This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json) Hash identifier: QJF2LyWcbD5P3qBB4LkMpcPz29edC2LEp2oD2T7bFgg= Subject key identifier: DE:19:1D:DB:F0:59:52:CB:1C:C8:7F:3B:FE:41:42:9F:7D:33:91:D3 Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Certificate serial: 019AFA675F85E0E90C4B8D41FDABA18412A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 20:01:09 +0000 Manifest this update: Sun 07 Dec 2025 20:01:09 +0000 Manifest next update: Mon 08 Dec 2025 20:01:09 +0000 Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=) 2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: rEJHz8mSj8fPftk+WYThu7QxIac6nzNKZbDMdrrAS+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:67:5f:85:e0:e9:0c:4b:8d:41:fd:ab:a1:84:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1 Validity Not Before: Dec 7 20:01:09 2025 GMT Not After : Dec 8 20:01:09 2025 GMT Subject: CN=de191ddbf05952cb1cc87f3bfe41429f7d3391d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:04:ad:6e:19:d1:03:f7:99:3d:cd:d1:01: e9:d8:7e:4f:a5:98:b9:d9:f0:bc:18:a5:9a:30:11: 2d:f3:c8:da:3b:72:49:b8:f9:92:d8:ba:07:d1:ee: 7f:e5:bc:02:e5:5e:8a:01:93:b4:cb:5b:9f:fe:da: a6:33:ba:46:ae:bf:3d:95:e9:8e:bf:2c:bd:62:32: b8:45:bc:f8:53:5d:89:ec:0c:75:e3:d9:e1:9a:20: e1:8f:c2:b6:70:65:7d:6a:b1:bb:c1:3b:ef:29:dc: e2:d2:04:78:d0:8f:44:ec:83:7d:85:2f:c2:0b:89: 8f:3a:da:81:2c:40:a2:ce:1c:f7:d5:3e:d0:09:1c: 00:0f:3f:98:18:fa:3e:c2:fe:16:98:dd:5b:14:da: 96:70:45:ec:e4:07:25:50:70:fd:ad:0e:e8:95:28: 16:b1:76:cf:ad:76:b4:dd:ff:8b:14:be:43:ea:c0: 74:36:5e:e7:69:d5:4a:ac:b7:9f:dd:77:5c:2c:c5: b8:fe:eb:d6:55:a8:f6:c7:b4:ac:28:46:cd:c8:2e: 7b:d7:c4:c7:40:42:26:99:2f:9e:93:52:8a:8c:8e: 58:1b:17:e3:e2:75:b3:c8:8b:79:e4:bc:c9:e5:74: d9:4c:49:b3:98:fb:63:ee:95:1a:16:d8:67:5f:6b: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:1D:DB:F0:59:52:CB:1C:C8:7F:3B:FE:41:42:9F:7D:33:91:D3 X509v3 Authority Key Identifier: keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0d:c9:e6:88:91:b7:a5:fb:54:25:c4:a0:fb:02:06:bc:bd: c8:2d:d6:a1:5d:62:1f:70:d8:f9:22:51:01:bf:81:ce:fb:59: 99:6b:cf:00:b1:31:74:6c:cb:17:4a:0a:67:ef:d1:c6:dd:e8: d2:1b:54:9d:00:ea:26:ff:0e:66:8b:ae:9d:b0:39:a5:f2:22: ec:da:23:6e:a4:e8:35:fb:b0:20:f7:c0:1d:d3:72:3c:cc:86: d8:80:1f:05:14:73:92:61:ab:cd:7f:7c:b4:65:3b:86:ce:d8: e5:d1:0b:04:93:6e:a6:f2:67:5c:22:6c:f3:15:c6:2e:17:14: 87:15:f4:31:59:3e:b2:88:11:ac:29:7c:d8:23:d8:57:69:b3: 39:6c:9c:3f:bc:e9:35:79:1b:88:68:68:c1:5d:0c:84:a4:f5: 5f:21:5a:c9:7c:df:bb:ad:e4:6a:79:be:c3:47:bc:9a:48:dd: 64:a1:ef:d3:ff:ab:15:5e:a1:a2:28:65:75:77:f4:8d:43:24: c1:12:e0:65:5e:5e:de:d2:56:f8:93:0b:5c:f3:23:b4:dd:05: 72:ec:95:2f:5f:c5:22:82:da:c8:39:dc:f1:4a:f7:b4:c3:8b: f9:67:d3:8e:6c:41:87:c4:33:6a:9e:7a:c2:59:88:74:4e:52: 08:96:89:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6Z1+F4OkMS41B/auhhBKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz OWFlZTEwHhcNMjUxMjA3MjAwMTA5WhcNMjUxMjA4MjAwMTA5WjAzMTEwLwYDVQQD EyhkZTE5MWRkYmYwNTk1MmNiMWNjODdmM2JmZTQxNDI5ZjdkMzM5MWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQYErW4Z0QP3mT3N0QHp2H5PpZi5 2fC8GKWaMBEt88jaO3JJuPmS2LoH0e5/5bwC5V6KAZO0y1uf/tqmM7pGrr89lemO vyy9YjK4Rbz4U12J7Ax149nhmiDhj8K2cGV9arG7wTvvKdzi0gR40I9E7IN9hS/C C4mPOtqBLECizhz31T7QCRwADz+YGPo+wv4WmN1bFNqWcEXs5AclUHD9rQ7olSgW sXbPrXa03f+LFL5D6sB0Nl7nadVKrLef3XdcLMW4/uvWVaj2x7SsKEbNyC5718TH QEImmS+ek1KKjI5YGxfj4nWzyIt55LzJ5XTZTEmzmPtj7pUaFthnX2suYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4ZHdvwWVLLHMh/O/5BQp99M5HTMB8GA1UdIwQY MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUw3J5oiR t6X7VCXEoPsCBry9yC3WoV1iH3DY+SJRAb+BzvtZmWvPALExdGzLF0oKZ+/Rxt3o 0htUnQDqJv8OZouunbA5pfIi7NojbqToNfuwIPfAHdNyPMyG2IAfBRRzkmGrzX98 tGU7hs7Y5dELBJNupvJnXCJs8xXGLhcUhxX0MVk+sogRrCl82CPYV2mzOWycP7zp NXkbiGhowV0MhKT1XyFayXzfu63kanm+w0e8mkjdZKHv0/+rFV6hoihldXf0jUMk wRLgZV5e3tJW+JMLXPMjtN0FcuyVL1/FIoLayDnc8Ur3tMOL+WfTjmxBh8Qzap56 wlmIdE5SCJaJiQ== -----END CERTIFICATE-----Generated at Mon Dec 8 05:36:14 2025 by rpki-client