This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json) Hash identifier: sSup4WK6FnDw/zHfvyMIITjrrSyPHY1oC1i5t/Dk0ec= Subject key identifier: 23:91:CF:25:11:6F:C6:4E:18:DC:64:40:27:57:D3:48:00:B1:DD:75 Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48 Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548 Certificate serial: 019AF27731486DDA6E60A89C96E7345C0FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft Manifest number: F8 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: ayQ5bYhkLmUA6/Kaq/Jf/whNNoBwgJ4bzXE8euWi9Zc=) 2: imHQYg5LjpecUXmRBf2wIK9f70s.roa (hash: fwrQLWCO0tBmX3/PkxZEuXo+JQaCjLY7jAbEzE71wJg=) 3: p-q5NK4QM7flBgA02ibMGvdXFDA.roa (hash: iyRzjTNAy9qfw8qmlS/eRrCPm/exDgyPpvjm/GwckYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:31:48:6d:da:6e:60:a8:9c:96:e7:34:5c:0f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=2391cf25116fc64e18dc64402757d34800b1dd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:1d:79:8a:7b:1e:e6:f0:59:37:0f:98:1c: ae:4b:84:73:cd:89:af:46:4a:b3:c4:75:d2:b8:8a: 6d:3c:f7:54:37:eb:80:8f:61:a1:49:0c:5e:fe:f3: d2:88:f3:cd:a5:33:cc:7c:c0:b8:6e:af:1b:f4:ba: 45:f2:db:a4:4d:62:7d:d7:c8:33:d6:69:75:8c:a3: 80:fc:ec:78:9b:33:ad:5a:dd:c5:e9:19:c2:8e:b5: d4:84:b3:74:f6:f4:02:b0:64:67:6c:e1:a5:35:73: 52:02:14:de:9a:9c:cf:8c:28:19:91:89:b8:ea:9e: 41:0f:c0:81:65:e9:eb:37:8f:fe:c7:da:05:0e:b6: df:05:a9:88:e0:be:a7:f3:cc:8a:f9:0c:2f:13:d4: 93:32:27:11:4f:af:56:dd:70:03:04:08:72:e0:ec: e6:dd:7a:b9:3b:47:3c:e5:c2:e1:3e:54:0c:30:81: 73:4c:0f:bb:aa:2a:c8:31:91:a9:27:81:2b:fd:fd: 3f:fc:6d:80:7a:3c:28:63:46:ea:56:f9:00:36:7f: 95:e2:5c:79:6f:3b:42:9a:50:08:22:56:86:1e:3a: ab:a8:76:1f:f9:5f:fd:42:06:3d:b5:e9:b9:d0:b4: 2b:0e:9f:1c:cf:b5:f8:32:ce:8d:a8:f6:b6:9c:1a: c9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:91:CF:25:11:6F:C6:4E:18:DC:64:40:27:57:D3:48:00:B1:DD:75 X509v3 Authority Key Identifier: keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bf:86:b6:fe:ca:c0:b7:1e:c7:89:dd:ae:04:d3:af:91:d3: 6c:7c:41:cd:ad:32:94:49:e2:be:e2:a4:4b:79:7c:58:8a:79: 91:00:42:5f:91:a5:70:f7:3e:99:df:35:e7:50:05:c3:57:b3: 84:64:eb:15:e7:d2:55:f1:a9:cb:ba:4f:2a:48:f2:c3:88:e8: ee:c4:25:ab:a8:a2:fc:d4:c3:22:0d:f4:97:4b:77:3d:2a:ce: a5:5c:af:0d:28:68:ba:6c:98:57:26:41:27:be:06:c3:58:72: 83:ca:20:66:b9:1c:78:9c:fd:70:6a:a5:a7:59:41:cc:ca:ed: 83:c1:cf:9e:6c:ae:88:3e:56:50:aa:94:b9:03:d7:99:c5:3a: 2d:60:70:c0:f8:05:bc:46:31:a7:60:9d:e2:bf:8e:37:90:ff: 21:74:91:63:31:cf:42:bd:2f:35:ce:a8:39:a7:b3:c2:4a:17: f1:0e:82:42:ed:72:61:50:fc:0f:da:0c:73:ab:65:c3:60:fd: 0a:04:0a:e7:e5:4f:d3:87:97:4f:72:4f:43:91:9f:7f:f2:44: 78:68:09:73:2f:75:36:16:48:65:86:91:3d:95:35:de:9a:bf: f8:a7:96:68:60:a7:84:1f:79:41:97:84:4b:02:56:ad:14:a3: 6f:d3:14:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzFIbdpuYKicluc0XA+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmY4YzZmYjdmNTQ3MTcwYjY3OTYyNTc1Y2YyYmE4ZWQx NWU1NDgwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EygyMzkxY2YyNTExNmZjNjRlMThkYzY0NDAyNzU3ZDM0ODAwYjFkZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveodeYp7HubwWTcPmByuS4RzzYmv RkqzxHXSuIptPPdUN+uAj2GhSQxe/vPSiPPNpTPMfMC4bq8b9LpF8tukTWJ918gz 1ml1jKOA/Ox4mzOtWt3F6RnCjrXUhLN09vQCsGRnbOGlNXNSAhTempzPjCgZkYm4 6p5BD8CBZenrN4/+x9oFDrbfBamI4L6n88yK+QwvE9STMicRT69W3XADBAhy4Ozm 3Xq5O0c85cLhPlQMMIFzTA+7qirIMZGpJ4Er/f0//G2AejwoY0bqVvkANn+V4lx5 bztCmlAIIlaGHjqrqHYf+V/9QgY9tem50LQrDp8cz7X4Ms6NqPa2nBrJ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCORzyURb8ZOGNxkQCdX00gAsd11MB8GA1UdIwQY MBaAFC+/jG+39UcXC2eWJXXPK6jtFeVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzIt ZjFlNGYyMWQ4NzAyLzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzItZjFlNGYyMWQ4NzAy LzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb+Gtv7K wLcex4ndrgTTr5HTbHxBza0ylEnivuKkS3l8WIp5kQBCX5GlcPc+md8151AFw1ez hGTrFefSVfGpy7pPKkjyw4jo7sQlq6ii/NTDIg30l0t3PSrOpVyvDShoumyYVyZB J74Gw1hyg8ogZrkceJz9cGqlp1lBzMrtg8HPnmyuiD5WUKqUuQPXmcU6LWBwwPgF vEYxp2Cd4r+ON5D/IXSRYzHPQr0vNc6oOaezwkoX8Q6CQu1yYVD8D9oMc6tlw2D9 CgQK5+VP04eXT3JPQ5Gff/JEeGgJcy91NhZIZYaRPZU13pq/+KeWaGCnhB95QZeE SwJWrRSjb9MUbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:11 2025 by rpki-client