This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft File: B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json) Hash identifier: Y0TZzSeWVUEUAzUW2zbqU11WuCE8sA9tJ/PUg2zIJUc= Subject key identifier: 85:77:51:C9:72:0A:A9:E1:78:39:AA:B3:52:CA:FC:60:F6:0D:8B:44 Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10 Certificate issuer: /CN=07b7a0c1babd621e8220d0d777877a844b413c10 Certificate serial: 019B3CECB1FF02DFD32A0A1B98A97D1C5331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:43 +0000 Manifest this update: Sat 20 Dec 2025 18:01:43 +0000 Manifest next update: Sun 21 Dec 2025 18:01:43 +0000 Files and hashes: 1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: uwX+0OLimkY5ZIkh8ksW25cQvtH0sHEtPrcnZljmxxY=) 2: u07_9pXlmAHNvZNIHp40fo4J9fA.roa (hash: 204TNJbYlIMXBCvMgIFRQa54vmawR7NJf6FejBBRQA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b1:ff:02:df:d3:2a:0a:1b:98:a9:7d:1c:53:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10 Validity Not Before: Dec 20 18:01:43 2025 GMT Not After : Dec 21 18:01:43 2025 GMT Subject: CN=857751c9720aa9e17839aab352cafc60f60d8b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:3f:2e:87:44:d8:96:70:25:72:7a:20:f0: 89:06:81:91:46:db:b7:b7:7e:8b:a3:dd:97:2d:37: 87:26:a2:32:07:40:41:7b:5f:b4:c1:d4:36:a4:db: 58:de:63:44:d9:4c:79:1f:73:d2:52:34:a4:cc:c8: 80:ed:a8:14:d0:36:53:9e:7f:da:2b:a4:fc:ba:20: 63:77:d5:88:7f:13:86:43:2e:4f:5a:23:09:f7:a7: 63:ff:33:33:70:f0:ff:b1:77:2b:f2:df:21:44:b2: 75:4b:41:0c:fd:cc:21:5b:dd:64:5f:ef:ae:88:c7: a4:60:58:85:38:b6:00:05:f0:fc:c9:bf:12:82:1b: 9c:aa:4c:87:72:62:cc:45:ab:71:cc:ff:df:9d:48: 6e:5c:47:1f:a2:3d:bb:d2:d3:28:24:9d:66:d3:bb: 28:73:36:ba:11:59:ec:7a:20:aa:6d:16:15:53:93: c1:31:24:77:bd:2a:e0:30:ae:dc:8c:fe:a7:8f:f4: 65:c2:c0:15:c2:06:78:65:a8:46:72:f5:e0:57:04: f4:7f:5e:67:87:86:62:0d:b5:00:1c:d8:31:be:b1: 1b:9b:c6:07:1d:10:1c:f7:80:e0:d5:f2:3c:3b:0c: 36:e6:5e:57:b0:31:dd:3c:4f:7f:2b:d1:e7:17:11: 7b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:77:51:C9:72:0A:A9:E1:78:39:AA:B3:52:CA:FC:60:F6:0D:8B:44 X509v3 Authority Key Identifier: keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f8:c1:0a:89:7a:8b:f4:0c:50:28:f3:a3:41:0d:d4:53:1d: 9a:10:b8:e4:59:36:29:90:f4:46:4b:b2:8c:ee:50:81:e2:34: e7:ef:64:1c:e7:47:71:03:96:e1:b0:53:d0:cd:02:2e:4b:ae: d7:7f:5b:cd:16:57:2a:08:be:73:7a:ef:85:ce:80:52:74:dd: 58:d2:60:2a:65:11:56:cb:23:4b:29:5c:98:00:7d:a2:d2:3c: 12:96:cb:08:e8:61:8b:46:34:6b:20:da:23:ca:1c:c6:ad:ed: 1b:ab:70:a9:d9:2e:d3:d2:b5:89:da:5f:1e:70:1d:71:87:04: d5:24:16:e0:a5:3f:c9:87:1d:51:00:cd:46:c6:b0:4c:de:27: c0:35:6d:d6:60:63:07:78:e9:3d:aa:87:e1:56:ec:d0:d7:61: 80:b6:10:d6:c1:e2:21:b6:43:ea:4d:c5:d4:93:76:ca:49:60: 2c:b3:c9:46:f9:5a:1f:99:e0:1b:77:c9:f7:3d:15:71:eb:55: 72:8e:50:ff:cd:4f:6a:97:57:fc:cc:c5:49:45:5d:55:b1:44: f0:74:8b:07:22:7d:f3:e9:81:f5:e2:0e:00:5f:66:c3:9f:dc: 86:6b:7e:7f:d9:2b:b3:9d:2e:62:e9:68:af:a0:23:0e:cc:ab: c2:16:d0:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LH/At/TKgobmKl9HFMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YjdhMGMxYmFiZDYyMWU4MjIwZDBkNzc3ODc3YTg0NGI0 MTNjMTAwHhcNMjUxMjIwMTgwMTQzWhcNMjUxMjIxMTgwMTQzWjAzMTEwLwYDVQQD Eyg4NTc3NTFjOTcyMGFhOWUxNzgzOWFhYjM1MmNhZmM2MGY2MGQ4YjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbY/LodE2JZwJXJ6IPCJBoGRRtu3 t36Lo92XLTeHJqIyB0BBe1+0wdQ2pNtY3mNE2Ux5H3PSUjSkzMiA7agU0DZTnn/a K6T8uiBjd9WIfxOGQy5PWiMJ96dj/zMzcPD/sXcr8t8hRLJ1S0EM/cwhW91kX++u iMekYFiFOLYABfD8yb8SghucqkyHcmLMRatxzP/fnUhuXEcfoj270tMoJJ1m07so cza6EVnseiCqbRYVU5PBMSR3vSrgMK7cjP6nj/RlwsAVwgZ4ZahGcvXgVwT0f15n h4ZiDbUAHNgxvrEbm8YHHRAc94Dg1fI8Oww25l5XsDHdPE9/K9HnFxF7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV3UclyCqnheDmqs1LK/GD2DYtEMB8GA1UdIwQY MBaAFAe3oMG6vWIegiDQ13eHeoRLQTwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYt ZmI5MjE3MDI4YzVjLzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYtZmI5MjE3MDI4YzVj LzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfjBCol6 i/QMUCjzo0EN1FMdmhC45Fk2KZD0RkuyjO5QgeI05+9kHOdHcQOW4bBT0M0CLkuu 139bzRZXKgi+c3rvhc6AUnTdWNJgKmURVssjSylcmAB9otI8EpbLCOhhi0Y0ayDa I8ocxq3tG6twqdku09K1idpfHnAdcYcE1SQW4KU/yYcdUQDNRsawTN4nwDVt1mBj B3jpPaqH4Vbs0NdhgLYQ1sHiIbZD6k3F1JN2yklgLLPJRvlaH5ngG3fJ9z0VcetV co5Q/81PapdX/MzFSUVdVbFE8HSLByJ98+mB9eIOAF9mw5/chmt+f9krs50uYulo r6AjDsyrwhbQ6A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:42:41 2025 by rpki-client