This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json) Hash identifier: CpMNU6nFHkklsr8V3Tp6KKlFZJdV9A1Pw8OzxdccMQ4= Subject key identifier: 7C:2D:2C:11:82:C0:3E:02:35:31:77:72:CD:07:50:69:B8:91:CF:8C Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69 Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69 Certificate serial: 019B3D59995D303C98EC9BD92FB7321CC723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft Manifest number: 0FEE Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: MTaNghyaoUtwDGIQ8/RelyCY496lSXmhw19D28ymmHk=) 2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:99:5d:30:3c:98:ec:9b:d9:2f:b7:32:1c:c7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69 Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=7c2d2c1182c03e0235317772cd075069b891cf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:ff:d4:bb:19:b8:9f:8b:24:5c:32:2e:28: 7c:80:ac:71:4a:88:de:d5:63:65:bf:06:3e:b3:ba: 94:85:bc:ec:e0:12:6d:20:14:a1:82:76:50:a1:e8: 45:36:c4:85:37:e7:e7:b4:29:0e:3a:3f:1c:31:8d: d0:5a:98:4f:22:c2:0a:83:2e:83:d1:c1:d1:12:03: 08:95:12:ab:82:83:cf:86:25:20:2e:b8:03:ef:87: 96:9a:eb:59:6c:b4:90:c5:d3:72:1b:13:c3:51:4b: c2:5b:09:ee:41:88:9b:7b:42:ef:50:7e:74:9b:46: 3f:1e:ec:3b:40:79:ab:f7:48:4a:44:f4:e3:52:b6: 0d:5b:70:3d:2f:06:f3:75:dc:aa:13:f0:1f:dc:0d: 17:7e:d6:3b:2f:de:d6:c3:8d:7f:fc:c6:54:9e:51: 63:94:37:27:95:22:17:b5:a9:3a:60:b5:88:0a:b9: cb:1d:06:32:95:84:38:29:15:8e:2e:80:e3:68:a4: 49:ec:b9:af:49:86:ad:8b:33:55:b8:66:42:62:c5: f8:ef:41:af:71:ca:61:26:7b:a0:2b:1b:39:f8:d2: d7:80:0e:42:a6:cb:05:72:62:cf:ed:eb:e9:01:b9: d1:41:d9:a9:69:32:52:f7:42:9e:d5:47:3a:69:fb: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2D:2C:11:82:C0:3E:02:35:31:77:72:CD:07:50:69:B8:91:CF:8C X509v3 Authority Key Identifier: keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:17:a6:68:cf:09:0d:06:5e:0f:82:ae:e0:fa:e0:82:e6:c5: de:cb:cc:7e:85:95:06:fa:55:3a:28:27:86:a4:e1:62:58:c7: 3b:b5:c4:cf:de:cf:9b:15:63:53:60:f1:67:7a:b6:45:ff:a7: b4:08:60:1a:d1:6c:df:67:3f:6e:02:56:24:f9:c5:9e:a0:d4: fd:38:b1:37:7b:3a:d6:1d:84:8c:3d:f8:76:4d:f2:d0:86:3a: c9:f6:d7:c6:60:95:0d:67:2d:44:08:02:6e:69:9d:95:12:b4: 0e:fc:ab:0b:76:e1:7a:78:9a:61:ad:ae:51:1a:19:f1:f0:8c: b1:31:66:96:c5:aa:cb:f0:85:a2:26:fa:cd:75:e5:e7:fe:36: 10:ac:46:14:93:48:b9:ed:3c:c6:2c:99:b1:b4:9b:a1:d2:27: 9c:b9:24:a3:97:67:41:d9:6b:eb:8c:b8:64:4f:ed:fc:4d:fc: c8:c8:7a:07:75:db:35:e2:5c:c6:26:46:97:2f:9d:d2:b9:da: a7:35:a1:bb:03:e3:5e:11:54:3b:b6:6e:c0:24:d0:b4:c7:51: 96:86:f2:7c:5d:d1:a9:71:2c:27:43:bd:ff:8c:13:8a:31:31: 15:d6:c3:e7:40:dc:95:15:09:7b:74:d8:c1:16:7e:80:9e:96: 3a:a2:af:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZldMDyY7JvZL7cyHMcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZWExNzdiY2MyYjBlZjY0Y2FiNjA0ZTZlNjQyN2IxYWRl MGJmNjkwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD Eyg3YzJkMmMxMTgyYzAzZTAyMzUzMTc3NzJjZDA3NTA2OWI4OTFjZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt93/1LsZuJ+LJFwyLih8gKxxSoje 1WNlvwY+s7qUhbzs4BJtIBShgnZQoehFNsSFN+fntCkOOj8cMY3QWphPIsIKgy6D 0cHREgMIlRKrgoPPhiUgLrgD74eWmutZbLSQxdNyGxPDUUvCWwnuQYibe0LvUH50 m0Y/Huw7QHmr90hKRPTjUrYNW3A9LwbzddyqE/Af3A0XftY7L97Ww41//MZUnlFj lDcnlSIXtak6YLWICrnLHQYylYQ4KRWOLoDjaKRJ7LmvSYatizNVuGZCYsX470Gv ccphJnugKxs5+NLXgA5CpssFcmLP7evpAbnRQdmpaTJS90Ke1Uc6aft7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwtLBGCwD4CNTF3cs0HUGm4kc+MMB8GA1UdIwQY MBaAFO/qF3vMKw72TKtgTm5kJ7Gt4L9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZWYwOWItODAyYS00NWY3LTllN2Yt MDZkNTMwY2VmZDhhLzEvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ZWYwOWItODAyYS00NWY3LTllN2YtMDZkNTMwY2VmZDhh LzEvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhemaM8J DQZeD4Ku4PrggubF3svMfoWVBvpVOignhqThYljHO7XEz97PmxVjU2DxZ3q2Rf+n tAhgGtFs32c/bgJWJPnFnqDU/TixN3s61h2EjD34dk3y0IY6yfbXxmCVDWctRAgC bmmdlRK0DvyrC3bheniaYa2uURoZ8fCMsTFmlsWqy/CFoib6zXXl5/42EKxGFJNI ue08xiyZsbSbodInnLkko5dnQdlr64y4ZE/t/E38yMh6B3XbNeJcxiZGly+d0rna pzWhuwPjXhFUO7ZuwCTQtMdRlobyfF3RqXEsJ0O9/4wTijExFdbD50DclRUJe3TY wRZ+gJ6WOqKvFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:35 2025 by rpki-client