This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json) Hash identifier: cbdr//5ds4Y9Fy9jBTFRR2hQiZrfdYXUWfOZPIcdSWE= Subject key identifier: 34:D8:00:FF:2E:A0:0C:83:4B:BA:B4:FB:22:1C:DF:D8:B2:13:99:16 Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63 Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63 Certificate serial: 019AF27700B08058EC8009BC998E8FAEB519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft Manifest number: 1409 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: NhYUsCD50zRPk1HTXsZh5T93D+LREh60SK8Xx9w5cjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:00:b0:80:58:ec:80:09:bc:99:8e:8f:ae:b5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=34d800ff2ea00c834bbab4fb221cdfd8b2139916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:e8:f7:fe:ae:9a:37:99:47:80:43:c4:70: 55:90:e1:91:4e:77:89:1c:c6:76:86:58:92:d8:1b: 68:54:ee:e1:a5:67:b0:d8:0f:9f:e4:db:3d:f9:b1: 14:09:36:6f:87:f0:a1:d4:e2:f6:e9:ad:2f:f0:26: 03:87:82:d1:a0:36:38:fa:b8:26:c8:4f:33:a9:cd: 4b:9f:57:fa:ca:05:a5:b6:1e:32:5a:ac:55:00:76: 9f:2b:af:bd:b1:cd:42:0a:f4:35:c5:2e:5a:d1:e0: 6d:8a:b2:7f:6c:3b:aa:d4:e7:9e:c0:6a:17:63:d3: ee:67:45:e0:64:a1:2d:c4:8a:01:a7:b7:82:91:95: 97:12:55:46:1d:c2:4c:c9:90:a0:48:9c:63:c0:34: 59:be:f2:8f:3d:79:f5:f2:f2:17:82:76:e4:2e:b8: 10:f4:7f:3b:17:75:d8:78:64:d0:54:0b:91:c9:66: 9f:fd:1a:91:a2:d3:0e:61:83:fc:6b:d1:24:8b:4f: a7:4e:65:ec:06:87:63:a3:64:40:c3:bf:64:ec:37: af:b5:9d:25:fc:be:23:19:33:0a:d7:d9:2a:86:a9: 0f:a4:16:02:70:bb:79:ff:ad:de:35:98:fa:ae:4b: 7c:b5:22:0a:e4:42:6c:6c:40:78:52:a5:35:7b:9a: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D8:00:FF:2E:A0:0C:83:4B:BA:B4:FB:22:1C:DF:D8:B2:13:99:16 X509v3 Authority Key Identifier: keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2e:84:f2:97:e0:58:f9:72:e5:d9:5f:8d:63:27:25:a9:b7: 98:ab:08:c4:10:99:59:25:f9:c8:41:b2:5e:e1:d4:17:2a:7d: c5:bf:1e:86:12:df:c1:08:ca:df:ad:a8:74:83:5f:8f:35:44: 95:11:d0:81:69:82:74:97:cf:a5:77:ad:4a:f6:50:94:5f:c8: 2f:f5:e2:0a:e2:5a:0b:ca:b5:86:f8:1f:8a:76:52:73:b9:39: 0c:c8:d4:5a:9e:79:21:fe:8e:7b:59:5e:de:67:3d:f1:54:e2: f5:04:34:39:34:8b:56:d1:72:a6:e0:e5:52:28:91:5b:41:aa: 25:fe:bf:2d:05:bd:50:b1:1e:7f:58:7a:9d:e3:50:67:04:d1: ec:86:7f:7a:56:88:5c:86:92:90:1b:a7:f8:02:81:22:3a:bb: 4f:f8:f6:ee:05:f7:2a:fb:3e:e5:84:61:eb:6e:cb:6c:43:28: 7e:47:c7:92:e0:b7:bc:8b:24:02:7f:e5:fd:ef:fd:18:67:b3: eb:10:6b:ce:73:72:55:85:ff:5a:10:ab:b7:13:1f:43:26:0c: 39:a6:9a:67:d7:9d:f2:ed:1f:1f:13:92:46:8e:48:ef:e5:81: 69:3d:c3:9c:61:3f:fb:43:bb:26:8f:d5:d2:af:48:eb:26:a8: cf:7b:54:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwCwgFjsgAm8mY6PrrUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4 NzRmNjMwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EygzNGQ4MDBmZjJlYTAwYzgzNGJiYWI0ZmIyMjFjZGZkOGIyMTM5OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qvo9/6umjeZR4BDxHBVkOGRTneJ HMZ2hliS2BtoVO7hpWew2A+f5Ns9+bEUCTZvh/Ch1OL26a0v8CYDh4LRoDY4+rgm yE8zqc1Ln1f6ygWlth4yWqxVAHafK6+9sc1CCvQ1xS5a0eBtirJ/bDuq1OeewGoX Y9PuZ0XgZKEtxIoBp7eCkZWXElVGHcJMyZCgSJxjwDRZvvKPPXn18vIXgnbkLrgQ 9H87F3XYeGTQVAuRyWaf/RqRotMOYYP8a9Eki0+nTmXsBodjo2RAw79k7DevtZ0l /L4jGTMK19kqhqkPpBYCcLt5/63eNZj6rkt8tSIK5EJsbEB4UqU1e5rSwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTYAP8uoAyDS7q0+yIc39iyE5kWMB8GA1UdIwQY MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy6E8pfg WPly5dlfjWMnJam3mKsIxBCZWSX5yEGyXuHUFyp9xb8ehhLfwQjK362odINfjzVE lRHQgWmCdJfPpXetSvZQlF/IL/XiCuJaC8q1hvgfinZSc7k5DMjUWp55If6Oe1le 3mc98VTi9QQ0OTSLVtFypuDlUiiRW0GqJf6/LQW9ULEef1h6neNQZwTR7IZ/elaI XIaSkBun+AKBIjq7T/j27gX3Kvs+5YRh627LbEMofkfHkuC3vIskAn/l/e/9GGez 6xBrznNyVYX/WhCrtxMfQyYMOaaaZ9ed8u0fHxOSRo5I7+WBaT3DnGE/+0O7Jo/V 0q9I6yaoz3tUoA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:26 2025 by rpki-client