This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft File: e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json) Hash identifier: 8A75HR2meDWfvCVimpT5rso07TGymSJsJJ5F0DyvKuU= Subject key identifier: FA:9B:D0:5A:DE:54:41:41:C2:C3:53:15:D6:9C:85:27:26:DB:CA:20 Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB Certificate issuer: /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb Certificate serial: 019AF12DD0739DE3D2BE1AF05D876E33EC19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft Manifest number: 0BC8 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: umtMBpNfDeR755LA7vD1N3lXpbaEMyij9PihnFLrLY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d0:73:9d:e3:d2:be:1a:f0:5d:87:6e:33:ec:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=fa9bd05ade544141c2c35315d69c852726dbca20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:9a:82:89:34:19:d7:ae:f3:10:79:58:ec: 88:b9:cc:7b:cc:80:26:38:c8:12:32:2d:0c:c3:c4: ae:4e:76:e4:12:5b:b0:38:91:b8:75:2f:b1:29:d7: 3d:25:03:37:ca:cd:53:47:b3:ce:53:ae:e6:1c:5a: f4:e7:5b:42:e9:d8:00:9d:ec:53:d7:c5:35:14:e5: 35:c5:2e:6e:e8:e7:54:22:5c:28:35:88:d9:68:c1: 52:05:f7:40:69:73:51:6f:ba:ce:a7:f4:c4:3d:a6: 7d:65:dd:49:5d:55:6e:32:c7:3d:d8:24:fb:2f:4b: 35:c3:60:82:23:73:66:ea:75:b0:4b:2c:85:dd:e3: 2a:55:0a:25:d9:3a:18:c4:4a:7a:21:c5:b9:88:96: 1b:59:c5:5b:a6:73:46:73:05:f7:23:3c:72:43:71: 3c:73:ba:a4:ee:b4:03:a2:a6:93:a8:dd:09:46:4e: a7:c6:c2:3a:db:6f:e2:ad:c8:2d:b9:c3:0e:74:29: d2:ed:4c:47:3d:9a:e5:1f:d0:e3:fd:5e:59:32:d8: 14:93:a9:4c:1b:d2:43:aa:c0:c2:2d:20:a9:c3:53: 46:d5:07:16:f7:66:2d:1a:81:e0:f9:93:5b:7d:5c: 87:7a:79:05:bf:3d:0f:09:c9:20:ca:b5:b3:d3:28: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:D0:5A:DE:54:41:41:C2:C3:53:15:D6:9C:85:27:26:DB:CA:20 X509v3 Authority Key Identifier: keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:be:9e:3d:e0:0b:a1:df:6e:d8:65:49:a1:88:16:ac:47:a6: de:85:42:0f:bb:81:80:90:6f:7a:a0:b2:5a:88:d4:3c:93:7d: 67:4e:a3:a5:d9:91:85:cf:61:9b:13:79:cb:6c:28:b4:ef:31: f2:8f:b5:78:47:d3:7f:7a:91:ee:68:a3:b7:93:48:fa:d9:d1: 5d:15:fa:aa:be:d7:92:30:1b:9b:0b:57:97:ad:98:d1:f5:48: 10:05:3d:70:d2:1f:81:c3:8d:c8:d1:98:74:6b:aa:bc:dd:a0: 82:13:aa:46:e3:46:b2:8e:6a:5b:9a:2e:5e:c0:04:f0:3c:11: ad:57:3e:ad:7b:36:76:ab:0d:0b:49:48:bf:6f:2a:b7:c5:72: a9:95:d4:c5:4e:e5:6c:4c:a0:67:e5:6f:91:da:b7:64:ba:59: 61:70:0f:b2:e0:d0:df:c6:40:dd:97:0a:97:22:7a:b9:6b:3d: 59:43:71:d4:74:9a:e0:10:37:ee:f8:a3:d0:11:78:c9:37:ea: 3e:d1:f5:e1:61:40:46:54:ab:f6:06:0c:43:ec:3e:8e:ac:8e: 67:fc:11:4b:de:b5:40:55:87:0a:ca:14:ea:ad:2a:11:0f:38: 6b:c4:b1:ff:7c:0c:8b:a0:d3:0d:41:d0:f8:a4:cb:1a:c7:3c: 6a:4e:b5:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdBznePSvhrwXYduM+wZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYjgwZGVjY2M1NmViMzY2YjM2Y2MyOTY0YzgxOWJiMWI3 MjlhZGIwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EyhmYTliZDA1YWRlNTQ0MTQxYzJjMzUzMTVkNjljODUyNzI2ZGJjYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Wagok0Gdeu8xB5WOyIucx7zIAm OMgSMi0Mw8SuTnbkEluwOJG4dS+xKdc9JQM3ys1TR7POU67mHFr051tC6dgAnexT 18U1FOU1xS5u6OdUIlwoNYjZaMFSBfdAaXNRb7rOp/TEPaZ9Zd1JXVVuMsc92CT7 L0s1w2CCI3Nm6nWwSyyF3eMqVQol2ToYxEp6IcW5iJYbWcVbpnNGcwX3IzxyQ3E8 c7qk7rQDoqaTqN0JRk6nxsI622/ircgtucMOdCnS7UxHPZrlH9Dj/V5ZMtgUk6lM G9JDqsDCLSCpw1NG1QcW92YtGoHg+ZNbfVyHenkFvz0PCckgyrWz0ygB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqb0FreVEFBwsNTFdachScm28ogMB8GA1UdIwQY MBaAFHu4DezMVus2azbMKWTIGbsbcprbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xYzNmODktMzNlMS00ZDY0LTkyMzUt NGFhOTI3NzI5NjcyLzEvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xYzNmODktMzNlMS00ZDY0LTkyMzUtNGFhOTI3NzI5Njcy LzEvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb6ePeAL od9u2GVJoYgWrEem3oVCD7uBgJBveqCyWojUPJN9Z06jpdmRhc9hmxN5y2wotO8x 8o+1eEfTf3qR7mijt5NI+tnRXRX6qr7XkjAbmwtXl62Y0fVIEAU9cNIfgcONyNGY dGuqvN2gghOqRuNGso5qW5ouXsAE8DwRrVc+rXs2dqsNC0lIv28qt8VyqZXUxU7l bEygZ+Vvkdq3ZLpZYXAPsuDQ38ZA3ZcKlyJ6uWs9WUNx1HSa4BA37vij0BF4yTfq PtH14WFARlSr9gYMQ+w+jqyOZ/wRS961QFWHCsoU6q0qEQ84a8Sx/3wMi6DTDUHQ +KTLGsc8ak61GA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:54 2025 by rpki-client