This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json) Hash identifier: lK/cDBqjvCLw8gk3VWTFU1fvqYOLetE2wckZcSMSfZ0= Subject key identifier: AE:9E:C7:42:A0:A5:C1:5F:69:5B:77:9C:B6:B9:BC:0E:A5:85:19:76 Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29 Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729 Certificate serial: 019AF12E4917A745D8E9A4163A37DAFB100D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft Manifest number: 03C2 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: DoqPbvgi3rx/+wPyJSWn7YgeG8Azl1pYgXPg5dR0b18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:49:17:a7:45:d8:e9:a4:16:3a:37:da:fb:10:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729 Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=ae9ec742a0a5c15f695b779cb6b9bc0ea5851976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:f9:9a:28:47:28:d3:11:13:fe:47:80:4d: 9a:46:d5:88:3f:fa:c9:32:0a:22:5d:d1:c3:da:9a: d1:60:27:cd:8d:55:2c:61:97:e4:39:b1:97:7e:79: f9:2d:7b:6f:67:20:e0:22:ba:dc:9d:1b:0d:cf:54: 8e:d6:13:3f:10:91:e1:5c:82:33:91:9b:a9:6a:7b: 19:57:6e:64:2c:f2:39:7e:78:47:f5:39:71:4f:78: 32:98:bb:70:e6:f0:97:a4:0d:68:53:da:b3:03:cc: d7:0e:bf:bb:62:52:74:b4:72:db:06:d5:a4:83:b0: d1:7f:86:05:9e:40:c5:bc:ba:ef:ca:64:55:10:70: 72:3c:39:c6:66:66:8f:52:f7:f8:78:b5:dd:29:ed: 80:25:65:ad:c9:1c:9b:9c:ea:12:ae:65:2b:96:04: 56:8b:2e:cc:be:94:13:21:87:c0:83:ba:22:59:cd: 7b:33:f0:8b:9e:bf:c4:36:59:7c:8c:d5:b9:55:36: e8:64:1f:a6:8d:8e:6c:6d:b2:3f:61:e5:53:bb:d4: e9:70:32:54:0b:7c:b9:db:89:8c:f7:95:eb:29:46: 43:9f:2a:9d:a0:b3:fc:7b:6f:3c:06:de:2f:eb:3d: e1:81:6c:d7:63:a4:a8:38:6e:cf:f2:86:86:c8:80: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:C7:42:A0:A5:C1:5F:69:5B:77:9C:B6:B9:BC:0E:A5:85:19:76 X509v3 Authority Key Identifier: keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:ae:05:ff:bf:00:c9:15:a3:81:fd:bc:d4:14:96:4c:02: cf:be:12:32:a8:00:f8:86:2e:88:9f:01:98:16:38:d9:95:58: f9:72:dd:c8:5e:7b:55:a4:f9:a4:4d:71:c8:2c:6b:41:90:97: 70:12:16:3c:35:e8:11:1c:75:4b:3e:6c:c4:12:84:93:40:8a: b8:de:84:a9:45:ec:2a:53:6e:6d:8b:58:63:92:00:7a:f7:6c: 8f:0f:84:a3:04:c7:83:a5:7f:3a:50:5f:6a:d1:9d:d3:87:42: 7a:06:81:ee:33:fe:07:a6:6e:79:bb:aa:51:aa:4d:db:c5:ce: a2:88:65:5f:77:23:34:de:e7:87:21:0b:19:08:d4:88:c4:1b: 9d:ce:e3:b4:1a:22:ff:9c:ab:b6:95:05:2f:8e:b4:ce:4d:63: f7:83:f9:2c:62:d0:68:ad:be:b5:ef:e8:e8:95:3e:0c:4c:64: f6:5f:7a:2c:54:27:b2:40:12:15:80:2e:3c:fb:d8:07:7b:85: cf:c1:ce:4a:aa:b0:65:3e:36:8e:7f:06:f5:6a:8c:5f:9b:62: 61:e3:19:34:9e:5d:6e:9f:e7:5c:14:a1:6c:e9:60:de:88:1c: 5d:f8:4e:96:af:70:90:99:8d:8e:d2:b0:f2:20:62:60:16:95: 87:0e:d8:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkkXp0XY6aQWOjfa+xANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzQ5MDg1NDU2M2QzMjIyMmU5YWNlNWFkOGE2NDllOWI0 YTE3MjkwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EyhhZTllYzc0MmEwYTVjMTVmNjk1Yjc3OWNiNmI5YmMwZWE1ODUxOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR/5mihHKNMRE/5HgE2aRtWIP/rJ MgoiXdHD2prRYCfNjVUsYZfkObGXfnn5LXtvZyDgIrrcnRsNz1SO1hM/EJHhXIIz kZupansZV25kLPI5fnhH9TlxT3gymLtw5vCXpA1oU9qzA8zXDr+7YlJ0tHLbBtWk g7DRf4YFnkDFvLrvymRVEHByPDnGZmaPUvf4eLXdKe2AJWWtyRybnOoSrmUrlgRW iy7MvpQTIYfAg7oiWc17M/CLnr/ENll8jNW5VTboZB+mjY5sbbI/YeVTu9TpcDJU C3y524mM95XrKUZDnyqdoLP8e288Bt4v6z3hgWzXY6SoOG7P8oaGyICyIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6ex0KgpcFfaVt3nLa5vA6lhRl2MB8GA1UdIwQY MBaAFO40kIVFY9MiIums5a2KZJ6bShcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMt NDVjNTNiN2VmOWZhLzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMtNDVjNTNiN2VmOWZh LzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU6uBf+/ AMkVo4H9vNQUlkwCz74SMqgA+IYuiJ8BmBY42ZVY+XLdyF57VaT5pE1xyCxrQZCX cBIWPDXoERx1Sz5sxBKEk0CKuN6EqUXsKlNubYtYY5IAevdsjw+EowTHg6V/OlBf atGd04dCegaB7jP+B6ZuebuqUapN28XOoohlX3cjNN7nhyELGQjUiMQbnc7jtBoi /5yrtpUFL460zk1j94P5LGLQaK2+te/o6JU+DExk9l96LFQnskASFYAuPPvYB3uF z8HOSqqwZT42jn8G9WqMX5tiYeMZNJ5dbp/nXBShbOlg3ogcXfhOlq9wkJmNjtKw 8iBiYBaVhw7YMw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:41 2025 by rpki-client