This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json) Hash identifier: Fq34UBWg+iAxK8ry7UkJhBfF7gsQwqDhYn9ARUElzAs= Subject key identifier: E5:4B:94:ED:EB:6B:DD:EC:7D:D5:89:FC:D8:92:11:97:C5:1D:97:B1 Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7 Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7 Certificate serial: 019AF38A08A199E769003C94C794536B315D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 12:01:40 +0000 Manifest this update: Sat 06 Dec 2025 12:01:40 +0000 Manifest next update: Sun 07 Dec 2025 12:01:40 +0000 Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: 8uZLrGM1i5zYTZa8EVeHsmGFjR1aOD1G2j5tLB0CBYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:08:a1:99:e7:69:00:3c:94:c7:94:53:6b:31:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7 Validity Not Before: Dec 6 12:01:40 2025 GMT Not After : Dec 7 12:01:40 2025 GMT Subject: CN=e54b94edeb6bddec7dd589fcd8921197c51d97b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:82:9c:12:e0:f7:44:a8:58:8f:8e:b6:e7: 89:13:e9:56:d7:60:c0:ca:8a:70:a4:48:a8:41:f2: fc:a7:ec:f9:ba:f6:3c:39:69:75:27:57:f5:80:00: ee:87:55:d6:ed:fc:f6:af:f3:66:6d:42:99:ff:33: 61:43:9b:43:0e:11:b7:f1:48:04:bc:86:2b:0e:ad: 3e:a3:5f:b6:a6:49:65:3c:37:37:8e:7e:03:35:1e: 94:ec:72:ce:31:63:83:be:43:01:ba:23:65:66:df: 4b:c3:91:ad:a2:49:3f:a7:7b:31:c3:a9:11:c1:53: 9f:db:65:a8:1a:2f:7e:cb:fe:73:93:bf:f2:c7:b7: 8f:42:48:b7:61:65:a6:23:ff:65:7d:66:c4:46:64: ba:92:37:06:d1:4f:00:6e:6d:7d:e8:c1:21:a5:c2: ba:65:93:a3:e9:96:0b:d1:bb:82:f6:8a:65:f8:35: 22:91:2b:95:3e:56:03:00:14:8c:16:71:47:20:77: 8e:f3:7d:dd:03:7d:d7:e2:b5:39:b8:61:13:69:72: 37:8a:0f:e3:3a:0b:8b:82:83:86:ac:22:69:68:45: 54:ab:24:86:17:d4:4a:07:fc:61:de:ad:3e:9b:3f: a4:6b:57:04:8f:54:98:d0:b8:03:da:42:53:cc:de: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:94:ED:EB:6B:DD:EC:7D:D5:89:FC:D8:92:11:97:C5:1D:97:B1 X509v3 Authority Key Identifier: keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:51:10:4e:8c:c9:92:41:fb:b2:27:38:6e:1c:cb:ee:a2:de: 7d:d9:f4:4c:09:c2:71:20:77:90:a5:e4:dc:f1:40:38:1b:7e: 27:a5:62:f9:39:8f:11:bf:2c:20:35:36:39:c0:56:0e:85:7b: 0f:fe:af:a6:34:49:9d:2f:99:64:30:a7:ce:88:c5:7f:34:20: 5f:75:dd:e8:63:47:c5:a4:f9:f1:50:1d:db:11:32:3c:27:9c: 2a:1b:08:4a:ee:14:fe:61:be:fc:6e:f3:ff:27:b0:d3:c0:8e: 8e:06:e3:3d:d5:dd:04:21:34:26:17:81:e6:66:26:06:58:e3: fd:61:d5:99:4d:61:3a:19:9c:d4:fc:5f:fe:6d:d0:6e:79:e3: e5:e7:1c:c2:f7:07:5f:39:da:40:fd:38:3f:20:e9:97:7a:7d: 91:39:9a:cb:01:1a:b1:59:14:fc:83:48:6c:11:e8:cb:4b:2d: c2:1e:d5:6e:ba:25:5c:60:09:18:03:a9:61:98:5e:d2:19:07: bc:80:37:c1:62:8a:4b:71:7c:be:84:9a:c3:da:6c:78:ff:75: a2:50:e8:6a:1e:4e:36:32:38:70:cd:14:13:c9:de:79:63:85: a3:bc:70:4b:65:80:23:07:25:b3:2d:2e:37:45:9c:a7:3f:d3: 02:60:ba:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigihmedpADyUx5RTazFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjE5YjEwMDFjMTEwNzFmYmEyY2MzNDE0Y2M0NzViNmMy OTA5YzcwHhcNMjUxMjA2MTIwMTQwWhcNMjUxMjA3MTIwMTQwWjAzMTEwLwYDVQQD EyhlNTRiOTRlZGViNmJkZGVjN2RkNTg5ZmNkODkyMTE5N2M1MWQ5N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7eCnBLg90SoWI+OtueJE+lW12DA yopwpEioQfL8p+z5uvY8OWl1J1f1gADuh1XW7fz2r/NmbUKZ/zNhQ5tDDhG38UgE vIYrDq0+o1+2pkllPDc3jn4DNR6U7HLOMWODvkMBuiNlZt9Lw5Gtokk/p3sxw6kR wVOf22WoGi9+y/5zk7/yx7ePQki3YWWmI/9lfWbERmS6kjcG0U8Abm196MEhpcK6 ZZOj6ZYL0buC9opl+DUikSuVPlYDABSMFnFHIHeO833dA33X4rU5uGETaXI3ig/j OguLgoOGrCJpaEVUqySGF9RKB/xh3q0+mz+ka1cEj1SY0LgD2kJTzN7ATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVLlO3ra93sfdWJ/NiSEZfFHZexMB8GA1UdIwQY MBaAFC+xmxABwRBx+6LMNBTMR1tsKQnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdHYkVBSEJFSEg3b3N3MEZNeEhXMndwQ2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yMDQ3Y2YtZWU2Ny00NDk0LWFjZDUt ZDViYTVjMDczYThlLzEvTDdHYkVBSEJFSEg3b3N3MEZNeEhXMndwQ2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yMDQ3Y2YtZWU2Ny00NDk0LWFjZDUtZDViYTVjMDczYThl LzEvTDdHYkVBSEJFSEg3b3N3MEZNeEhXMndwQ2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFEQTozJ kkH7sic4bhzL7qLefdn0TAnCcSB3kKXk3PFAOBt+J6Vi+TmPEb8sIDU2OcBWDoV7 D/6vpjRJnS+ZZDCnzojFfzQgX3Xd6GNHxaT58VAd2xEyPCecKhsISu4U/mG+/G7z /yew08COjgbjPdXdBCE0JheB5mYmBljj/WHVmU1hOhmc1Pxf/m3Qbnnj5eccwvcH XznaQP04PyDpl3p9kTmaywEasVkU/INIbBHoy0stwh7VbrolXGAJGAOpYZhe0hkH vIA3wWKKS3F8voSaw9pseP91olDoah5ONjI4cM0UE8neeWOFo7xwS2WAIwclsy0u N0Wcpz/TAmC6FA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:07 2025 by rpki-client