This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json) Hash identifier: 4T/dPwRBhSFNPo1GFi4c1jqI1VvJvPl8v95BIqFbxqI= Subject key identifier: 34:30:BB:B0:B6:EC:11:9E:CE:F0:EF:D9:82:B8:C4:5B:1C:12:54:B6 Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f Certificate serial: 019AF577FEF1F1FA8E6137A26D02E902D28A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 21:01:13 +0000 Manifest this update: Sat 06 Dec 2025 21:01:13 +0000 Manifest next update: Sun 07 Dec 2025 21:01:13 +0000 Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: tKYTuFCAiomaMPGYv9qWSi3k7Q/2oCxo9BDwJwnW9RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fe:f1:f1:fa:8e:61:37:a2:6d:02:e9:02:d2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f Validity Not Before: Dec 6 21:01:13 2025 GMT Not After : Dec 7 21:01:13 2025 GMT Subject: CN=3430bbb0b6ec119ecef0efd982b8c45b1c1254b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:0b:01:7c:45:67:24:16:86:f8:40:71:48: e7:d8:1f:7c:cb:8f:55:6d:1b:4f:2e:69:d9:5f:86: 22:03:38:1b:01:0f:10:15:fc:72:69:f2:af:7b:7d: 63:01:14:08:f3:dd:76:bb:da:c0:05:38:c8:86:0f: 6b:21:15:7c:8b:b5:7c:3a:1d:13:2f:3b:85:c4:60: a4:20:87:63:15:f9:63:ea:75:94:1c:1a:1c:7b:a0: 6e:8b:89:ce:e0:6b:7d:de:9a:45:08:f1:a6:9e:d9: 5f:68:00:b7:e6:bc:3e:c2:89:e8:f8:81:f7:c2:1b: 35:bd:8f:ab:0b:57:29:9d:7e:ce:c5:32:8e:6c:7b: 47:58:75:89:be:2e:72:ad:3a:83:a2:e7:09:9e:99: 7f:dd:a3:aa:83:ef:f1:bf:c9:5b:af:cc:49:c9:c5: 3b:ff:77:cc:e8:70:24:b5:03:6b:e9:d0:44:5e:7e: 45:96:3d:39:eb:95:e0:f0:a4:c5:19:4a:ac:e1:0d: 7a:6f:e7:e2:d6:e3:75:99:34:61:a5:41:bd:79:c5: 14:49:55:df:9d:b7:c1:c4:b1:a5:bc:d2:4b:63:85: 26:7e:af:00:ea:08:39:d5:2e:21:54:db:0d:50:3d: b9:23:c8:72:d1:41:5d:b0:1e:68:de:a6:da:b3:fd: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:30:BB:B0:B6:EC:11:9E:CE:F0:EF:D9:82:B8:C4:5B:1C:12:54:B6 X509v3 Authority Key Identifier: keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7c:0b:21:f5:3c:b1:65:fd:8a:93:63:a3:c2:66:71:82:58: 2d:1a:e4:17:29:df:d4:e7:a0:c7:52:c7:c1:be:31:d3:19:84: 9c:5a:4e:8d:da:61:67:19:cc:5b:57:fb:fe:81:42:72:ff:a9: 1a:0d:e8:f6:66:91:35:ed:e1:e2:f6:ca:8c:77:e7:20:fc:9b: af:ed:4d:e7:0a:5e:bb:73:5f:a0:a1:23:85:54:51:88:c4:a7: d6:30:a4:25:f8:4f:41:3a:63:bd:54:e5:e5:72:89:a6:e4:28: 87:75:d4:cd:cc:03:75:b4:6a:4f:00:0c:4c:e7:cc:bf:ef:09: e4:24:dc:1f:84:77:c5:9d:09:34:0e:ad:2e:ee:7c:a7:ae:eb: 4f:80:23:a8:89:50:98:e3:fa:ba:ec:2d:d0:29:26:88:1a:e8: d2:47:43:43:b2:46:dd:30:09:ac:91:86:c0:7d:91:86:17:12: f3:b0:cb:35:e6:8d:a7:f7:9c:36:2f:cd:78:38:88:2a:32:25: da:a5:3e:62:81:9f:ba:93:ef:af:ca:7f:2e:4d:0f:24:86:71: 37:f9:14:c9:4f:bc:c0:96:17:ca:2b:95:aa:b7:e8:ba:72:96: 31:71:0b:9b:2a:c3:62:22:b1:14:94:de:18:28:3e:85:9d:21: cb:2e:a6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/7x8fqOYTeibQLpAtKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MmVmZWRmYmI5NmRjYWFkMTU2NWQyMWJmNGFhODU2N2Iw YjY0OWYwHhcNMjUxMjA2MjEwMTEzWhcNMjUxMjA3MjEwMTEzWjAzMTEwLwYDVQQD EygzNDMwYmJiMGI2ZWMxMTllY2VmMGVmZDk4MmI4YzQ1YjFjMTI1NGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrILAXxFZyQWhvhAcUjn2B98y49V bRtPLmnZX4YiAzgbAQ8QFfxyafKve31jARQI8912u9rABTjIhg9rIRV8i7V8Oh0T LzuFxGCkIIdjFflj6nWUHBoce6Bui4nO4Gt93ppFCPGmntlfaAC35rw+wono+IH3 whs1vY+rC1cpnX7OxTKObHtHWHWJvi5yrTqDoucJnpl/3aOqg+/xv8lbr8xJycU7 /3fM6HAktQNr6dBEXn5Flj0565Xg8KTFGUqs4Q16b+fi1uN1mTRhpUG9ecUUSVXf nbfBxLGlvNJLY4Umfq8A6gg51S4hVNsNUD25I8hy0UFdsB5o3qbas/3HKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQwu7C27BGezvDv2YK4xFscElS2MB8GA1UdIwQY MBaAFHku/t+7ltyq0VZdIb9KqFZ7C2SfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVM3LTM3dVczS3JSVmwwaHYwcW9WbnNMWko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kOGFjYTItNGE4Zi00MWYxLWJkOWUt N2VhYjA0ODVkMzRkLzEvZVM3LTM3dVczS3JSVmwwaHYwcW9WbnNMWko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kOGFjYTItNGE4Zi00MWYxLWJkOWUtN2VhYjA0ODVkMzRk LzEvZVM3LTM3dVczS3JSVmwwaHYwcW9WbnNMWko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3wLIfU8 sWX9ipNjo8JmcYJYLRrkFynf1Oegx1LHwb4x0xmEnFpOjdphZxnMW1f7/oFCcv+p Gg3o9maRNe3h4vbKjHfnIPybr+1N5wpeu3NfoKEjhVRRiMSn1jCkJfhPQTpjvVTl 5XKJpuQoh3XUzcwDdbRqTwAMTOfMv+8J5CTcH4R3xZ0JNA6tLu58p67rT4AjqIlQ mOP6uuwt0CkmiBro0kdDQ7JG3TAJrJGGwH2RhhcS87DLNeaNp/ecNi/NeDiIKjIl 2qU+YoGfupPvr8p/Lk0PJIZxN/kUyU+8wJYXyiuVqrfounKWMXELmyrDYiKxFJTe GCg+hZ0hyy6mCQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:30 2025 by rpki-client