This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft File: 7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json) Hash identifier: YUlQ1E/twZXmtJp2RvMQov1/8gN9VgDZ94JNEbcjzww= Subject key identifier: 5F:B5:BA:36:56:D5:D6:0B:62:D7:7B:DF:D2:E4:C0:34:6C:D0:77:DB Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E Certificate issuer: /CN=edc15f6558462408a75753765b2c71a654f1676e Certificate serial: 019B39EB6776D58B76EC906E5EB2456A9432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft Manifest number: 14C5 Signing time: Sat 20 Dec 2025 04:01:27 +0000 Manifest this update: Sat 20 Dec 2025 04:01:27 +0000 Manifest next update: Sun 21 Dec 2025 04:01:27 +0000 Files and hashes: 1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: u+RqVsYr1xGizOu/WMZeiRbRYtdaYuVYouMezS55VMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:67:76:d5:8b:76:ec:90:6e:5e:b2:45:6a:94:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e Validity Not Before: Dec 20 04:01:27 2025 GMT Not After : Dec 21 04:01:27 2025 GMT Subject: CN=5fb5ba3656d5d60b62d77bdfd2e4c0346cd077db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:f6:72:66:35:37:96:aa:bb:e5:49:41:0c: 57:49:6b:e5:b3:8e:c2:81:fb:f0:30:b5:02:e0:ab: 56:cb:61:92:f6:50:fc:5d:b6:2b:7b:55:6a:f6:ea: 7c:db:b0:19:85:45:c3:42:9b:34:09:17:12:c3:31: 0b:f1:e6:49:f4:0a:2d:c8:0c:55:1c:f0:d7:d3:94: c5:6d:e7:9b:14:32:88:48:8c:23:61:77:a6:64:81: 4f:18:c4:4c:7f:ac:3a:56:87:02:3c:73:e7:39:99: fb:db:f4:41:74:1f:6a:5d:6a:4e:3c:4a:73:9e:55: be:5d:f8:8f:cb:a6:f7:5a:a6:db:a1:20:57:50:6e: dc:a6:ce:d7:5b:59:52:df:b0:0e:f9:be:fc:5c:01: 0c:3e:18:1e:6d:42:37:e7:7f:44:ac:13:75:2c:42: 26:4b:0c:99:8b:f1:28:64:ce:27:ee:e6:e1:e8:62: 94:e0:bb:8e:ad:6d:35:21:02:65:40:f6:ab:c9:f9: 02:e1:b9:b0:eb:73:f1:c0:27:0f:93:b3:af:e0:82: 53:76:d9:40:c1:d4:db:64:c0:cb:2c:f6:39:7b:1b: b1:a6:06:fc:8f:60:da:72:72:1c:46:b7:3d:87:d3: cd:ff:a2:f7:1c:7c:b3:c3:a2:2e:c6:e6:3f:86:cf: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B5:BA:36:56:D5:D6:0B:62:D7:7B:DF:D2:E4:C0:34:6C:D0:77:DB X509v3 Authority Key Identifier: keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a7:fb:50:78:0e:41:c1:69:51:71:e0:4b:ef:55:ad:04:52: d1:20:13:ad:15:59:1a:04:ad:06:de:aa:4d:06:68:8a:fc:31: 9c:92:7d:7d:0d:31:f6:05:c9:a5:e9:e4:cc:c9:6a:ad:83:e6: 66:8c:da:78:06:b5:c6:d7:40:95:27:36:f5:f9:48:63:4f:11: ac:71:9e:fd:b0:95:57:77:b1:d1:fc:2e:64:2f:bf:b5:4a:9c: 9c:72:01:63:b4:0f:19:04:1d:dd:c4:26:f4:8c:ee:b2:f4:12: 8f:0a:b5:e2:2b:07:77:47:0e:eb:a0:5f:07:c5:61:70:cd:34: 34:fb:a4:29:68:d3:b1:e6:98:8b:8e:5e:f7:1c:7e:c7:b4:70: 1d:04:4b:1f:f6:7b:a6:08:59:29:34:40:c1:96:16:c1:42:de: 4b:2b:ed:25:51:6b:f6:8d:7e:b5:e0:a7:2b:68:0b:04:36:77: 51:0a:09:20:60:44:27:04:52:0d:63:56:41:63:94:36:48:8e: 1d:e6:7d:6c:72:33:f3:b5:be:b1:11:9e:df:02:35:e8:0e:1d: 97:d6:55:3d:ae:15:6f:32:34:00:85:3f:39:3c:cc:8e:6d:fd: b1:84:a3:27:5f:a8:96:ab:2e:2a:df:2e:b3:7e:0c:c4:9a:c8: c0:0e:7f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562d21Yt27JBuXrJFapQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzE1ZjY1NTg0NjI0MDhhNzU3NTM3NjViMmM3MWE2NTRm MTY3NmUwHhcNMjUxMjIwMDQwMTI3WhcNMjUxMjIxMDQwMTI3WjAzMTEwLwYDVQQD Eyg1ZmI1YmEzNjU2ZDVkNjBiNjJkNzdiZGZkMmU0YzAzNDZjZDA3N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+v2cmY1N5aqu+VJQQxXSWvls47C gfvwMLUC4KtWy2GS9lD8XbYre1Vq9up827AZhUXDQps0CRcSwzEL8eZJ9AotyAxV HPDX05TFbeebFDKISIwjYXemZIFPGMRMf6w6VocCPHPnOZn72/RBdB9qXWpOPEpz nlW+XfiPy6b3WqbboSBXUG7cps7XW1lS37AO+b78XAEMPhgebUI3539ErBN1LEIm SwyZi/EoZM4n7ubh6GKU4LuOrW01IQJlQParyfkC4bmw63PxwCcPk7Ov4IJTdtlA wdTbZMDLLPY5exuxpgb8j2DacnIcRrc9h9PN/6L3HHyzw6IuxuY/hs8ktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+1ujZW1dYLYtd739LkwDRs0HfbMB8GA1UdIwQY MBaAFO3BX2VYRiQIp1dTdlsscaZU8WduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lODllMTktNDY1Zi00MWYyLWE0Yzct ZGQ0MzFiY2NlM2RkLzEvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lODllMTktNDY1Zi00MWYyLWE0YzctZGQ0MzFiY2NlM2Rk LzEvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaf7UHgO QcFpUXHgS+9VrQRS0SATrRVZGgStBt6qTQZoivwxnJJ9fQ0x9gXJpenkzMlqrYPm ZozaeAa1xtdAlSc29flIY08RrHGe/bCVV3ex0fwuZC+/tUqcnHIBY7QPGQQd3cQm 9IzusvQSjwq14isHd0cO66BfB8VhcM00NPukKWjTseaYi45e9xx+x7RwHQRLH/Z7 pghZKTRAwZYWwULeSyvtJVFr9o1+teCnK2gLBDZ3UQoJIGBEJwRSDWNWQWOUNkiO HeZ9bHIz87W+sRGe3wI16A4dl9ZVPa4VbzI0AIU/OTzMjm39sYSjJ1+olqsuKt8u s34MxJrIwA5/TQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:50:09 2025 by rpki-client