This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json) Hash identifier: ETmkgFvZVmDfQcG9LVmP5kFLuPsoSy6468/09ifGfr8= Subject key identifier: 4D:07:7C:7F:7F:1D:E4:1F:5C:62:9A:8C:56:6A:88:D6:11:0B:8E:44 Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc Certificate serial: 019AF3BFFE8286FCE1A1E15F681479CD5C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft Manifest number: 14A7 Signing time: Sat 06 Dec 2025 13:00:37 +0000 Manifest this update: Sat 06 Dec 2025 13:00:37 +0000 Manifest next update: Sun 07 Dec 2025 13:00:37 +0000 Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: Rrp3ORIYtw0nwL1UwwmTTaS5e8Pq6bNVYP7eGWcimgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:fe:82:86:fc:e1:a1:e1:5f:68:14:79:cd:5c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc Validity Not Before: Dec 6 13:00:37 2025 GMT Not After : Dec 7 13:00:37 2025 GMT Subject: CN=4d077c7f7f1de41f5c629a8c566a88d6110b8e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:71:d3:c2:7e:3f:64:2e:50:b3:e8:b7:f0: 6b:75:10:dd:75:43:ac:59:d3:cc:50:d2:28:22:a5: bc:6b:68:a2:be:d2:6a:2a:11:e0:f9:1b:97:9a:6b: a3:da:b7:42:c3:d5:cd:d2:7f:81:d0:39:35:5a:35: c9:a4:4c:e8:6b:33:d4:3c:e5:5d:87:e6:f3:a7:0b: 0b:f1:03:4b:25:db:f9:29:a0:b6:27:d4:21:4e:dd: 8d:e4:4a:c6:14:94:84:e5:a8:e3:4b:a8:fb:4e:22: e6:79:f5:9f:98:fb:3c:51:98:80:97:9e:5e:2f:f9: af:8d:27:ac:4f:60:28:0d:af:76:63:3d:28:17:5a: 4c:3e:28:bc:e9:e3:2e:7f:68:f7:82:25:06:11:43: 98:8a:0a:5b:0f:a1:5a:eb:fe:81:96:dc:0b:75:12: b1:f8:81:55:0b:9c:40:5f:cb:5b:40:82:ff:3d:45: df:19:df:7d:bc:86:0c:83:38:93:a5:53:de:a3:c7: 5b:8f:35:5e:92:34:d0:23:64:49:82:02:e4:28:35: 2b:7b:de:7f:df:e2:3c:8a:34:6d:28:a5:78:9d:32: 6b:c6:d6:29:16:64:e5:5b:db:ca:bc:a9:c1:c4:c1: 3c:2f:e1:60:db:0d:cb:1c:03:c4:7f:62:fc:1a:44: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:07:7C:7F:7F:1D:E4:1F:5C:62:9A:8C:56:6A:88:D6:11:0B:8E:44 X509v3 Authority Key Identifier: keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:93:aa:28:4d:a2:e8:d9:9d:c6:07:4f:cd:3e:69:cb:9a:15: 3c:f5:79:87:4a:55:50:6d:c5:85:9e:3a:63:60:bf:b5:df:60: 80:18:82:04:91:19:34:14:8d:7b:42:14:12:bd:4e:1d:44:1e: cb:d1:28:b4:08:8e:dc:96:cb:98:9d:bc:42:b7:fe:76:c5:78: a5:68:fb:82:f7:f8:ce:21:06:8f:fa:4f:40:2e:25:7b:a0:ae: cb:e8:7f:50:34:fc:eb:00:b0:a4:58:c0:fd:37:13:3d:5b:bb: f8:dd:46:03:8d:e7:b8:aa:3e:9e:a9:cc:0d:40:b0:e3:6c:ed: 73:c1:73:5e:7e:93:70:70:72:c4:ce:44:4a:3f:82:8f:e7:46: 74:88:99:53:d4:7e:0f:f9:f7:01:e9:e8:94:4d:9a:45:1a:f4: 53:67:89:52:9e:06:cf:0e:1e:12:5a:40:79:45:f8:d5:49:d5: 97:f2:7e:1c:82:0c:fa:7c:1a:bc:8b:00:04:0b:76:e0:ec:8e: 65:3b:f0:5c:fe:3c:bc:83:67:16:c7:1a:b9:f8:d4:ef:49:51: 97:10:80:0a:da:4c:3c:36:d2:bf:63:bf:b8:92:1a:69:2a:8c: 53:29:73:29:94:61:eb:2d:d9:0a:7f:72:4d:ac:37:d8:20:9f: 6a:95:5f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/6ChvzhoeFfaBR5zVw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjcyMTJlNmZlNWZjZjBlZTc4ZGNkMDQ0MGRmNjllMDBh YWQ0ZGMwHhcNMjUxMjA2MTMwMDM3WhcNMjUxMjA3MTMwMDM3WjAzMTEwLwYDVQQD Eyg0ZDA3N2M3ZjdmMWRlNDFmNWM2MjlhOGM1NjZhODhkNjExMGI4ZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+dx08J+P2QuULPot/BrdRDddUOs WdPMUNIoIqW8a2iivtJqKhHg+RuXmmuj2rdCw9XN0n+B0Dk1WjXJpEzoazPUPOVd h+bzpwsL8QNLJdv5KaC2J9QhTt2N5ErGFJSE5ajjS6j7TiLmefWfmPs8UZiAl55e L/mvjSesT2AoDa92Yz0oF1pMPii86eMuf2j3giUGEUOYigpbD6Fa6/6BltwLdRKx +IFVC5xAX8tbQIL/PUXfGd99vIYMgziTpVPeo8dbjzVekjTQI2RJggLkKDUre95/ 3+I8ijRtKKV4nTJrxtYpFmTlW9vKvKnBxME8L+Fg2w3LHAPEf2L8GkSl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0HfH9/HeQfXGKajFZqiNYRC45EMB8GA1UdIwQY MBaAFDO3IS5v5fzw7njc0EQN9p4AqtTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgt YmRmZWUzNWFmMmI4LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgtYmRmZWUzNWFmMmI4 LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5OqKE2i 6NmdxgdPzT5py5oVPPV5h0pVUG3FhZ46Y2C/td9ggBiCBJEZNBSNe0IUEr1OHUQe y9EotAiO3JbLmJ28Qrf+dsV4pWj7gvf4ziEGj/pPQC4le6Cuy+h/UDT86wCwpFjA /TcTPVu7+N1GA43nuKo+nqnMDUCw42ztc8FzXn6TcHByxM5ESj+Cj+dGdIiZU9R+ D/n3AenolE2aRRr0U2eJUp4Gzw4eElpAeUX41UnVl/J+HIIM+nwavIsABAt24OyO ZTvwXP48vINnFscaufjU70lRlxCACtpMPDbSv2O/uJIaaSqMUylzKZRh6y3ZCn9y Taw32CCfapVfEA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:55 2025 by rpki-client