This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft File: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json) Hash identifier: ueQx4vYDJoMZLrpEWnRa5/CoJt335PQV40HK3WcWce4= Subject key identifier: 6C:C4:C5:1E:28:45:E9:0C:71:29:21:55:BE:1F:5F:08:EF:EE:55:AB Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D Certificate issuer: /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d Certificate serial: 019AF12CCC75936996EE39C05B43883E5F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft Manifest number: 07BE Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: WIrPbJxp/xcgCr8s2zkRXq6pzrH1/dOzXyPL7j3fCnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cc:75:93:69:96:ee:39:c0:5b:43:88:3e:5f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=6cc4c51e2845e90c71292155be1f5f08efee55ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:07:5f:6e:a1:52:8f:40:c3:bf:b2:4a:e6: bd:44:32:2f:89:01:f5:50:f6:54:32:5b:40:aa:52: c6:00:67:77:22:3e:7a:5b:10:15:b6:de:d5:33:09: a1:db:00:ad:17:69:d1:2b:78:bc:9e:05:cd:a5:6b: c8:cb:b6:2d:7b:62:48:db:6c:7c:86:f0:d3:3d:93: 07:52:66:fc:28:eb:19:71:6a:4f:1c:88:21:3b:b2: 42:36:e8:fb:04:13:f6:fa:85:bc:08:4c:25:58:c3: 8a:17:b6:09:95:64:b0:49:82:5c:35:cd:a4:0f:77: a7:69:e5:4d:18:86:65:6c:48:61:64:4e:af:ba:54: 8b:d5:e0:7d:4b:c9:73:d0:5a:1c:4a:79:10:f1:82: d8:80:cd:d6:b9:2a:de:9a:ee:e3:72:83:60:39:f4: 20:ec:0d:02:c5:7b:f9:8c:b0:9f:63:55:18:1c:e8: 03:ac:a6:58:e9:10:e2:a9:1d:2b:ab:a7:0c:40:93: 58:47:5f:f8:f4:1e:fb:19:c0:54:f6:ce:b7:3a:fe: ec:bf:bf:b6:2c:99:af:7b:c8:bf:b1:91:66:a7:ea: c2:42:6f:b6:6c:ac:5d:40:e4:48:20:21:d7:b4:e0: f3:89:0a:21:cc:6a:d9:c0:72:ef:11:87:4e:ee:35: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:C5:1E:28:45:E9:0C:71:29:21:55:BE:1F:5F:08:EF:EE:55:AB X509v3 Authority Key Identifier: keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:78:31:f9:60:42:d6:0b:e5:5c:c2:b2:f6:ff:9f:9d:39:dd: 94:2b:ea:81:1c:36:2d:5c:89:ac:e5:4a:72:df:72:38:81:7e: 6a:1a:f3:b3:16:87:d7:73:ae:04:65:66:93:d1:1f:f6:60:a8: 76:45:71:16:6a:28:a0:e0:fb:ee:12:91:10:47:57:1f:b7:b2: 9a:c9:25:7e:65:c9:29:7e:d2:05:eb:bb:a3:3b:88:c5:bf:ef: 8d:c8:1a:e0:93:51:44:51:da:f6:0a:8b:05:a1:69:da:be:d2: d9:8a:c3:34:c6:00:39:d8:6c:28:9f:38:81:30:e1:56:69:8f: 2e:7c:39:27:7e:b8:73:f3:d4:1f:c9:5c:82:eb:d9:b6:df:0f: 09:c4:db:a8:82:45:55:7c:69:2b:08:ae:65:d5:71:90:4d:04: b1:60:01:29:f4:f3:a5:39:90:b0:16:48:70:31:d0:88:74:4e: 08:77:24:d4:8b:6e:7f:8a:2d:b6:a5:78:40:3f:90:9d:18:2a: dd:31:84:61:fa:e9:e1:c8:65:aa:ba:2e:5b:80:2e:f5:fc:37: d5:eb:89:95:a5:ed:36:33:4a:04:d9:3d:ee:7e:6a:59:18:aa: c9:57:a7:19:ee:16:71:65:63:1c:95:a6:7a:af:80:fe:d5:e1: 41:5b:50:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMx1k2mW7jnAW0OIPl+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWZhOWMyOTUwNmI0ZmNmMTcyOTIxMWE0ZmE3N2MxZjIx MTQ2OGQwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD Eyg2Y2M0YzUxZTI4NDVlOTBjNzEyOTIxNTViZTFmNWYwOGVmZWU1NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs4HX26hUo9Aw7+ySua9RDIviQH1 UPZUMltAqlLGAGd3Ij56WxAVtt7VMwmh2wCtF2nRK3i8ngXNpWvIy7Yte2JI22x8 hvDTPZMHUmb8KOsZcWpPHIghO7JCNuj7BBP2+oW8CEwlWMOKF7YJlWSwSYJcNc2k D3enaeVNGIZlbEhhZE6vulSL1eB9S8lz0FocSnkQ8YLYgM3WuSremu7jcoNgOfQg 7A0CxXv5jLCfY1UYHOgDrKZY6RDiqR0rq6cMQJNYR1/49B77GcBU9s63Ov7sv7+2 LJmve8i/sZFmp+rCQm+2bKxdQORIICHXtODziQohzGrZwHLvEYdO7jWsewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzExR4oRekMcSkhVb4fXwjv7lWrMB8GA1UdIwQY MBaAFO7vqcKVBrT88XKSEaT6d8HyEUaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQt Y2YzNjA3M2QyZGIwLzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQtY2YzNjA3M2QyZGIw LzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3gx+WBC 1gvlXMKy9v+fnTndlCvqgRw2LVyJrOVKct9yOIF+ahrzsxaH13OuBGVmk9Ef9mCo dkVxFmoooOD77hKREEdXH7eymsklfmXJKX7SBeu7ozuIxb/vjcga4JNRRFHa9gqL BaFp2r7S2YrDNMYAOdhsKJ84gTDhVmmPLnw5J364c/PUH8lcguvZtt8PCcTbqIJF VXxpKwiuZdVxkE0EsWABKfTzpTmQsBZIcDHQiHROCHck1Ituf4ottqV4QD+QnRgq 3TGEYfrp4chlqrouW4Au9fw31euJlaXtNjNKBNk97n5qWRiqyVenGe4WcWVjHJWm eq+A/tXhQVtQ6w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:30 2025 by rpki-client