This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft File: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json) Hash identifier: VF4tBRYE82TBODC9meLGL+nZZIN9mkjqeM3KgbijjvI= Subject key identifier: AF:88:8E:EF:EF:CF:BD:17:BB:AF:3F:BE:4B:0D:90:55:A5:F0:31:50 Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19 Certificate issuer: /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819 Certificate serial: 019AF19AC91F0E64DB40D2259A684E0931E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft Manifest number: 0FB8 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: 95WFj1UAbb9xOZflqda1vl5UIuqUtvSNboMHCc2xu/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c9:1f:0e:64:db:40:d2:25:9a:68:4e:09:31:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=af888eefefcfbd17bbaf3fbe4b0d9055a5f03150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:0b:6d:2a:54:ac:91:c1:d8:dd:e8:44:62: c2:18:dd:c5:84:94:12:5f:2f:13:85:87:ce:72:23: 2d:65:69:1a:0d:3a:7d:8f:55:ab:80:89:8c:e1:df: 74:eb:35:01:34:d3:ec:f2:17:eb:d6:b6:26:02:75: 05:be:b9:84:5a:0a:39:74:d8:c3:a9:fc:29:c5:6d: fc:a7:87:0c:dd:52:1d:94:5e:ad:7e:fe:99:9f:34: 50:1c:9d:ac:38:70:0a:15:92:85:b6:c8:cb:a0:d1: 4f:8a:c4:b9:0d:ac:79:34:b0:45:b1:01:81:dc:4f: a0:18:2a:d2:a6:2a:b2:f8:cd:cb:0a:d2:eb:fd:53: 36:05:58:db:06:c3:42:b6:84:ef:33:14:99:6f:18: a9:88:04:8d:8f:c1:4b:a4:4a:dc:b9:2a:8d:5e:45: f6:a1:fa:81:9f:b9:93:38:f7:d8:fb:c3:70:f7:c1: 79:11:af:d8:0a:50:21:3d:91:59:07:b6:81:62:8e: 32:68:5d:14:3f:e1:f1:22:5a:29:0d:dd:95:52:8c: bd:cb:3f:0f:79:ab:ec:c4:3a:59:51:c1:70:a7:6c: d4:ea:51:99:69:97:68:f6:28:e4:51:62:a8:18:a5: c5:2f:dc:66:7d:7e:86:d7:28:03:96:16:73:47:63: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:8E:EF:EF:CF:BD:17:BB:AF:3F:BE:4B:0D:90:55:A5:F0:31:50 X509v3 Authority Key Identifier: keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ed:f2:29:46:04:3a:23:76:47:61:72:b8:aa:e5:e1:08:b1: 22:7b:ec:74:fa:17:ad:53:7f:d0:30:0c:47:ea:c1:03:71:a1: a5:5a:64:3e:f8:f3:d8:01:1a:b3:e4:a4:10:42:1e:c2:f8:74: 93:50:9e:e7:dc:48:95:23:ed:b2:6e:eb:c9:02:14:1a:96:ba: 93:93:15:75:49:f2:83:9b:17:e2:f3:93:8d:a2:7d:41:88:85: d1:ea:43:c7:ee:1b:61:fd:85:10:a4:e8:fe:7d:2a:b1:f6:c8: 97:e3:1e:a5:f8:b1:87:8d:7a:69:5a:c5:b3:7c:84:26:40:3d: 7a:9c:10:bb:16:c8:06:3f:11:60:f9:ee:7f:14:c9:d7:6e:3c: 9f:1b:73:a6:fb:82:e0:d0:96:1d:0d:67:9b:40:da:42:c1:20: ae:f6:fa:a2:5d:e3:23:26:c5:29:df:b0:00:c1:14:d9:3f:81: 2b:65:9d:38:e4:e0:24:e6:22:0f:f5:98:7d:91:2d:5f:4d:1b: 2a:7e:eb:df:78:a3:b4:61:2f:3c:f6:f7:4a:3a:69:3e:29:37: 16:14:97:fc:c8:48:f0:16:68:12:b6:a5:54:47:b8:25:82:98: 34:d9:fb:3c:ae:b3:95:ce:c0:61:93:84:ec:80:29:79:21:14: 2d:4b:9c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmskfDmTbQNIlmmhOCTHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZmM4YTZmM2M0NGI4ZWRkMTc3ZmU1MWE1OTk5MTU4Yjhk Y2Y4MTkwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EyhhZjg4OGVlZmVmY2ZiZDE3YmJhZjNmYmU0YjBkOTA1NWE1ZjAzMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQQLbSpUrJHB2N3oRGLCGN3FhJQS Xy8ThYfOciMtZWkaDTp9j1WrgImM4d906zUBNNPs8hfr1rYmAnUFvrmEWgo5dNjD qfwpxW38p4cM3VIdlF6tfv6ZnzRQHJ2sOHAKFZKFtsjLoNFPisS5Dax5NLBFsQGB 3E+gGCrSpiqy+M3LCtLr/VM2BVjbBsNCtoTvMxSZbxipiASNj8FLpErcuSqNXkX2 ofqBn7mTOPfY+8Nw98F5Ea/YClAhPZFZB7aBYo4yaF0UP+HxIlopDd2VUoy9yz8P eavsxDpZUcFwp2zU6lGZaZdo9ijkUWKoGKXFL9xmfX6G1ygDlhZzR2POcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+Iju/vz70Xu68/vksNkFWl8DFQMB8GA1UdIwQY MBaAFO/8im88RLjt0Xf+UaWZkVi43PgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQt NmRkOTM4NzE0MWE4LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQtNmRkOTM4NzE0MWE4 LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle3yKUYE OiN2R2FyuKrl4QixInvsdPoXrVN/0DAMR+rBA3GhpVpkPvjz2AEas+SkEEIewvh0 k1Ce59xIlSPtsm7ryQIUGpa6k5MVdUnyg5sX4vOTjaJ9QYiF0epDx+4bYf2FEKTo /n0qsfbIl+Mepfixh416aVrFs3yEJkA9epwQuxbIBj8RYPnufxTJ1248nxtzpvuC 4NCWHQ1nm0DaQsEgrvb6ol3jIybFKd+wAMEU2T+BK2WdOOTgJOYiD/WYfZEtX00b Kn7r33ijtGEvPPb3SjppPik3FhSX/MhI8BZoEralVEe4JYKYNNn7PK6zlc7AYZOE 7IApeSEULUucUw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:26 2025 by rpki-client