This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json) Hash identifier: OCXtaltlTZDyKuRgyZeDf4dNA8ZfFK30RLjx2YlEAAY= Subject key identifier: AB:2A:CD:61:D8:4E:8F:66:7C:18:4F:19:23:99:EB:25:8A:02:45:EB Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa Certificate serial: 019B3FB5C9F2D0FBDF0ADE0523AF6DDF15EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft Manifest number: 0B98 Signing time: Sun 21 Dec 2025 07:00:36 +0000 Manifest this update: Sun 21 Dec 2025 07:00:36 +0000 Manifest next update: Mon 22 Dec 2025 07:00:36 +0000 Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: 5jogMDGVkzy9TbIxChfnIr5lj6bLkWxC5te51MjzTNE=) 2: M52AATjdXBgxajzktnux2QbLdug.roa (hash: S4m/c7OnNxor+S/UX1Qxo2msu+sB/UbCE+Y/qKNHiQo=) 3: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:c9:f2:d0:fb:df:0a:de:05:23:af:6d:df:15:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa Validity Not Before: Dec 21 07:00:36 2025 GMT Not After : Dec 22 07:00:36 2025 GMT Subject: CN=ab2acd61d84e8f667c184f192399eb258a0245eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:ec:3e:c1:de:ce:55:1c:9a:cf:39:76:75: e0:e7:b1:18:15:86:72:a4:ee:ce:5a:42:87:6c:75: eb:58:3b:1f:27:da:a2:2c:47:a1:10:95:1f:5f:2f: dc:04:74:08:ba:13:4e:04:23:75:08:9d:2b:c2:4c: 80:80:c5:52:dd:3d:23:92:98:1a:82:2b:07:83:56: ab:83:52:e6:2a:3e:e4:61:d0:4f:e1:d8:c1:35:ad: 32:15:62:6f:47:05:de:ee:56:ed:44:d3:5e:10:83: b4:80:30:b7:27:00:b4:e8:b1:7c:e9:d9:42:fc:33: dd:2a:f2:23:f4:b6:e1:0a:0b:5e:01:c7:02:f8:7f: 96:e9:98:f8:18:c0:6d:7a:0f:e3:a3:81:0d:c0:2b: 32:b2:01:fb:ac:17:4a:66:21:e8:7c:9b:7a:19:9d: e1:c9:cf:01:cb:09:7e:d2:1d:1f:82:22:67:d9:2c: ec:f4:7f:8c:bf:ee:4b:00:37:19:6c:5e:0e:31:34: cf:21:9a:0d:85:bc:37:fa:2d:82:65:9e:81:0b:b7: cf:a5:84:7e:e0:c7:12:f2:39:a5:a9:33:bf:13:2c: c9:e0:a8:65:28:41:b3:5d:81:d0:bc:df:c2:2b:67: 9d:4b:ab:b7:63:55:86:67:72:d4:60:59:0a:30:3a: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:CD:61:D8:4E:8F:66:7C:18:4F:19:23:99:EB:25:8A:02:45:EB X509v3 Authority Key Identifier: keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:55:1f:67:fc:cc:9c:f0:69:1b:23:58:b8:4d:5d:75:44:ff: 13:2c:af:5f:c8:f2:27:4d:89:24:48:b3:42:8c:ad:25:d9:1a: db:cd:86:96:64:32:bf:7a:b2:d7:80:23:d2:1c:fc:66:ee:a5: 9b:c8:23:f9:64:b0:20:7c:d1:a5:07:cc:b3:8d:ff:fe:89:33: 6b:70:f9:5f:0c:25:9b:72:1f:df:1d:5c:f0:33:5f:e8:c1:0c: 66:d6:91:af:d0:1f:a8:b9:db:1e:43:df:86:89:c3:10:33:e5: 40:03:65:4f:94:da:c3:fe:46:a2:ea:56:41:67:d2:19:98:ba: 7a:14:a9:0d:4b:f5:ae:23:8e:1c:bb:02:b9:09:4f:56:14:8c: e8:04:ba:20:76:da:29:f5:98:1f:3b:09:57:f6:f5:83:0c:39: a8:8a:25:9b:b2:16:ef:44:dd:dc:fb:95:58:f9:cf:cf:4b:87: f8:0b:2f:59:f1:9e:72:c7:e1:f1:fb:c8:29:93:a0:8a:c5:7d: 38:8b:01:9c:fd:a2:21:fa:53:49:2e:d0:5b:0f:88:7f:9b:e7: a8:4e:cc:bc:fb:90:50:cd:4e:94:be:47:d6:f2:76:0a:27:37: 53:3f:1e:6b:c7:65:63:65:c3:98:a2:73:3c:98:22:ff:bf:9d: 8f:38:14:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tcny0PvfCt4FI69t3xXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm ZThlYWEwHhcNMjUxMjIxMDcwMDM2WhcNMjUxMjIyMDcwMDM2WjAzMTEwLwYDVQQD EyhhYjJhY2Q2MWQ4NGU4ZjY2N2MxODRmMTkyMzk5ZWIyNThhMDI0NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CzsPsHezlUcms85dnXg57EYFYZy pO7OWkKHbHXrWDsfJ9qiLEehEJUfXy/cBHQIuhNOBCN1CJ0rwkyAgMVS3T0jkpga gisHg1arg1LmKj7kYdBP4djBNa0yFWJvRwXe7lbtRNNeEIO0gDC3JwC06LF86dlC /DPdKvIj9LbhCgteAccC+H+W6Zj4GMBteg/jo4ENwCsysgH7rBdKZiHofJt6GZ3h yc8Bywl+0h0fgiJn2Szs9H+Mv+5LADcZbF4OMTTPIZoNhbw3+i2CZZ6BC7fPpYR+ 4McS8jmlqTO/EyzJ4KhlKEGzXYHQvN/CK2edS6u3Y1WGZ3LUYFkKMDq/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsqzWHYTo9mfBhPGSOZ6yWKAkXrMB8GA1UdIwQY MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClUfZ/zM nPBpGyNYuE1ddUT/EyyvX8jyJ02JJEizQoytJdka282GlmQyv3qy14Aj0hz8Zu6l m8gj+WSwIHzRpQfMs43//okza3D5Xwwlm3If3x1c8DNf6MEMZtaRr9AfqLnbHkPf honDEDPlQANlT5Taw/5GoupWQWfSGZi6ehSpDUv1riOOHLsCuQlPVhSM6AS6IHba KfWYHzsJV/b1gww5qIolm7IW70Td3PuVWPnPz0uH+AsvWfGecsfh8fvIKZOgisV9 OIsBnP2iIfpTSS7QWw+If5vnqE7MvPuQUM1OlL5H1vJ2Cic3Uz8ea8dlY2XDmKJz PJgi/7+djzgUBg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:32 2025 by rpki-client