This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json) Hash identifier: HU5Gu0E+0PTWlpqzh/DZF2SQTlZLrV1S8MS9B9cAJIE= Subject key identifier: BE:2E:EB:5D:D1:3C:A8:CC:2A:CB:9B:D1:1B:26:47:23:FB:E1:85:B5 Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019B503C6F9D342DD2789491CB61B472DAA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft Manifest number: 17AE Signing time: Wed 24 Dec 2025 12:01:36 +0000 Manifest this update: Wed 24 Dec 2025 12:01:36 +0000 Manifest next update: Thu 25 Dec 2025 12:01:36 +0000 Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: NUFvcKenVj+WIZtxlCk0X+xlpVOFsen5Xi0VTsGO90k=) 2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=) 3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=) 4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=) 5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=) 6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=) 7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=) 8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:6f:9d:34:2d:d2:78:94:91:cb:61:b4:72:da:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Dec 24 12:01:36 2025 GMT Not After : Dec 25 12:01:36 2025 GMT Subject: CN=be2eeb5dd13ca8cc2acb9bd11b264723fbe185b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:38:59:bc:84:94:64:d0:33:55:d2:0e:15: af:4b:be:e1:15:6e:d7:2d:2f:86:bd:13:0b:f8:cb: d1:b3:5b:c0:d7:eb:0e:a2:db:d0:5d:d7:0d:b1:91: 1f:3d:e6:92:84:71:b3:40:1a:6d:8a:85:4a:64:e0: 3d:cf:88:5f:e9:59:ef:b7:94:53:8f:8a:76:6b:5b: 9c:1b:47:e0:a3:1b:9e:28:8e:9e:7e:16:ca:9b:77: 30:68:a1:fe:72:89:5e:a5:b1:a1:dc:86:50:45:45: a2:71:4d:a2:5e:ca:ab:00:55:53:7d:d5:26:72:53: 2c:f1:d3:4f:be:a5:63:e7:2c:56:99:fe:21:87:f8: ea:e0:97:16:a4:41:68:ab:f3:a6:13:aa:e6:b8:79: d2:c9:f8:e1:3a:42:85:0a:31:af:92:48:97:32:96: 92:9c:bc:9a:40:a5:86:49:af:14:e9:3a:0c:ed:f6: e3:b9:57:77:b9:90:2e:7f:28:5f:30:0b:94:41:cd: 5a:ba:04:31:ce:a1:5f:92:7d:72:f1:6d:3d:b6:2d: c1:e2:a8:92:4e:1a:3f:7b:b3:6a:fa:bb:43:f3:5b: 25:11:1b:ab:59:1b:d9:c9:f1:86:8a:e4:cc:13:42: a1:f7:d6:86:34:2d:fd:80:a0:6a:76:c9:37:51:38: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2E:EB:5D:D1:3C:A8:CC:2A:CB:9B:D1:1B:26:47:23:FB:E1:85:B5 X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ac:17:bc:fc:65:50:a0:31:4d:a4:62:58:c3:d6:e4:c1:20: 80:47:8f:4c:da:19:e1:50:e5:8d:6f:17:1f:61:c4:94:4b:d3: d7:a2:ef:6d:83:d1:b7:e2:19:bc:f9:05:cd:c8:ab:e8:30:1e: 6a:84:f7:a1:4e:10:40:85:20:50:fd:65:c4:9e:20:12:71:39: cd:a5:00:20:f4:ba:19:2e:06:e6:40:5c:6d:51:b3:a5:dd:8b: 46:8a:30:2f:32:52:d2:75:02:d4:35:7e:ac:92:89:ab:5b:60: a0:fc:f2:ce:1b:fe:ea:33:74:3b:90:44:4e:c0:31:1b:2a:a5: 62:d8:f5:01:63:cf:53:bb:7a:b3:ab:0e:64:1a:62:55:73:b3: 87:e4:cb:ff:27:fe:1d:a6:7c:98:d8:76:cd:02:bd:08:f7:2c: fc:66:20:c6:24:b5:39:f5:03:5f:a4:6a:ee:24:89:89:29:b1: 77:76:a7:76:c3:96:34:d5:93:6a:98:b0:d0:bf:ef:c2:eb:05: 81:a8:f2:1e:76:bb:60:a9:73:fc:28:f6:8b:d4:99:f6:0b:86: 64:de:f2:1d:39:d2:75:c4:0e:75:48:11:c5:4d:40:6c:a6:a3: 3d:82:84:8f:31:70:35:6c:5c:19:c9:0e:9f:98:f0:6f:d2:98: 4f:9d:a7:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPG+dNC3SeJSRy2G0ctqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjUxMjI0MTIwMTM2WhcNMjUxMjI1MTIwMTM2WjAzMTEwLwYDVQQD EyhiZTJlZWI1ZGQxM2NhOGNjMmFjYjliZDExYjI2NDcyM2ZiZTE4NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPs4WbyElGTQM1XSDhWvS77hFW7X LS+GvRML+MvRs1vA1+sOotvQXdcNsZEfPeaShHGzQBptioVKZOA9z4hf6Vnvt5RT j4p2a1ucG0fgoxueKI6efhbKm3cwaKH+colepbGh3IZQRUWicU2iXsqrAFVTfdUm clMs8dNPvqVj5yxWmf4hh/jq4JcWpEFoq/OmE6rmuHnSyfjhOkKFCjGvkkiXMpaS nLyaQKWGSa8U6ToM7fbjuVd3uZAufyhfMAuUQc1augQxzqFfkn1y8W09ti3B4qiS Tho/e7Nq+rtD81slERurWRvZyfGGiuTME0Kh99aGNC39gKBqdsk3UTjqBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4u613RPKjMKsub0RsmRyP74YW1MB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArawXvPxl UKAxTaRiWMPW5MEggEePTNoZ4VDljW8XH2HElEvT16LvbYPRt+IZvPkFzcir6DAe aoT3oU4QQIUgUP1lxJ4gEnE5zaUAIPS6GS4G5kBcbVGzpd2LRoowLzJS0nUC1DV+ rJKJq1tgoPzyzhv+6jN0O5BETsAxGyqlYtj1AWPPU7t6s6sOZBpiVXOzh+TL/yf+ HaZ8mNh2zQK9CPcs/GYgxiS1OfUDX6Rq7iSJiSmxd3andsOWNNWTapiw0L/vwusF gajyHna7YKlz/Cj2i9SZ9guGZN7yHTnSdcQOdUgRxU1AbKajPYKEjzFwNWxcGckO n5jwb9KYT52nPQ== -----END CERTIFICATE-----Generated at Wed Dec 24 20:31:48 2025 by rpki-client