This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json) Hash identifier: gN9dn8VLANR3ugRMV/QAr2gjySdSoQNLTACLZZjc+9o= Subject key identifier: 42:7B:BC:F9:BA:A3:BF:B4:71:20:74:1A:1D:30:38:AA:5E:81:A7:35 Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Certificate serial: 019B217582C31339EAEDB9220F7CE597190D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft Manifest number: 148B Signing time: Mon 15 Dec 2025 10:01:47 +0000 Manifest this update: Mon 15 Dec 2025 10:01:47 +0000 Manifest next update: Tue 16 Dec 2025 10:01:47 +0000 Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=) 2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: Zhs5rZBxIDNlSjApeuS/xRC6SXPg9svlmEYg2VOg8LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:82:c3:13:39:ea:ed:b9:22:0f:7c:e5:97:19:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Validity Not Before: Dec 15 10:01:47 2025 GMT Not After : Dec 16 10:01:47 2025 GMT Subject: CN=427bbcf9baa3bfb47120741a1d3038aa5e81a735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:47:62:25:ec:08:22:69:23:35:11:3f:38: e2:d9:40:04:bb:73:65:8b:77:4c:14:d8:9e:99:43: 16:de:68:0c:ad:fd:7c:5b:06:a4:cf:47:0d:42:0a: 70:a0:b3:53:26:1b:f9:1c:1f:7e:e4:57:6e:86:bd: a3:f7:3a:81:66:fa:e1:c3:3e:9b:82:b7:2a:a7:b7: 0a:ac:1c:7b:fa:46:c3:6b:2e:20:d5:c4:77:a2:45: b7:87:c4:5f:3b:fb:7a:7d:07:d2:ad:0b:3c:ac:d1: 93:78:67:57:77:17:76:94:9c:5e:2d:9e:33:2d:a7: b8:6d:0c:ab:7d:fd:c6:19:93:19:94:97:a1:56:fc: e4:65:3e:8f:f8:79:2a:82:cc:e5:8b:3d:4c:7a:8c: 3a:e7:76:8e:cd:1f:e0:5a:a0:08:11:f8:8b:6b:9e: 8c:18:e0:c4:e6:fe:fb:13:60:86:5d:c2:9c:92:c7: 29:1a:5a:60:1c:9f:1a:ab:8c:fc:2e:d0:69:29:a7: 54:fa:56:33:22:ff:2e:25:d8:e9:fa:e1:33:b3:d8: 5f:5f:bd:be:d4:3e:be:2a:b2:c7:90:e1:08:09:97: 95:81:90:c5:da:a6:e0:3c:2e:30:d7:b0:55:f5:b6: 64:fe:ab:97:e6:f5:33:ba:42:b2:84:46:0d:c6:36: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7B:BC:F9:BA:A3:BF:B4:71:20:74:1A:1D:30:38:AA:5E:81:A7:35 X509v3 Authority Key Identifier: keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2b:e0:7d:8f:bf:9c:d9:38:3e:28:65:69:05:bf:a2:3d:2a: 7b:ef:1b:ad:60:79:3c:8e:a3:8c:d5:99:93:9d:bb:68:ed:eb: 03:8d:cd:d6:01:17:c1:83:fd:11:47:87:9a:bf:e7:1f:58:e4: b5:00:b2:09:5c:4a:1a:ef:1e:59:b6:db:dd:57:fa:ba:6b:34: bb:45:d3:0c:5b:12:ca:5e:c0:4c:ee:8a:09:9f:80:c9:a2:ff: c0:a0:d8:7f:f5:aa:5f:07:17:04:d6:9c:c6:d8:2a:4c:bc:34: bb:b8:92:5b:94:cb:6f:d3:79:07:c0:81:ab:6d:b1:73:9c:38: 04:cf:ac:19:d9:54:f2:ab:15:ff:b4:ea:3c:2d:6f:ed:f7:0e: 87:1e:4e:39:b7:09:f2:a5:a7:7d:f1:71:52:b6:4d:53:4a:83: 59:86:74:75:fc:fd:83:bc:16:b5:82:5d:9b:d6:8b:96:f8:86: cd:5d:22:9d:67:27:fc:75:59:7a:3a:20:fc:23:e3:62:2c:6f: ba:f9:19:bc:a1:5c:d4:16:ea:d1:04:aa:b4:4c:39:ee:ba:38: 1b:ff:43:a1:ec:d1:66:78:b0:69:e7:01:57:08:1d:77:a8:2a: 1d:cf:ba:a2:e8:1e:b3:0f:54:24:32:4c:43:83:2d:09:b1:85: f3:aa:b7:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdYLDEznq7bkiD3zllxkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4 NzdiNmYwHhcNMjUxMjE1MTAwMTQ3WhcNMjUxMjE2MTAwMTQ3WjAzMTEwLwYDVQQD Eyg0MjdiYmNmOWJhYTNiZmI0NzEyMDc0MWExZDMwMzhhYTVlODFhNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0hHYiXsCCJpIzURPzji2UAEu3Nl i3dMFNiemUMW3mgMrf18Wwakz0cNQgpwoLNTJhv5HB9+5Fduhr2j9zqBZvrhwz6b grcqp7cKrBx7+kbDay4g1cR3okW3h8RfO/t6fQfSrQs8rNGTeGdXdxd2lJxeLZ4z Lae4bQyrff3GGZMZlJehVvzkZT6P+Hkqgszliz1Meow653aOzR/gWqAIEfiLa56M GODE5v77E2CGXcKckscpGlpgHJ8aq4z8LtBpKadU+lYzIv8uJdjp+uEzs9hfX72+ 1D6+KrLHkOEICZeVgZDF2qbgPC4w17BV9bZk/quX5vUzukKyhEYNxjbRFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ7vPm6o7+0cSB0Gh0wOKpegac1MB8GA1UdIwQY MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyvgfY+/ nNk4PihlaQW/oj0qe+8brWB5PI6jjNWZk527aO3rA43N1gEXwYP9EUeHmr/nH1jk tQCyCVxKGu8eWbbb3Vf6ums0u0XTDFsSyl7ATO6KCZ+AyaL/wKDYf/WqXwcXBNac xtgqTLw0u7iSW5TLb9N5B8CBq22xc5w4BM+sGdlU8qsV/7TqPC1v7fcOhx5OObcJ 8qWnffFxUrZNU0qDWYZ0dfz9g7wWtYJdm9aLlviGzV0inWcn/HVZejog/CPjYixv uvkZvKFc1Bbq0QSqtEw57ro4G/9DoezRZniwaecBVwgdd6gqHc+6ougesw9UJDJM Q4MtCbGF86q3sw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:04:08 2025 by rpki-client