This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft File: 7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json) Hash identifier: ZTC6kE02J/pGvqQU79xdwZih2KSDHyZMNT9gDxcDZ7w= Subject key identifier: EF:FE:9F:93:5A:02:89:AA:54:63:03:3F:95:1E:E7:C2:91:6F:0E:C9 Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5 Certificate issuer: /CN=ed6dd58c730f490c6c6530b750b518e793a487a5 Certificate serial: 019AF31BA4DD6CDECAE5902523CE42F67F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: QXgfdX1PBXsVUmdYSUs0OvlE/LvskGXGPymauqBbxNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a4:dd:6c:de:ca:e5:90:25:23:ce:42:f6:7f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5 Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=effe9f935a0289aa5463033f951ee7c2916f0ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:17:43:b9:8c:63:68:68:f3:66:7f:c1:6b: 2f:13:10:b0:c4:be:24:b4:f3:2e:20:6a:34:33:47: 76:92:d8:83:4d:80:11:f9:61:9f:81:50:1b:a0:ff: 5f:d7:9b:dc:90:81:b5:58:44:f3:97:69:42:f6:bc: 49:7f:16:4b:90:e0:60:51:22:f9:88:44:42:ef:4e: 43:db:ca:d3:5a:3d:1e:12:1a:5b:99:bb:64:96:c2: ca:2a:19:52:2d:70:7e:a5:04:ab:f3:0b:71:d1:d5: 97:21:cb:31:87:26:d7:93:bd:4f:51:09:cb:0e:fe: d3:4f:e0:42:b4:37:5e:fa:8e:44:59:7c:93:a0:09: 23:4e:6d:bc:37:32:01:38:b4:f9:b3:42:b7:1b:de: 9c:30:77:ce:7b:3b:2f:8c:a2:28:fa:01:97:51:65: c5:89:89:3c:ff:7d:ed:68:ca:86:82:80:75:d8:8f: f6:09:36:2b:18:0f:ab:63:c1:6b:75:03:48:0d:1f: b4:e6:99:bd:c9:a3:94:85:5d:48:41:f4:b2:4c:5f: 5b:3c:c2:1e:16:f7:0d:43:f5:4c:c1:55:71:44:e6: cb:72:f4:12:82:52:91:4a:f4:6a:5d:3d:b6:44:9f: 68:2a:b8:30:6f:2c:00:bd:11:e8:4b:e9:b3:fb:61: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FE:9F:93:5A:02:89:AA:54:63:03:3F:95:1E:E7:C2:91:6F:0E:C9 X509v3 Authority Key Identifier: keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:20:ff:83:df:85:b8:16:03:04:d7:c7:2e:ed:1a:d2:62:b5: 17:4d:73:77:b6:3a:99:70:ff:34:5a:64:7d:80:b6:47:d5:3b: a3:0f:7f:f3:aa:c6:30:b3:8c:55:d9:09:fd:44:9e:83:53:84: f3:ba:03:67:77:18:93:22:af:e9:cd:7b:d6:b2:36:2f:41:b8: 71:40:7a:f6:8a:eb:a0:f7:5a:7b:0e:d5:45:34:19:ce:48:0c: f1:92:ab:ee:4e:01:e4:6e:5e:44:35:60:24:6c:be:7c:bf:44: 98:ff:13:4e:7f:88:69:04:9f:c5:70:0b:21:88:d6:c1:ba:ab: 43:f5:e3:db:a2:71:4e:2b:e1:77:a2:ab:45:b4:1c:84:fd:0b: db:de:30:62:b7:98:2c:8c:18:62:66:0b:ea:da:a2:a3:a1:2f: 2f:44:81:eb:46:21:67:24:03:06:6d:7e:4b:38:0b:7c:03:c2: 61:66:9b:76:45:a2:9d:35:9a:14:87:02:4c:92:d7:67:c5:61: fc:1f:4a:ef:88:dc:79:17:29:d6:03:d6:2f:43:6d:80:c5:24: af:be:5e:dd:90:4d:2d:1b:67:bb:bc:0b:1b:e4:e1:a5:c9:8e: 10:ff:e6:e5:71:1a:69:d9:9e:a0:db:6a:40:68:7e:8e:20:c4: 84:45:55:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6TdbN7K5ZAlI85C9n+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh NDg3YTUwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD EyhlZmZlOWY5MzVhMDI4OWFhNTQ2MzAzM2Y5NTFlZTdjMjkxNmYwZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3AXQ7mMY2ho82Z/wWsvExCwxL4k tPMuIGo0M0d2ktiDTYAR+WGfgVAboP9f15vckIG1WETzl2lC9rxJfxZLkOBgUSL5 iERC705D28rTWj0eEhpbmbtklsLKKhlSLXB+pQSr8wtx0dWXIcsxhybXk71PUQnL Dv7TT+BCtDde+o5EWXyToAkjTm28NzIBOLT5s0K3G96cMHfOezsvjKIo+gGXUWXF iYk8/33taMqGgoB12I/2CTYrGA+rY8FrdQNIDR+05pm9yaOUhV1IQfSyTF9bPMIe FvcNQ/VMwVVxRObLcvQSglKRSvRqXT22RJ9oKrgwbywAvRHoS+mz+2FcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/+n5NaAomqVGMDP5Ue58KRbw7JMB8GA1UdIwQY MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCD/g9+F uBYDBNfHLu0a0mK1F01zd7Y6mXD/NFpkfYC2R9U7ow9/86rGMLOMVdkJ/USeg1OE 87oDZ3cYkyKv6c171rI2L0G4cUB69orroPdaew7VRTQZzkgM8ZKr7k4B5G5eRDVg JGy+fL9EmP8TTn+IaQSfxXALIYjWwbqrQ/Xj26JxTivhd6KrRbQchP0L294wYreY LIwYYmYL6tqio6EvL0SB60YhZyQDBm1+SzgLfAPCYWabdkWinTWaFIcCTJLXZ8Vh /B9K74jceRcp1gPWL0NtgMUkr75e3ZBNLRtnu7wLG+ThpcmOEP/m5XEaadmeoNtq QGh+jiDEhEVVGw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:32 2025 by rpki-client