This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json) Hash identifier: EitwxPY5tSD3v1xNAd6Re2eMnL3Y8K/mxlOZ2axFk6I= Subject key identifier: 00:71:40:29:59:5C:11:64:AE:65:AA:A7:26:AB:98:48:CC:E7:60:DB Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7 Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7 Certificate serial: 019AF19B56C02EB94D5C0564376F4A4F7742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft Manifest number: 0ECF Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: EmjYe+IEkBW+aKYmb+DIPiBWz+va8XKaYHXTUpGemQc=) 2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:56:c0:2e:b9:4d:5c:05:64:37:6f:4a:4f:77:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7 Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=00714029595c1164ae65aaa726ab9848cce760db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:49:ee:dc:6b:a7:43:d9:ee:81:ff:c1:58: 8c:76:a3:40:dc:bb:fe:7a:dd:8b:78:ed:89:2b:98: 88:4a:92:0d:63:89:03:09:a5:c9:48:45:7f:bc:99: 46:70:6f:c5:7a:83:51:10:d9:05:a6:6d:36:15:3e: 6a:69:74:28:43:4d:91:3b:14:da:7e:7d:2e:a5:6c: 94:50:ed:39:3e:02:47:57:2b:a8:6b:a5:6a:41:96: 0c:8c:d2:c7:f9:46:a2:67:00:28:83:e0:2c:dc:13: 5a:ab:6f:35:8f:58:8b:90:0e:19:d0:2f:3e:d9:2d: 4a:1a:93:79:da:7f:31:01:59:87:c7:39:9c:64:c8: c3:b4:74:93:27:25:e5:cf:f7:25:ed:ab:a8:8a:4f: fd:2e:58:0e:96:5e:a9:4f:b8:f7:50:eb:66:76:ec: 07:3d:b3:fe:9b:35:83:68:21:73:10:15:69:ec:99: 42:00:a1:d0:ba:c4:5f:eb:ef:4b:8e:24:25:d5:65: 9c:dd:66:fb:5f:45:59:b3:57:3c:f2:96:92:e5:14: 0b:f1:03:f9:79:ab:7b:23:47:1f:16:eb:f4:78:f6: bd:f7:cb:12:05:f7:7b:a8:07:53:4e:f8:28:fa:41: 37:71:82:5a:7a:7d:50:94:c8:16:65:d5:6a:93:3b: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:71:40:29:59:5C:11:64:AE:65:AA:A7:26:AB:98:48:CC:E7:60:DB X509v3 Authority Key Identifier: keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:64:06:10:67:ae:63:b0:2e:63:49:62:95:76:b5:90:dc:3d: 02:07:36:9c:ac:f6:a6:99:e5:08:c7:fb:a1:48:8b:c5:0e:0a: 70:54:54:d6:db:f2:73:53:66:ca:db:72:28:c9:c7:a4:cf:b6: b3:7e:f5:36:02:f3:fe:ce:8f:18:d2:ec:b9:62:f8:05:34:e7: f2:f8:e9:ee:59:6c:5f:be:4a:b3:08:f4:f2:19:5f:2b:fc:dd: de:5f:06:35:7b:0e:40:04:80:c6:d1:ea:6f:50:b8:9a:60:78: fe:36:e9:0e:b6:93:1a:05:3f:b3:ea:2e:6b:e4:f4:7f:0a:ea: 3e:e8:74:3e:df:e5:79:89:09:4d:e7:12:d0:b4:c1:b5:fb:1d: fe:b2:f2:c3:bd:8c:53:63:dc:8d:4e:3c:fb:6b:a1:10:34:b9: 69:e5:a9:01:c1:55:e9:46:6c:09:ab:cf:7c:d9:0b:f5:67:c9: 70:1a:10:6a:cf:b1:33:89:db:e5:b4:5f:2d:05:d1:da:db:7a: 0b:be:e1:d8:eb:fa:31:31:83:d7:5c:e3:f2:ff:c3:db:48:68: 08:c7:21:b3:03:6f:8e:33:3e:af:04:2c:c3:a0:b3:1b:75:3c: 6e:83:ec:3f:56:e8:d7:aa:02:5b:ab:be:86:7b:55:8e:8f:dc: 17:4c:27:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1bALrlNXAVkN29KT3dCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmMzM2ZkMDExNzhhZTJmOTc0ZWVlZDVkY2RjZDNjMTc1 ZTE2YTcwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD EygwMDcxNDAyOTU5NWMxMTY0YWU2NWFhYTcyNmFiOTg0OGNjZTc2MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtJJ7txrp0PZ7oH/wViMdqNA3Lv+ et2LeO2JK5iISpINY4kDCaXJSEV/vJlGcG/FeoNRENkFpm02FT5qaXQoQ02ROxTa fn0upWyUUO05PgJHVyuoa6VqQZYMjNLH+UaiZwAog+As3BNaq281j1iLkA4Z0C8+ 2S1KGpN52n8xAVmHxzmcZMjDtHSTJyXlz/cl7auoik/9LlgOll6pT7j3UOtmduwH PbP+mzWDaCFzEBVp7JlCAKHQusRf6+9LjiQl1WWc3Wb7X0VZs1c88paS5RQL8QP5 eat7I0cfFuv0ePa998sSBfd7qAdTTvgo+kE3cYJaen1QlMgWZdVqkztX3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABxQClZXBFkrmWqpyarmEjM52DbMB8GA1UdIwQY MBaAFOy8M/0BF4ri+XTu7V3NzTwXXhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMt M2UwNWIzN2UxMzhiLzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMtM2UwNWIzN2UxMzhi LzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmQGEGeu Y7AuY0lilXa1kNw9Agc2nKz2ppnlCMf7oUiLxQ4KcFRU1tvyc1NmyttyKMnHpM+2 s371NgLz/s6PGNLsuWL4BTTn8vjp7llsX75Kswj08hlfK/zd3l8GNXsOQASAxtHq b1C4mmB4/jbpDraTGgU/s+oua+T0fwrqPuh0Pt/leYkJTecS0LTBtfsd/rLyw72M U2PcjU48+2uhEDS5aeWpAcFV6UZsCavPfNkL9WfJcBoQas+xM4nb5bRfLQXR2tt6 C77h2Ov6MTGD11zj8v/D20hoCMchswNvjjM+rwQsw6CzG3U8boPsP1bo16oCW6u+ hntVjo/cF0wn/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:05 2025 by rpki-client