This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json) Hash identifier: +iFAh/XifbvSJvfGXdBcRY0CPG7if9oPrA1k/6BM2Jc= Subject key identifier: 3D:85:50:38:86:33:A9:79:D9:2E:F3:14:65:95:09:90:AC:75:97:88 Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa Certificate serial: 019B37FCBFD4C4DC0B76F1D299EF31353D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft Manifest number: 0B94 Signing time: Fri 19 Dec 2025 19:01:09 +0000 Manifest this update: Fri 19 Dec 2025 19:01:09 +0000 Manifest next update: Sat 20 Dec 2025 19:01:09 +0000 Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: idVhVMz9o5ALqgyijnddCoM9SqIS+tSTblxKgV8NSkc=) 2: M52AATjdXBgxajzktnux2QbLdug.roa (hash: S4m/c7OnNxor+S/UX1Qxo2msu+sB/UbCE+Y/qKNHiQo=) 3: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:bf:d4:c4:dc:0b:76:f1:d2:99:ef:31:35:3d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa Validity Not Before: Dec 19 19:01:09 2025 GMT Not After : Dec 20 19:01:09 2025 GMT Subject: CN=3d8550388633a979d92ef31465950990ac759788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:3a:e2:a1:9b:65:b7:d7:c7:35:3d:bd:2f: d1:4b:e3:fb:23:70:55:7e:22:35:83:7c:44:fb:13: f4:85:e7:f3:f9:be:b8:78:b3:70:2c:34:0e:9f:31: 95:c2:a9:9e:7c:8a:c3:4a:0b:1e:40:44:e4:c0:93: 52:3b:41:eb:85:52:1e:b2:98:7f:68:97:13:f4:2b: 6c:ad:f5:d3:cc:b8:ac:c3:a4:a2:f1:3f:69:d9:60: c8:19:b2:6e:44:40:b0:dc:08:d4:c6:ba:81:4b:50: a3:ef:d0:9d:ff:0e:8d:5d:a4:3e:b4:96:cd:a3:0b: 9f:e1:e6:e4:a9:6b:f6:75:23:7f:bc:44:f7:08:10: cd:7d:4d:d3:71:da:24:96:5c:af:43:8b:06:cf:07: af:e4:e6:be:68:de:24:fa:ee:71:97:ad:11:a0:eb: 4e:85:b3:cd:cd:1b:4d:c7:2f:3a:9e:03:f7:ed:d5: ab:61:db:1c:84:f6:e6:79:a0:04:c6:78:1c:13:2a: 8f:78:d2:b7:df:46:67:9c:5a:59:e1:7a:9f:80:ec: db:b4:3e:c6:5d:52:3c:4e:7a:28:00:67:36:e7:ca: 98:e0:00:9f:14:1f:59:a0:4f:29:c5:d8:17:7a:12: ae:83:58:8b:21:d8:36:e7:3b:f1:e3:af:4b:2b:b1: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:50:38:86:33:A9:79:D9:2E:F3:14:65:95:09:90:AC:75:97:88 X509v3 Authority Key Identifier: keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:46:7b:26:d4:7a:32:4b:a5:c7:41:79:be:7e:0a:c9:3a:60: 85:31:9c:1d:86:0c:d8:6b:48:05:92:1b:1d:8d:57:92:6e:40: 01:bc:7e:7c:ba:43:ee:84:74:a5:a0:18:4d:74:a5:6d:c0:cf: 6c:2a:43:74:2a:b3:52:14:fd:19:cd:73:7c:5a:b5:03:f3:4a: 7e:4d:b8:ce:af:51:b4:94:b7:a3:da:65:f3:6e:1c:dd:24:9f: 33:f2:e8:26:0d:0c:8b:58:e9:d5:9c:1d:c5:ed:60:af:3d:4e: 71:52:61:7c:bb:0b:4f:83:1e:5a:ab:f7:20:36:05:cc:c4:57: 52:7e:39:28:c4:e3:ee:d0:be:e8:a2:dc:f5:c9:3d:bd:b9:7a: 70:9b:2c:9b:f8:da:fc:00:60:7c:67:b8:23:d6:3e:bf:90:6d: 37:88:3d:e3:f6:ee:c5:62:a2:55:16:63:41:e6:d1:9c:85:95: 97:88:b4:51:41:7e:bc:63:b7:26:9d:46:1c:6f:c1:ab:18:b6: e2:8a:34:69:04:13:67:1d:c0:48:26:cd:d7:cc:c8:b0:60:5f: 9c:4b:a9:e8:cb:b7:9b:57:0c:50:f5:83:9b:51:12:55:45:3a: 1a:37:1b:1d:d0:32:ac:9d:b5:79:68:ec:c7:90:3f:b5:ef:50: ff:7c:43:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/L/UxNwLdvHSme8xNT0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm ZThlYWEwHhcNMjUxMjE5MTkwMTA5WhcNMjUxMjIwMTkwMTA5WjAzMTEwLwYDVQQD EygzZDg1NTAzODg2MzNhOTc5ZDkyZWYzMTQ2NTk1MDk5MGFjNzU5Nzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss064qGbZbfXxzU9vS/RS+P7I3BV fiI1g3xE+xP0hefz+b64eLNwLDQOnzGVwqmefIrDSgseQETkwJNSO0HrhVIesph/ aJcT9CtsrfXTzLisw6Si8T9p2WDIGbJuRECw3AjUxrqBS1Cj79Cd/w6NXaQ+tJbN owuf4ebkqWv2dSN/vET3CBDNfU3TcdokllyvQ4sGzwev5Oa+aN4k+u5xl60RoOtO hbPNzRtNxy86ngP37dWrYdschPbmeaAExngcEyqPeNK330ZnnFpZ4XqfgOzbtD7G XVI8TnooAGc258qY4ACfFB9ZoE8pxdgXehKug1iLIdg25zvx469LK7ERyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2FUDiGM6l52S7zFGWVCZCsdZeIMB8GA1UdIwQY MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0Z7JtR6 Mkulx0F5vn4KyTpghTGcHYYM2GtIBZIbHY1Xkm5AAbx+fLpD7oR0paAYTXSlbcDP bCpDdCqzUhT9Gc1zfFq1A/NKfk24zq9RtJS3o9pl824c3SSfM/LoJg0Mi1jp1Zwd xe1grz1OcVJhfLsLT4MeWqv3IDYFzMRXUn45KMTj7tC+6KLc9ck9vbl6cJssm/ja /ABgfGe4I9Y+v5BtN4g94/buxWKiVRZjQebRnIWVl4i0UUF+vGO3Jp1GHG/Bqxi2 4oo0aQQTZx3ASCbN18zIsGBfnEup6Mu3m1cMUPWDm1ESVUU6GjcbHdAyrJ21eWjs x5A/te9Q/3xDAA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:51:14 2025 by rpki-client