This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft File: 7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json) Hash identifier: v+A+df/Qwcurzo7LZbsFTKgtTUSO2ePDkLN/Dp2pj4Y= Subject key identifier: 2C:8F:58:D1:9A:45:A6:60:42:15:44:CF:2B:55:6C:9D:6B:CA:3A:77 Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94 Certificate issuer: /CN=eee59397f5d6afedbc8d9166affebb2800091f94 Certificate serial: 019AF12DFAE2344D144354B33FF65308BB63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft Manifest number: 118F Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: mNrrUYwpmLGIliL9gzTVISc+9WK1fXfYyG3hgb0eMQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fa:e2:34:4d:14:43:54:b3:3f:f6:53:08:bb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=2c8f58d19a45a660421544cf2b556c9d6bca3a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:85:73:94:ae:11:75:f5:77:05:8c:64:f4: fc:08:d7:11:39:05:7f:f4:16:a9:c1:94:e1:4d:cf: 6d:3a:e5:18:61:06:5a:06:aa:a1:65:7c:55:a2:56: da:64:d0:52:20:a3:6c:73:a3:9f:3e:ea:69:01:1a: 87:d4:f2:95:98:d0:14:c3:6c:1b:5c:f4:57:2c:0d: 4a:be:13:7d:3c:bd:42:56:c7:4e:d5:12:b3:21:cf: 4b:64:c4:fe:f0:0b:5d:7a:36:a9:18:62:b1:a7:04: 83:16:b0:90:55:e5:02:e3:de:8f:64:a4:66:4d:2d: 1d:77:a7:fd:de:35:94:60:36:cc:df:75:4f:07:ad: 3f:e8:72:b8:bf:04:27:39:82:33:7a:b6:55:d3:78: de:4a:8f:88:98:cf:96:da:b7:5c:62:54:a1:f7:b8: 96:35:2d:f9:7b:1b:48:d3:2f:c3:90:95:fc:b9:46: 0c:6a:5c:80:3d:92:53:c8:99:ae:ed:21:a3:c9:00: c9:f2:e2:dd:58:2f:63:cb:d2:a7:99:e7:1c:66:b5: 11:29:3e:02:68:9d:d4:5c:72:12:76:f5:f9:8d:f6: 8a:66:0c:22:90:a3:1c:85:4c:df:3e:e4:4b:ff:57: 84:08:d9:13:ca:7a:0f:71:fd:b5:34:0f:53:8d:73: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:58:D1:9A:45:A6:60:42:15:44:CF:2B:55:6C:9D:6B:CA:3A:77 X509v3 Authority Key Identifier: keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:96:6c:61:28:3a:f3:3c:9c:58:ba:2f:4a:69:85:57:5f:87: 34:28:73:14:19:da:95:70:48:c0:ee:0f:5d:55:40:a8:34:6a: 2e:74:34:aa:bb:7d:56:cd:8b:cb:f2:83:f8:d9:31:9d:4f:70: b2:f8:a1:c3:98:e8:32:71:d2:19:37:4b:35:06:7a:a5:6a:c2: 41:e2:18:33:9a:07:ff:6b:49:05:bd:54:8c:41:88:7b:de:07: a0:ff:61:fc:bd:30:49:97:93:34:c4:06:ed:9c:b3:55:84:1d: 79:9c:f6:f8:4d:b5:fb:71:80:f8:28:f7:7d:09:1b:31:bb:b9: 49:a0:af:ca:e4:bb:70:98:8c:6e:b3:f4:80:40:18:3a:2a:df: c9:56:62:7c:e9:7b:7e:38:13:4f:e8:d3:70:72:64:1d:84:d0: a4:b8:a3:74:67:60:a0:0d:a5:59:6e:2d:29:83:b6:ed:44:f7: 31:3a:1d:40:e3:4e:27:c6:af:ab:c9:da:cb:d8:7c:c0:5f:78: 14:4f:c4:24:49:41:a0:56:e8:59:fd:ce:7a:c7:08:18:65:a0: 8b:48:0d:d5:f8:e0:d6:f0:b3:f6:b6:3f:bb:0d:17:c0:88:e1: b9:ba:c2:e1:ad:7c:ef:95:0a:85:b1:8b:55:2d:d5:ab:f3:50: 06:71:f9:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfriNE0UQ1SzP/ZTCLtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTU5Mzk3ZjVkNmFmZWRiYzhkOTE2NmFmZmViYjI4MDAw OTFmOTQwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD EygyYzhmNThkMTlhNDVhNjYwNDIxNTQ0Y2YyYjU1NmM5ZDZiY2EzYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZuFc5SuEXX1dwWMZPT8CNcROQV/ 9BapwZThTc9tOuUYYQZaBqqhZXxVolbaZNBSIKNsc6OfPuppARqH1PKVmNAUw2wb XPRXLA1KvhN9PL1CVsdO1RKzIc9LZMT+8AtdejapGGKxpwSDFrCQVeUC496PZKRm TS0dd6f93jWUYDbM33VPB60/6HK4vwQnOYIzerZV03jeSo+ImM+W2rdcYlSh97iW NS35extI0y/DkJX8uUYMalyAPZJTyJmu7SGjyQDJ8uLdWC9jy9KnmeccZrURKT4C aJ3UXHISdvX5jfaKZgwikKMchUzfPuRL/1eECNkTynoPcf21NA9TjXOtgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyPWNGaRaZgQhVEzytVbJ1ryjp3MB8GA1UdIwQY MBaAFO7lk5f11q/tvI2RZq/+uygACR+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUt ZTdkZjk0ZTAyMjM0LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUtZTdkZjk0ZTAyMjM0 LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZZsYSg6 8zycWLovSmmFV1+HNChzFBnalXBIwO4PXVVAqDRqLnQ0qrt9Vs2Ly/KD+NkxnU9w svihw5joMnHSGTdLNQZ6pWrCQeIYM5oH/2tJBb1UjEGIe94HoP9h/L0wSZeTNMQG 7ZyzVYQdeZz2+E21+3GA+Cj3fQkbMbu5SaCvyuS7cJiMbrP0gEAYOirfyVZifOl7 fjgTT+jTcHJkHYTQpLijdGdgoA2lWW4tKYO27UT3MTodQONOJ8avq8nay9h8wF94 FE/EJElBoFboWf3OescIGGWgi0gN1fjg1vCz9rY/uw0XwIjhubrC4a1875UKhbGL VS3Vq/NQBnH5fA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:36 2025 by rpki-client