This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft File: 7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json) Hash identifier: EFEkJJ0HpD0oJW1IibEoz6fSo7c631gcmYf3Xnsu9Nc= Subject key identifier: AB:30:B9:09:C9:DE:19:E1:1B:52:E6:49:3A:21:57:AC:22:E6:00:62 Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E Certificate issuer: /CN=edc15f6558462408a75753765b2c71a654f1676e Certificate serial: 019AF27734246D576889893EA141FA32871F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft Manifest number: 14A0 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: ESSLDMVHXQViw7SjffdqgeMxDWHwCKprOx0k8+zMPts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:34:24:6d:57:68:89:89:3e:a1:41:fa:32:87:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=ab30b909c9de19e11b52e6493a2157ac22e60062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:94:c7:5f:bd:43:cd:c5:54:f7:5d:d6:0a: 5e:82:09:b6:73:da:9e:8b:8c:81:ea:3a:40:3a:73: 53:3e:46:7d:6e:9a:50:47:91:20:b1:76:b7:4c:0f: 39:da:60:f9:75:da:c9:76:9d:89:0a:3f:b0:2b:d1: 11:4a:b5:d6:b2:43:4e:e5:6b:ac:b3:db:d1:24:15: f2:1c:6f:4d:ed:39:d6:15:03:62:89:b6:4a:e2:14: 7e:83:6e:9e:12:a9:4e:93:a4:53:74:e8:c1:b4:6d: 1b:38:2f:c1:00:1e:67:98:62:e8:be:0d:f5:8c:3c: ed:37:e4:94:d0:8d:19:35:1c:29:ac:9c:7b:3f:0a: e4:55:f8:b6:be:7d:a0:8f:36:b2:3e:0f:3c:9f:2a: b9:f0:40:15:20:3b:c8:ec:42:c8:89:f3:6f:aa:f3: fd:0e:0e:f9:ea:03:cb:4a:4d:77:39:1d:ab:4e:a6: ca:ba:ab:3d:75:a8:8e:34:b9:07:3d:8a:ce:bd:15: 82:82:b4:3d:09:2b:d0:f9:b8:fc:97:49:8e:47:78: 88:4f:2c:f5:5b:07:14:65:4a:e3:38:e2:42:66:ae: cc:d8:86:fa:37:b4:3a:a1:1f:68:c1:33:ce:b5:d0: 93:78:ab:15:a1:ef:1e:57:98:5a:50:16:88:d3:d4: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:B9:09:C9:DE:19:E1:1B:52:E6:49:3A:21:57:AC:22:E6:00:62 X509v3 Authority Key Identifier: keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1f:2a:51:74:1b:2e:64:c0:65:e6:04:ac:40:a6:ba:a5:e4: e3:94:c3:36:32:22:24:17:8c:75:fd:58:88:fa:86:15:e9:16: b3:0a:3b:e9:40:d5:d8:2d:90:a3:8c:42:bd:14:34:30:1a:05: af:eb:ac:e7:b6:7f:c3:e7:7c:a0:bd:52:23:98:d6:5d:e2:bf: b5:a0:13:9b:d0:1a:b4:16:5d:62:34:56:74:6f:07:cc:de:b3: 3c:f9:64:65:e9:71:e7:a6:9c:28:65:3a:f7:3d:64:1d:c9:e6: ac:87:1e:64:b9:6b:f1:00:f7:c9:11:05:32:1b:8a:ce:44:59: 0d:36:67:65:3e:f2:91:73:99:68:dd:fe:2c:83:6f:4e:33:6a: 55:48:a3:49:04:23:71:cd:e0:a6:88:ea:0d:91:63:d8:9b:58: 00:35:c9:d5:86:b9:9e:1f:0b:82:81:d6:9d:f7:60:5a:de:a1: 83:24:d9:cf:b4:96:84:fd:75:00:d7:36:06:78:ce:cb:c3:66: 9f:17:fb:2a:3b:e0:07:21:38:cc:0a:43:86:d7:25:69:9f:ef: 38:0e:6e:c2:58:f5:f7:83:60:32:26:aa:a2:ca:1b:e9:ce:dc: 93:92:f6:79:3a:f3:8f:81:24:e5:74:50:ac:94:98:9b:f7:38: 9f:34:e0:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzQkbVdoiYk+oUH6MocfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzE1ZjY1NTg0NjI0MDhhNzU3NTM3NjViMmM3MWE2NTRm MTY3NmUwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhhYjMwYjkwOWM5ZGUxOWUxMWI1MmU2NDkzYTIxNTdhYzIyZTYwMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40KUx1+9Q83FVPdd1gpeggm2c9qe i4yB6jpAOnNTPkZ9bppQR5EgsXa3TA852mD5ddrJdp2JCj+wK9ERSrXWskNO5Wus s9vRJBXyHG9N7TnWFQNiibZK4hR+g26eEqlOk6RTdOjBtG0bOC/BAB5nmGLovg31 jDztN+SU0I0ZNRwprJx7PwrkVfi2vn2gjzayPg88nyq58EAVIDvI7ELIifNvqvP9 Dg756gPLSk13OR2rTqbKuqs9daiONLkHPYrOvRWCgrQ9CSvQ+bj8l0mOR3iITyz1 WwcUZUrjOOJCZq7M2Ib6N7Q6oR9owTPOtdCTeKsVoe8eV5haUBaI09ROvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKswuQnJ3hnhG1LmSTohV6wi5gBiMB8GA1UdIwQY MBaAFO3BX2VYRiQIp1dTdlsscaZU8WduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lODllMTktNDY1Zi00MWYyLWE0Yzct ZGQ0MzFiY2NlM2RkLzEvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lODllMTktNDY1Zi00MWYyLWE0YzctZGQ0MzFiY2NlM2Rk LzEvN2NGZlpWaEdKQWluVjFOMld5eHhwbFR4WjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx8qUXQb LmTAZeYErECmuqXk45TDNjIiJBeMdf1YiPqGFekWswo76UDV2C2Qo4xCvRQ0MBoF r+us57Z/w+d8oL1SI5jWXeK/taATm9AatBZdYjRWdG8HzN6zPPlkZelx56acKGU6 9z1kHcnmrIceZLlr8QD3yREFMhuKzkRZDTZnZT7ykXOZaN3+LINvTjNqVUijSQQj cc3gpojqDZFj2JtYADXJ1Ya5nh8LgoHWnfdgWt6hgyTZz7SWhP11ANc2BnjOy8Nm nxf7KjvgByE4zApDhtclaZ/vOA5uwlj194NgMiaqosob6c7ck5L2eTrzj4Ek5XRQ rJSYm/c4nzTguw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:18 2025 by rpki-client