This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json) Hash identifier: cE8UmQKbxx51VAaI038YnioMauMBBSQWkxRTFIaK+f0= Subject key identifier: A3:BE:2E:00:78:D6:82:0D:11:26:B3:3C:73:BD:23:D8:68:0B:A8:AD Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa Certificate serial: 019AF01A6FEC2BD095FE35E7815590DAB8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft Manifest number: 0B6E Signing time: Fri 05 Dec 2025 20:00:55 +0000 Manifest this update: Fri 05 Dec 2025 20:00:55 +0000 Manifest next update: Sat 06 Dec 2025 20:00:55 +0000 Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: qkVQ2Xl+UgaDHPbH2hGhe59rYJTgWLIlcR7qvTg08ec=) 2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:6f:ec:2b:d0:95:fe:35:e7:81:55:90:da:b8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa Validity Not Before: Dec 5 20:00:55 2025 GMT Not After : Dec 6 20:00:55 2025 GMT Subject: CN=a3be2e0078d6820d1126b33c73bd23d8680ba8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:57:1d:81:e8:f6:2e:b4:24:50:e3:6f:13: 09:f9:29:3e:45:47:e1:a7:c0:9d:36:fd:d2:1f:f4: 03:ec:a1:84:0b:c8:22:00:8c:42:60:fd:75:d9:1c: 12:8f:2d:4c:cc:e3:54:5e:aa:e6:b8:65:37:17:32: 93:75:7c:f8:ad:58:f6:84:5c:3b:23:c0:10:0f:d1: a5:15:b3:f1:8b:88:ad:90:a0:9c:65:62:60:32:70: 37:a7:ac:d0:3c:89:a3:44:99:bf:37:d4:17:bb:5e: be:00:46:7f:9f:8b:24:1e:41:65:94:72:c2:51:b2: 7b:ff:08:08:a0:07:1b:3c:59:ea:13:89:85:ec:8a: 94:87:6d:7d:d4:cc:6f:78:13:93:d1:e5:1f:31:d5: 03:26:62:72:9c:fe:19:c3:8f:8b:34:14:cc:58:13: b3:2d:c7:8c:8c:bc:ea:21:bc:5f:d0:1d:ee:a3:fd: 76:5d:fb:20:d9:ee:ac:9e:c9:15:b8:46:2f:a7:99: d5:08:42:5c:d1:33:60:8e:41:34:f4:09:15:39:fd: 5e:db:c4:09:24:ae:78:01:b0:b4:6d:ce:10:91:d6: 6d:b1:81:c9:a6:77:0e:20:8d:d4:ea:de:b6:11:0a: 3b:45:0c:2f:dd:53:fc:27:ba:cd:94:01:5e:a1:b6: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BE:2E:00:78:D6:82:0D:11:26:B3:3C:73:BD:23:D8:68:0B:A8:AD X509v3 Authority Key Identifier: keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d0:7f:8d:60:7c:c1:a5:5c:61:fc:37:38:fd:a5:c3:51:f7: de:31:6f:6e:c8:c2:06:4e:e8:3a:3b:2b:cb:7c:a8:39:e6:86: 6b:c2:8d:58:ac:2a:3e:b3:71:d1:00:12:8a:e0:af:5f:77:b4: e8:49:21:57:04:c1:d2:01:c1:cf:dc:6f:10:13:03:35:ac:e1: ad:2e:69:bd:c3:4e:fd:0f:05:ee:f9:17:ff:94:4a:ee:fb:c3: e5:aa:45:ca:56:b1:bb:54:a3:86:9b:54:d2:15:47:ec:5d:15: 1f:65:8d:07:f6:ae:16:17:33:68:56:44:46:da:c7:37:42:4f: ee:40:ff:81:46:5e:9c:42:3a:70:f0:b0:ba:34:bc:5a:b5:1e: 53:d8:bf:54:00:86:ad:26:5e:1b:d2:d4:ef:e9:70:83:58:f6: 34:9b:7b:94:67:0b:2b:03:34:fb:9b:62:8a:01:e7:74:9b:ea: 16:31:83:e9:7f:de:8e:1f:2c:b4:c2:66:7e:b4:8b:ba:40:96: 33:7a:a3:fd:b1:e4:11:f9:b8:00:16:d2:88:6b:b7:c1:39:35: ba:6e:9d:5c:16:d2:ff:f8:39:65:2c:53:75:10:50:60:b7:c9: 71:ca:c5:c8:1e:57:f3:41:f6:ea:75:0c:86:64:99:9a:70:fb: 07:fd:cf:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGm/sK9CV/jXngVWQ2ri4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm ZThlYWEwHhcNMjUxMjA1MjAwMDU1WhcNMjUxMjA2MjAwMDU1WjAzMTEwLwYDVQQD EyhhM2JlMmUwMDc4ZDY4MjBkMTEyNmIzM2M3M2JkMjNkODY4MGJhOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumxXHYHo9i60JFDjbxMJ+Sk+RUfh p8CdNv3SH/QD7KGEC8giAIxCYP112RwSjy1MzONUXqrmuGU3FzKTdXz4rVj2hFw7 I8AQD9GlFbPxi4itkKCcZWJgMnA3p6zQPImjRJm/N9QXu16+AEZ/n4skHkFllHLC UbJ7/wgIoAcbPFnqE4mF7IqUh2191MxveBOT0eUfMdUDJmJynP4Zw4+LNBTMWBOz LceMjLzqIbxf0B3uo/12Xfsg2e6snskVuEYvp5nVCEJc0TNgjkE09AkVOf1e28QJ JK54AbC0bc4QkdZtsYHJpncOII3U6t62EQo7RQwv3VP8J7rNlAFeobYK+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKO+LgB41oINESazPHO9I9hoC6itMB8GA1UdIwQY MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtB/jWB8 waVcYfw3OP2lw1H33jFvbsjCBk7oOjsry3yoOeaGa8KNWKwqPrNx0QASiuCvX3e0 6EkhVwTB0gHBz9xvEBMDNazhrS5pvcNO/Q8F7vkX/5RK7vvD5apFylaxu1SjhptU 0hVH7F0VH2WNB/auFhczaFZERtrHN0JP7kD/gUZenEI6cPCwujS8WrUeU9i/VACG rSZeG9LU7+lwg1j2NJt7lGcLKwM0+5tiigHndJvqFjGD6X/ejh8stMJmfrSLukCW M3qj/bHkEfm4ABbSiGu3wTk1um6dXBbS//g5ZSxTdRBQYLfJccrFyB5X80H26nUM hmSZmnD7B/3PKw== -----END CERTIFICATE-----Generated at Sat Dec 6 02:45:11 2025 by rpki-client