This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json) Hash identifier: CFFNq0sD8rGBErfX71zfWn3dcTCshTucXOnda5U6K2E= Subject key identifier: CC:42:71:BB:48:08:44:7F:40:44:F6:48:EE:59:04:80:A0:68:9C:3F Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Certificate serial: 019B6DD7E93567D4111E038116F6E40CDCA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 06:00:25 +0000 Manifest this update: Tue 30 Dec 2025 06:00:25 +0000 Manifest next update: Wed 31 Dec 2025 06:00:25 +0000 Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=) 2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: 9fWfZB6Bt2lZwqayFHyhW+xOyZGiQDe38S/CVBO5z+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d7:e9:35:67:d4:11:1e:03:81:16:f6:e4:0c:dc:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535 Validity Not Before: Dec 30 06:00:25 2025 GMT Not After : Dec 31 06:00:25 2025 GMT Subject: CN=cc4271bb4808447f4044f648ee590480a0689c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:42:06:6d:d0:d5:b8:47:0f:90:9a:d2:fb: d2:00:79:93:95:32:e5:19:8c:04:e3:e5:d8:be:96: f8:e0:c8:4b:8b:ee:39:62:79:40:7d:4e:39:24:9d: 57:0b:d0:fb:0f:9c:bb:38:42:40:03:1c:ff:38:2e: 36:6b:49:56:ca:4a:7d:e3:eb:e2:52:ae:fa:34:e6: 6c:2f:63:2b:67:72:fb:5b:3d:42:9e:b9:fb:80:95: 85:a3:38:6d:5a:ca:51:02:3a:9c:b6:91:57:b2:33: 73:dc:03:70:61:50:79:4f:38:f6:fa:30:6f:58:81: 47:39:f0:6b:59:5a:37:6b:7b:b6:1c:eb:42:38:28: 63:03:53:72:3a:99:3e:38:44:a1:78:4e:34:23:94: 84:2f:6e:1f:42:01:7e:f2:09:db:4b:d2:b2:25:e6: ef:75:ad:9a:d5:e7:7d:00:05:e2:f5:e9:86:d7:b4: c1:41:1a:af:27:b2:d6:42:42:79:2d:d5:34:d0:1e: 83:f5:ed:74:96:b1:16:89:a8:16:c3:6f:a0:2d:92: 45:8f:e2:b6:6d:41:f4:06:66:9c:90:81:97:a7:4f: b3:3a:95:66:15:51:02:07:68:5b:fc:50:07:09:fb: 85:63:7f:29:ae:10:77:83:d4:f9:17:f7:01:bd:f9: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:42:71:BB:48:08:44:7F:40:44:F6:48:EE:59:04:80:A0:68:9C:3F X509v3 Authority Key Identifier: keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:11:98:e7:61:0b:c6:09:2d:6d:f5:09:da:95:a1:de:ea:bd: 0d:49:8c:ff:ae:ea:e0:dd:e0:0f:ed:59:2e:58:39:b9:19:04: f4:c6:7d:83:d2:b1:ff:6a:bb:3a:49:15:de:94:ad:07:df:4d: 14:e7:1a:b4:b0:1a:5e:8f:34:9e:b1:0f:56:b8:ae:00:48:26: e4:08:e7:7c:19:66:41:49:bf:85:86:f5:69:60:52:d0:91:98: dd:b2:08:81:cf:70:23:5f:c4:59:05:59:5e:ed:6b:50:4b:ee: be:62:5a:f9:16:db:3e:59:0c:42:f9:4f:a2:68:91:60:e0:d1: a8:61:9a:80:c1:7e:42:6b:46:49:7c:fc:cd:ee:2e:d8:ae:66: 9e:ed:14:61:6f:aa:e8:c4:1a:11:e1:38:ab:80:8c:dc:03:8b: af:6d:d9:78:e5:14:27:4a:bc:23:5f:a6:12:fb:a7:32:cf:41: 32:fa:0a:4a:c8:0e:e4:50:a9:ff:39:40:c2:38:d9:5d:e0:e1: ce:d1:74:dd:c4:7c:16:cf:f5:db:e0:3c:eb:ee:23:e5:b5:a9: 63:76:41:1a:2b:82:c8:d6:de:4f:c3:8a:2d:a4:38:6c:2f:86: 6e:89:f4:8b:51:52:7a:40:05:f6:ef:b7:e7:be:0c:ac:80:6d: f5:ee:be:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt1+k1Z9QRHgOBFvbkDNymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh ZDI1MzUwHhcNMjUxMjMwMDYwMDI1WhcNMjUxMjMxMDYwMDI1WjAzMTEwLwYDVQQD EyhjYzQyNzFiYjQ4MDg0NDdmNDA0NGY2NDhlZTU5MDQ4MGEwNjg5YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+5CBm3Q1bhHD5Ca0vvSAHmTlTLl GYwE4+XYvpb44MhLi+45YnlAfU45JJ1XC9D7D5y7OEJAAxz/OC42a0lWykp94+vi Uq76NOZsL2MrZ3L7Wz1Cnrn7gJWFozhtWspRAjqctpFXsjNz3ANwYVB5Tzj2+jBv WIFHOfBrWVo3a3u2HOtCOChjA1NyOpk+OESheE40I5SEL24fQgF+8gnbS9KyJebv da2a1ed9AAXi9emG17TBQRqvJ7LWQkJ5LdU00B6D9e10lrEWiagWw2+gLZJFj+K2 bUH0BmackIGXp0+zOpVmFVECB2hb/FAHCfuFY38prhB3g9T5F/cBvfkM5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxCcbtICER/QET2SO5ZBICgaJw/MB8GA1UdIwQY MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhGY52EL xgktbfUJ2pWh3uq9DUmM/67q4N3gD+1ZLlg5uRkE9MZ9g9Kx/2q7OkkV3pStB99N FOcatLAaXo80nrEPVriuAEgm5AjnfBlmQUm/hYb1aWBS0JGY3bIIgc9wI1/EWQVZ Xu1rUEvuvmJa+RbbPlkMQvlPomiRYODRqGGagMF+QmtGSXz8ze4u2K5mnu0UYW+q 6MQaEeE4q4CM3AOLr23ZeOUUJ0q8I1+mEvunMs9BMvoKSsgO5FCp/zlAwjjZXeDh ztF03cR8Fs/12+A86+4j5bWpY3ZBGiuCyNbeT8OKLaQ4bC+Gbon0i1FSekAF9u+3 574MrIBt9e6+GQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:51 2025 by rpki-client