This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json) Hash identifier: Kt06ncWxpS81cDwXPeLshpbiEtSc+c9ULZO2R9TRrqU= Subject key identifier: AE:CE:EA:48:36:76:45:94:68:F6:89:26:90:5D:A7:D2:B7:BA:0C:59 Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Certificate serial: 019B281B86965A8AEC25B787AB64878E5B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft Manifest number: 170F Signing time: Tue 16 Dec 2025 17:00:51 +0000 Manifest this update: Tue 16 Dec 2025 17:00:51 +0000 Manifest next update: Wed 17 Dec 2025 17:00:51 +0000 Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=) 2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: JYylqGz1TrALWKUfinbCbCZ6xRmi58eZIzDrCDmUTVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:86:96:5a:8a:ec:25:b7:87:ab:64:87:8e:5b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385 Validity Not Before: Dec 16 17:00:51 2025 GMT Not After : Dec 17 17:00:51 2025 GMT Subject: CN=aeceea483676459468f68926905da7d2b7ba0c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:eb:ca:24:65:b4:81:74:20:20:f8:b3:f3: 1a:44:f4:fc:67:8e:a5:94:3b:ab:a0:d2:39:a5:d4: fb:d9:38:43:78:96:17:61:2d:85:cd:84:2a:51:11: 52:6e:38:3c:93:e2:17:39:63:e7:6a:e0:fc:8c:c6: 88:e8:28:5d:3d:85:1c:3d:b6:e5:64:01:4d:ad:fc: 22:fd:8a:59:e7:64:9c:00:00:59:a7:38:40:41:d9: 16:af:6a:d1:1c:65:ac:5d:6c:5f:97:c8:14:05:17: 43:07:e7:5d:d9:4b:46:7c:cb:b6:53:bd:19:c9:11: bf:63:0d:44:f0:02:46:02:a1:c0:f7:51:46:55:8c: ba:63:e9:1f:78:17:e0:94:05:75:99:73:9c:3c:6c: d3:9b:7a:8d:c4:55:7a:37:25:47:13:e1:fe:ec:d4: fe:6e:03:29:45:c3:e9:32:2c:49:a1:08:d6:c6:0f: 9d:7b:56:a9:93:22:ca:a0:1b:c5:c2:f5:c7:9d:4f: 4c:cc:6f:91:33:07:df:05:62:43:78:02:b4:b4:48: f0:8f:5a:fe:a8:27:17:d7:1e:15:76:f2:67:47:14: dc:57:a5:c2:24:28:6b:0b:c9:31:61:2f:12:5c:3a: b7:6a:8b:fc:19:13:34:c5:a0:bd:51:c0:12:87:f0: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CE:EA:48:36:76:45:94:68:F6:89:26:90:5D:A7:D2:B7:BA:0C:59 X509v3 Authority Key Identifier: keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b0:ef:04:0b:7d:c7:5f:d3:4b:fa:4f:c7:b4:13:8d:00:23: 78:60:d9:76:9f:b3:ae:a6:77:9e:a9:8b:0a:83:0c:5c:ba:e0: 3f:a8:2b:f7:97:39:0f:aa:41:32:f7:09:68:a9:b7:8f:62:21: f4:b3:d6:ca:35:75:fe:d3:94:c0:77:ac:12:ae:47:88:f6:ba: 10:fd:62:56:ab:42:9a:5e:99:93:f0:14:91:6a:f0:52:50:4a: 1e:ba:65:8e:b6:b8:80:72:d4:37:17:56:30:ec:55:96:93:cf: 2f:93:45:a3:62:58:08:ae:35:0d:31:9c:47:3a:7a:bc:46:2d: e9:b8:88:0d:81:48:2c:5e:34:f4:b3:d4:6d:35:69:58:a0:31: 8a:8b:b0:28:5f:bc:0f:a2:7f:0e:0f:dd:25:9b:1c:51:d7:03: 10:d9:3e:0a:5b:7f:42:11:e8:a0:68:fb:1a:4a:93:48:59:ab: 46:ce:30:29:f4:6f:81:dc:e3:10:81:fc:4c:07:f4:72:fd:da: e8:24:a1:89:85:04:dd:57:12:73:ff:ea:cc:f6:dd:85:d6:3d: 31:0a:3f:ed:e3:4e:32:89:2b:28:06:53:2c:12:a8:8c:cd:42: b3:cd:a3:b1:1d:4c:e4:3c:ca:20:33:07:e2:51:d8:56:06:ce: 5b:20:fc:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG4aWWorsJbeHq2SHjltIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi MGYzODUwHhcNMjUxMjE2MTcwMDUxWhcNMjUxMjE3MTcwMDUxWjAzMTEwLwYDVQQD EyhhZWNlZWE0ODM2NzY0NTk0NjhmNjg5MjY5MDVkYTdkMmI3YmEwYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIHryiRltIF0ICD4s/MaRPT8Z46l lDuroNI5pdT72ThDeJYXYS2FzYQqURFSbjg8k+IXOWPnauD8jMaI6ChdPYUcPbbl ZAFNrfwi/YpZ52ScAABZpzhAQdkWr2rRHGWsXWxfl8gUBRdDB+dd2UtGfMu2U70Z yRG/Yw1E8AJGAqHA91FGVYy6Y+kfeBfglAV1mXOcPGzTm3qNxFV6NyVHE+H+7NT+ bgMpRcPpMixJoQjWxg+de1apkyLKoBvFwvXHnU9MzG+RMwffBWJDeAK0tEjwj1r+ qCcX1x4VdvJnRxTcV6XCJChrC8kxYS8SXDq3aov8GRM0xaC9UcASh/DSdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7O6kg2dkWUaPaJJpBdp9K3ugxZMB8GA1UdIwQY MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0 LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbDvBAt9 x1/TS/pPx7QTjQAjeGDZdp+zrqZ3nqmLCoMMXLrgP6gr95c5D6pBMvcJaKm3j2Ih 9LPWyjV1/tOUwHesEq5HiPa6EP1iVqtCml6Zk/AUkWrwUlBKHrpljra4gHLUNxdW MOxVlpPPL5NFo2JYCK41DTGcRzp6vEYt6biIDYFILF409LPUbTVpWKAxiouwKF+8 D6J/Dg/dJZscUdcDENk+Clt/QhHooGj7GkqTSFmrRs4wKfRvgdzjEIH8TAf0cv3a 6CShiYUE3VcSc//qzPbdhdY9MQo/7eNOMokrKAZTLBKojM1Cs82jsR1M5DzKIDMH 4lHYVgbOWyD8sg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:48:33 2025 by rpki-client