This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json) Hash identifier: H6pPzBkmhFzECGGA+Yo0dKDNaFC/k6jQJI7EG1fWQJ4= Subject key identifier: 5A:B8:9D:29:65:CF:85:58:B0:C1:16:9F:4A:B9:F7:91:67:33:CD:5A Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95 Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95 Certificate serial: 019AF088608F45719973F02BC94BD75BCDC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft Manifest number: 0637 Signing time: Fri 05 Dec 2025 22:01:00 +0000 Manifest this update: Fri 05 Dec 2025 22:01:00 +0000 Manifest next update: Sat 06 Dec 2025 22:01:00 +0000 Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: 0pus9NbqaMzQ71Ll+xMw+QKGfnyoQZChZijAZtG9pQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:60:8f:45:71:99:73:f0:2b:c9:4b:d7:5b:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95 Validity Not Before: Dec 5 22:01:00 2025 GMT Not After : Dec 6 22:01:00 2025 GMT Subject: CN=5ab89d2965cf8558b0c1169f4ab9f7916733cd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:d7:5e:a1:f3:26:1b:d5:9f:87:d5:ae:49: 5d:9d:fe:7e:9a:48:8d:87:37:b1:fb:8c:4e:65:c9: c2:55:55:bd:79:64:02:4f:4b:f2:37:3b:3a:f4:af: d6:cb:40:dd:74:0b:c1:91:a4:9e:ce:1c:64:d3:d2: 46:06:ed:b1:e0:95:59:6f:25:db:95:fe:17:34:51: 09:6e:d0:bf:a0:d8:20:e2:cb:2b:6c:fd:3f:b9:e1: 5a:46:6c:0b:38:fb:26:00:e6:7e:f9:13:21:27:62: 81:9f:18:2e:76:83:44:8f:af:72:9d:49:50:52:bf: d6:77:f0:4d:f0:a4:8c:da:9e:de:5e:27:fa:20:32: 20:a6:a5:fd:c5:85:14:bf:c6:4b:5b:e0:6a:2b:dd: 1a:7b:ab:56:2f:31:5c:f8:1c:fa:73:34:9e:65:96: 82:86:cb:c2:47:da:20:5c:03:54:d5:b2:f0:0a:3a: 5b:22:55:3c:cf:96:a8:06:62:bb:69:2f:29:b8:3a: 5b:a1:56:fc:b8:fe:fe:6c:85:9d:0b:93:69:0f:a4: 49:44:72:31:69:8a:0f:b7:90:46:72:40:4c:0f:81: 0f:35:7d:f6:f8:19:9a:23:18:fb:82:0b:05:72:fe: b2:9c:9c:2e:c3:68:ff:41:e2:b3:b3:31:36:85:5b: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:9D:29:65:CF:85:58:B0:C1:16:9F:4A:B9:F7:91:67:33:CD:5A X509v3 Authority Key Identifier: keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c1:bc:ee:eb:ae:d5:ce:a6:93:ed:34:49:9e:b0:3a:66:3f: 15:6f:b5:08:17:35:be:e7:8f:b9:d9:e5:1c:e6:79:67:4f:fc: 15:c4:e0:e8:88:f2:e1:36:16:72:ec:f9:d8:44:c4:73:65:5a: f9:59:c1:e1:22:1b:3d:f2:82:e3:f3:72:e5:21:80:40:2e:af: 30:51:e5:2a:29:32:4d:c9:35:6b:6a:ce:4f:ae:09:69:7d:c8: 64:15:31:a5:2e:cc:53:73:67:f5:ca:10:be:a9:62:da:79:48: 91:68:7c:37:27:ed:fa:3b:d8:ae:3d:5b:ed:d6:b5:6f:c5:2e: 36:82:7d:1f:bf:19:61:fd:b5:c4:c8:56:53:1f:f2:f1:7c:41: 4a:fa:75:70:27:36:f9:37:3e:4d:7e:0a:2c:70:8a:b2:59:72: 74:3e:63:6c:c3:1d:d5:34:0a:1c:39:46:1a:26:ad:23:af:06: b8:77:61:05:f1:4d:66:40:08:9b:a4:6a:b5:ff:fe:d6:b3:39: 35:65:05:61:6b:19:7e:a4:4c:97:01:46:81:18:4f:71:b9:d2: b0:d6:a7:cd:07:9f:bb:46:96:9b:1d:12:72:6d:bd:0d:5a:b4: 58:e0:80:d7:20:66:ea:5f:42:fa:80:7a:16:a2:c6:c5:30:ad: 05:5d:05:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGCPRXGZc/AryUvXW83AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOWEzZWM3Y2IzYjE5MGU3MjEzMDk5ZGUxNjcxYmVhMmQz MjhhOTUwHhcNMjUxMjA1MjIwMTAwWhcNMjUxMjA2MjIwMTAwWjAzMTEwLwYDVQQD Eyg1YWI4OWQyOTY1Y2Y4NTU4YjBjMTE2OWY0YWI5Zjc5MTY3MzNjZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE3XXqHzJhvVn4fVrkldnf5+mkiN hzex+4xOZcnCVVW9eWQCT0vyNzs69K/Wy0DddAvBkaSezhxk09JGBu2x4JVZbyXb lf4XNFEJbtC/oNgg4ssrbP0/ueFaRmwLOPsmAOZ++RMhJ2KBnxgudoNEj69ynUlQ Ur/Wd/BN8KSM2p7eXif6IDIgpqX9xYUUv8ZLW+BqK90ae6tWLzFc+Bz6czSeZZaC hsvCR9ogXANU1bLwCjpbIlU8z5aoBmK7aS8puDpboVb8uP7+bIWdC5NpD6RJRHIx aYoPt5BGckBMD4EPNX32+BmaIxj7ggsFcv6ynJwuw2j/QeKzszE2hVvIxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq4nSllz4VYsMEWn0q595FnM81aMB8GA1UdIwQY MBaAFO2aPsfLOxkOchMJneFnG+otMoqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEt YTQ0MmY0Nzc2NGQzLzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEtYTQ0MmY0Nzc2NGQz LzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMG87uuu 1c6mk+00SZ6wOmY/FW+1CBc1vuePudnlHOZ5Z0/8FcTg6Ijy4TYWcuz52ETEc2Va +VnB4SIbPfKC4/Ny5SGAQC6vMFHlKikyTck1a2rOT64JaX3IZBUxpS7MU3Nn9coQ vqli2nlIkWh8Nyft+jvYrj1b7da1b8UuNoJ9H78ZYf21xMhWUx/y8XxBSvp1cCc2 +Tc+TX4KLHCKsllydD5jbMMd1TQKHDlGGiatI68GuHdhBfFNZkAIm6Rqtf/+1rM5 NWUFYWsZfqRMlwFGgRhPcbnSsNanzQefu0aWmx0Scm29DVq0WOCA1yBm6l9C+oB6 FqLGxTCtBV0FNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:20 2025 by rpki-client