This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json) Hash identifier: TxwsF1vxdzqXA+XpyXXNX68Q3kb5V2wImiELTYcnq0k= Subject key identifier: 0C:93:9F:3A:D2:5B:5B:25:FE:4A:E4:D0:A1:99:71:AF:F4:67:8F:8E Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019B3AFD74EE611BF334F648B8C5ED477CFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft Manifest number: 17A3 Signing time: Sat 20 Dec 2025 09:00:47 +0000 Manifest this update: Sat 20 Dec 2025 09:00:47 +0000 Manifest next update: Sun 21 Dec 2025 09:00:47 +0000 Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: K49o2FcY5QNhrGktJSXhg//JUAPIxzZHXRP3iRN3WNM=) 2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=) 3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=) 4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=) 5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=) 6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=) 7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=) 8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:74:ee:61:1b:f3:34:f6:48:b8:c5:ed:47:7c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Dec 20 09:00:47 2025 GMT Not After : Dec 21 09:00:47 2025 GMT Subject: CN=0c939f3ad25b5b25fe4ae4d0a19971aff4678f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:a3:34:cf:47:f6:0f:4d:78:b3:ec:a5:d2: 25:89:79:f1:ed:95:ab:d7:b1:bb:be:a4:70:ae:d4: 89:08:5b:be:05:94:50:15:9c:c3:29:1c:c6:40:82: d4:97:9a:f2:6b:b0:9a:68:b3:cf:c1:f1:b2:d2:5a: 31:1e:6a:0a:99:07:74:41:1b:7b:25:af:2d:cb:89: ca:0d:f1:1a:2b:2e:3f:d3:1e:05:98:c2:f8:2f:71: 81:91:34:19:5e:ab:72:a2:68:7d:50:8e:0e:7f:0d: 65:f9:a6:0d:9b:ab:e3:fa:82:3c:b0:18:d0:13:d8: cc:9f:05:8e:ab:a5:07:f6:f0:a2:78:99:f2:72:08: c4:3d:25:09:4a:10:75:5c:5a:83:4c:69:79:1d:d0: 67:01:b5:e4:b7:39:d0:ee:2d:62:70:88:39:7b:8a: 28:8d:88:33:62:3c:f8:26:33:2c:3b:bc:d7:80:04: ef:ed:13:a6:64:2b:38:4d:c9:f7:bd:ca:33:d7:42: a3:66:55:4e:40:b1:eb:d2:62:ec:6c:8c:c2:3f:dc: b8:aa:ed:8c:10:0e:e1:d7:14:c4:d8:e0:84:a4:7e: 3c:0d:51:9c:ce:8a:b2:a7:18:80:5d:1f:cb:a4:6d: 0e:f6:29:9c:3b:9d:c3:32:fe:88:88:81:73:4f:ce: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:93:9F:3A:D2:5B:5B:25:FE:4A:E4:D0:A1:99:71:AF:F4:67:8F:8E X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:85:2f:d7:5f:da:71:c5:c9:18:ea:a8:68:be:d4:28:71:f0: b4:d3:c0:4e:bc:0d:51:11:c7:10:8f:34:c9:83:29:5f:74:d9: 5e:d5:e2:b9:71:7c:0c:b6:00:0c:ba:c0:4a:47:a0:cc:4e:f9: 45:6a:7f:0b:7e:5f:0d:82:5e:3a:f3:d8:56:a3:23:3b:56:51: 0a:e5:08:4d:2a:2f:ff:04:e0:12:83:fa:66:e2:ea:9b:98:93: 9e:cd:ba:5b:a5:cc:29:92:2d:a3:ae:c2:f7:02:61:13:b0:0f: 6a:07:ce:43:ef:01:ff:58:97:1d:47:2d:1e:a2:9b:85:dc:06: 05:f4:3e:fc:c7:77:0e:00:cf:0e:3f:3e:63:47:71:e7:a5:86: e6:52:04:e8:ac:d0:ac:cb:89:0e:a4:2b:c5:cd:c4:a3:6a:f8: 5f:c0:c5:42:b8:d2:a2:c6:e5:c7:c7:64:42:db:ed:c2:f3:cf: a1:7d:65:d7:76:0e:ae:32:b1:41:76:6f:85:e7:9c:c6:d4:df: 2c:89:95:f1:d7:cf:af:a4:f7:bc:1b:e0:36:ca:75:dd:4d:91: a7:7f:23:61:62:23:c8:fb:7d:a2:f7:0b:f4:b1:d9:1c:eb:d0: 4e:11:d5:34:71:0e:51:20:12:9b:42:05:ac:9b:ed:71:da:14: a3:0b:26:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/XTuYRvzNPZIuMXtR3z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjUxMjIwMDkwMDQ3WhcNMjUxMjIxMDkwMDQ3WjAzMTEwLwYDVQQD EygwYzkzOWYzYWQyNWI1YjI1ZmU0YWU0ZDBhMTk5NzFhZmY0Njc4ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hejNM9H9g9NeLPspdIliXnx7ZWr 17G7vqRwrtSJCFu+BZRQFZzDKRzGQILUl5rya7CaaLPPwfGy0loxHmoKmQd0QRt7 Ja8ty4nKDfEaKy4/0x4FmML4L3GBkTQZXqtyomh9UI4Ofw1l+aYNm6vj+oI8sBjQ E9jMnwWOq6UH9vCieJnycgjEPSUJShB1XFqDTGl5HdBnAbXktznQ7i1icIg5e4oo jYgzYjz4JjMsO7zXgATv7ROmZCs4Tcn3vcoz10KjZlVOQLHr0mLsbIzCP9y4qu2M EA7h1xTE2OCEpH48DVGczoqypxiAXR/LpG0O9imcO53DMv6IiIFzT851cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyTnzrSW1sl/krk0KGZca/0Z4+OMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIUv11/a ccXJGOqoaL7UKHHwtNPATrwNURHHEI80yYMpX3TZXtXiuXF8DLYADLrASkegzE75 RWp/C35fDYJeOvPYVqMjO1ZRCuUITSov/wTgEoP6ZuLqm5iTns26W6XMKZIto67C 9wJhE7APagfOQ+8B/1iXHUctHqKbhdwGBfQ+/Md3DgDPDj8+Y0dx56WG5lIE6KzQ rMuJDqQrxc3Eo2r4X8DFQrjSosblx8dkQtvtwvPPoX1l13YOrjKxQXZvheecxtTf LImV8dfPr6T3vBvgNsp13U2Rp38jYWIjyPt9ovcL9LHZHOvQThHVNHEOUSASm0IF rJvtcdoUowsmMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:50 2025 by rpki-client