This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json) Hash identifier: Bbs7wPHkhN2zZfeelWXZgpOqLJTKAmQcSHs6uObPds8= Subject key identifier: AE:85:15:EA:3B:CF:A3:79:F1:9E:ED:4F:B2:89:B9:26:47:2A:63:47 Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81 Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081 Certificate serial: 019AF12E7885FF5A75F678B6C082945381C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft Manifest number: 0B6D Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: p/KEc+g0eq2pYePORvHZmK2apr0VfvqWTRlRI+DYlOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:78:85:ff:5a:75:f6:78:b6:c0:82:94:53:81:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=ae8515ea3bcfa379f19eed4fb289b926472a6347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:07:7d:8b:16:c5:e2:2d:25:ae:6b:1c:10:0f: 03:f0:4e:44:c8:3f:ea:a9:e2:4a:a6:42:13:de:37: c9:61:ae:2d:95:f5:05:1a:66:52:de:95:ee:b0:de: 71:e5:19:a1:ac:0a:fe:87:0a:0a:a8:fa:2e:9a:eb: 5b:5f:24:57:2c:d1:bb:16:c9:c7:8e:d2:c0:46:13: ce:70:ac:4a:d9:43:86:19:32:e1:2b:23:7b:91:0e: 7b:50:3f:02:60:cb:53:f6:a1:25:3e:94:dc:17:cf: 0f:0d:75:c2:51:8b:fc:69:1f:92:45:77:eb:72:60: a0:38:af:27:10:ac:a7:f9:6e:d2:e6:c4:68:44:0f: 8d:22:95:2e:09:c0:f3:3f:63:d7:e5:c2:d8:e5:01: d7:40:b2:c7:34:6b:9a:81:74:04:1f:bb:cf:1e:67: 8e:69:c8:34:04:4e:c6:ca:c4:41:4b:88:d3:e2:ff: 93:ab:20:d4:29:ac:42:3b:d7:f9:32:fe:0d:57:a1: d0:51:a3:74:dc:3c:53:38:79:4f:dc:05:a6:74:c4: 9f:d9:4a:ed:68:a5:6f:e3:da:9f:18:9b:8e:a4:a8: 1e:04:ae:c0:7c:12:94:93:e7:25:5f:ff:84:13:75: fb:de:db:51:48:89:56:f7:2f:52:00:f7:e3:a5:08: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:15:EA:3B:CF:A3:79:F1:9E:ED:4F:B2:89:B9:26:47:2A:63:47 X509v3 Authority Key Identifier: keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:49:90:5c:59:03:02:7d:e4:c8:f3:32:1f:47:85:92:73:c6: ae:0f:46:d7:64:28:75:1c:a2:1a:d5:68:96:d8:51:91:43:b3: a8:37:0b:9f:5f:f8:de:25:5d:52:4d:f1:a0:52:0e:2e:de:4a: 37:eb:fe:36:6b:4a:99:77:47:2f:c6:bc:7a:d5:66:df:5e:91: da:1d:7d:4f:7e:89:73:ff:60:6c:31:05:4e:78:dc:44:5e:21: 96:c0:39:0a:7d:f2:41:b6:75:ac:29:fb:b5:a1:d7:80:24:bb: 2d:ba:95:ca:f5:f4:a2:68:e4:1f:9f:ff:34:e4:d0:e7:ce:b0: c7:2d:81:3b:6b:97:a8:8d:64:41:ba:92:b0:fa:22:92:90:81: aa:63:b6:14:16:6b:74:3d:8e:71:ad:7c:4c:1a:ae:d4:5a:62: aa:fb:ff:89:26:e1:e3:f9:35:0d:89:c5:15:f9:7a:e4:c0:d9: e9:28:71:af:40:61:7c:77:63:24:32:05:17:54:52:e9:24:13: 2b:db:1e:e8:d9:2b:42:76:ef:3c:49:fd:d5:ae:87:83:34:2c: 69:57:68:34:14:9e:49:b3:eb:57:6b:45:57:2d:60:91:6a:7e: 00:ea:6f:81:3a:f0:a8:b8:3f:6d:cd:fa:73:17:11:f3:ea:fc: b9:f0:3b:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLniF/1p19ni2wIKUU4HIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy MzkwODEwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhhZTg1MTVlYTNiY2ZhMzc5ZjE5ZWVkNGZiMjg5YjkyNjQ3MmE2MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gd9ixbF4i0lrmscEA8D8E5EyD/q qeJKpkIT3jfJYa4tlfUFGmZS3pXusN5x5RmhrAr+hwoKqPoumutbXyRXLNG7FsnH jtLARhPOcKxK2UOGGTLhKyN7kQ57UD8CYMtT9qElPpTcF88PDXXCUYv8aR+SRXfr cmCgOK8nEKyn+W7S5sRoRA+NIpUuCcDzP2PX5cLY5QHXQLLHNGuagXQEH7vPHmeO acg0BE7GysRBS4jT4v+TqyDUKaxCO9f5Mv4NV6HQUaN03DxTOHlP3AWmdMSf2Urt aKVv49qfGJuOpKgeBK7AfBKUk+clX/+EE3X73ttRSIlW9y9SAPfjpQgmvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6FFeo7z6N58Z7tT7KJuSZHKmNHMB8GA1UdIwQY MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUmQXFkD An3kyPMyH0eFknPGrg9G12QodRyiGtVolthRkUOzqDcLn1/43iVdUk3xoFIOLt5K N+v+NmtKmXdHL8a8etVm316R2h19T36Jc/9gbDEFTnjcRF4hlsA5Cn3yQbZ1rCn7 taHXgCS7LbqVyvX0omjkH5//NOTQ586wxy2BO2uXqI1kQbqSsPoikpCBqmO2FBZr dD2Oca18TBqu1Fpiqvv/iSbh4/k1DYnFFfl65MDZ6Shxr0BhfHdjJDIFF1RS6SQT K9se6NkrQnbvPEn91a6HgzQsaVdoNBSeSbPrV2tFVy1gkWp+AOpvgTrwqLg/bc36 cxcR8+r8ufA74g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:22 2025 by rpki-client