This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft File: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json) Hash identifier: skI1qdaYznWv7wQKqp1DcA2f2x+Tl06W/Rvh7VvP3pM= Subject key identifier: AE:FC:48:22:F7:3E:58:E9:8B:76:29:A8:D6:99:15:6C:F3:57:28:4D Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15 Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15 Certificate serial: 019AF163F1EEF077DD279B77C836C51C0ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft Manifest number: 1464 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: sicDzzce1iM/nfYYFAmISP9TxRZc9sqlURNSWrrKFqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f1:ee:f0:77:dd:27:9b:77:c8:36:c5:1c:0a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=aefc4822f73e58e98b7629a8d699156cf357284d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:7e:6a:ee:d1:32:6d:77:da:a1:61:a1:a9: 53:e9:a7:7d:9b:7a:fd:4a:6b:58:fb:a2:0b:b3:42: 95:24:14:6b:ef:57:39:8d:45:d4:83:52:b1:c3:b7: f8:a0:b1:9d:40:b3:78:c0:da:7e:14:0b:4d:6d:03: da:a0:c8:e7:91:72:59:f7:3f:b0:48:0a:f9:de:f5: 67:d7:da:7f:54:66:55:00:30:c8:48:60:27:f6:dc: 6d:e7:47:a5:79:e0:6e:54:0a:29:b0:20:4a:5c:ee: 8e:83:e2:61:05:9e:2c:ec:13:9c:64:88:89:fb:9f: e5:6e:9c:89:5f:f2:8d:97:2f:21:4e:13:d1:52:bf: ba:86:c3:88:3a:58:be:f6:73:b2:0a:8c:1a:2f:3e: 7b:d2:0b:5e:37:3c:e2:9c:d1:3c:5d:27:f2:ff:64: 3c:61:48:69:07:00:85:0d:72:a5:a7:50:a5:d1:84: f2:0f:23:0c:16:b6:69:7e:ae:77:fc:87:6f:c5:6b: b3:8d:73:f1:36:d2:fd:80:fd:80:d5:60:e1:ec:62: 1b:01:d2:ad:23:8a:5f:29:30:fb:b3:14:81:d5:f5: 68:36:3f:1e:8a:b1:7f:99:f1:3e:28:bc:c9:6d:6c: 91:08:ba:4e:e2:c1:f8:d6:ed:92:ee:e9:87:63:09: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:48:22:F7:3E:58:E9:8B:76:29:A8:D6:99:15:6C:F3:57:28:4D X509v3 Authority Key Identifier: keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:44:82:49:d1:94:8b:08:81:5d:28:f2:8e:8b:35:4d:e9:b9: 01:b1:43:11:aa:07:50:d8:81:7d:40:c8:fa:f6:00:f2:71:68: ab:68:89:8e:ba:35:c1:67:bc:f4:fc:a7:a0:42:4b:0e:7f:9c: 72:c7:cc:24:63:b5:e1:59:3c:23:49:de:00:09:78:41:21:76: 9d:f7:b3:a4:5b:ac:77:b6:59:47:b5:c4:2b:c4:1e:0d:22:b3: b4:e7:c0:1a:51:b5:3f:e5:ec:49:6f:77:a2:f4:8e:50:3d:24: 18:79:da:ef:c1:bf:c2:02:14:00:59:7f:e6:a4:23:50:69:8f: 23:a2:a5:97:ac:cf:33:37:00:b1:9f:cf:96:74:c7:24:16:30: 16:05:1c:00:99:a3:28:a4:b4:6d:85:10:ac:9f:f1:fb:30:9c: f5:66:6c:8b:35:cd:e4:b9:15:35:23:d8:ab:69:70:33:62:d6: 5c:51:58:0d:63:36:33:77:7b:47:df:5d:4b:bf:5a:e2:c8:9f: b6:b6:93:0b:b2:e8:e6:2a:06:c2:d8:d0:69:12:9b:4d:54:49: 66:9b:f7:64:08:ed:1b:c6:d2:6d:c7:6a:6e:4a:93:54:ca:c9: 08:81:aa:df:74:33:b7:ce:06:50:1c:a9:8e:c4:98:0a:a6:6e: 23:ad:bb:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Hu8HfdJ5t3yDbFHArbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMmZhNjg2ZDE4YzgwMjBhZmM2YWRmNTVhZmRiZTY2MGRi YWFjMTUwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD EyhhZWZjNDgyMmY3M2U1OGU5OGI3NjI5YThkNjk5MTU2Y2YzNTcyODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLp+au7RMm132qFhoalT6ad9m3r9 SmtY+6ILs0KVJBRr71c5jUXUg1Kxw7f4oLGdQLN4wNp+FAtNbQPaoMjnkXJZ9z+w SAr53vVn19p/VGZVADDISGAn9txt50eleeBuVAopsCBKXO6Og+JhBZ4s7BOcZIiJ +5/lbpyJX/KNly8hThPRUr+6hsOIOli+9nOyCowaLz570gteNzzinNE8XSfy/2Q8 YUhpBwCFDXKlp1Cl0YTyDyMMFrZpfq53/IdvxWuzjXPxNtL9gP2A1WDh7GIbAdKt I4pfKTD7sxSB1fVoNj8eirF/mfE+KLzJbWyRCLpO4sH41u2S7umHYwm0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK78SCL3Pljpi3YpqNaZFWzzVyhNMB8GA1UdIwQY MBaAFO0vpobRjIAgr8at9Vr9vmYNuqwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNzhmYzUtYmYzZS00Njg2LThkODUt YzMzZjhhMjExMjJjLzEvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kNzhmYzUtYmYzZS00Njg2LThkODUtYzMzZjhhMjExMjJj LzEvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXESCSdGU iwiBXSjyjos1Tem5AbFDEaoHUNiBfUDI+vYA8nFoq2iJjro1wWe89PynoEJLDn+c csfMJGO14Vk8I0neAAl4QSF2nfezpFusd7ZZR7XEK8QeDSKztOfAGlG1P+XsSW93 ovSOUD0kGHna78G/wgIUAFl/5qQjUGmPI6Kll6zPMzcAsZ/PlnTHJBYwFgUcAJmj KKS0bYUQrJ/x+zCc9WZsizXN5LkVNSPYq2lwM2LWXFFYDWM2M3d7R99dS79a4sif traTC7Lo5ioGwtjQaRKbTVRJZpv3ZAjtG8bSbcdqbkqTVMrJCIGq33Qzt84GUByp jsSYCqZuI627eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:10 2025 by rpki-client