This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json) Hash identifier: cZfhq7lPvy7l46yhxXnZwiPwVZDQIlNhH/chz2rRXII= Subject key identifier: 15:D3:69:B5:1A:35:9C:40:05:05:64:23:3C:64:72:F9:EB:00:8F:99 Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1 Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1 Certificate serial: 019AF6F9D685C0812FD9FBE5B077A8837D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 04:02:39 +0000 Manifest this update: Sun 07 Dec 2025 04:02:39 +0000 Manifest next update: Mon 08 Dec 2025 04:02:39 +0000 Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: 9JI+jGjiLBmu9k0gxsPWdp/++gPjcjMQyjFnaRJTK0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:d6:85:c0:81:2f:d9:fb:e5:b0:77:a8:83:7d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1 Validity Not Before: Dec 7 04:02:39 2025 GMT Not After : Dec 8 04:02:39 2025 GMT Subject: CN=15d369b51a359c40050564233c6472f9eb008f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:85:d9:7e:bd:41:75:83:87:3c:44:f9:78: ba:5e:a0:54:a0:04:ed:88:26:a6:e8:f7:c8:6e:f4: c7:bc:d5:43:60:ba:a3:af:f6:3b:fb:4b:82:f3:8f: e4:95:4b:32:a4:15:18:ae:04:7a:c3:5d:24:48:c4: 24:37:35:7b:80:d2:f1:83:28:5b:a9:2f:84:6d:9a: b3:d1:c5:d2:6b:28:9b:69:33:bc:e5:8c:5e:d5:cf: ca:ed:09:73:26:4e:6b:6a:33:44:a6:45:bd:77:c2: b7:28:ea:d8:3b:82:e3:23:96:3c:17:03:7a:b6:ee: a7:39:fa:a3:3b:9a:01:7b:79:99:e2:f8:88:37:3e: 93:b3:35:16:af:9d:1d:81:ab:28:4d:99:e8:9e:49: f2:d7:55:51:f1:0c:01:a2:3c:db:71:c7:fe:d2:b8: c5:06:14:34:d4:9a:4a:2e:07:fa:70:39:01:71:a3: 44:bb:c5:06:b8:76:95:13:75:86:09:8a:49:7d:c4: 58:29:2d:96:6c:d9:f6:9f:57:4a:61:8b:7c:fa:1a: ee:bb:36:ac:33:77:e9:17:0f:12:4f:a9:02:79:9c: 51:c1:1f:e8:c4:c4:3e:28:14:d9:57:aa:83:62:2d: 19:68:c0:7a:2a:92:58:ea:cd:87:ff:69:72:7f:62: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D3:69:B5:1A:35:9C:40:05:05:64:23:3C:64:72:F9:EB:00:8F:99 X509v3 Authority Key Identifier: keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ca:1f:a8:3b:d7:84:b3:f0:c7:b4:a9:34:b3:3a:57:36:26: 3d:96:a6:66:79:89:01:36:2a:1b:18:bf:8e:44:45:c3:95:38: 21:79:09:15:74:41:c4:89:73:cd:8c:5a:47:61:de:b4:f5:af: 84:06:cd:d5:1e:8f:2e:48:ea:6b:d9:24:d0:5f:70:c8:d3:d3: 69:74:75:96:fe:ab:dc:07:2a:37:3f:f8:5d:88:44:ea:fd:b0: ae:64:89:bf:93:db:52:bb:ec:b6:b5:06:ae:7c:bb:ba:1a:7a: ff:e9:c8:50:e1:c7:c3:3e:ff:89:5c:fb:57:71:0d:2f:e0:97: f5:e7:e3:b4:1a:30:f1:72:41:89:e6:0c:84:9f:0b:d8:a4:5e: aa:98:40:c9:74:da:33:fa:aa:5a:92:13:fe:c4:4d:f7:0b:ca: a9:d9:a3:b0:c1:d5:4f:f8:06:81:f0:03:e0:84:35:7b:cd:a1: cb:51:12:39:96:bb:63:e1:7d:dc:fe:68:63:d7:50:87:76:05: cd:2f:3c:35:1a:e1:a1:d4:0b:07:01:7c:97:3b:97:68:45:2c: 1e:47:df:cf:3e:3a:26:77:46:c5:e2:b5:fc:8b:7f:81:5e:18: 9d:63:36:5e:73:97:df:f3:87:0e:ee:c8:77:b4:92:49:9b:b6: a1:24:2f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+daFwIEv2fvlsHeog30kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy NjQxZjEwHhcNMjUxMjA3MDQwMjM5WhcNMjUxMjA4MDQwMjM5WjAzMTEwLwYDVQQD EygxNWQzNjliNTFhMzU5YzQwMDUwNTY0MjMzYzY0NzJmOWViMDA4Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEeF2X69QXWDhzxE+Xi6XqBUoATt iCam6PfIbvTHvNVDYLqjr/Y7+0uC84/klUsypBUYrgR6w10kSMQkNzV7gNLxgyhb qS+EbZqz0cXSayibaTO85Yxe1c/K7QlzJk5rajNEpkW9d8K3KOrYO4LjI5Y8FwN6 tu6nOfqjO5oBe3mZ4viINz6TszUWr50dgasoTZnonkny11VR8QwBojzbccf+0rjF BhQ01JpKLgf6cDkBcaNEu8UGuHaVE3WGCYpJfcRYKS2WbNn2n1dKYYt8+hruuzas M3fpFw8ST6kCeZxRwR/oxMQ+KBTZV6qDYi0ZaMB6KpJY6s2H/2lyf2IGfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXTabUaNZxABQVkIzxkcvnrAI+ZMB8GA1UdIwQY MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8ofqDvX hLPwx7SpNLM6VzYmPZamZnmJATYqGxi/jkRFw5U4IXkJFXRBxIlzzYxaR2HetPWv hAbN1R6PLkjqa9kk0F9wyNPTaXR1lv6r3AcqNz/4XYhE6v2wrmSJv5PbUrvstrUG rny7uhp6/+nIUOHHwz7/iVz7V3ENL+CX9efjtBow8XJBieYMhJ8L2KReqphAyXTa M/qqWpIT/sRN9wvKqdmjsMHVT/gGgfAD4IQ1e82hy1ESOZa7Y+F93P5oY9dQh3YF zS88NRrhodQLBwF8lzuXaEUsHkffzz46JndGxeK1/It/gV4YnWM2XnOX3/OHDu7I d7SSSZu2oSQvXA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:42:53 2025 by rpki-client