This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json) Hash identifier: OBwwR+RgPBKaZHhua9aT4sRP8Kwm2h2AAmjyvQOjnCY= Subject key identifier: ED:9A:39:55:32:32:88:5B:BF:45:D3:9F:FD:BE:2F:A5:90:EA:D4:65 Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef Certificate serial: 019AF12ED3B91F69D92B1CEF66CD954A126E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: VWfdVYquj1a+heAuNQwE7VEmKfy9MBTUIPVyyPk3JhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d3:b9:1f:69:d9:2b:1c:ef:66:cd:95:4a:12:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=ed9a39553232885bbf45d39ffdbe2fa590ead465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:ec:cd:0f:44:9c:01:21:f1:87:03:ce:e7: 75:10:dc:24:f8:e0:c8:16:22:8a:94:78:39:f1:ef: d2:69:f1:6b:8c:a6:58:1d:b3:30:4b:7f:27:f0:db: 4b:56:8a:2a:a4:f6:66:6b:e7:d7:b9:6f:ad:a4:52: 12:f9:5d:d5:b7:e3:32:bb:e6:35:a0:40:fc:ec:3d: 79:0a:02:48:e2:9a:91:72:4d:54:28:06:10:5d:cd: 61:df:71:7f:ae:9b:74:ec:e2:71:2a:83:3e:d3:e6: ec:30:17:b2:93:f2:c8:d8:9f:c2:71:0d:19:45:fe: 61:d8:67:91:c6:8f:06:17:9a:49:75:f8:53:df:a5: 63:71:c6:59:8b:9c:2a:7a:f0:42:b0:d4:29:ab:11: 4f:fe:ed:a8:50:a5:09:61:9f:73:bf:3e:03:2e:bf: 68:f1:e8:60:e3:ab:70:89:33:cf:c2:5f:aa:55:5a: 37:76:f5:22:a8:95:0b:0e:ba:ba:48:3e:1e:d6:2a: 8c:9a:7a:56:db:fe:10:98:7f:6b:1a:b8:d4:20:ce: 17:ad:ef:7d:2c:d0:c7:41:7e:69:23:9a:d6:c0:d2: c5:a4:81:7c:17:47:fa:f8:e1:a7:23:e5:8f:94:da: cf:08:70:89:4e:37:80:0a:de:a9:cc:da:3a:8e:31: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:39:55:32:32:88:5B:BF:45:D3:9F:FD:BE:2F:A5:90:EA:D4:65 X509v3 Authority Key Identifier: keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:30:ae:1f:61:b9:7a:87:4f:57:75:e2:6c:64:44:7d:41:e8: d9:92:15:df:80:aa:74:90:72:cd:13:b4:fc:9a:42:1c:c1:9d: a1:41:31:87:25:1b:9a:7b:c5:5a:45:da:b3:de:55:f8:03:2d: a1:f3:37:25:d7:f0:0e:c8:d7:c6:96:ce:48:80:ae:db:be:13: a7:d0:e6:e8:32:ea:94:ff:9f:5d:b7:ba:df:9b:41:a1:14:fe: 61:26:0d:5d:ea:e4:bd:fe:17:59:12:71:21:57:89:82:4e:5e: 6a:36:46:53:34:62:30:ae:8d:74:f1:0e:de:98:a3:1b:73:cc: 38:4f:9d:93:2d:a5:60:7e:d6:1e:3a:54:61:1e:7d:fa:22:fa: cd:8e:4a:ef:8d:06:65:43:80:76:dd:ed:78:2b:40:5e:b7:60: 81:a2:04:89:8f:6e:94:be:d1:38:25:e4:f2:18:ac:39:ac:2a: 4b:0e:55:c4:15:53:ae:97:b3:64:6f:8b:20:d8:4b:1c:61:54: 37:79:c3:e1:f9:d8:7d:79:5a:5c:a0:bd:62:7e:aa:bf:77:61: 85:91:42:e2:72:c6:b1:f5:c2:ec:66:dc:35:d2:24:0b:49:80: 4a:f1:c9:e3:1f:34:09:c6:40:28:09:b0:52:44:8a:2d:6a:43: 04:c6:13:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtO5H2nZKxzvZs2VShJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDUxYmYxZTJhNTMwMDBiYzIzMDYwNTYwZjJjYzBiMzlk NDk2ZWYwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EyhlZDlhMzk1NTMyMzI4ODViYmY0NWQzOWZmZGJlMmZhNTkwZWFkNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy/szQ9EnAEh8YcDzud1ENwk+ODI FiKKlHg58e/SafFrjKZYHbMwS38n8NtLVooqpPZma+fXuW+tpFIS+V3Vt+Myu+Y1 oED87D15CgJI4pqRck1UKAYQXc1h33F/rpt07OJxKoM+0+bsMBeyk/LI2J/CcQ0Z Rf5h2GeRxo8GF5pJdfhT36VjccZZi5wqevBCsNQpqxFP/u2oUKUJYZ9zvz4DLr9o 8ehg46twiTPPwl+qVVo3dvUiqJULDrq6SD4e1iqMmnpW2/4QmH9rGrjUIM4Xre99 LNDHQX5pI5rWwNLFpIF8F0f6+OGnI+WPlNrPCHCJTjeACt6pzNo6jjFdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2aOVUyMohbv0XTn/2+L6WQ6tRlMB8GA1UdIwQY MBaAFO3VG/HipTAAvCMGBWDyzAs51JbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEt Yzc1N2IxNWYxY2NmLzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEtYzc1N2IxNWYxY2Nm LzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDCuH2G5 eodPV3XibGREfUHo2ZIV34CqdJByzRO0/JpCHMGdoUExhyUbmnvFWkXas95V+AMt ofM3JdfwDsjXxpbOSICu274Tp9Dm6DLqlP+fXbe635tBoRT+YSYNXerkvf4XWRJx IVeJgk5eajZGUzRiMK6NdPEO3pijG3PMOE+dky2lYH7WHjpUYR59+iL6zY5K740G ZUOAdt3teCtAXrdggaIEiY9ulL7ROCXk8hisOawqSw5VxBVTrpezZG+LINhLHGFU N3nD4fnYfXlaXKC9Yn6qv3dhhZFC4nLGsfXC7GbcNdIkC0mASvHJ4x80CcZAKAmw UkSKLWpDBMYTqA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:59 2025 by rpki-client