This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json) Hash identifier: fRHDv8NP01UBU5TPUaWSmsa2n9IzvYs9F3Lj4PpUbgc= Subject key identifier: A3:3E:31:A6:21:DC:8F:84:C3:10:6C:80:7D:67:67:8B:51:42:00:E7 Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1 Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1 Certificate serial: 019AF38946FBB3271030F58540B9331C199E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft Manifest number: 03CE Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: /+rYL+SaIzqJ0zkT7U7g+mCcgv6L1w59GCGHncQNIfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:46:fb:b3:27:10:30:f5:85:40:b9:33:1c:19:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=a33e31a621dc8f84c3106c807d67678b514200e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:40:c5:49:18:9b:6b:82:5b:34:46:52:3b: 34:ad:2f:9f:6a:19:a3:ee:81:ae:bd:4e:cf:cd:29: f8:f6:69:19:a1:f4:7b:ca:5a:ba:6d:e8:8d:80:a9: 7c:db:8a:f9:c3:ca:f8:b8:74:8f:e4:2c:1c:bc:1d: 63:f4:7b:03:fe:78:7d:9e:37:2a:3d:1f:e8:49:e4: 2d:c3:a3:c9:eb:2c:e1:58:ab:de:7e:b4:7a:4c:e9: 82:c6:71:37:53:f5:8b:d0:e8:f0:ff:c3:52:82:8c: 35:54:56:c1:17:e8:de:17:90:60:06:c7:9d:d6:b4: f9:4a:78:c3:c5:1a:1f:3a:b2:d8:53:88:9b:4e:88: 57:db:57:f0:ce:8e:98:4b:7a:31:17:cb:d3:81:f7: 36:1a:01:ec:b6:8e:b1:fa:8a:a9:01:9b:f0:a4:6b: ee:f8:16:3b:dd:6e:82:7f:47:32:c4:6e:63:34:09: c6:99:99:90:f8:55:bf:8a:f1:de:8d:06:f0:0f:23: 21:b3:5d:6a:cf:94:29:dc:e7:b4:2c:ad:8a:74:df: 66:3f:91:34:6f:3e:d3:2d:2b:45:93:64:f2:9a:fc: a5:e1:a4:10:43:87:40:f0:1e:e2:aa:fe:ea:85:85: 2a:23:c9:01:37:7d:e3:f3:63:8b:e7:1b:61:6a:67: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3E:31:A6:21:DC:8F:84:C3:10:6C:80:7D:67:67:8B:51:42:00:E7 X509v3 Authority Key Identifier: keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:14:a3:db:3c:ee:72:cf:37:5d:9b:38:fa:e4:eb:e8:4e:29: b5:be:32:78:30:eb:12:4c:ac:75:82:02:28:c3:ef:31:a1:bd: f4:05:82:91:41:27:87:06:7c:14:ee:45:87:e8:2b:a0:33:08: 06:00:49:90:f1:e3:ee:22:6b:73:19:dd:37:6d:97:61:f9:86: 72:bb:e4:88:a0:f8:74:9e:0f:9a:b4:d2:e2:2e:77:e6:98:d6: 85:16:57:89:25:5c:8c:2d:89:02:f6:e8:3d:a9:b2:76:bc:f8: 37:e1:95:37:a3:e1:72:69:33:8b:29:d6:31:d6:d1:f2:ac:1f: be:05:90:21:c3:8f:18:98:da:ca:2a:db:98:f6:b2:db:a5:9c: a1:12:00:62:43:aa:09:a7:3f:37:58:8b:2e:4f:dc:aa:b4:73: f5:1a:85:e7:f2:71:c2:f4:37:be:d7:a4:51:dd:07:5a:90:21: 30:2f:00:00:26:4e:49:32:89:4a:f1:13:52:a6:a8:87:4b:f8: 01:ea:9c:14:6d:54:82:1f:a5:a5:c1:eb:eb:a9:72:dd:4a:44: 7e:fb:18:2d:65:9f:e4:02:27:c5:b6:45:2b:ce:84:db:0b:d8: cf:13:1e:10:51:10:b6:7b:88:dd:eb:d5:4c:6a:5f:3e:8e:34: 00:75:82:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUb7sycQMPWFQLkzHBmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkY2FjYmRhMmI0YjMyMzFkMDhiNTFmMTZmMWIyYTdjMDgy MzdhZDEwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhhMzNlMzFhNjIxZGM4Zjg0YzMxMDZjODA3ZDY3Njc4YjUxNDIwMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKNAxUkYm2uCWzRGUjs0rS+fahmj 7oGuvU7PzSn49mkZofR7ylq6beiNgKl824r5w8r4uHSP5CwcvB1j9HsD/nh9njcq PR/oSeQtw6PJ6yzhWKvefrR6TOmCxnE3U/WL0Ojw/8NSgow1VFbBF+jeF5BgBsed 1rT5SnjDxRofOrLYU4ibTohX21fwzo6YS3oxF8vTgfc2GgHsto6x+oqpAZvwpGvu +BY73W6Cf0cyxG5jNAnGmZmQ+FW/ivHejQbwDyMhs11qz5Qp3Oe0LK2KdN9mP5E0 bz7TLStFk2Tymvyl4aQQQ4dA8B7iqv7qhYUqI8kBN33j82OL5xthamfiswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM+MaYh3I+EwxBsgH1nZ4tRQgDnMB8GA1UdIwQY MBaAFO3Ky9orSzIx0ItR8W8bKnwII3rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hM2ViZjktNGYyZC00YWMxLWI5MjIt MWJkYWExYTY5ODE1LzEvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hM2ViZjktNGYyZC00YWMxLWI5MjItMWJkYWExYTY5ODE1 LzEvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhSj2zzu cs83XZs4+uTr6E4ptb4yeDDrEkysdYICKMPvMaG99AWCkUEnhwZ8FO5Fh+groDMI BgBJkPHj7iJrcxndN22XYfmGcrvkiKD4dJ4PmrTS4i535pjWhRZXiSVcjC2JAvbo Pamydrz4N+GVN6PhcmkziynWMdbR8qwfvgWQIcOPGJjayirbmPay26WcoRIAYkOq Cac/N1iLLk/cqrRz9RqF5/JxwvQ3vtekUd0HWpAhMC8AACZOSTKJSvETUqaoh0v4 AeqcFG1Ugh+lpcHr66ly3UpEfvsYLWWf5AInxbZFK86E2wvYzxMeEFEQtnuI3evV TGpfPo40AHWCfA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:39 2025 by rpki-client