This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json) Hash identifier: Gdep8nABjiEuj9N/AwjbUdYYRdilyEJHfSe7wl8jwEw= Subject key identifier: 23:62:55:D5:5C:3A:AE:03:E1:64:16:24:A6:58:72:EB:E3:AD:DD:25 Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48 Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448 Certificate serial: 019AF276C31FDB4C4B8ACEC582A8760DDFDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft Manifest number: 0180 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: CazhTqrrOUBRLrbFWsDImQuQe5jVHH8mcgj74YMed9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c3:1f:db:4c:4b:8a:ce:c5:82:a8:76:0d:df:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448 Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=236255d55c3aae03e1641624a65872ebe3addd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:36:06:eb:d9:8f:c2:b6:30:b7:e8:86:0e: 4c:8c:a3:a8:2f:e2:ed:db:26:fb:1f:3b:15:8f:03: 42:b4:0e:27:eb:47:3e:4f:97:a0:62:c7:b3:58:5f: fd:ae:1c:31:4a:16:dd:48:9a:a3:95:e1:36:00:3a: fa:11:ff:ce:7e:08:ad:2c:bd:ea:ea:a7:13:b9:91: 57:5e:e6:0b:0c:01:b0:1d:4e:80:71:a7:0b:69:83: b4:9b:ee:d0:1b:25:7d:23:a0:aa:0d:0b:ad:ec:86: 29:dd:5d:54:16:32:1c:7c:d4:94:08:58:d1:12:08: 1a:6a:f0:62:d3:30:6d:7a:5f:14:95:b3:63:80:26: ee:9d:d0:96:7c:63:88:4a:05:dc:d6:54:f5:b4:90: fa:f4:8b:f6:d7:a8:db:c4:c6:23:3e:6c:c8:6c:df: fa:69:c0:a7:8e:48:64:2b:19:fd:cd:5d:44:3a:55: f4:97:ae:e6:0d:3c:10:81:bd:65:e8:e0:85:c5:e3: 46:b7:91:7b:fd:0d:d4:69:35:86:b0:8d:7b:63:e1: 83:dd:2f:25:fe:ba:c9:50:9e:c1:4f:4a:3e:c5:08: ba:e0:f7:47:93:9f:e7:6d:c4:22:a5:54:5f:3a:2a: 0c:cf:08:d4:51:b0:27:d4:68:18:71:95:29:c1:d2: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:62:55:D5:5C:3A:AE:03:E1:64:16:24:A6:58:72:EB:E3:AD:DD:25 X509v3 Authority Key Identifier: keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f1:a4:a6:32:21:b0:f5:44:5b:e8:23:12:9d:eb:b7:b6:f6: ca:43:41:5e:74:db:7d:68:cb:f7:8e:fb:6c:1e:22:08:73:2e: dd:0f:be:46:41:ba:51:26:7a:fc:15:d9:de:86:63:be:ee:19: a4:4e:29:0f:64:c8:36:5e:12:e6:9e:75:8a:f1:d1:a3:e7:a0: 9a:40:c8:6b:bb:8e:f7:45:24:ba:0c:6d:42:d5:af:8b:0f:18: 55:8a:30:2a:49:e5:14:4e:2b:15:d8:2a:02:da:f2:8f:cf:e1: f9:e1:be:cc:8c:13:be:7c:bc:f0:7a:d6:43:a9:46:fd:32:d8: 9b:ff:3f:38:a8:8e:d2:a9:aa:68:e2:51:33:f9:84:18:82:da: f2:3d:14:dc:69:be:18:dd:3e:a5:00:d8:13:a9:b9:19:a5:9a: 0b:a0:38:51:ea:ae:cf:47:0c:3e:c8:18:88:f4:51:8a:b0:6e: dd:61:bb:35:59:ec:13:5c:69:d2:25:da:c0:a2:dd:a2:1d:d7: fc:ac:f4:3e:a5:b5:e2:16:d6:32:7a:72:67:d5:8c:d6:5d:7d: 00:43:4a:e9:38:d8:90:30:29:16:f4:bd:f9:9c:b7:05:ce:56: 52:d4:f1:b2:83:56:24:27:7e:3b:93:3a:2a:27:c2:2f:83:85: 02:4d:0e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsMf20xLis7Fgqh2Dd/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNWIwZDM2YTM3NGFiMzVjNDM2ZWUwMGMyZWNhZWZiYjJh MzU0NDgwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EygyMzYyNTVkNTVjM2FhZTAzZTE2NDE2MjRhNjU4NzJlYmUzYWRkZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfU2BuvZj8K2MLfohg5MjKOoL+Lt 2yb7HzsVjwNCtA4n60c+T5egYsezWF/9rhwxShbdSJqjleE2ADr6Ef/OfgitLL3q 6qcTuZFXXuYLDAGwHU6AcacLaYO0m+7QGyV9I6CqDQut7IYp3V1UFjIcfNSUCFjR EggaavBi0zBtel8UlbNjgCbundCWfGOISgXc1lT1tJD69Iv216jbxMYjPmzIbN/6 acCnjkhkKxn9zV1EOlX0l67mDTwQgb1l6OCFxeNGt5F7/Q3UaTWGsI17Y+GD3S8l /rrJUJ7BT0o+xQi64PdHk5/nbcQipVRfOioMzwjUUbAn1GgYcZUpwdJTwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNiVdVcOq4D4WQWJKZYcuvjrd0lMB8GA1UdIwQY MBaAFO5bDTajdKs1xDbuAMLsrvuyo1RIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjIt NjlhMjM4Zjk4ODlhLzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjItNjlhMjM4Zjk4ODlh LzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfGkpjIh sPVEW+gjEp3rt7b2ykNBXnTbfWjL9477bB4iCHMu3Q++RkG6USZ6/BXZ3oZjvu4Z pE4pD2TINl4S5p51ivHRo+egmkDIa7uO90UkugxtQtWviw8YVYowKknlFE4rFdgq Atryj8/h+eG+zIwTvny88HrWQ6lG/TLYm/8/OKiO0qmqaOJRM/mEGILa8j0U3Gm+ GN0+pQDYE6m5GaWaC6A4Uequz0cMPsgYiPRRirBu3WG7NVnsE1xp0iXawKLdoh3X /Kz0PqW14hbWMnpyZ9WM1l19AENK6TjYkDApFvS9+Zy3Bc5WUtTxsoNWJCd+O5M6 KifCL4OFAk0OLA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:09 2025 by rpki-client