This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json) Hash identifier: vy/oYpfDpnOd6tIJa/W69+uGdi5c/zmBu5+7zSS6U1Q= Subject key identifier: DF:79:09:C6:E7:C2:D1:80:D3:84:EB:63:10:23:72:4E:09:AD:E3:52 Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7 Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7 Certificate serial: 019B454A128045C3393F937029527F7963CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft Manifest number: 0BF0 Signing time: Mon 22 Dec 2025 09:00:40 +0000 Manifest this update: Mon 22 Dec 2025 09:00:40 +0000 Manifest next update: Tue 23 Dec 2025 09:00:40 +0000 Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: xEuX9qM0ZPZxYM5XbUyXaNKQ939bvPAFK8wxcFajsS4=) 2: UVCnnFZZjUR9w6yDQp9NPqjljfo.roa (hash: f6rKRc94PJnhp1qRU3+PGFxmR5pPPhe+G7K5mMW7jGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:12:80:45:c3:39:3f:93:70:29:52:7f:79:63:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7 Validity Not Before: Dec 22 09:00:40 2025 GMT Not After : Dec 23 09:00:40 2025 GMT Subject: CN=df7909c6e7c2d180d384eb631023724e09ade352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:12:10:f6:ba:58:bc:14:72:06:a3:e4:b5: dd:9e:1f:93:0e:c9:24:a3:b0:e1:f7:9d:ad:30:3f: ca:37:7c:f3:63:8c:e3:32:c8:de:c8:03:05:f2:89: cf:cf:15:7a:05:c3:1a:57:60:aa:66:c4:c0:a7:e5: f1:ee:ca:a8:fe:9a:65:e5:cb:44:e0:29:ee:4d:09: 1f:79:87:c6:3c:6e:71:d6:d1:14:00:52:a2:6d:5a: 64:29:25:f1:2b:34:8e:dd:4c:53:19:41:26:d8:8f: 6e:fb:e6:30:10:1b:e3:f0:28:32:68:0b:53:22:93: 25:f6:ec:db:a8:10:e3:59:1d:0b:ec:75:55:aa:b9: 8e:ae:85:a4:57:bc:d1:b0:2f:07:5e:91:5c:33:84: 97:f6:be:b4:f5:e7:78:48:74:33:00:cc:5a:b7:19: 1a:86:96:24:3c:71:9d:e5:42:d7:56:58:d2:01:01: b3:32:c8:c6:c6:6a:ef:77:31:ff:c8:71:a4:58:e1: 7e:69:71:75:59:da:f3:f2:db:cd:6f:9c:48:d9:65: 0d:09:c7:ba:cc:23:b6:c0:88:6d:e7:e4:8d:cc:da: 0a:07:10:7d:ac:c3:19:5b:89:ad:72:cb:16:d7:45: c6:a9:de:00:cb:b4:37:78:05:53:cd:d7:17:a2:d9: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:09:C6:E7:C2:D1:80:D3:84:EB:63:10:23:72:4E:09:AD:E3:52 X509v3 Authority Key Identifier: keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:82:11:98:cd:56:d6:f5:84:dd:9b:85:1b:26:29:df:f4:7f: ce:4c:3a:73:31:2c:f3:30:db:93:35:90:7d:64:13:f1:9b:81: f3:86:de:39:26:f5:b5:c0:dc:93:b4:9e:d4:02:78:dc:e6:c4: a4:b4:7e:33:54:34:47:18:88:e3:ad:4c:ab:c9:55:7a:fb:ea: 12:0f:f7:b0:ff:9f:3e:2a:49:2d:45:9e:55:49:e3:99:48:0c: 9e:da:fd:e6:af:dd:7b:92:07:fb:2b:1d:17:22:43:12:00:c0: 5b:e8:af:fa:bb:5e:ed:0d:0b:ec:30:dc:43:30:b4:f4:bb:2d: c5:82:98:03:ac:81:57:74:55:e6:75:d3:4f:b8:31:27:92:30: 01:be:e0:d9:14:7b:5f:f0:29:cf:35:c1:84:5b:1c:cf:d0:c5: 89:a2:ec:9e:23:30:a6:a3:69:54:c7:c8:f2:6b:0f:5f:32:90: cc:33:ab:69:70:0d:de:2e:bb:6e:80:ce:5e:33:68:34:d1:df: b1:82:e6:44:6d:94:37:6c:be:f3:0c:be:d3:6d:06:5c:24:eb: c5:44:d6:1d:a9:37:2a:a8:84:78:32:89:08:54:39:d5:b0:e2: c5:d2:69:18:98:15:65:86:c9:07:a9:01:83:00:b4:ee:73:21: 46:79:59:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFShKARcM5P5NwKVJ/eWPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZWJhMmU2NTk3OTRiMTIyMTVkZjFmYThhYmUzZmNiZDY2 ODZkZjcwHhcNMjUxMjIyMDkwMDQwWhcNMjUxMjIzMDkwMDQwWjAzMTEwLwYDVQQD EyhkZjc5MDljNmU3YzJkMTgwZDM4NGViNjMxMDIzNzI0ZTA5YWRlMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIwSEPa6WLwUcgaj5LXdnh+TDskk o7Dh952tMD/KN3zzY4zjMsjeyAMF8onPzxV6BcMaV2CqZsTAp+Xx7sqo/ppl5ctE 4CnuTQkfeYfGPG5x1tEUAFKibVpkKSXxKzSO3UxTGUEm2I9u++YwEBvj8CgyaAtT IpMl9uzbqBDjWR0L7HVVqrmOroWkV7zRsC8HXpFcM4SX9r609ed4SHQzAMxatxka hpYkPHGd5ULXVljSAQGzMsjGxmrvdzH/yHGkWOF+aXF1Wdrz8tvNb5xI2WUNCce6 zCO2wIht5+SNzNoKBxB9rMMZW4mtcssW10XGqd4Ay7Q3eAVTzdcXotmITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN95CcbnwtGA04TrYxAjck4JreNSMB8GA1UdIwQY MBaAFOzrouZZeUsSIV3x+oq+P8vWaG33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2Qt ZWJlMmRjNDAxNjE2LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2QtZWJlMmRjNDAxNjE2 LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4IRmM1W 1vWE3ZuFGyYp3/R/zkw6czEs8zDbkzWQfWQT8ZuB84beOSb1tcDck7Se1AJ43ObE pLR+M1Q0RxiI461Mq8lVevvqEg/3sP+fPipJLUWeVUnjmUgMntr95q/de5IH+ysd FyJDEgDAW+iv+rte7Q0L7DDcQzC09LstxYKYA6yBV3RV5nXTT7gxJ5IwAb7g2RR7 X/ApzzXBhFscz9DFiaLsniMwpqNpVMfI8msPXzKQzDOraXAN3i67boDOXjNoNNHf sYLmRG2UN2y+8wy+020GXCTrxUTWHak3KqiEeDKJCFQ51bDixdJpGJgVZYbJB6kB gwC07nMhRnlZ8Q== -----END CERTIFICATE-----Generated at Mon Dec 22 13:57:44 2025 by rpki-client