This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json) Hash identifier: 1FzTbaJ/IGwgCI/iGFmH1ajsE8Q7v5wZukWTTJE3AqQ= Subject key identifier: 65:CA:02:C8:5F:F0:67:A3:5B:FB:FA:5C:76:64:DD:0D:FF:09:D8:54 Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8 Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8 Certificate serial: 019AF50A958F7ED4F6D8D4B458A4E6E506FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft Manifest number: 0402 Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: 5+DeIuvqln71QYWWYCLjpKEAnPEZBirpEtzvy1YtjwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:95:8f:7e:d4:f6:d8:d4:b4:58:a4:e6:e5:06:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8 Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=65ca02c85ff067a35bfbfa5c7664dd0dff09d854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:6e:2e:5f:86:15:6c:3b:72:1a:a4:87:b9: 05:f3:96:71:b4:ff:32:91:8e:d1:25:b4:ce:7e:a5: ce:fa:62:82:37:f9:2f:32:96:3f:bb:38:a0:89:95: 7e:08:0b:4d:58:de:0d:d3:bd:03:81:f1:ea:0b:4f: 9a:cf:c8:65:d7:76:3f:42:da:da:0a:fd:e2:e3:2e: ba:6c:1c:67:51:7b:e5:46:82:ea:e6:9c:cf:79:98: 05:be:4b:ae:fb:99:1d:51:b6:aa:40:82:ce:2b:81: 7b:1a:97:db:3c:48:d7:e8:5c:33:7e:f7:5f:16:01: 9f:51:8b:dc:5f:b0:d1:6f:84:ce:00:34:5b:af:e9: 05:02:34:5b:9f:5a:f7:71:6a:aa:5e:37:36:67:92: 5f:0c:0c:da:ef:ef:56:48:42:58:32:0b:07:b0:8d: f4:bc:f7:96:c6:9d:c5:6d:c8:fc:e5:84:0d:6d:d6: 98:26:49:db:ff:29:42:db:24:14:c4:bf:2d:f4:4e: b7:c1:bd:b0:1e:c6:e4:97:8e:ea:cf:9f:1c:b2:33: 2c:f1:10:b4:44:b8:be:68:6d:27:49:0e:37:d4:3d: 1b:25:88:ab:59:86:70:b4:5c:1c:db:0c:d6:04:c4: 1d:db:8a:51:4f:82:cf:96:bf:a2:f5:91:ce:91:1f: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CA:02:C8:5F:F0:67:A3:5B:FB:FA:5C:76:64:DD:0D:FF:09:D8:54 X509v3 Authority Key Identifier: keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:38:cf:db:89:54:27:35:4a:a7:73:76:8e:5b:bd:c4:d8:00: 15:c4:c2:ea:7d:d5:cf:61:e2:7c:b2:18:f9:fc:da:94:70:29: f6:dc:0f:e9:58:b2:b1:b0:16:5c:24:46:f8:41:c8:3a:89:38: 80:37:de:1e:07:6d:19:60:c0:02:0e:5e:18:81:4b:b5:e5:1d: 33:03:20:06:81:90:c4:f5:2a:03:a1:27:44:72:9c:05:1e:c3: 39:d5:18:14:f4:0c:28:2b:b8:b7:e2:20:62:47:d0:50:ea:8d: a3:72:4f:ec:94:b7:bc:dc:4e:67:a5:f9:7c:7c:8b:38:cb:3a: 4b:13:62:b6:5d:7e:ea:3f:9c:96:40:79:c7:dd:73:92:67:f8: 28:47:95:3e:ea:fa:82:92:95:d3:5e:ed:9f:b2:67:12:75:8e: e3:f5:18:bc:f9:1e:ab:47:b9:3b:33:4f:5d:a1:4f:98:95:a1: fa:57:56:17:02:40:2c:7e:6b:c5:6d:1a:18:a7:7c:9a:5e:e6: 07:99:a5:5e:e0:e5:2c:f0:bf:9b:97:d4:1c:fd:0b:32:97:a3: b5:16:dd:1b:81:65:5f:3c:b4:50:7c:21:d1:2f:5c:c0:b5:24: 74:50:ef:b5:91:1e:e2:47:f5:7e:3f:0a:bd:69:8b:59:d6:74: ad:0c:eb:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpWPftT22NS0WKTm5Qb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMWI2YWRjOTk0OTdmZDFiMzBhMGE0ODJlZGM0MDJiMGM0 ZjBjZjgwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD Eyg2NWNhMDJjODVmZjA2N2EzNWJmYmZhNWM3NjY0ZGQwZGZmMDlkODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuahuLl+GFWw7chqkh7kF85ZxtP8y kY7RJbTOfqXO+mKCN/kvMpY/uzigiZV+CAtNWN4N070DgfHqC0+az8hl13Y/Qtra Cv3i4y66bBxnUXvlRoLq5pzPeZgFvkuu+5kdUbaqQILOK4F7GpfbPEjX6Fwzfvdf FgGfUYvcX7DRb4TOADRbr+kFAjRbn1r3cWqqXjc2Z5JfDAza7+9WSEJYMgsHsI30 vPeWxp3Fbcj85YQNbdaYJknb/ylC2yQUxL8t9E63wb2wHsbkl47qz58csjMs8RC0 RLi+aG0nSQ431D0bJYirWYZwtFwc2wzWBMQd24pRT4LPlr+i9ZHOkR8bqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXKAshf8GejW/v6XHZk3Q3/CdhUMB8GA1UdIwQY MBaAFO0batyZSX/RswoKSC7cQCsMTwz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgt MmM5NmZiODU1NTdhLzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgtMmM5NmZiODU1NTdh LzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDjP24lU JzVKp3N2jlu9xNgAFcTC6n3Vz2HifLIY+fzalHAp9twP6ViysbAWXCRG+EHIOok4 gDfeHgdtGWDAAg5eGIFLteUdMwMgBoGQxPUqA6EnRHKcBR7DOdUYFPQMKCu4t+Ig YkfQUOqNo3JP7JS3vNxOZ6X5fHyLOMs6SxNitl1+6j+clkB5x91zkmf4KEeVPur6 gpKV017tn7JnEnWO4/UYvPkeq0e5OzNPXaFPmJWh+ldWFwJALH5rxW0aGKd8ml7m B5mlXuDlLPC/m5fUHP0LMpejtRbdG4FlXzy0UHwh0S9cwLUkdFDvtZEe4kf1fj8K vWmLWdZ0rQzrmA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:38 2025 by rpki-client