This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json) Hash identifier: 1fP04Cm/KXsdS8bdLt1GvTxEw46Vl42NbDBkXmXgtn0= Subject key identifier: 29:6C:AB:47:06:6E:CF:7C:B4:4F:41:2A:58:01:B0:45:DA:3D:2E:31 Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9 Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9 Certificate serial: 019AF20938E33825337E98996C6EBDB40B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: 8r4m+2VS2A+teZHzS3alDK0lZnWkshZXnwpCzzuFWOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:38:e3:38:25:33:7e:98:99:6c:6e:bd:b4:0b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=296cab47066ecf7cb44f412a5801b045da3d2e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:fe:9b:3b:97:e6:f5:bb:3d:99:86:11:69: 83:0f:20:46:10:0e:85:79:10:58:bc:7c:69:36:5e: a5:a1:85:5f:fd:96:7a:5e:23:d5:22:3b:12:1e:b8: 75:6d:f9:7f:9d:25:a2:71:38:28:fb:24:9f:21:e5: db:12:dc:50:92:78:e1:94:20:f5:b4:6b:bb:ad:db: bc:7b:c4:eb:7b:d8:d4:9d:2e:76:2c:44:12:12:b5: c2:33:e5:0a:60:6d:1a:2f:3c:c6:02:6a:d7:83:94: da:00:59:83:51:56:95:21:7e:c1:ce:ce:39:5e:42: 3f:a9:0c:57:9e:4b:55:3f:aa:f3:65:0c:c4:1e:d6: 7b:33:94:09:b6:df:c2:57:38:16:39:7a:b4:84:c6: a2:ec:22:5b:ec:f1:e9:c1:37:e2:e3:96:eb:0a:d6: 52:88:ec:c9:58:20:4f:18:ea:7c:2c:ab:2a:ca:d3: d0:5b:97:55:e2:5b:09:40:79:14:da:78:d8:97:94: 94:f8:d1:d9:d1:0f:f8:ab:36:15:f3:73:9d:08:f1: 6f:df:b8:cb:30:71:f3:63:8b:a5:ce:3d:75:45:32: 43:48:32:d8:8f:16:19:d9:3b:fe:75:31:90:43:2c: 3d:16:9a:cc:80:91:06:06:1c:81:c8:0c:d8:7f:97: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:AB:47:06:6E:CF:7C:B4:4F:41:2A:58:01:B0:45:DA:3D:2E:31 X509v3 Authority Key Identifier: keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c6:75:98:b2:33:44:e5:2e:d9:6f:57:cd:2d:2b:bd:e0:c6: 6d:40:cf:b6:b8:48:cd:6c:42:39:2c:e6:e8:d9:2e:e4:ef:33: e1:25:15:3f:70:e2:4b:33:ea:e1:7b:58:a9:3e:e9:72:3d:27: 59:cf:eb:e6:a0:80:7a:cf:f9:cf:73:fd:c4:d4:32:c4:fb:be: 74:cb:3e:ac:41:a5:db:c3:a0:2d:00:7d:c1:14:02:8f:fb:98: b7:b0:76:d5:11:30:b8:b9:54:82:c6:13:54:b4:35:dd:92:da: 05:23:77:08:44:d8:db:40:99:d9:92:ca:1f:5e:fc:84:c7:d2: 08:76:77:89:5d:01:d7:90:16:04:9f:60:09:58:06:72:4d:43: ce:88:b9:88:48:2e:eb:40:1a:a4:e8:59:89:fa:63:9f:95:2b: 33:19:42:73:40:e0:3f:98:9a:3f:ea:73:49:33:3a:e6:d7:c7: af:0e:e8:e0:23:d5:d2:1b:5c:05:f0:59:1b:c6:de:50:ef:30: 80:ec:33:24:0b:50:28:33:76:76:fb:2e:81:f6:88:d3:88:24: 42:be:a5:12:07:d5:58:a2:30:49:db:a1:02:7b:97:cf:0c:ed: 92:2e:0f:5a:07:61:78:6b:c3:10:aa:ca:ee:60:dc:6b:42:03: 81:f1:6a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTjjOCUzfpiZbG69tAtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh ZTQwYTkwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EygyOTZjYWI0NzA2NmVjZjdjYjQ0ZjQxMmE1ODAxYjA0NWRhM2QyZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21H+mzuX5vW7PZmGEWmDDyBGEA6F eRBYvHxpNl6loYVf/ZZ6XiPVIjsSHrh1bfl/nSWicTgo+ySfIeXbEtxQknjhlCD1 tGu7rdu8e8Tre9jUnS52LEQSErXCM+UKYG0aLzzGAmrXg5TaAFmDUVaVIX7Bzs45 XkI/qQxXnktVP6rzZQzEHtZ7M5QJtt/CVzgWOXq0hMai7CJb7PHpwTfi45brCtZS iOzJWCBPGOp8LKsqytPQW5dV4lsJQHkU2njYl5SU+NHZ0Q/4qzYV83OdCPFv37jL MHHzY4ulzj11RTJDSDLYjxYZ2Tv+dTGQQyw9FprMgJEGBhyByAzYf5dxlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClsq0cGbs98tE9BKlgBsEXaPS4xMB8GA1UdIwQY MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5 LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicZ1mLIz ROUu2W9XzS0rveDGbUDPtrhIzWxCOSzm6Nku5O8z4SUVP3DiSzPq4XtYqT7pcj0n Wc/r5qCAes/5z3P9xNQyxPu+dMs+rEGl28OgLQB9wRQCj/uYt7B21REwuLlUgsYT VLQ13ZLaBSN3CETY20CZ2ZLKH178hMfSCHZ3iV0B15AWBJ9gCVgGck1Dzoi5iEgu 60AapOhZifpjn5UrMxlCc0DgP5iaP+pzSTM65tfHrw7o4CPV0htcBfBZG8beUO8w gOwzJAtQKDN2dvsugfaI04gkQr6lEgfVWKIwSduhAnuXzwztki4PWgdheGvDEKrK 7mDca0IDgfFqpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:49 2025 by rpki-client