This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft File: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft (raw, json) Hash identifier: vLW5stn4XZ7NuFoWQwPVH3zJ48Bz8z7oUdvKm111I0k= Subject key identifier: 94:11:49:17:D4:F7:F1:9D:06:C1:2C:D9:9A:89:A6:F0:D3:16:FD:D9 Authority key identifier: EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8 Certificate issuer: /CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8 Certificate serial: 019AF2099EB167CDCD69ECF2BD2E70CBD1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft Manifest number: 029F Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl (hash: AEIj86nIZa/XiOgHqNk4QHVr2m7MFtpY6394Gp6PUY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9e:b1:67:cd:cd:69:ec:f2:bd:2e:70:cb:d1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=94114917d4f7f19d06c12cd99a89a6f0d316fdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:37:72:32:9e:13:8f:ad:21:4d:31:53:31: 6d:1a:d6:f2:d1:2d:19:59:89:0b:69:39:5a:e1:e0: f0:42:29:33:49:5e:3f:59:51:77:f2:68:55:2c:f4: 6d:cf:07:08:8d:1b:40:f1:e8:d9:0a:bb:e5:73:9d: 07:5e:e6:09:be:b6:86:ce:b8:a8:45:54:67:a4:b1: a8:f5:29:a8:fe:c7:cd:93:01:1f:5d:f2:c4:a3:27: 94:79:ee:4a:03:33:ec:28:00:3b:77:e2:4a:81:e2: 41:33:73:4c:16:b6:dc:b4:dd:37:2a:26:21:c6:e2: 54:da:91:d3:c7:b2:f3:3e:e7:30:77:ed:50:bf:24: ac:63:a8:66:a2:57:8b:42:5c:05:97:30:03:6b:b0: 3f:9c:e6:90:75:76:3b:2f:c8:86:7a:5f:a0:7f:5a: 3b:a9:af:fc:54:dc:58:16:de:cb:f3:8f:c3:a1:2c: b1:18:87:c1:2a:5a:3c:bc:eb:13:7a:ce:b9:e4:c1: 10:d1:9d:c9:85:70:c5:61:ba:dd:f7:95:f3:16:ff: bf:97:a9:7e:7a:ce:55:02:cd:7c:98:ac:d9:0a:42: da:2d:5d:af:fe:56:54:59:29:12:3f:a1:e7:7f:66: 94:18:05:1b:d1:36:ef:90:bd:1e:25:b5:ec:54:90: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:49:17:D4:F7:F1:9D:06:C1:2C:D9:9A:89:A6:F0:D3:16:FD:D9 X509v3 Authority Key Identifier: keyid:EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5e:16:ac:f9:18:6b:aa:4e:a7:5c:52:fc:8b:00:27:9c:73: e4:ce:ba:35:8b:4d:af:db:77:c8:d3:f2:9b:39:19:f9:ce:be: 5f:51:49:4a:48:14:b2:9b:c5:fd:dd:c1:b5:ed:3f:78:ef:58: 01:81:97:3d:43:97:e7:8a:ce:f5:6b:9f:2a:f9:0a:d6:04:b4: 29:23:51:67:0d:15:c8:96:eb:73:c5:57:87:34:36:c4:c1:30: 48:b1:40:ac:06:47:5c:a7:bb:64:3e:dc:46:c0:a2:d4:ba:c1: 5b:15:65:68:7f:5a:68:12:69:82:53:9f:85:2d:c9:8e:99:f7: 30:9e:18:d0:77:de:11:c3:a7:6e:fc:4a:27:c9:f8:cf:ae:29: f8:18:97:33:67:0c:12:1a:2e:c7:bd:69:5c:7f:67:ac:04:8e: 83:76:e2:bd:ea:3b:7e:3f:cc:a3:12:e6:37:57:7b:c6:cd:11: 0b:74:3e:b1:ab:be:75:33:8a:2f:e2:d6:27:a7:b1:e8:e8:cc: 9d:58:4e:8c:66:e7:f7:a3:5d:dd:26:c5:fa:6d:f5:7e:a6:32: 0f:3f:db:0d:23:2b:2e:58:2b:3d:cb:16:f5:16:a1:1b:f3:54: 24:d9:4c:f0:f8:6b:91:81:ad:f6:ef:e6:12:a7:34:af:ab:1c: eb:ee:ef:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ6xZ83NaezyvS5wy9H+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjODJjMzBmOTY0ZmYyYWZkMGNmMDhmMzhjOGIyNzRkZjIy NzE0ZjgwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD Eyg5NDExNDkxN2Q0ZjdmMTlkMDZjMTJjZDk5YTg5YTZmMGQzMTZmZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbo3cjKeE4+tIU0xUzFtGtby0S0Z WYkLaTla4eDwQikzSV4/WVF38mhVLPRtzwcIjRtA8ejZCrvlc50HXuYJvraGzrio RVRnpLGo9Smo/sfNkwEfXfLEoyeUee5KAzPsKAA7d+JKgeJBM3NMFrbctN03KiYh xuJU2pHTx7LzPucwd+1QvySsY6hmoleLQlwFlzADa7A/nOaQdXY7L8iGel+gf1o7 qa/8VNxYFt7L84/DoSyxGIfBKlo8vOsTes655MEQ0Z3JhXDFYbrd95XzFv+/l6l+ es5VAs18mKzZCkLaLV2v/lZUWSkSP6Hnf2aUGAUb0TbvkL0eJbXsVJAbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQRSRfU9/GdBsEs2ZqJpvDTFv3ZMB8GA1UdIwQY MBaAFOyCww+WT/Kv0M8I84yLJ03yJxT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85YThjZWItMjdjYS00YTIxLTg0OGIt MGI5NTRmZmY5YjI1LzEvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85YThjZWItMjdjYS00YTIxLTg0OGItMGI5NTRmZmY5YjI1 LzEvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV4WrPkY a6pOp1xS/IsAJ5xz5M66NYtNr9t3yNPymzkZ+c6+X1FJSkgUspvF/d3Bte0/eO9Y AYGXPUOX54rO9WufKvkK1gS0KSNRZw0VyJbrc8VXhzQ2xMEwSLFArAZHXKe7ZD7c RsCi1LrBWxVlaH9aaBJpglOfhS3Jjpn3MJ4Y0HfeEcOnbvxKJ8n4z64p+BiXM2cM Ehoux71pXH9nrASOg3biveo7fj/MoxLmN1d7xs0RC3Q+sau+dTOKL+LWJ6ex6OjM nVhOjGbn96Nd3SbF+m31fqYyDz/bDSMrLlgrPcsW9RahG/NUJNlM8PhrkYGt9u/m Eqc0r6sc6+7v8w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:05 2025 by rpki-client