This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft File: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json) Hash identifier: pPJOZ5R8lBdNHWanhpIBrrL24PJqSdtWS2Z3mU70Ev0= Subject key identifier: A4:34:7A:8D:3F:86:12:43:30:69:C4:62:C8:F0:60:58:FF:B4:5A:78 Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD Certificate issuer: /CN=ef0f20533dcc7995a28cf67767a041698667c4cd Certificate serial: 019B34C64E4274D9ECA2720F9EAEB5B98828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft Manifest number: 0CCB Signing time: Fri 19 Dec 2025 04:02:49 +0000 Manifest this update: Fri 19 Dec 2025 04:02:49 +0000 Manifest next update: Sat 20 Dec 2025 04:02:49 +0000 Files and hashes: 1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: yel2yYwc7QHNfRgfPmbHoAhYlrsnLYYOSo9R5Z1AyOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:4e:42:74:d9:ec:a2:72:0f:9e:ae:b5:b9:88:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd Validity Not Before: Dec 19 04:02:49 2025 GMT Not After : Dec 20 04:02:49 2025 GMT Subject: CN=a4347a8d3f8612433069c462c8f06058ffb45a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:ae:2d:23:bf:7b:f0:7c:f5:1a:e9:12:24: 40:c0:69:68:9d:b0:1f:8d:df:60:b5:89:b4:80:f4: 31:b3:1d:67:d2:d2:45:86:f1:09:cc:2e:7e:43:22: 8d:ac:5d:aa:99:44:60:52:99:ac:48:96:2e:11:fc: 38:9c:32:77:b7:04:71:ff:62:3c:a7:a2:b8:14:23: de:6b:3f:92:ee:4d:be:b6:05:77:2d:5f:42:52:95: 78:ad:dd:b0:3d:ae:93:91:1e:c9:3e:36:be:9e:66: 9f:f7:be:cb:ef:99:2c:6f:e0:09:e0:cc:de:be:83: 71:a3:6f:0b:90:31:37:8f:e1:38:b2:69:ed:9e:6d: 02:12:3a:be:af:3e:51:80:0f:77:51:e5:eb:7a:af: 10:da:14:0d:2d:27:b1:df:bb:d9:da:7a:e2:bf:b4: dd:1f:bd:c4:0b:3b:cd:35:c3:38:1a:34:7e:84:bd: 04:f6:f0:3c:e2:15:39:a0:a6:ad:87:be:ef:e5:36: 1b:b3:4f:27:25:6d:a6:2b:91:23:a0:67:e4:fd:a1: 4c:e7:50:f1:99:d9:cf:9e:6d:ec:06:5d:26:4b:17: c1:dd:b5:e6:3a:76:0e:5f:b8:35:e1:7f:b5:3b:fa: 58:55:54:d3:63:82:f0:ea:4d:2d:0c:4f:c9:89:73: 7c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:34:7A:8D:3F:86:12:43:30:69:C4:62:C8:F0:60:58:FF:B4:5A:78 X509v3 Authority Key Identifier: keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c1:f1:70:1b:da:16:8e:fb:c2:26:d1:26:ff:b6:96:5f:cc: 63:3c:35:f8:0a:fc:b3:65:1f:74:b4:95:6d:8a:bb:b9:b3:f6: 91:17:7f:68:35:34:36:72:4a:42:06:0d:8a:68:7f:ee:9f:2f: b5:36:cb:cc:e0:97:e1:c3:77:25:82:3b:a8:9d:76:9b:76:e2: d2:cb:56:ad:00:dd:49:b3:33:ab:55:b5:ce:90:1c:d8:64:fc: 45:e2:f9:80:d2:ad:f3:4e:5a:53:ad:cf:26:7a:0e:46:fd:88: 91:6a:e4:f6:8b:bc:92:37:c6:d5:68:75:f6:4c:57:f7:41:33: 1a:76:ab:9b:dd:ca:93:24:53:ac:28:4e:62:c0:dd:6a:0c:bf: 40:10:e5:63:de:5f:d6:f4:7c:5c:fe:4a:21:c8:bf:74:df:7a: 92:86:21:97:d9:61:eb:a2:72:c7:0e:4f:3d:10:83:54:73:4d: 64:38:74:d3:ca:37:5f:0f:32:60:5c:25:97:97:6e:be:4b:f1: 96:63:4d:86:fa:f0:5a:03:4b:b4:98:47:0f:63:4b:27:7a:f1: c2:71:9e:29:9e:c3:a6:87:44:2c:e3:95:09:4c:56:ae:f8:30: 3a:8b:88:67:d8:97:a2:b2:00:18:64:a2:6e:19:60:15:49:99: 55:c5:8b:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xk5CdNnsonIPnq61uYgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGYyMDUzM2RjYzc5OTVhMjhjZjY3NzY3YTA0MTY5ODY2 N2M0Y2QwHhcNMjUxMjE5MDQwMjQ5WhcNMjUxMjIwMDQwMjQ5WjAzMTEwLwYDVQQD EyhhNDM0N2E4ZDNmODYxMjQzMzA2OWM0NjJjOGYwNjA1OGZmYjQ1YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmryuLSO/e/B89RrpEiRAwGlonbAf jd9gtYm0gPQxsx1n0tJFhvEJzC5+QyKNrF2qmURgUpmsSJYuEfw4nDJ3twRx/2I8 p6K4FCPeaz+S7k2+tgV3LV9CUpV4rd2wPa6TkR7JPja+nmaf977L75ksb+AJ4Mze voNxo28LkDE3j+E4smntnm0CEjq+rz5RgA93UeXreq8Q2hQNLSex37vZ2nriv7Td H73ECzvNNcM4GjR+hL0E9vA84hU5oKath77v5TYbs08nJW2mK5EjoGfk/aFM51Dx mdnPnm3sBl0mSxfB3bXmOnYOX7g14X+1O/pYVVTTY4Lw6k0tDE/JiXN8JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ0eo0/hhJDMGnEYsjwYFj/tFp4MB8GA1UdIwQY MBaAFO8PIFM9zHmVooz2d2egQWmGZ8TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZDg4M2QtZDI0My00YjFlLWEzMmEt ZDE0OTQ2ZTRmNWNkLzEvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hZDg4M2QtZDI0My00YjFlLWEzMmEtZDE0OTQ2ZTRmNWNk LzEvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcHxcBva Fo77wibRJv+2ll/MYzw1+Ar8s2UfdLSVbYq7ubP2kRd/aDU0NnJKQgYNimh/7p8v tTbLzOCX4cN3JYI7qJ12m3bi0stWrQDdSbMzq1W1zpAc2GT8ReL5gNKt805aU63P JnoORv2IkWrk9ou8kjfG1Wh19kxX90EzGnarm93KkyRTrChOYsDdagy/QBDlY95f 1vR8XP5KIci/dN96koYhl9lh66Jyxw5PPRCDVHNNZDh008o3Xw8yYFwll5duvkvx lmNNhvrwWgNLtJhHD2NLJ3rxwnGeKZ7DpodELOOVCUxWrvgwOouIZ9iXorIAGGSi bhlgFUmZVcWLTg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:57:10 2025 by rpki-client