This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft File: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json) Hash identifier: 9KYWB7STzthfSxUVLQM/tddQ1jXipiHTq+jFjTvjUmE= Subject key identifier: 8E:C8:C5:04:95:52:09:2E:CA:F5:C1:68:74:5F:99:5E:9B:C1:6C:D8 Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC Certificate issuer: /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac Certificate serial: 019AF276F1336310AC4ADF4CC18CF85BF912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: eYS/wCfZDmbz612M1yPytPPcp853gfIOeWoDfHTXtiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:33:63:10:ac:4a:df:4c:c1:8c:f8:5b:f9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=8ec8c5049552092ecaf5c168745f995e9bc16cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:9f:d5:28:ef:a4:86:e2:f1:99:88:06:d5: b6:2e:6d:1a:93:e3:95:be:5c:cd:98:b8:ea:3a:59: 19:fe:13:11:5f:bc:a9:20:72:14:27:a8:db:d0:f9: c4:a8:aa:25:4d:7f:6e:79:49:1c:a8:21:90:ce:bf: 23:c4:04:24:1a:b3:d3:7b:1f:41:53:57:39:f7:0f: 05:fc:98:12:4d:d1:5b:53:a8:b8:28:09:2e:8e:90: 5d:ce:3f:e2:59:9b:b2:b8:70:aa:51:a6:1c:e6:cf: 0b:3f:e9:1a:19:6c:5c:6d:30:08:e5:19:ba:6e:01: 48:a2:01:60:31:23:76:56:dc:e3:a4:85:66:1d:94: d2:89:09:82:39:38:97:f8:ed:ef:0a:94:77:1d:21: a1:84:20:10:db:f3:37:47:2b:38:66:8c:26:1d:38: 92:10:1d:cc:25:4c:b2:3d:68:2a:d8:47:20:91:39: 9b:6c:df:99:8b:b6:96:c9:d8:30:9b:71:c6:b7:17: c9:d3:39:4e:5c:5a:8c:59:16:d0:83:37:da:1c:e6: b7:62:6b:38:f2:bf:21:26:69:df:01:ed:f5:df:7e: bd:af:2f:dc:ea:bd:2a:28:f0:b5:29:13:8f:bb:2b: c4:98:32:b9:24:f1:74:8c:c6:7a:c3:ff:e1:32:ec: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C8:C5:04:95:52:09:2E:CA:F5:C1:68:74:5F:99:5E:9B:C1:6C:D8 X509v3 Authority Key Identifier: keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:e7:d4:f1:4c:54:81:a4:81:0b:5e:8f:a4:30:58:b5:82: 3b:97:df:71:e6:e7:31:0e:e2:e1:e3:ee:40:69:67:be:8b:02: 2f:65:ac:e1:49:45:d2:fd:3b:a7:ac:f6:d5:cb:82:3b:c8:e6: 11:93:7b:3e:bf:f6:a3:89:ca:7b:37:ce:e4:89:e8:be:a8:ce: cc:70:90:86:b0:15:b9:63:80:c5:b7:ae:83:04:83:71:c9:e9: 44:d8:35:e5:42:19:ca:6e:bc:4c:35:6f:da:17:2d:ff:af:43: 7c:8f:41:58:95:33:51:dc:e6:73:ae:6d:df:25:b7:59:4f:d1: da:62:dd:f5:71:c8:e7:6c:59:84:42:99:b1:8d:30:b8:a8:9e: 69:4f:4d:b2:07:99:ca:a1:a9:c4:fc:f3:42:63:0e:5b:66:ca: 13:6f:91:59:75:71:45:be:71:f5:81:7e:41:11:c3:4d:65:e7: 85:06:40:12:ea:0e:b4:0d:37:76:74:37:0b:1c:6a:a9:38:18: ef:85:c9:e3:1f:0b:47:ae:05:67:70:da:39:79:12:fa:c2:c6: 95:33:ba:3f:2c:4f:8e:fc:45:be:22:10:89:26:bf:67:70:9d: a3:32:91:2d:66:d8:39:f7:e1:9d:3c:97:41:ae:3d:4d:f5:cd: 99:f0:4f:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvEzYxCsSt9MwYz4W/kSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjBkMjY4NzU2NjVlYzI2YjMxYTVjNzY2ZTA5MGZjZmU5 MGFlYWMwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD Eyg4ZWM4YzUwNDk1NTIwOTJlY2FmNWMxNjg3NDVmOTk1ZTliYzE2Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j6f1SjvpIbi8ZmIBtW2Lm0ak+OV vlzNmLjqOlkZ/hMRX7ypIHIUJ6jb0PnEqKolTX9ueUkcqCGQzr8jxAQkGrPTex9B U1c59w8F/JgSTdFbU6i4KAkujpBdzj/iWZuyuHCqUaYc5s8LP+kaGWxcbTAI5Rm6 bgFIogFgMSN2VtzjpIVmHZTSiQmCOTiX+O3vCpR3HSGhhCAQ2/M3Rys4ZowmHTiS EB3MJUyyPWgq2EcgkTmbbN+Zi7aWydgwm3HGtxfJ0zlOXFqMWRbQgzfaHOa3Yms4 8r8hJmnfAe313369ry/c6r0qKPC1KROPuyvEmDK5JPF0jMZ6w//hMuzuuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7IxQSVUgkuyvXBaHRfmV6bwWzYMB8GA1UdIwQY MBaAFOyw0mh1Zl7CazGlx2bgkPz+kK6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xEU2FIVm1Yc0pyTWFYSFp1Q1FfUDZRcnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84MWY5NGYtOTU1Zi00NjdiLTlhMzYt MmUxODE4YTdkZTNlLzEvN0xEU2FIVm1Yc0pyTWFYSFp1Q1FfUDZRcnF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni84MWY5NGYtOTU1Zi00NjdiLTlhMzYtMmUxODE4YTdkZTNl LzEvN0xEU2FIVm1Yc0pyTWFYSFp1Q1FfUDZRcnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWfn1PFM VIGkgQtej6QwWLWCO5ffcebnMQ7i4ePuQGlnvosCL2Ws4UlF0v07p6z21cuCO8jm EZN7Pr/2o4nKezfO5InovqjOzHCQhrAVuWOAxbeugwSDccnpRNg15UIZym68TDVv 2hct/69DfI9BWJUzUdzmc65t3yW3WU/R2mLd9XHI52xZhEKZsY0wuKieaU9NsgeZ yqGpxPzzQmMOW2bKE2+RWXVxRb5x9YF+QRHDTWXnhQZAEuoOtA03dnQ3CxxqqTgY 74XJ4x8LR64FZ3DaOXkS+sLGlTO6PyxPjvxFviIQiSa/Z3CdozKRLWbYOffhnTyX Qa49TfXNmfBP+w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:41 2025 by rpki-client