This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json) Hash identifier: 2MF5DUY6lSKLiWXYFH1N6B5fXk+9pKQO3IYexp+uUB4= Subject key identifier: 5F:87:6D:EA:D4:01:52:BC:DA:F0:A3:F0:47:DF:EC:28:B0:61:BE:40 Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94 Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94 Certificate serial: 019AF5E5A827DFB332A9AC446A73DE3C8E3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 23:00:59 +0000 Manifest this update: Sat 06 Dec 2025 23:00:59 +0000 Manifest next update: Sun 07 Dec 2025 23:00:59 +0000 Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: hCNEA792SUHcTiyKI+68n3p3BGgOQzfmJzdjQVl1Nys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a8:27:df:b3:32:a9:ac:44:6a:73:de:3c:8e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94 Validity Not Before: Dec 6 23:00:59 2025 GMT Not After : Dec 7 23:00:59 2025 GMT Subject: CN=5f876dead40152bcdaf0a3f047dfec28b061be40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:f6:22:f5:cc:3d:22:34:2c:c0:fd:69:e2: 93:e0:8a:48:8f:c1:05:cb:4f:30:ac:3c:48:dc:56: f2:6c:9b:1d:c6:db:4f:69:a2:67:7e:01:5f:47:17: 50:01:1d:08:36:fa:7d:d6:a7:8f:aa:4e:48:99:d2: 02:6e:77:29:0e:7c:75:d3:bc:dc:1b:19:95:73:b1: 3a:c8:27:2e:9f:0b:e7:ad:0d:2b:ca:d6:e1:d7:92: 38:a2:38:d5:c1:e3:88:dc:37:97:81:35:bc:14:b4: 90:76:9b:23:23:ad:d9:cc:d2:f4:b4:26:0c:63:0e: 27:1b:0b:8c:8a:2e:6f:16:76:88:db:57:60:8d:80: 90:c8:cd:c4:32:ea:b8:31:c6:1d:25:b3:48:35:40: c6:5d:4a:1c:b3:bb:d7:47:e8:de:1b:51:3a:87:ef: 5e:96:f1:f0:26:be:46:25:dc:5e:62:76:bf:6a:72: 11:88:c8:31:69:16:60:14:cf:6f:56:58:4d:dd:43: cc:cf:3a:67:95:d0:aa:59:cd:a3:6e:ed:2a:e1:01: bf:75:65:96:cd:ff:21:e2:0c:31:d9:45:ce:8f:b1: c6:91:d7:ea:04:9e:d0:69:a8:bb:77:18:cc:75:51: ab:aa:fd:8c:60:b8:d3:b9:00:e8:ff:76:93:64:63: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:87:6D:EA:D4:01:52:BC:DA:F0:A3:F0:47:DF:EC:28:B0:61:BE:40 X509v3 Authority Key Identifier: keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b5:68:8a:f7:02:d6:09:78:ed:5a:7c:bc:6c:f5:70:80:76: 8d:75:af:ef:23:ef:86:c7:77:b1:28:26:48:a3:78:8c:c6:99: 4a:fc:a9:c5:37:08:3e:bc:83:6d:db:b2:27:49:ce:e7:b5:3c: 2f:5a:e9:13:db:e7:97:ea:df:95:d5:c8:17:12:db:63:73:06: 7a:ba:bc:0e:12:5b:5d:e8:16:06:67:3a:f8:a5:aa:82:73:59: f3:07:88:43:46:83:5f:a3:90:b8:de:ac:c2:c5:83:40:57:3b: e8:28:d3:ee:9b:48:b4:51:03:38:83:7f:f8:dd:31:20:7b:b7: b2:9a:be:5a:19:fd:60:a3:8d:4d:c8:93:be:d5:5d:67:95:c3: 13:70:75:15:45:69:00:d2:d7:c7:d8:2a:7b:5b:2b:75:5a:b6: 19:df:d9:c8:d2:fa:1d:97:31:9b:cd:f8:4d:66:eb:54:e9:03: 1e:28:ce:ed:4b:7f:5d:54:4c:10:88:91:d7:27:57:e5:98:a4: 2c:3b:e4:42:77:e0:93:81:8d:02:4f:8a:87:71:04:85:e9:88: 37:7d:ff:29:69:95:57:3d:4c:ec:12:07:1c:14:25:04:6e:17: 4f:1f:fa:85:7f:83:fe:26:20:85:57:eb:99:91:a8:69:7e:66: 44:00:99:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15agn37MyqaxEanPePI4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDNkZjgyOWFmZDZhMWYyNTkwZTQyNDQ1MjJlMWIzNmMw ODZhOTQwHhcNMjUxMjA2MjMwMDU5WhcNMjUxMjA3MjMwMDU5WjAzMTEwLwYDVQQD Eyg1Zjg3NmRlYWQ0MDE1MmJjZGFmMGEzZjA0N2RmZWMyOGIwNjFiZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPz2IvXMPSI0LMD9aeKT4IpIj8EF y08wrDxI3FbybJsdxttPaaJnfgFfRxdQAR0INvp91qePqk5ImdICbncpDnx107zc GxmVc7E6yCcunwvnrQ0rytbh15I4ojjVweOI3DeXgTW8FLSQdpsjI63ZzNL0tCYM Yw4nGwuMii5vFnaI21dgjYCQyM3EMuq4McYdJbNINUDGXUocs7vXR+jeG1E6h+9e lvHwJr5GJdxeYna/anIRiMgxaRZgFM9vVlhN3UPMzzpnldCqWc2jbu0q4QG/dWWW zf8h4gwx2UXOj7HGkdfqBJ7Qaai7dxjMdVGrqv2MYLjTuQDo/3aTZGNmnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+HberUAVK82vCj8Eff7CiwYb5AMB8GA1UdIwQY MBaAFO4D34Ka/WofJZDkJEUi4bNsCGqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjIt YTFhNDZhODBjMWRhLzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjItYTFhNDZhODBjMWRh LzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7VoivcC 1gl47Vp8vGz1cIB2jXWv7yPvhsd3sSgmSKN4jMaZSvypxTcIPryDbduyJ0nO57U8 L1rpE9vnl+rfldXIFxLbY3MGerq8DhJbXegWBmc6+KWqgnNZ8weIQ0aDX6OQuN6s wsWDQFc76CjT7ptItFEDOIN/+N0xIHu3spq+Whn9YKONTciTvtVdZ5XDE3B1FUVp ANLXx9gqe1srdVq2Gd/ZyNL6HZcxm834TWbrVOkDHijO7Ut/XVRMEIiR1ydX5Zik LDvkQnfgk4GNAk+Kh3EEhemIN33/KWmVVz1M7BIHHBQlBG4XTx/6hX+D/iYghVfr mZGoaX5mRACZ3g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:13 2025 by rpki-client