This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json) Hash identifier: XS4x8cNBIR3phoMznJ/5V68VDWQzuwPCf7/A3b8YY2s= Subject key identifier: 05:BF:1F:47:AF:87:58:30:6C:42:AC:BD:DF:46:00:C6:C8:60:67:5D Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50 Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250 Certificate serial: 019B454A7B12104D65D4421F0F77406C57CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft Manifest number: 1124 Signing time: Mon 22 Dec 2025 09:01:07 +0000 Manifest this update: Mon 22 Dec 2025 09:01:07 +0000 Manifest next update: Tue 23 Dec 2025 09:01:07 +0000 Files and hashes: 1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: pVEMN+VA7PDHUYP2azDU5PoWzARIw/BjWlLMfQQuQy8=) 2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:7b:12:10:4d:65:d4:42:1f:0f:77:40:6c:57:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250 Validity Not Before: Dec 22 09:01:07 2025 GMT Not After : Dec 23 09:01:07 2025 GMT Subject: CN=05bf1f47af8758306c42acbddf4600c6c860675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:f0:fa:4c:0f:02:29:f1:2d:bd:39:7e:56: d8:54:08:23:44:10:2f:73:5e:08:6b:97:77:c0:9c: 20:8f:8b:bc:e3:b3:a8:1a:60:97:d0:00:79:ed:b9: d9:bc:fb:8e:89:d8:2c:bf:d2:a4:21:9a:a7:89:6a: fb:20:e4:12:04:dd:34:a1:0c:e2:75:79:3b:15:09: 29:fd:16:91:f0:55:79:f9:b6:ad:78:f8:f2:70:b3: 93:15:f6:ab:72:a0:52:3c:ee:a0:55:1a:fa:26:1e: b9:7d:4f:ec:0b:c3:c4:4a:11:38:2a:10:08:10:54: c2:75:62:5e:76:91:8a:3e:8d:e4:40:30:7d:3a:97: 89:40:dd:80:40:92:5c:b9:ba:82:f6:ba:d0:3b:03: 2e:2a:e4:98:f5:47:1c:14:c8:ee:5c:1b:f8:f1:62: 98:b5:57:24:34:03:aa:c3:49:fd:08:44:e9:98:f8: 28:af:f9:b0:f2:c5:96:86:9a:7b:4d:ba:c5:dd:17: d1:a3:36:71:03:f8:b4:b5:4d:9e:70:85:99:51:36: 72:96:a1:8d:28:96:b0:9e:e9:86:0b:ea:9b:ab:ff: 57:18:0f:67:02:61:5e:4d:39:c6:e9:f2:80:a4:31: e8:8c:56:cf:ea:1f:69:cd:c8:14:05:e0:c3:d3:84: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BF:1F:47:AF:87:58:30:6C:42:AC:BD:DF:46:00:C6:C8:60:67:5D X509v3 Authority Key Identifier: keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e5:ea:26:bd:42:fe:2e:3a:f4:75:f2:3b:45:75:10:51:9d: a1:e3:f0:a5:a1:00:f2:8d:85:73:9c:5a:09:4d:70:7a:00:c2: 41:59:7e:80:62:c8:c3:53:4f:a6:40:24:d0:48:b2:38:69:b8: 4e:61:41:8d:0c:b7:60:89:be:ad:3f:f4:64:28:6b:49:15:5a: 26:62:8b:32:32:97:f1:12:f4:ed:25:87:01:54:02:c9:af:10: 2f:2b:5b:52:e8:19:b0:51:f3:e7:84:b7:cb:b5:f1:41:45:ae: cb:a8:0b:7d:66:25:e2:9d:58:65:ed:a1:2d:36:8d:10:fc:8b: f8:f7:5a:9f:33:dd:84:18:ab:c3:34:a0:ce:a8:77:f0:05:d9: 0c:8d:2e:8c:a5:79:92:c9:37:ff:6f:42:8b:ba:1d:b5:cb:b9: e8:01:77:4e:b6:f8:b6:0c:ad:39:3b:5c:81:46:50:14:85:4a: 99:8b:85:7c:d4:5c:ab:f2:a3:e6:27:73:1d:27:c5:2a:55:5d: 28:f6:af:a1:a9:41:8a:75:91:bd:ea:0e:76:64:18:43:48:1c: d5:60:5f:d3:95:87:50:28:74:f9:a4:35:bc:a8:f1:02:dc:99: c5:33:59:40:6c:43:f3:fe:66:a1:47:a6:3e:af:d0:64:96:a6: 51:4f:8a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSnsSEE1l1EIfD3dAbFfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTVlZDQ1N2Y3NDM4MmE4ZWQwYjdhZjY4NmUxYWRiMjkz NTIyNTAwHhcNMjUxMjIyMDkwMTA3WhcNMjUxMjIzMDkwMTA3WjAzMTEwLwYDVQQD EygwNWJmMWY0N2FmODc1ODMwNmM0MmFjYmRkZjQ2MDBjNmM4NjA2NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKnw+kwPAinxLb05flbYVAgjRBAv c14Ia5d3wJwgj4u847OoGmCX0AB57bnZvPuOidgsv9KkIZqniWr7IOQSBN00oQzi dXk7FQkp/RaR8FV5+batePjycLOTFfarcqBSPO6gVRr6Jh65fU/sC8PEShE4KhAI EFTCdWJedpGKPo3kQDB9OpeJQN2AQJJcubqC9rrQOwMuKuSY9UccFMjuXBv48WKY tVckNAOqw0n9CETpmPgor/mw8sWWhpp7TbrF3RfRozZxA/i0tU2ecIWZUTZylqGN KJawnumGC+qbq/9XGA9nAmFeTTnG6fKApDHojFbP6h9pzcgUBeDD04QlPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW/H0evh1gwbEKsvd9GAMbIYGddMB8GA1UdIwQY MBaAFO3l7UV/dDgqjtC3r2huGtspNSJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMt NWE1ODM4ODAwMjhhLzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMtNWE1ODM4ODAwMjhh LzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuXqJr1C /i469HXyO0V1EFGdoePwpaEA8o2Fc5xaCU1wegDCQVl+gGLIw1NPpkAk0EiyOGm4 TmFBjQy3YIm+rT/0ZChrSRVaJmKLMjKX8RL07SWHAVQCya8QLytbUugZsFHz54S3 y7XxQUWuy6gLfWYl4p1YZe2hLTaNEPyL+PdanzPdhBirwzSgzqh38AXZDI0ujKV5 ksk3/29Ci7odtcu56AF3Trb4tgytOTtcgUZQFIVKmYuFfNRcq/Kj5idzHSfFKlVd KPavoalBinWRveoOdmQYQ0gc1WBf05WHUCh0+aQ1vKjxAtyZxTNZQGxD8/5moUem Pq/QZJamUU+K8w== -----END CERTIFICATE-----Generated at Mon Dec 22 17:17:16 2025 by rpki-client