This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json) Hash identifier: 0nLdneiCzuiWHR1WcM7/mTVCmhGP1OvHyJ6RFfbJLn4= Subject key identifier: 97:7B:62:E7:2C:EF:07:0A:84:68:EB:F9:FA:66:BE:B8:72:11:74:DC Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Certificate serial: 019B4A70C1390F0C5C894E62DE24C60D9F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft Manifest number: 0E70 Signing time: Tue 23 Dec 2025 09:01:02 +0000 Manifest this update: Tue 23 Dec 2025 09:01:02 +0000 Manifest next update: Wed 24 Dec 2025 09:01:02 +0000 Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=) 2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: VFI2RLLs1wBZG9+ixyckDoclojmAgG++cYfHWv5Qh24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:c1:39:0f:0c:5c:89:4e:62:de:24:c6:0d:9f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Validity Not Before: Dec 23 09:01:02 2025 GMT Not After : Dec 24 09:01:02 2025 GMT Subject: CN=977b62e72cef070a8468ebf9fa66beb8721174dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:4e:9b:c8:b4:f1:40:b3:7e:25:69:5a:cc: 19:32:75:6f:15:84:72:37:a1:1f:68:1f:b3:79:68: 55:3f:65:02:34:fb:1b:4d:4a:ad:fe:5c:73:aa:34: 86:95:d8:32:a2:3d:65:6b:5c:e3:ad:b3:71:49:b3: e0:d0:5d:2c:fe:95:df:4c:03:4c:91:fc:65:1b:1c: 56:ca:4f:a3:68:3d:ff:0a:7d:7b:0d:b2:89:80:40: 54:05:15:e6:be:f8:ca:99:e7:db:0f:ea:04:fc:73: 3c:70:d4:0c:f2:a0:bf:54:17:45:e8:cd:72:40:db: 83:29:5c:4c:ed:20:27:5c:13:75:4d:7f:12:b5:49: 6c:c2:03:90:4c:be:c8:19:4f:a4:ce:a8:2c:29:9b: 6e:4c:65:9e:41:4b:9d:d1:2a:20:19:1e:54:f3:8c: 3c:2b:43:f5:b5:b1:45:a8:d0:bf:a4:0a:44:80:e8: ba:d2:e6:65:fa:00:72:ba:dc:5a:97:7b:6c:41:92: 8a:28:bb:39:c5:89:d6:50:fc:69:be:aa:1c:0a:6e: bd:33:7b:4b:77:07:a8:18:ac:b7:9d:c0:e0:86:a3: 50:96:fb:9f:15:0b:20:ad:d4:42:07:26:d4:c2:14: b2:e2:5c:ef:ff:65:19:c0:3f:91:68:ab:49:ab:16: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:62:E7:2C:EF:07:0A:84:68:EB:F9:FA:66:BE:B8:72:11:74:DC X509v3 Authority Key Identifier: keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:66:aa:cf:1f:77:0e:d5:fd:5e:27:d7:bb:a6:dc:b5:48:ad: b0:81:d1:01:61:bf:c9:52:fa:3d:82:c2:50:98:3e:0f:2b:2a: fd:b6:21:7d:f8:80:6e:ac:c6:28:5c:ba:97:f2:6a:f8:b4:a8: ae:a1:7e:94:50:71:3e:3a:31:6c:81:2a:e0:49:5f:57:73:08: 34:13:f5:e6:38:ee:f1:f1:a2:65:c5:ce:d5:d0:8e:be:17:4d: a8:0e:43:e3:d1:99:2a:00:60:a4:d0:cc:2d:af:b7:bc:60:b0: 4d:d1:9a:51:5d:e2:6b:07:4e:87:d2:fb:b6:be:12:fb:3e:6e: c3:99:cf:41:80:03:80:43:e4:62:2c:5c:a0:31:58:09:8f:7a: 5d:c5:a8:9f:8d:43:61:65:bd:4f:26:28:fa:6c:b2:39:89:c5: 82:e0:8e:32:8c:cc:ef:98:d8:9b:4d:28:da:6e:d5:64:e6:b3: 32:fd:1a:25:3c:98:73:e3:6f:bb:d5:e8:ed:f8:7c:d9:13:93: cb:54:0f:85:e5:27:23:e9:ba:1c:f2:34:a1:12:9e:94:88:0c: a8:34:fe:a6:92:ac:a9:59:20:37:3c:18:2a:82:ae:17:20:f6: ad:03:e3:90:a9:3d:96:cb:f0:de:e5:fd:e7:b2:d1:05:9a:30: a0:dd:10:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcME5DwxciU5i3iTGDZ+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTVi MjliMjEwHhcNMjUxMjIzMDkwMTAyWhcNMjUxMjI0MDkwMTAyWjAzMTEwLwYDVQQD Eyg5NzdiNjJlNzJjZWYwNzBhODQ2OGViZjlmYTY2YmViODcyMTE3NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AhOm8i08UCzfiVpWswZMnVvFYRy N6EfaB+zeWhVP2UCNPsbTUqt/lxzqjSGldgyoj1la1zjrbNxSbPg0F0s/pXfTANM kfxlGxxWyk+jaD3/Cn17DbKJgEBUBRXmvvjKmefbD+oE/HM8cNQM8qC/VBdF6M1y QNuDKVxM7SAnXBN1TX8StUlswgOQTL7IGU+kzqgsKZtuTGWeQUud0SogGR5U84w8 K0P1tbFFqNC/pApEgOi60uZl+gByutxal3tsQZKKKLs5xYnWUPxpvqocCm69M3tL dweoGKy3ncDghqNQlvufFQsgrdRCBybUwhSy4lzv/2UZwD+RaKtJqxaDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd7Yucs7wcKhGjr+fpmvrhyEXTcMB8GA1UdIwQY MBaAFHp+zpTeXfaho0yY7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEt ZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2Jk LzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2aqzx93 DtX9XifXu6bctUitsIHRAWG/yVL6PYLCUJg+Dysq/bYhffiAbqzGKFy6l/Jq+LSo rqF+lFBxPjoxbIEq4ElfV3MINBP15jju8fGiZcXO1dCOvhdNqA5D49GZKgBgpNDM La+3vGCwTdGaUV3iawdOh9L7tr4S+z5uw5nPQYADgEPkYixcoDFYCY96XcWon41D YWW9TyYo+myyOYnFguCOMozM75jYm00o2m7VZOazMv0aJTyYc+Nvu9Xo7fh82ROT y1QPheUnI+m6HPI0oRKelIgMqDT+ppKsqVkgNzwYKoKuFyD2rQPjkKk9lsvw3uX9 57LRBZowoN0Qxw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:30 2025 by rpki-client