This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json) Hash identifier: 3msSbdM52ZQs9n6yBV5jWGD907B8who8PtqXtjmwv/4= Subject key identifier: 8A:AE:DA:66:C6:E8:DA:E9:13:24:51:F4:6C:19:9C:55:FC:2E:82:90 Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Certificate serial: 019B5D52A8CD82087D4226521AF15C74AD22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 01:00:56 +0000 Manifest this update: Sat 27 Dec 2025 01:00:56 +0000 Manifest next update: Sun 28 Dec 2025 01:00:56 +0000 Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: L+bU3kGT+xwpy0d5rUkpI/V3/S6YCo5LCbnmPYgr3Os=) 2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:a8:cd:82:08:7d:42:26:52:1a:f1:5c:74:ad:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Validity Not Before: Dec 27 01:00:56 2025 GMT Not After : Dec 28 01:00:56 2025 GMT Subject: CN=8aaeda66c6e8dae9132451f46c199c55fc2e8290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:0d:5d:0f:21:04:0e:25:7e:f6:b7:ed:bd: 56:64:15:8b:b9:f7:8a:c3:bc:3f:4a:33:6e:98:41: 8b:ba:aa:07:66:92:8e:51:6a:4f:47:8a:f4:7c:fe: d1:7d:4d:67:ba:5a:85:6d:07:bb:d4:76:3c:5c:5e: 44:07:0c:a6:10:10:c5:a4:40:2c:62:59:74:1b:1a: a6:1a:e3:fd:bb:f6:67:43:80:d1:2a:99:c9:22:de: 0f:da:03:a4:fb:0a:00:94:73:0c:ff:31:ea:ad:dd: 21:24:db:fc:84:8e:cb:88:b5:ca:4d:99:24:47:d7: fd:ee:a9:4d:bf:79:9c:63:34:4f:45:5e:aa:17:0e: 27:6e:6b:f5:91:d6:f2:ce:4d:9f:f8:64:b9:e5:e0: 85:c7:a4:7a:46:10:d8:6c:28:59:b7:fc:2d:05:43: 11:e1:94:7e:b4:f5:0f:f8:4e:c5:c6:26:4c:0f:7d: 51:0e:7c:50:da:5c:f9:76:da:ad:bf:35:f6:f7:87: 44:a1:55:fa:34:ce:0f:95:19:93:d6:42:4a:22:cd: 81:99:36:63:7d:c6:6a:b4:2d:45:3c:cd:49:ea:c3: 82:6f:bf:57:0d:0a:d1:14:a6:f0:03:7e:43:76:a8: 75:5c:b3:67:53:b5:82:eb:75:ef:57:b6:45:93:be: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:DA:66:C6:E8:DA:E9:13:24:51:F4:6C:19:9C:55:FC:2E:82:90 X509v3 Authority Key Identifier: keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6b:cc:4a:8e:da:6b:a0:dd:ae:5c:75:ef:62:d4:35:8f:31: 44:71:93:fc:a4:81:3e:cc:6c:02:71:b4:36:13:33:b7:d4:e8: af:5c:22:dc:3a:46:bd:3f:80:79:d2:d3:23:f5:b2:7d:26:62: d8:29:14:56:62:b3:2c:ed:24:21:21:6c:81:26:e8:b1:9f:c1: d7:70:78:26:bd:45:ac:16:23:ed:1c:2d:f5:ec:76:c9:e9:e4: a9:ff:51:45:c8:b1:d3:c9:52:bb:7e:75:0f:41:2d:a0:b2:d0: e6:20:cb:75:d5:e7:fb:ba:f3:e5:9e:6a:c6:89:e9:bc:c2:f1: 00:fc:6d:02:3e:78:fc:fa:e9:b9:f5:b4:db:31:58:30:ac:96: ba:35:49:69:00:e4:f5:84:13:f0:1d:23:df:5e:93:4a:6a:01: d5:26:6b:05:56:6c:5a:97:ed:43:4f:da:f3:a8:5e:91:6f:53: 34:bd:74:f0:70:39:90:49:c1:f3:99:21:9c:ca:f3:a1:54:ab: e4:bb:aa:10:c6:ba:83:49:91:ca:ca:48:87:b2:55:a0:f3:c7: c2:8a:26:ab:54:d3:65:f5:ad:19:d7:7b:ef:b7:17:46:7b:d2: e5:9d:4f:fc:b0:1b:38:21:2b:6b:f3:e6:32:e9:bc:ed:e5:28: ef:49:2f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUqjNggh9QiZSGvFcdK0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5 NmYxOTcwHhcNMjUxMjI3MDEwMDU2WhcNMjUxMjI4MDEwMDU2WjAzMTEwLwYDVQQD Eyg4YWFlZGE2NmM2ZThkYWU5MTMyNDUxZjQ2YzE5OWM1NWZjMmU4MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF4NXQ8hBA4lfva37b1WZBWLufeK w7w/SjNumEGLuqoHZpKOUWpPR4r0fP7RfU1nulqFbQe71HY8XF5EBwymEBDFpEAs Yll0GxqmGuP9u/ZnQ4DRKpnJIt4P2gOk+woAlHMM/zHqrd0hJNv8hI7LiLXKTZkk R9f97qlNv3mcYzRPRV6qFw4nbmv1kdbyzk2f+GS55eCFx6R6RhDYbChZt/wtBUMR 4ZR+tPUP+E7FxiZMD31RDnxQ2lz5dtqtvzX294dEoVX6NM4PlRmT1kJKIs2BmTZj fcZqtC1FPM1J6sOCb79XDQrRFKbwA35Ddqh1XLNnU7WC63XvV7ZFk77uGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqu2mbG6NrpEyRR9GwZnFX8LoKQMB8GA1UdIwQY MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1 LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGvMSo7a a6Ddrlx172LUNY8xRHGT/KSBPsxsAnG0NhMzt9Tor1wi3DpGvT+AedLTI/WyfSZi 2CkUVmKzLO0kISFsgSbosZ/B13B4Jr1FrBYj7Rwt9ex2yenkqf9RRcix08lSu351 D0EtoLLQ5iDLddXn+7rz5Z5qxonpvMLxAPxtAj54/PrpufW02zFYMKyWujVJaQDk 9YQT8B0j316TSmoB1SZrBVZsWpftQ0/a86hekW9TNL108HA5kEnB85khnMrzoVSr 5LuqEMa6g0mRyspIh7JVoPPHwoomq1TTZfWtGdd777cXRnvS5Z1P/LAbOCEra/Pm Mum87eUo70kvJQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:46:45 2025 by rpki-client