This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json) Hash identifier: 0+6i9kzRTGQCONUhNN9ExBJVBpWvHurM7YBtOKCPgIs= Subject key identifier: 4C:A3:DD:19:48:96:65:21:7A:0F:57:07:15:18:E6:27:01:97:87:E2 Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1 Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1 Certificate serial: 019B424933E4FE8544C3D27B161C97649AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 19:00:52 +0000 Manifest this update: Sun 21 Dec 2025 19:00:52 +0000 Manifest next update: Mon 22 Dec 2025 19:00:52 +0000 Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: TEWBvf8RnDO6oUq3h3oryqbmRntjSoj9mGR/3nXyuU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:33:e4:fe:85:44:c3:d2:7b:16:1c:97:64:9a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1 Validity Not Before: Dec 21 19:00:52 2025 GMT Not After : Dec 22 19:00:52 2025 GMT Subject: CN=4ca3dd19489665217a0f57071518e627019787e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:a0:67:7c:f0:b0:03:73:b4:82:c2:9e:c9: 63:cd:65:5a:dc:7f:66:57:a3:14:40:e0:67:4c:66: 0e:bb:ca:25:7f:7c:3e:4c:e2:05:53:d5:a3:ba:1f: 67:ea:3e:7d:3c:d0:a3:3a:e7:9a:28:f6:19:b3:c7: e2:5c:2a:b6:4e:a3:be:3e:e9:dd:f8:e4:90:7e:53: 64:a0:44:ed:9a:8d:6d:34:31:71:b6:a2:74:88:18: 10:ce:fe:23:00:e9:09:48:66:86:23:d8:79:8b:28: bf:d6:df:7f:58:20:19:23:7e:12:5d:55:c7:d9:fe: 75:36:2e:7d:f1:33:b5:c6:1f:bb:b9:59:d9:74:19: 00:1d:86:9c:77:22:3a:fc:34:f9:7c:10:6b:f3:d7: 95:d3:42:24:2b:c7:76:84:80:99:77:e8:f2:39:37: 4a:2a:61:eb:04:61:23:e1:cd:c3:42:4a:79:c0:5c: a9:ee:7a:33:f3:c5:e8:b0:17:64:46:ea:36:93:17: 39:d4:11:a2:f7:bb:f8:5c:4d:23:f6:a1:47:e6:29: 3e:be:ad:46:1f:3c:c2:25:e1:da:3c:f8:f1:7c:a4: 67:86:33:16:9b:5d:ee:17:1b:0c:d6:19:05:ef:10: 56:33:42:8f:02:d4:76:ce:da:50:73:09:be:13:b6: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:DD:19:48:96:65:21:7A:0F:57:07:15:18:E6:27:01:97:87:E2 X509v3 Authority Key Identifier: keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e6:96:87:ee:f1:11:88:0e:b4:79:f6:58:1a:d6:90:72:c1: d3:88:ec:02:04:f7:e8:c1:51:7d:b4:d6:a2:72:71:b5:04:d4: e7:39:c0:f8:c3:3d:35:d2:75:23:10:4f:12:2d:da:0e:0d:06: 8d:ac:69:09:42:b2:0a:02:c6:69:0c:3a:55:62:87:e6:5d:4b: 44:db:a1:9e:76:4d:1b:7a:b3:a6:14:fd:d2:8f:86:b2:d5:ad: c2:27:9d:17:62:0c:a4:e5:a5:3e:f3:dc:de:f1:08:ce:cf:6c: 6e:a1:ac:1a:7f:4c:a7:a9:74:82:4e:a9:15:0f:07:db:a9:58: 73:75:e7:5e:ba:3e:77:84:f9:fd:02:24:14:06:d8:dc:6f:58: 74:41:70:59:01:b1:69:71:2b:f6:20:65:d9:33:18:00:04:56: 09:84:c2:d6:da:0e:6a:a9:a9:68:3f:5c:4a:fb:68:74:d6:38: d2:4d:a1:f1:9b:67:a2:69:b5:3a:57:3e:03:75:0a:55:fb:22: 3c:55:d5:ad:36:ba:a8:a7:5e:3b:26:cd:a1:cb:af:5d:8d:50: 10:df:58:61:dd:7b:af:19:83:da:b4:1e:ca:f6:cc:0c:e1:09: 27:2a:41:b2:29:86:b4:1e:2d:c2:5b:23:32:44:ff:49:4d:2c: 88:45:e3:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSTPk/oVEw9J7FhyXZJrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy NjQxZjEwHhcNMjUxMjIxMTkwMDUyWhcNMjUxMjIyMTkwMDUyWjAzMTEwLwYDVQQD Eyg0Y2EzZGQxOTQ4OTY2NTIxN2EwZjU3MDcxNTE4ZTYyNzAxOTc4N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjegZ3zwsANztILCnsljzWVa3H9m V6MUQOBnTGYOu8olf3w+TOIFU9Wjuh9n6j59PNCjOueaKPYZs8fiXCq2TqO+Pund +OSQflNkoETtmo1tNDFxtqJ0iBgQzv4jAOkJSGaGI9h5iyi/1t9/WCAZI34SXVXH 2f51Ni598TO1xh+7uVnZdBkAHYacdyI6/DT5fBBr89eV00IkK8d2hICZd+jyOTdK KmHrBGEj4c3DQkp5wFyp7noz88XosBdkRuo2kxc51BGi97v4XE0j9qFH5ik+vq1G HzzCJeHaPPjxfKRnhjMWm13uFxsM1hkF7xBWM0KPAtR2ztpQcwm+E7b8kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyj3RlIlmUheg9XBxUY5icBl4fiMB8GA1UdIwQY MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieaWh+7x EYgOtHn2WBrWkHLB04jsAgT36MFRfbTWonJxtQTU5znA+MM9NdJ1IxBPEi3aDg0G jaxpCUKyCgLGaQw6VWKH5l1LRNuhnnZNG3qzphT90o+GstWtwiedF2IMpOWlPvPc 3vEIzs9sbqGsGn9Mp6l0gk6pFQ8H26lYc3XnXro+d4T5/QIkFAbY3G9YdEFwWQGx aXEr9iBl2TMYAARWCYTC1toOaqmpaD9cSvtodNY40k2h8Ztnomm1Olc+A3UKVfsi PFXVrTa6qKdeOybNocuvXY1QEN9YYd17rxmD2rQeyvbMDOEJJypBsimGtB4twlsj MkT/SU0siEXjsg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:46:59 2025 by rpki-client