This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json) Hash identifier: ImWr2FdlUMBLtXmPDibm5SOD4wEBKWPmM0NJSWTDG80= Subject key identifier: 72:74:12:E8:D7:FB:19:03:9F:FD:1F:FE:E1:52:AB:87:02:28:69:E3 Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Certificate serial: 019B4BF164AB967A1790017A601190FA5552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 16:01:09 +0000 Manifest this update: Tue 23 Dec 2025 16:01:09 +0000 Manifest next update: Wed 24 Dec 2025 16:01:09 +0000 Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: HpfyBxNAZbWkXSSU5oQdUglg2CcOOHxsnSWY0ZLJEn4=) 2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:64:ab:96:7a:17:90:01:7a:60:11:90:fa:55:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Validity Not Before: Dec 23 16:01:09 2025 GMT Not After : Dec 24 16:01:09 2025 GMT Subject: CN=727412e8d7fb19039ffd1ffee152ab87022869e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e2:2b:dc:57:3b:aa:5f:ac:73:9d:73:c2:06: 9b:8d:c5:c1:52:d3:dd:63:39:bb:03:e4:9f:1b:85: 5d:5e:40:6e:a7:d1:27:aa:19:11:71:83:ff:3f:5c: 28:ca:73:48:15:45:66:77:05:11:4e:de:88:a6:1c: 39:dc:7c:97:a5:b1:05:54:7a:a6:a3:9a:b3:78:2d: 49:55:23:87:0e:e6:54:64:cc:c2:17:5a:c7:c7:64: 22:8e:c8:b6:89:ca:c5:86:ed:21:4e:d0:9c:79:0d: 31:b8:28:24:59:d5:68:e2:4f:16:7d:ab:9e:6a:3d: 8e:5d:fa:bf:34:c1:90:90:f8:a3:d6:a0:6a:7e:89: a9:16:79:3b:c9:5a:64:01:53:b0:cf:16:bc:08:fe: ab:de:ca:6d:36:8a:69:08:b1:18:19:5a:66:e5:29: a9:58:73:00:0d:0b:8b:41:c5:61:ef:81:89:c7:94: ca:f7:83:3d:8b:de:e3:50:73:d5:9d:e6:6f:75:23: 02:a5:34:96:9e:1e:f8:bf:df:09:5d:a6:bd:34:9b: e1:62:b2:a4:fd:8b:c5:aa:0e:b3:69:6b:ae:2e:7f: 24:40:2f:a1:80:56:7c:20:0b:f5:bf:73:7c:78:e2: 4a:6f:15:f3:ae:3f:4d:b2:0a:58:c4:23:ee:01:59: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:74:12:E8:D7:FB:19:03:9F:FD:1F:FE:E1:52:AB:87:02:28:69:E3 X509v3 Authority Key Identifier: keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:89:23:9a:58:06:e0:31:70:04:16:54:e3:d0:fd:39:0c:0d: 8d:da:96:65:f7:60:5c:dd:ea:23:ea:97:20:9e:3c:8a:7e:b0: 6e:38:94:e1:69:1b:78:46:89:a6:29:90:b1:23:7b:ae:b8:b9: 3a:f2:c9:cf:26:b2:c3:2e:45:db:43:4c:f4:a5:6e:b8:c0:60: be:01:93:7b:6a:36:5e:84:18:3e:d6:23:67:ea:ac:ec:5d:16: 4f:f2:68:64:a3:84:1f:b0:2e:ca:7e:6a:a2:0d:d2:ee:93:e7: 23:f2:22:a9:c2:d4:cf:a1:24:88:55:94:70:5a:6e:13:97:66: 08:5d:6b:4c:34:a6:20:66:99:6c:e7:76:28:50:db:b1:59:20: 3a:17:d7:ae:d2:fe:b4:cc:13:0d:56:68:a9:5f:0d:ff:16:b3: ed:24:42:8a:06:28:b6:3b:6a:e5:1a:b6:a6:e6:1a:9d:ab:1d: e1:82:56:24:17:52:cb:81:9d:c6:c6:2f:8d:16:42:35:7c:47: 95:32:c1:27:4f:ee:c7:4c:83:9c:f6:07:fd:c0:7f:17:aa:16: 0e:5a:cb:a8:48:49:da:f1:aa:40:f7:2c:36:2d:bf:92:cf:6c: 57:54:24:f3:c7:d5:94:1c:ba:45:b6:aa:9f:71:61:6a:87:9a: 72:cf:4b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8WSrlnoXkAF6YBGQ+lVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5 NmYxOTcwHhcNMjUxMjIzMTYwMTA5WhcNMjUxMjI0MTYwMTA5WjAzMTEwLwYDVQQD Eyg3Mjc0MTJlOGQ3ZmIxOTAzOWZmZDFmZmVlMTUyYWI4NzAyMjg2OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uIr3Fc7ql+sc51zwgabjcXBUtPd Yzm7A+SfG4VdXkBup9EnqhkRcYP/P1woynNIFUVmdwURTt6Iphw53HyXpbEFVHqm o5qzeC1JVSOHDuZUZMzCF1rHx2Qijsi2icrFhu0hTtCceQ0xuCgkWdVo4k8Wfaue aj2OXfq/NMGQkPij1qBqfompFnk7yVpkAVOwzxa8CP6r3sptNoppCLEYGVpm5Smp WHMADQuLQcVh74GJx5TK94M9i97jUHPVneZvdSMCpTSWnh74v98JXaa9NJvhYrKk /YvFqg6zaWuuLn8kQC+hgFZ8IAv1v3N8eOJKbxXzrj9NsgpYxCPuAVlPWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJ0EujX+xkDn/0f/uFSq4cCKGnjMB8GA1UdIwQY MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1 LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIkjmlgG 4DFwBBZU49D9OQwNjdqWZfdgXN3qI+qXIJ48in6wbjiU4WkbeEaJpimQsSN7rri5 OvLJzyaywy5F20NM9KVuuMBgvgGTe2o2XoQYPtYjZ+qs7F0WT/JoZKOEH7Auyn5q og3S7pPnI/IiqcLUz6EkiFWUcFpuE5dmCF1rTDSmIGaZbOd2KFDbsVkgOhfXrtL+ tMwTDVZoqV8N/xaz7SRCigYotjtq5Rq2puYanasd4YJWJBdSy4GdxsYvjRZCNXxH lTLBJ0/ux0yDnPYH/cB/F6oWDlrLqEhJ2vGqQPcsNi2/ks9sV1Qk88fVlBy6Rbaq n3Fhaoeacs9Ljw== -----END CERTIFICATE-----Generated at Wed Dec 24 00:12:28 2025 by rpki-client