This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json) Hash identifier: iNv7q13ZfIILxLR+Rp/20kqnGHoyQCgJlO3TMWOUTJI= Subject key identifier: 07:79:A1:90:96:09:14:FA:09:24:15:1E:33:51:0E:C2:D5:DE:FD:6F Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44 Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344 Certificate serial: 019AF27728D4C6F7CF71DFC7B401E7E9AB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft Manifest number: 14C1 Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: BHnt+R3XljqUbpW0Qsi4jEpyihKgfWe81hUGOzngj2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:28:d4:c6:f7:cf:71:df:c7:b4:01:e7:e9:ab:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344 Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=0779a190960914fa0924151e33510ec2d5defd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:3d:4d:12:a6:8f:6f:ca:8e:30:85:6c:ea: 3c:08:9a:27:4b:6a:10:b6:1f:94:cd:d2:0d:32:f4: 98:65:bc:ee:7b:77:b1:04:9a:b4:db:b8:60:9e:9d: c7:dc:c7:00:f9:17:18:30:c3:e9:ca:ad:57:77:0f: 8f:9c:63:4f:9a:3e:b8:70:65:98:dd:21:a1:c8:44: 73:fd:34:49:64:80:ac:38:1a:7e:24:d0:45:d2:4f: 05:2e:64:2c:72:26:e1:7f:7c:a0:6c:7d:ac:ba:db: 2f:28:a7:07:0c:a0:c1:86:e8:8f:dd:d9:db:93:32: 79:40:46:aa:2f:4b:67:26:af:ab:fa:91:2d:30:54: d4:72:4a:eb:1e:01:61:d2:93:8d:71:e6:77:69:ed: 12:f7:27:32:cc:61:9a:e4:b8:80:a3:43:51:49:35: 62:88:61:b8:ea:ac:42:b3:84:99:1e:e3:10:1a:8e: 2b:83:84:c9:47:e6:0b:68:e1:c3:6e:9e:76:51:45: 13:1e:a3:bb:d3:59:65:bb:07:b2:d1:e6:40:4c:1c: c3:1f:4f:97:9e:77:b9:3b:e7:29:8b:73:87:ee:d7: af:2c:53:36:ee:12:65:d2:ce:a3:75:ce:a6:3c:ba: 6f:31:82:f8:6e:e1:00:bb:01:5a:cb:8f:a2:53:02: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:79:A1:90:96:09:14:FA:09:24:15:1E:33:51:0E:C2:D5:DE:FD:6F X509v3 Authority Key Identifier: keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:18:55:72:3d:33:87:00:b4:f1:cb:41:c3:73:5c:e1:24:4d: 59:22:3c:3d:42:85:7b:e1:26:8d:61:fa:36:8b:b4:a4:87:4b: 60:21:10:4d:ba:1b:59:be:0f:d3:d2:f0:68:1d:af:81:d1:c3: 06:1b:22:73:67:c3:10:e2:af:c4:f4:43:3c:50:39:27:c7:f8: df:d0:da:12:fa:99:89:73:6e:d3:61:78:05:d1:5d:1f:df:39: 31:dc:ed:58:4b:c7:e3:c8:cb:87:15:84:25:13:7b:8e:19:88: 06:0f:36:9b:06:69:9c:88:06:65:7e:9a:3a:c1:7b:2c:c0:33: e1:a0:67:cd:86:00:1e:80:79:2e:70:77:29:2e:58:de:ae:42: 1f:36:07:e0:cb:3b:fd:82:a2:d9:cb:7a:4f:ef:35:81:33:08: 43:e3:7e:39:fa:43:74:1d:f8:20:fb:4b:f8:f5:18:cb:99:33: 96:5e:6f:69:b6:4f:f0:54:91:bd:6f:cb:b1:af:24:a7:c1:83: a1:fd:0f:66:af:0f:6d:36:9d:3c:f5:1c:d9:99:a6:47:1d:8a: 5d:12:80:0e:50:6b:4e:06:7d:07:f1:c8:13:89:e7:84:dd:6d: 89:ca:ca:82:85:5b:93:d7:0f:c9:88:08:a0:ca:f9:94:03:00: 07:c8:b4:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyjUxvfPcd/HtAHn6atGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy NTEzNDQwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EygwNzc5YTE5MDk2MDkxNGZhMDkyNDE1MWUzMzUxMGVjMmQ1ZGVmZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iQ9TRKmj2/KjjCFbOo8CJonS2oQ th+UzdINMvSYZbzue3exBJq027hgnp3H3McA+RcYMMPpyq1Xdw+PnGNPmj64cGWY 3SGhyERz/TRJZICsOBp+JNBF0k8FLmQscibhf3ygbH2sutsvKKcHDKDBhuiP3dnb kzJ5QEaqL0tnJq+r+pEtMFTUckrrHgFh0pONceZ3ae0S9ycyzGGa5LiAo0NRSTVi iGG46qxCs4SZHuMQGo4rg4TJR+YLaOHDbp52UUUTHqO701lluwey0eZATBzDH0+X nne5O+cpi3OH7tevLFM27hJl0s6jdc6mPLpvMYL4buEAuwFay4+iUwLJ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd5oZCWCRT6CSQVHjNRDsLV3v1vMB8GA1UdIwQY MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5 LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhhVcj0z hwC08ctBw3Nc4SRNWSI8PUKFe+EmjWH6Nou0pIdLYCEQTbobWb4P09LwaB2vgdHD Bhsic2fDEOKvxPRDPFA5J8f439DaEvqZiXNu02F4BdFdH985MdztWEvH48jLhxWE JRN7jhmIBg82mwZpnIgGZX6aOsF7LMAz4aBnzYYAHoB5LnB3KS5Y3q5CHzYH4Ms7 /YKi2ct6T+81gTMIQ+N+OfpDdB34IPtL+PUYy5kzll5vabZP8FSRvW/Lsa8kp8GD of0PZq8PbTadPPUc2ZmmRx2KXRKADlBrTgZ9B/HIE4nnhN1ticrKgoVbk9cPyYgI oMr5lAMAB8i0RA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:25 2025 by rpki-client