This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json) Hash identifier: BtABzV5NoJIBqrs/wuqoYvFr0+qIdBRe5b0VgDTW4iQ= Subject key identifier: 82:32:CA:28:0A:D0:FF:81:9B:D3:9B:E9:78:1E:16:70:CE:9F:C4:DA Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20 Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920 Certificate serial: 019B4E84D43B9133F7A5CE7C27A6591D339A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft Manifest number: 1534 Signing time: Wed 24 Dec 2025 04:01:26 +0000 Manifest this update: Wed 24 Dec 2025 04:01:26 +0000 Manifest next update: Thu 25 Dec 2025 04:01:26 +0000 Files and hashes: 1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: c3WobOh26dZmvIFid4a71B1nanFnicoR/aMlvknVu1Q=) 2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:d4:3b:91:33:f7:a5:ce:7c:27:a6:59:1d:33:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920 Validity Not Before: Dec 24 04:01:26 2025 GMT Not After : Dec 25 04:01:26 2025 GMT Subject: CN=8232ca280ad0ff819bd39be9781e1670ce9fc4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:df:59:fd:aa:72:8b:c0:b3:19:bd:79:05: 89:3b:b4:85:b1:7f:07:69:fd:93:58:aa:6e:ab:c3: 1a:37:b5:ec:d0:c6:5a:86:6a:ba:32:cd:ea:53:af: a9:89:a6:15:a0:60:75:75:55:98:f7:3f:fa:98:c1: 25:f2:41:23:87:e9:89:88:f6:a0:ea:67:01:4d:b7: 96:1c:57:6a:5d:8c:0b:6e:d6:ef:bd:06:fa:63:b0: f0:32:f0:99:d3:58:f8:b8:86:be:07:65:a3:f3:90: b1:37:b0:1f:a0:f8:5e:11:0a:8e:b6:2c:26:a0:25: 37:fd:83:d7:88:3c:38:07:a8:8a:07:8e:23:e1:24: b8:1b:9a:92:71:03:88:72:e7:c7:78:9d:65:ba:52: 4f:f8:08:8e:b9:1f:8b:45:9b:5c:ee:53:99:e1:87: 0a:47:27:7d:ad:d0:26:0f:86:6a:d2:df:5a:28:c2: e9:ed:42:4d:c3:23:27:64:b6:a4:25:22:e3:0c:30: 39:20:07:eb:52:0a:d6:b7:ed:3f:fb:75:ee:f5:e7: 73:d6:3d:d6:6f:19:bd:d7:fc:07:a3:3c:94:7f:cc: 3d:f1:22:50:5c:03:08:dd:6b:83:2f:21:9f:20:d1: c4:a2:eb:d4:b6:50:83:29:3f:67:cb:86:fe:1b:a5: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:CA:28:0A:D0:FF:81:9B:D3:9B:E9:78:1E:16:70:CE:9F:C4:DA X509v3 Authority Key Identifier: keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e2:79:19:6e:66:54:79:09:81:d3:7b:9c:c0:ea:98:07:c0: 08:60:3a:e8:de:d9:74:04:69:6d:26:61:b4:fb:e8:06:64:25: 47:8d:4b:2a:d2:72:9f:95:1b:03:b8:d5:2d:39:1f:60:14:3b: d3:0d:7e:02:63:bb:51:37:fe:76:05:f8:b2:f0:ee:39:0e:12: 7f:22:1a:62:c4:a4:bd:20:bc:dd:98:f7:f7:a8:66:01:3a:c9: 60:63:82:18:c5:fd:a8:f9:f4:34:d3:d7:ad:12:1b:02:f7:23: 33:15:bf:74:93:80:94:d7:f1:d5:00:dc:d0:a8:74:9c:dc:ef: bd:36:d3:db:89:f8:ba:1e:8b:d6:79:00:ed:44:1a:c0:2d:07: d1:d9:e5:2f:a1:7b:67:fb:01:89:e1:38:76:a1:8a:13:74:cc: b0:10:a9:c9:5e:0c:2c:1a:fa:0d:3a:05:0f:d0:a0:ba:0c:b9: 3c:08:03:7e:91:07:66:5d:d5:89:09:1b:4f:95:66:43:cd:a3: d8:19:c1:af:ae:cf:82:eb:eb:4c:a9:8d:85:a4:60:56:0f:85: 21:8e:a1:36:59:b1:a7:b6:c8:b0:10:72:d3:d1:4b:5d:97:16: cf:a0:32:ef:06:7c:78:bc:66:bc:76:7d:28:9b:6b:2a:07:3e: d5:d1:84:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhNQ7kTP3pc58J6ZZHTOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGE5NTMyNzE4N2MzMDg4MGY1YmJmM2MzNzI4OWVlMzEx YzU5MjAwHhcNMjUxMjI0MDQwMTI2WhcNMjUxMjI1MDQwMTI2WjAzMTEwLwYDVQQD Eyg4MjMyY2EyODBhZDBmZjgxOWJkMzliZTk3ODFlMTY3MGNlOWZjNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdvfWf2qcovAsxm9eQWJO7SFsX8H af2TWKpuq8MaN7Xs0MZahmq6Ms3qU6+piaYVoGB1dVWY9z/6mMEl8kEjh+mJiPag 6mcBTbeWHFdqXYwLbtbvvQb6Y7DwMvCZ01j4uIa+B2Wj85CxN7AfoPheEQqOtiwm oCU3/YPXiDw4B6iKB44j4SS4G5qScQOIcufHeJ1lulJP+AiOuR+LRZtc7lOZ4YcK Ryd9rdAmD4Zq0t9aKMLp7UJNwyMnZLakJSLjDDA5IAfrUgrWt+0/+3Xu9edz1j3W bxm91/wHozyUf8w98SJQXAMI3WuDLyGfINHEouvUtlCDKT9ny4b+G6VAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIyyigK0P+Bm9Ob6XgeFnDOn8TaMB8GA1UdIwQY MBaAFO6KlTJxh8MIgPW788Nyie4xHFkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYt NTQ3NTEzNWYxOTA1LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYtNTQ3NTEzNWYxOTA1 LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOJ5GW5m VHkJgdN7nMDqmAfACGA66N7ZdARpbSZhtPvoBmQlR41LKtJyn5UbA7jVLTkfYBQ7 0w1+AmO7UTf+dgX4svDuOQ4SfyIaYsSkvSC83Zj396hmATrJYGOCGMX9qPn0NNPX rRIbAvcjMxW/dJOAlNfx1QDc0Kh0nNzvvTbT24n4uh6L1nkA7UQawC0H0dnlL6F7 Z/sBieE4dqGKE3TMsBCpyV4MLBr6DToFD9Cgugy5PAgDfpEHZl3ViQkbT5VmQ82j 2BnBr67PguvrTKmNhaRgVg+FIY6hNlmxp7bIsBBy09FLXZcWz6Ay7wZ8eLxmvHZ9 KJtrKgc+1dGEBQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:21 2025 by rpki-client