f8:27:b4:2a:2d:16:26:88:1c:d8:6d:9b:81:89:c2: 55:65:47:28:0c:73:19:12:99:35:f8:40:c3:f2:e6: 17:f5:9f:95:34:e2:7e:6d:c5:de:96:c1:0a:75:df: 99:5f:54:3e:91:51:d6:65:cb:7a:21:16:55:e5:3e: e0:e6:c5:77:0d:12:d9:8f:ca:09:28:41:21:d2:e5: 03:41:6e:58:f6:ba:2d:de:63:f3:90:4f:f9:8b:85: c4:18:e3:24:01:92:7f:59:20:26:0e:b0:97:08:63: 31:73:30:72:9d:42:e8:6a:16:6c:08:77:9e:03:aa: e5:81:63:eb:45:83:3d:97:b8:da:56:4b:fc:70:6a: e0:be:58:38:cc:4d:42:63:e1:92:56:e1:62:f8:59: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:61:C7:66:E2:77:C8:6E:6F:7F:CA:C5:82:6A:54:9F:74:CF:67:3D X509v3 Authority Key Identifier: keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:c5:25:c5:fe:1b:5a:25:18:4a:11:b0:35:27:ec:d0:c9: 99:fd:dd:ea:21:96:42:71:c8:f2:59:47:6b:c2:3d:50:7e:be: dc:6f:a8:0f:55:e1:e4:d8:1f:6c:f9:23:a2:82:23:7f:25:b7: 8a:a8:c3:ff:30:c6:5d:c9:8d:eb:da:ac:fa:45:f7:03:70:5c: 86:f7:fb:b2:53:0c:56:d8:76:3d:82:44:6d:7e:59:dd:f7:0f: 89:c7:1e:72:3b:88:f0:f3:6a:b9:57:44:5b:42:81:52:ab:d4: 5f:52:8c:97:f0:94:af:44:3d:77:5e:7f:71:3d:f4:d7:5d:23: 19:53:0d:92:c5:6e:e0:c4:9c:3e:b4:3a:90:2a:db:1c:e5:2e: 00:5a:1f:3c:9a:0a:3e:6b:72:f6:84:0d:78:16:98:74:31:82: 26:97:cc:fa:da:96:89:6a:08:fc:99:20:2a:02:f8:21:20:6c: 3b:24:ab:c5:fc:81:1a:a8:2e:dd:d5:3c:d6:58:84:b3:24:7b: 68:cf:9d:8c:0b:69:e6:4c:16:ce:73:44:78:eb:25:7b:2a:91: e0:50:37:e8:32:05:d6:ca:5a:91:8f:60:c3:ef:46:c5:5e:91: 94:a0:8c:5d:5c:da:b4:3f:83:cb:3b:0e:d9:ae:ab:c2:49:a3: 50:55:e8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+aamBjWPr4jHpOaVVW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz M2I3OGIwHhcNMjUxMjIwMjIwMTA5WhcNMjUxMjIxMjIwMTA5WjAzMTEwLwYDVQQD Eyg1ZjYxYzc2NmUyNzdjODZlNmY3ZmNhYzU4MjZhNTQ5Zjc0Y2Y2NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Wu2PmtdWpdNLlAN9jnFNSlZUyz H7bHza/eCVXP6X6aB2uFvxS1bBVCg5Nkl2sx64RliiJQPNGVmIPMzX+uh3tCdaIr QdjRioT63l2uOZIPhrR4b8U2skbnLLOZ7B2YqsbU584Zw+/4J7QqLRYmiBzYbZuB icJVZUcoDHMZEpk1+EDD8uYX9Z+VNOJ+bcXelsEKdd+ZX1Q+kVHWZct6IRZV5T7g 5sV3DRLZj8oJKEEh0uUDQW5Y9rot3mPzkE/5i4XEGOMkAZJ/WSAmDrCXCGMxczBy nULoahZsCHeeA6rlgWPrRYM9l7jaVkv8cGrgvlg4zE1CY+GSVuFi+FkTxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9hx2bid8hub3/KxYJqVJ90z2c9MB8GA1UdIwQY MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5 LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6HFJcX+ G1olGEoRsDUn7NDJmf3d6iGWQnHI8llHa8I9UH6+3G+oD1Xh5NgfbPkjooIjfyW3 iqjD/zDGXcmN69qs+kX3A3Bchvf7slMMVth2PYJEbX5Z3fcPiccecjuI8PNquVdE W0KBUqvUX1KMl/CUr0Q9d15/cT30110jGVMNksVu4MScPrQ6kCrbHOUuAFofPJoK Pmty9oQNeBaYdDGCJpfM+tqWiWoI/JkgKgL4ISBsOySrxfyBGqgu3dU81liEsyR7 aM+djAtp5kwWznNEeOsleyqR4FA36DIF1spakY9gw+9GxV6RlKCMXVzatD+DyzsO 2a6rwkmjUFXoDA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:42:10 2025 by rpki-client