This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json) Hash identifier: RPeV6jnlMaJ+OJw8qRjJP2fWUPkeYAMUvPmAansLhVE= Subject key identifier: 03:56:9D:2D:15:49:E5:1E:47:6E:8B:18:30:37:FE:8F:94:F8:CE:6B Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d Certificate serial: 019B711037EAA70EA3557C1D976A18851C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft Manifest number: 0784 Signing time: Tue 30 Dec 2025 21:00:46 +0000 Manifest this update: Tue 30 Dec 2025 21:00:46 +0000 Manifest next update: Wed 31 Dec 2025 21:00:46 +0000 Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=) 2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: OMZSqi7ftW2lrM4Q5TPgf2xGsGNKoEvlN+iHr1EKCxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:37:ea:a7:0e:a3:55:7c:1d:97:6a:18:85:1c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d Validity Not Before: Dec 30 21:00:46 2025 GMT Not After : Dec 31 21:00:46 2025 GMT Subject: CN=03569d2d1549e51e476e8b183037fe8f94f8ce6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:c9:42:07:ab:e9:bc:6a:0d:16:f6:f7:61: 84:69:38:d7:f2:f0:2e:16:26:ed:f9:33:c9:67:65: 59:b1:cb:80:13:77:4a:7a:ae:8b:bd:a0:0d:75:19: 3b:32:06:89:7b:f7:b1:fa:87:10:bd:3e:56:6e:d1: 9c:f6:1f:32:88:48:74:8f:ea:0a:ed:59:ff:e7:70: 9f:e6:a3:db:f5:4d:b3:2b:d8:53:90:be:ab:43:2f: bb:67:b3:a3:9c:66:da:84:7b:27:8b:1b:e6:81:e0: f6:74:ff:79:26:1c:a1:81:cc:9e:99:b0:30:e3:bb: c3:de:48:1c:04:46:67:27:dc:7e:d1:ba:8e:04:d1: 7d:c1:4b:d5:38:f6:91:0b:49:7e:d1:d2:c4:7a:03: 6f:2a:6d:d7:04:e8:45:bd:23:b9:d3:78:d5:5b:83: 94:3d:6d:a3:53:a3:c4:a4:f5:96:77:62:f8:3f:d7: 78:70:86:ff:ad:9d:49:47:9e:03:ee:cc:74:1d:bd: c3:9a:96:f6:78:04:dd:a6:fe:9e:ac:0e:af:d0:3c: f8:a5:77:a6:b3:74:2c:2f:22:93:d5:b2:cd:36:51: a7:06:e1:94:c9:ef:89:fa:ef:19:c9:f1:d0:17:ac: cf:d6:70:f8:05:7b:dd:63:63:87:c5:e1:29:b5:c5: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:56:9D:2D:15:49:E5:1E:47:6E:8B:18:30:37:FE:8F:94:F8:CE:6B X509v3 Authority Key Identifier: keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f0:37:38:7a:40:11:22:b8:3a:27:9b:15:44:c6:31:74:d7: 81:9e:ad:b3:e2:4f:cc:c6:66:1f:7f:db:a9:06:2d:aa:d0:d7: e6:2b:58:16:93:32:63:f3:2e:d2:65:ce:7d:06:1e:81:c5:15: cd:6e:b6:d8:0e:62:76:19:e7:fc:f7:1d:0b:f5:a9:85:36:55: 78:8d:c2:a1:4e:98:21:03:c6:46:db:e0:6c:f0:14:e6:aa:7c: 7c:e3:46:f7:5d:15:42:b1:7a:cc:cd:81:74:57:73:44:ef:2d: b6:d7:ff:65:64:ef:cf:18:ab:bd:02:fd:d5:2f:e9:47:a0:92: ab:44:b7:b2:c3:05:28:a4:e7:42:58:ce:3f:df:ee:bf:38:7f: ef:43:d9:4c:ab:b6:5d:3d:3e:02:ba:bb:8a:3a:b5:2d:55:95: 9f:ab:a1:bf:a8:57:13:86:8b:35:63:7f:e4:12:ff:dc:df:fc: ac:a1:35:35:62:7f:45:2f:8a:08:b0:ec:9f:75:a4:49:09:87: 14:ee:ef:67:6e:85:59:62:b8:37:21:e0:85:a5:bc:68:ac:d6: d8:3f:70:0a:68:f4:f1:46:4f:57:a2:ee:0b:62:a6:5c:f4:67: 59:15:a2:df:e4:b3:39:f0:1e:cf:1a:c9:45:dd:71:0f:5d:c3: b8:de:0b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEDfqpw6jVXwdl2oYhRw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYjhiNjEyNzIxZDRkNGMyZDA3Y2JmZTJlNDk1ZTk4NmEw ZjAyNmQwHhcNMjUxMjMwMjEwMDQ2WhcNMjUxMjMxMjEwMDQ2WjAzMTEwLwYDVQQD EygwMzU2OWQyZDE1NDllNTFlNDc2ZThiMTgzMDM3ZmU4Zjk0ZjhjZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoDJQger6bxqDRb292GEaTjX8vAu Fibt+TPJZ2VZscuAE3dKeq6LvaANdRk7MgaJe/ex+ocQvT5WbtGc9h8yiEh0j+oK 7Vn/53Cf5qPb9U2zK9hTkL6rQy+7Z7OjnGbahHsnixvmgeD2dP95JhyhgcyembAw 47vD3kgcBEZnJ9x+0bqOBNF9wUvVOPaRC0l+0dLEegNvKm3XBOhFvSO503jVW4OU PW2jU6PEpPWWd2L4P9d4cIb/rZ1JR54D7sx0Hb3Dmpb2eATdpv6erA6v0Dz4pXem s3QsLyKT1bLNNlGnBuGUye+J+u8ZyfHQF6zP1nD4BXvdY2OHxeEptcXzdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANWnS0VSeUeR26LGDA3/o+U+M5rMB8GA1UdIwQY MBaAFIu4thJyHU1MLQfL/i5JXphqDwJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmIt YmI0OTNjNDZkZjNlLzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmItYmI0OTNjNDZkZjNl LzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/A3OHpA ESK4OiebFUTGMXTXgZ6ts+JPzMZmH3/bqQYtqtDX5itYFpMyY/Mu0mXOfQYegcUV zW622A5idhnn/PcdC/WphTZVeI3CoU6YIQPGRtvgbPAU5qp8fONG910VQrF6zM2B dFdzRO8tttf/ZWTvzxirvQL91S/pR6CSq0S3ssMFKKTnQljOP9/uvzh/70PZTKu2 XT0+Arq7ijq1LVWVn6uhv6hXE4aLNWN/5BL/3N/8rKE1NWJ/RS+KCLDsn3WkSQmH FO7vZ26FWWK4NyHghaW8aKzW2D9wCmj08UZPV6LuC2KmXPRnWRWi3+SzOfAezxrJ Rd1xD13DuN4L2A== -----END CERTIFICATE-----Generated at Wed Dec 31 07:18:25 2025 by rpki-client