This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json) Hash identifier: +I/z7v2uxvrh39k9leuDcvH0AWTMxIdkj9vRvdSAVrI= Subject key identifier: EA:A7:22:CC:B1:5C:D0:19:37:15:4F:B3:7D:E8:B9:D7:C3:67:E9:48 Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Certificate serial: 019AF31CBE82F7CBD2D720C2825EFB7255B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft Manifest number: 09D5 Signing time: Sat 06 Dec 2025 10:02:18 +0000 Manifest this update: Sat 06 Dec 2025 10:02:18 +0000 Manifest next update: Sun 07 Dec 2025 10:02:18 +0000 Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: HJwZ8u+4BTZ+eB1hIronp9iGQTWPCddre6LqI3NK6/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:be:82:f7:cb:d2:d7:20:c2:82:5e:fb:72:55:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Validity Not Before: Dec 6 10:02:18 2025 GMT Not After : Dec 7 10:02:18 2025 GMT Subject: CN=eaa722ccb15cd01937154fb37de8b9d7c367e948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:00:62:2b:8b:61:64:b1:4c:09:74:b6:ed: 4a:b4:38:dc:09:94:7f:6f:af:4e:c2:d7:af:18:64: e0:a9:13:4b:d5:34:65:a3:47:07:52:76:49:92:a5: b7:3f:77:2a:cb:5d:e3:d3:26:9b:e5:00:fd:d2:69: ca:b7:39:66:cb:e2:7f:6d:0c:80:c0:be:84:1e:01: 56:38:31:58:51:42:55:d0:3f:ca:31:78:60:38:66: 33:41:8e:a9:43:fd:eb:88:0b:76:cd:c4:b7:2e:08: 51:4e:08:ff:55:7f:a7:2c:7b:4a:e1:bf:5e:ba:6b: c2:2a:cb:f8:5e:b3:d7:d2:c6:9e:a8:02:e4:f5:9b: bd:c4:02:f4:9b:c9:07:16:49:24:d8:ef:6f:c7:eb: 6b:7b:10:6c:7a:1c:ec:70:ed:85:d7:a4:cb:07:7f: f2:ae:95:a1:bc:b1:4a:d6:5b:03:47:be:ac:b3:fb: a2:2e:4f:27:68:61:91:96:00:fd:f6:48:ef:6f:d6: 63:ad:1d:be:99:70:5a:6e:9d:68:11:55:7e:b7:54: 6a:8a:15:30:62:b4:b4:ec:3c:05:19:fa:41:47:52: 92:47:54:8b:78:4b:29:95:67:cb:b7:00:5a:0f:cc: 96:07:85:58:fa:f1:9f:9a:d9:d7:ea:8f:27:00:40: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A7:22:CC:B1:5C:D0:19:37:15:4F:B3:7D:E8:B9:D7:C3:67:E9:48 X509v3 Authority Key Identifier: keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:02:ca:5e:31:76:3d:17:b3:9f:92:b8:41:90:37:3a:fd:ef: a9:3f:5c:94:2e:ef:3e:05:3a:f3:01:a6:f9:99:fa:d4:31:b3: 2b:de:34:12:9d:51:31:f1:50:a5:d5:ad:61:ac:70:ee:b8:60: 08:fb:35:e9:92:99:88:30:9d:78:01:c5:84:0d:8c:49:0b:5a: 01:4d:74:b6:d2:f1:6c:4b:73:8d:64:fb:9c:b8:2a:ea:47:d5: ee:84:d2:94:a3:58:fa:2f:68:08:95:91:a7:b7:25:db:27:bb: ef:43:4d:7a:cd:b7:30:49:37:56:7d:ab:83:20:59:76:25:fe: 46:01:de:7e:12:83:eb:21:5d:a7:23:4d:92:e0:1c:82:b7:a5: a8:ee:a5:e0:a2:da:7e:ae:68:49:1a:80:8b:0c:0c:dd:08:e9: 29:3b:f6:91:39:40:29:3e:34:2f:e2:b4:9d:eb:33:30:b1:b2: 1a:e7:be:57:a8:fc:20:4b:d6:36:91:49:87:00:cf:a8:1e:74: a2:16:a5:6e:16:55:c8:a0:b0:0a:23:c0:a3:1c:49:88:b7:e2: 58:02:6a:f6:a2:e1:01:54:b0:6b:53:98:f0:6f:e5:46:c7:0c: 11:37:d0:ec:f7:27:b8:d6:67:80:8a:40:6a:e5:76:5e:56:c6: 31:e8:07:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHL6C98vS1yDCgl77clW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw MjA0Y2IwHhcNMjUxMjA2MTAwMjE4WhcNMjUxMjA3MTAwMjE4WjAzMTEwLwYDVQQD EyhlYWE3MjJjY2IxNWNkMDE5MzcxNTRmYjM3ZGU4YjlkN2MzNjdlOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQEAYiuLYWSxTAl0tu1KtDjcCZR/ b69OwtevGGTgqRNL1TRlo0cHUnZJkqW3P3cqy13j0yab5QD90mnKtzlmy+J/bQyA wL6EHgFWODFYUUJV0D/KMXhgOGYzQY6pQ/3riAt2zcS3LghRTgj/VX+nLHtK4b9e umvCKsv4XrPX0saeqALk9Zu9xAL0m8kHFkkk2O9vx+trexBsehzscO2F16TLB3/y rpWhvLFK1lsDR76ss/uiLk8naGGRlgD99kjvb9ZjrR2+mXBabp1oEVV+t1RqihUw YrS07DwFGfpBR1KSR1SLeEsplWfLtwBaD8yWB4VY+vGfmtnX6o8nAEAO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqnIsyxXNAZNxVPs33oudfDZ+lIMB8GA1UdIwQY MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQLKXjF2 PRezn5K4QZA3Ov3vqT9clC7vPgU68wGm+Zn61DGzK940Ep1RMfFQpdWtYaxw7rhg CPs16ZKZiDCdeAHFhA2MSQtaAU10ttLxbEtzjWT7nLgq6kfV7oTSlKNY+i9oCJWR p7cl2ye770NNes23MEk3Vn2rgyBZdiX+RgHefhKD6yFdpyNNkuAcgrelqO6l4KLa fq5oSRqAiwwM3QjpKTv2kTlAKT40L+K0neszMLGyGue+V6j8IEvWNpFJhwDPqB50 ohalbhZVyKCwCiPAoxxJiLfiWAJq9qLhAVSwa1OY8G/lRscMETfQ7PcnuNZngIpA auV2XlbGMegHdA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:38 2025 by rpki-client