This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json) Hash identifier: WlGHTYwuFIbkrSLI9VG6VcK5mDXVgii/+jLHAT4WM+8= Subject key identifier: 1F:69:BE:10:75:0F:2C:F5:2F:BB:2A:91:DA:66:A3:A1:BD:FB:AC:8C Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Certificate serial: 019B5D5341E747D363586006C946BD00071E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft Manifest number: 14AA Signing time: Sat 27 Dec 2025 01:01:35 +0000 Manifest this update: Sat 27 Dec 2025 01:01:35 +0000 Manifest next update: Sun 28 Dec 2025 01:01:35 +0000 Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=) 2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: Jg4pQHz77uBWV8BJVITTKJ2wJJjOawKosSTYZtqNn/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:41:e7:47:d3:63:58:60:06:c9:46:bd:00:07:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Validity Not Before: Dec 27 01:01:35 2025 GMT Not After : Dec 28 01:01:35 2025 GMT Subject: CN=1f69be10750f2cf52fbb2a91da66a3a1bdfbac8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:4e:42:3b:2a:70:64:a5:0a:bd:ca:4e:af: 3e:f9:75:9f:cb:90:cb:af:07:42:de:1a:77:50:67: de:f5:c7:56:8d:a7:e6:db:6f:3b:1b:93:a4:23:02: 97:23:1d:4f:09:6f:d2:80:6f:b5:5a:fe:a2:e4:45: 98:1b:6c:6a:d5:2d:4e:a1:44:c7:5a:4d:58:b5:0f: 4f:7c:6a:e7:42:e7:82:26:55:52:57:d8:2f:3c:f5: f3:4d:4a:98:d6:ea:0f:ac:cf:3b:d7:09:f5:6c:c8: 92:44:1c:02:19:fe:18:ee:1a:04:f3:83:c5:dd:9b: d4:48:24:e6:e8:f1:c0:d8:fa:fe:d1:64:29:c2:b1: 18:fa:df:61:53:35:b6:4a:83:21:ee:62:a2:34:fb: 2b:04:b3:5b:ce:0c:9e:08:21:7c:55:f5:fd:8f:da: c7:62:ce:48:ad:7f:ec:12:8a:e1:0a:85:cb:e1:12: 4c:33:e6:13:a1:65:41:92:f5:60:c7:c3:53:55:fa: 92:b5:0b:99:df:59:37:e9:19:9d:4a:42:0f:47:86: e5:21:19:07:26:95:48:0f:2d:56:01:00:fe:ae:39: e2:5a:58:e1:5b:5f:11:22:e2:6e:18:9d:92:b9:5e: 3b:52:a2:3e:90:b1:9d:f8:d3:3a:0f:26:af:12:dc: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:BE:10:75:0F:2C:F5:2F:BB:2A:91:DA:66:A3:A1:BD:FB:AC:8C X509v3 Authority Key Identifier: keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:56:71:b8:ba:56:e7:b6:5a:12:b3:2e:df:af:e2:1e:11:59: fe:60:1e:ed:d5:42:71:f1:7e:82:6b:31:7a:7e:39:cb:68:dc: 98:42:37:df:11:a6:0c:48:2c:9b:b9:c5:4e:48:24:55:96:7b: c8:d8:1a:81:9b:e5:91:6e:58:31:c7:c0:8f:59:22:f4:4b:c9: 07:63:c9:7f:41:4c:a5:6d:be:99:e9:de:11:b5:dd:51:9b:fa: 3d:aa:10:78:06:e3:4d:ef:82:b6:d1:4a:e4:aa:a7:1f:aa:7a: 53:21:3c:90:cc:01:b7:37:d4:ef:4b:cc:f9:78:89:a7:d0:d2: 8f:6f:03:37:63:5c:da:44:ce:a1:1b:e4:e6:9c:92:da:01:8c: 58:a9:ea:c5:d8:f0:f8:49:41:cc:52:84:18:b6:a0:86:5c:81: d0:50:de:c3:21:4d:f0:3d:15:93:18:36:13:e7:4d:7c:3d:1b: 75:1d:1d:4f:54:60:63:1f:d8:dd:37:85:6e:6b:0b:66:e4:0d: 0a:0b:05:a4:40:a3:04:0c:36:c3:ea:39:a8:2b:8d:cf:9b:16: af:6d:fd:c6:70:cb:dd:58:ec:1b:07:82:dd:d9:17:a6:ad:43: 53:8f:a7:c3:9d:00:39:1c:74:16:ee:14:6c:6b:03:3a:59:a3: 59:36:4e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU0HnR9NjWGAGyUa9AAceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4 NzdiNmYwHhcNMjUxMjI3MDEwMTM1WhcNMjUxMjI4MDEwMTM1WjAzMTEwLwYDVQQD EygxZjY5YmUxMDc1MGYyY2Y1MmZiYjJhOTFkYTY2YTNhMWJkZmJhYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoVOQjsqcGSlCr3KTq8++XWfy5DL rwdC3hp3UGfe9cdWjafm2287G5OkIwKXIx1PCW/SgG+1Wv6i5EWYG2xq1S1OoUTH Wk1YtQ9PfGrnQueCJlVSV9gvPPXzTUqY1uoPrM871wn1bMiSRBwCGf4Y7hoE84PF 3ZvUSCTm6PHA2Pr+0WQpwrEY+t9hUzW2SoMh7mKiNPsrBLNbzgyeCCF8VfX9j9rH Ys5IrX/sEorhCoXL4RJMM+YToWVBkvVgx8NTVfqStQuZ31k36RmdSkIPR4blIRkH JpVIDy1WAQD+rjniWljhW18RIuJuGJ2SuV47UqI+kLGd+NM6DyavEty6tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9pvhB1Dyz1L7sqkdpmo6G9+6yMMB8GA1UdIwQY MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFZxuLpW 57ZaErMu36/iHhFZ/mAe7dVCcfF+gmsxen45y2jcmEI33xGmDEgsm7nFTkgkVZZ7 yNgagZvlkW5YMcfAj1ki9EvJB2PJf0FMpW2+meneEbXdUZv6PaoQeAbjTe+CttFK 5KqnH6p6UyE8kMwBtzfU70vM+XiJp9DSj28DN2Nc2kTOoRvk5pyS2gGMWKnqxdjw +ElBzFKEGLaghlyB0FDewyFN8D0Vkxg2E+dNfD0bdR0dT1RgYx/Y3TeFbmsLZuQN CgsFpECjBAw2w+o5qCuNz5sWr239xnDL3VjsGweC3dkXpq1DU4+nw50AORx0Fu4U bGsDOlmjWTZOVw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:36:09 2025 by rpki-client