This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json) Hash identifier: jEEAzSR5RKJ9hM8fZuCK3UOIDx81HwYP+TCzhiGIsYc= Subject key identifier: B4:C8:BF:4B:CC:92:8B:50:61:E7:58:3C:DD:69:85:FA:A0:83:DE:44 Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02 Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802 Certificate serial: 019AF12CC1CD31D0265AC0805ED135AC3EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: XNUd4FLYGHgCk5cVAADJrI8nHrXn4rFHfSqxp7d5A40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c1:cd:31:d0:26:5a:c0:80:5e:d1:35:ac:3e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=b4c8bf4bcc928b5061e7583cdd6985faa083de44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:4a:62:ed:00:25:b0:f9:63:c7:80:3d:eb: 71:2d:59:9a:1b:d9:58:3b:d3:e4:1b:97:a5:42:34: c3:6d:8b:99:0b:7e:f8:3b:f3:cd:48:59:c8:8b:ff: d6:e9:b5:7e:3b:06:e2:49:1b:6d:f2:72:b8:01:52: 11:e7:5f:53:8c:18:ad:c6:4b:76:c6:75:d6:9e:9c: 99:22:bb:23:7a:9d:39:29:5e:63:47:76:5b:24:11: 78:ec:c1:50:7a:15:22:5b:15:8d:f3:20:d2:b2:fc: 7a:bd:77:c5:90:a1:cf:61:47:97:38:26:96:c6:ed: 2d:f7:79:bf:45:64:ea:01:3b:f0:95:57:ff:c8:ab: 07:70:c8:bf:a9:6f:14:a6:7d:5b:5a:f2:79:fd:55: 60:1f:81:f6:f4:94:0b:e5:50:cf:37:19:b8:1d:7c: c2:68:17:a3:16:4b:4b:54:d0:df:02:50:ff:59:f5: dd:d7:29:2c:c6:87:09:c5:6c:46:db:a7:e2:e3:97: af:11:36:6f:11:c6:46:d4:60:d6:1f:5f:be:3d:3f: f7:ae:30:a9:6d:bd:44:31:70:8d:c4:16:e7:2e:a5: 0c:65:ce:20:e9:d6:86:bd:27:f6:7d:56:ae:40:5e: 59:91:9f:a6:1e:be:9a:08:27:41:87:e9:1c:25:f3: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C8:BF:4B:CC:92:8B:50:61:E7:58:3C:DD:69:85:FA:A0:83:DE:44 X509v3 Authority Key Identifier: keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:66:4c:d4:31:35:63:cf:cd:b9:80:fd:5e:fd:9a:a5:f4:fe: f6:92:1c:27:e7:d4:3d:30:82:59:aa:b9:94:f5:91:57:9f:6d: bd:c4:93:8c:0c:af:f8:cc:4a:e4:27:57:ac:c7:9d:a7:e6:b6: 09:0d:6f:22:7e:52:56:3c:fd:93:5e:16:c1:a3:9c:69:53:55: 6c:cb:89:12:a0:8d:7b:65:2c:7e:db:eb:41:a5:bf:07:a0:1c: f2:4b:77:b3:e8:af:21:4c:5c:46:e1:62:dc:09:80:0e:13:d2: d9:50:93:8a:c2:8b:41:c8:a3:92:3c:57:07:c9:4a:b4:62:ee: 6b:3c:3f:e3:eb:78:69:7a:6d:da:61:cb:14:d8:45:4d:cf:a4: 42:70:70:93:b5:96:18:4e:31:6f:bb:40:a6:20:fb:74:d6:16: 90:88:8e:61:00:aa:16:d1:ec:65:48:92:f0:fe:4e:af:8b:8e: dd:7d:8e:c3:77:7f:4b:58:a2:da:0a:3c:99:a0:ca:c6:5a:14: a3:b8:c2:18:ea:c3:87:fd:b5:a9:49:c8:d6:94:b0:66:eb:7b: 14:8f:43:8c:b0:99:b4:f7:b2:8b:fe:0a:40:27:d9:c2:8d:58: 12:91:d8:3d:1c:ff:af:31:1e:c2:27:71:e9:d8:cf:3d:08:c1: 2a:56:5d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMHNMdAmWsCAXtE1rD7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjVlMjFiODQ1YmIxZGRmYWJiMzg4ODgwMmMxOWE2MjI3 NzM4MDIwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EyhiNGM4YmY0YmNjOTI4YjUwNjFlNzU4M2NkZDY5ODVmYWEwODNkZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdtKYu0AJbD5Y8eAPetxLVmaG9lY O9PkG5elQjTDbYuZC374O/PNSFnIi//W6bV+OwbiSRtt8nK4AVIR519TjBitxkt2 xnXWnpyZIrsjep05KV5jR3ZbJBF47MFQehUiWxWN8yDSsvx6vXfFkKHPYUeXOCaW xu0t93m/RWTqATvwlVf/yKsHcMi/qW8Upn1bWvJ5/VVgH4H29JQL5VDPNxm4HXzC aBejFktLVNDfAlD/WfXd1yksxocJxWxG26fi45evETZvEcZG1GDWH1++PT/3rjCp bb1EMXCNxBbnLqUMZc4g6daGvSf2fVauQF5ZkZ+mHr6aCCdBh+kcJfMECQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTIv0vMkotQYedYPN1phfqgg95EMB8GA1UdIwQY MBaAFLO14huEW7Hd+rs4iIAsGaYidzgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTIt ZmU1MDY1MGUxYmU0LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTItZmU1MDY1MGUxYmU0 LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2ZM1DE1 Y8/NuYD9Xv2apfT+9pIcJ+fUPTCCWaq5lPWRV59tvcSTjAyv+MxK5CdXrMedp+a2 CQ1vIn5SVjz9k14WwaOcaVNVbMuJEqCNe2UsftvrQaW/B6Ac8kt3s+ivIUxcRuFi 3AmADhPS2VCTisKLQcijkjxXB8lKtGLuazw/4+t4aXpt2mHLFNhFTc+kQnBwk7WW GE4xb7tApiD7dNYWkIiOYQCqFtHsZUiS8P5Or4uO3X2Ow3d/S1ii2go8maDKxloU o7jCGOrDh/21qUnI1pSwZut7FI9DjLCZtPeyi/4KQCfZwo1YEpHYPRz/rzEewidx 6djPPQjBKlZd/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:19 2025 by rpki-client