This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json) Hash identifier: ZrEH0bNb9bQD8k5aiihOosj6GyrfXwghMpLRNl9EGF0= Subject key identifier: B7:29:01:71:AE:38:09:05:53:9B:CC:C0:62:F8:FC:04:C9:61:0A:C5 Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72 Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272 Certificate serial: 019B435C2540310C4FB2E00D84223B29E11A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft Manifest number: 027B Signing time: Mon 22 Dec 2025 00:01:10 +0000 Manifest this update: Mon 22 Dec 2025 00:01:10 +0000 Manifest next update: Tue 23 Dec 2025 00:01:10 +0000 Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: /yxgmcAryLYXglsdL7hZkXZ31XTc4brJM/8JY+mak2E=) 2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=) 3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:25:40:31:0c:4f:b2:e0:0d:84:22:3b:29:e1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272 Validity Not Before: Dec 22 00:01:10 2025 GMT Not After : Dec 23 00:01:10 2025 GMT Subject: CN=b7290171ae380905539bccc062f8fc04c9610ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:b3:e6:43:2a:5c:36:7f:47:29:4e:ac:55: e5:a9:b0:4a:07:1f:84:4a:40:24:9e:87:35:81:8d: 5a:8b:21:9f:d3:7b:5b:59:cf:42:70:b4:33:a9:fd: 7c:b0:ed:c0:58:df:a2:24:dc:00:83:4e:19:1f:56: 10:6f:05:c7:85:18:46:c4:98:13:ea:66:80:a9:a8: 40:b4:60:13:90:48:a9:a3:02:4d:05:65:cd:15:0e: a8:af:c8:70:8c:07:35:09:c1:26:07:a5:9a:4e:40: c1:88:73:85:25:2a:5c:b4:b4:a1:e7:fc:8c:5b:28: 46:e9:91:de:61:54:9c:2c:ee:79:d3:22:7e:98:6c: e3:48:ef:6b:f8:18:fd:55:22:65:73:84:42:72:dd: 2f:36:92:90:8a:e7:3f:1c:57:98:57:da:1d:89:f9: c2:25:0d:f3:5d:29:dd:43:68:57:d3:84:20:5d:e3: 32:75:b0:0b:a5:73:24:c1:54:36:ef:53:a2:b5:94: 05:70:6b:64:72:2e:9a:f3:74:cc:ba:f7:90:49:a9: be:dd:33:68:c6:dc:41:29:62:84:e4:ca:df:a3:9e: 7b:77:82:8a:36:6f:57:99:7f:bb:56:78:0e:19:de: ee:72:f1:be:12:51:c3:21:b0:c8:c9:d1:7d:4d:31: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:29:01:71:AE:38:09:05:53:9B:CC:C0:62:F8:FC:04:C9:61:0A:C5 X509v3 Authority Key Identifier: keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:79:72:d6:4f:83:bd:3d:da:64:90:25:f6:90:3b:d3:d2:3b: f4:83:b6:93:6c:f7:82:fe:13:09:8a:a1:6f:6d:40:9f:d1:e8: a3:67:b5:0b:d3:4e:bf:94:92:6e:05:e2:c4:55:d1:ce:2b:63: b0:0f:5c:4a:a8:80:cb:9b:21:b5:ef:d9:b9:97:b5:17:65:31: c8:15:66:ee:b5:4d:15:56:9f:42:18:aa:f1:0d:09:3e:7f:c2: 23:d1:19:ec:fc:3a:7d:3c:06:09:50:ca:e3:6a:fd:be:9f:59: 84:9b:2c:40:f0:50:86:3c:7c:44:e7:72:89:35:ae:7e:ae:1d: cf:f6:78:21:26:41:8c:c9:43:91:de:f1:eb:87:2c:f3:fd:e4: 70:e2:ff:8c:6b:ae:37:e4:de:bf:b6:09:a3:d4:5e:0d:ef:b2: c7:48:67:35:a3:35:5e:d9:74:e9:aa:3b:9b:b6:72:f2:ee:a3: 41:ae:61:b4:81:c0:a0:75:e5:27:77:ab:29:f5:2a:1b:65:2d: b8:0a:49:0f:79:ca:ce:fc:1a:22:de:40:f8:7d:4b:5e:d1:e3: 0f:13:f3:2c:5a:86:42:7f:2e:0b:19:04:84:31:b6:5e:b6:18: 89:9e:f5:23:8b:9c:35:14:42:01:9f:c1:e2:70:75:9c:2b:89: 51:31:01:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXCVAMQxPsuANhCI7KeEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWVkN2E1ODE0N2FhNTE0YzhlNmRhZmJjYzVkODc1N2M3 ZDMyNzIwHhcNMjUxMjIyMDAwMTEwWhcNMjUxMjIzMDAwMTEwWjAzMTEwLwYDVQQD EyhiNzI5MDE3MWFlMzgwOTA1NTM5YmNjYzA2MmY4ZmMwNGM5NjEwYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wCz5kMqXDZ/RylOrFXlqbBKBx+E SkAknoc1gY1aiyGf03tbWc9CcLQzqf18sO3AWN+iJNwAg04ZH1YQbwXHhRhGxJgT 6maAqahAtGATkEipowJNBWXNFQ6or8hwjAc1CcEmB6WaTkDBiHOFJSpctLSh5/yM WyhG6ZHeYVScLO550yJ+mGzjSO9r+Bj9VSJlc4RCct0vNpKQiuc/HFeYV9odifnC JQ3zXSndQ2hX04QgXeMydbALpXMkwVQ271OitZQFcGtkci6a83TMuveQSam+3TNo xtxBKWKE5Mrfo557d4KKNm9XmX+7VngOGd7ucvG+ElHDIbDIydF9TTFp1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcpAXGuOAkFU5vMwGL4/ATJYQrFMB8GA1UdIwQY MBaAFNBe16WBR6pRTI5tr7zF2HV8fTJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEY3WHBZRkhxbEZNam0ydnZNWFlkWHg5TW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yNGZiZmMtZDkwMi00OWRiLTk3OGEt MzVhMjBmZjg5MjNlLzEvMEY3WHBZRkhxbEZNam0ydnZNWFlkWHg5TW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yNGZiZmMtZDkwMi00OWRiLTk3OGEtMzVhMjBmZjg5MjNl LzEvMEY3WHBZRkhxbEZNam0ydnZNWFlkWHg5TW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHly1k+D vT3aZJAl9pA709I79IO2k2z3gv4TCYqhb21An9Hoo2e1C9NOv5SSbgXixFXRzitj sA9cSqiAy5shte/ZuZe1F2UxyBVm7rVNFVafQhiq8Q0JPn/CI9EZ7Pw6fTwGCVDK 42r9vp9ZhJssQPBQhjx8ROdyiTWufq4dz/Z4ISZBjMlDkd7x64cs8/3kcOL/jGuu N+Tev7YJo9ReDe+yx0hnNaM1Xtl06ao7m7Zy8u6jQa5htIHAoHXlJ3erKfUqG2Ut uApJD3nKzvwaIt5A+H1LXtHjDxPzLFqGQn8uCxkEhDG2XrYYiZ71I4ucNRRCAZ/B 4nB1nCuJUTEB9g== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:02 2025 by rpki-client