This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft File: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json) Hash identifier: v450gqs3Dt3OB5/kwhr9E1skmRZMKw8I9qafEVV4eDM= Subject key identifier: DD:7E:CB:C2:73:FB:E5:EE:FD:BF:43:63:46:FA:A2:CF:F2:D4:B3:B6 Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B Certificate issuer: /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b Certificate serial: 019AF389E222030012F7702F396054A0756F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:31 +0000 Manifest this update: Sat 06 Dec 2025 12:01:31 +0000 Manifest next update: Sun 07 Dec 2025 12:01:31 +0000 Files and hashes: 1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: bk0QTFOb3ebn7bTiLgvr98hplJ5EsFuZGD4stDSQCbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e2:22:03:00:12:f7:70:2f:39:60:54:a0:75:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b Validity Not Before: Dec 6 12:01:31 2025 GMT Not After : Dec 7 12:01:31 2025 GMT Subject: CN=dd7ecbc273fbe5eefdbf436346faa2cff2d4b3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:52:f6:a7:88:59:b5:06:cb:be:41:57:d2: 2d:dc:c1:2e:f6:01:6a:3d:ef:8c:1b:fe:6b:1f:11: 3f:32:9a:28:eb:38:f5:ea:9f:03:a5:e4:b2:ed:14: 06:6d:4e:a6:a1:b9:a5:46:60:36:1c:f9:87:f4:d0: 03:bb:22:89:d9:83:ba:ec:ee:ba:a8:26:1c:ae:27: 9c:93:15:c0:20:e2:89:07:6f:c1:40:dc:46:1c:8c: 15:43:dc:2b:bb:bd:50:d5:51:ec:43:44:e1:d7:44: 53:ce:69:f2:d0:a4:7d:a9:7c:35:96:64:2b:4d:b0: 25:01:3f:a1:4f:b2:7c:a6:c4:a3:5d:31:87:31:03: 3b:c2:0c:36:c9:ba:9c:36:63:bf:e3:e4:0a:cb:ac: e2:02:e1:45:d1:ff:54:d3:d8:cf:84:ff:56:07:60: 1d:63:1b:cb:8c:fe:a9:5c:8b:8e:92:b7:7a:6c:63: 1d:39:58:ea:ce:2b:b8:94:51:91:0c:21:ce:6d:49: 1a:8d:fb:aa:2e:6c:2b:d2:fd:ee:10:03:ec:16:f5: 79:d4:71:2c:a9:a2:2a:7f:fa:80:e7:e0:4c:72:02: 42:03:96:c1:9f:28:1f:06:e9:5f:00:0e:73:57:0d: 85:a5:3a:25:29:16:b8:31:49:8e:ed:8a:ca:7c:73: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7E:CB:C2:73:FB:E5:EE:FD:BF:43:63:46:FA:A2:CF:F2:D4:B3:B6 X509v3 Authority Key Identifier: keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:23:c8:eb:ab:7c:92:2c:39:94:62:41:bf:1c:c0:93:03:31: 43:f7:f0:59:fa:f4:36:fe:e3:b2:61:91:99:66:a6:a4:6f:b6: d8:f8:61:4a:7f:50:78:d2:1a:c1:9b:cb:d4:b0:aa:71:cd:f3: 04:bc:82:ea:7e:11:f7:94:1b:2b:69:50:f7:8c:9c:eb:d3:fd: 4a:a6:59:b1:4d:c2:a6:e5:1d:b9:fa:2c:1c:6d:6a:0b:df:98: 42:77:0a:97:fa:ed:c3:bc:5d:93:f9:54:3b:21:80:92:71:b3: 80:ae:98:2a:58:c5:27:d9:65:64:a6:ee:cd:ae:3b:7c:b0:eb: 7e:d7:bc:83:44:ac:21:47:d0:da:c6:f8:31:b4:4c:ca:08:1a: 08:79:2b:35:b4:92:f4:8f:d9:c2:79:d3:4a:76:6a:bb:ca:83: 82:db:06:af:e9:36:10:2e:76:3f:5f:22:61:9d:cf:2b:e9:b3: 03:cb:26:7f:ef:ca:0c:0d:86:6d:00:10:f2:81:77:25:f7:f3: 84:14:21:db:c5:07:47:8f:c1:c3:98:bf:8d:e6:6a:db:08:68: a8:e8:88:55:65:ba:6a:ba:68:9a:ab:d4:d3:76:a5:bf:9e:73: 4c:bb:5b:a5:b3:9d:87:8d:9b:c5:e5:23:57:66:0e:b0:fc:76: c2:d5:0a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieIiAwAS93AvOWBUoHVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjJmMDk1MzAwNjEwNDVmNDJmN2JkNTFmMWMzYjYyNTll YmFlMWIwHhcNMjUxMjA2MTIwMTMxWhcNMjUxMjA3MTIwMTMxWjAzMTEwLwYDVQQD EyhkZDdlY2JjMjczZmJlNWVlZmRiZjQzNjM0NmZhYTJjZmYyZDRiM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57JS9qeIWbUGy75BV9It3MEu9gFq Pe+MG/5rHxE/Mpoo6zj16p8DpeSy7RQGbU6mobmlRmA2HPmH9NADuyKJ2YO67O66 qCYcrieckxXAIOKJB2/BQNxGHIwVQ9wru71Q1VHsQ0Th10RTzmny0KR9qXw1lmQr TbAlAT+hT7J8psSjXTGHMQM7wgw2ybqcNmO/4+QKy6ziAuFF0f9U09jPhP9WB2Ad YxvLjP6pXIuOkrd6bGMdOVjqziu4lFGRDCHObUkajfuqLmwr0v3uEAPsFvV51HEs qaIqf/qA5+BMcgJCA5bBnygfBulfAA5zVw2FpTolKRa4MUmO7YrKfHMpXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1+y8Jz++Xu/b9DY0b6os/y1LO2MB8GA1UdIwQY MBaAFOyy8JUwBhBF9C971R8cO2JZ664bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUt MWFiMDdhMjY5MDEwLzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUtMWFiMDdhMjY5MDEw LzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCPI66t8 kiw5lGJBvxzAkwMxQ/fwWfr0Nv7jsmGRmWampG+22PhhSn9QeNIawZvL1LCqcc3z BLyC6n4R95QbK2lQ94yc69P9SqZZsU3CpuUdufosHG1qC9+YQncKl/rtw7xdk/lU OyGAknGzgK6YKljFJ9llZKbuza47fLDrfte8g0SsIUfQ2sb4MbRMyggaCHkrNbSS 9I/ZwnnTSnZqu8qDgtsGr+k2EC52P18iYZ3PK+mzA8smf+/KDA2GbQAQ8oF3Jffz hBQh28UHR4/Bw5i/jeZq2whoqOiIVWW6arpomqvU03alv55zTLtbpbOdh42bxeUj V2YOsPx2wtUKgg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:02 2025 by rpki-client