This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json) Hash identifier: 6yEy9kIR0O26qBbkYfbr3TUXvbqs0z+OEB+DkBgUPiY= Subject key identifier: A9:02:BC:F7:E3:A8:E1:23:35:74:50:12:E6:F6:5B:BC:6C:2E:DD:32 Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea Certificate serial: 019B3155BB7FC3E460AE63805485997D1559 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 12:01:00 +0000 Manifest this update: Thu 18 Dec 2025 12:01:00 +0000 Manifest next update: Fri 19 Dec 2025 12:01:00 +0000 Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: fMLxoo7dRlepl4PadWnjQbwLC01KUCjZU8sBtix0N3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:bb:7f:c3:e4:60:ae:63:80:54:85:99:7d:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea Validity Not Before: Dec 18 12:01:00 2025 GMT Not After : Dec 19 12:01:00 2025 GMT Subject: CN=a902bcf7e3a8e12335745012e6f65bbc6c2edd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:91:5a:22:32:e3:d1:a8:2f:da:84:3f:41: 73:f8:80:fa:3b:fb:f6:e5:e4:9f:c2:f9:9b:9a:fc: eb:5c:bf:aa:03:65:6d:ee:81:39:7b:57:ca:d1:a7: 72:1b:33:ef:6b:17:2c:24:66:cc:c3:42:b8:3a:6c: f7:9f:cd:2e:dc:10:f2:2e:33:5d:1f:03:f0:58:22: 72:7c:8e:17:7c:c5:61:f6:39:f6:13:81:dd:27:46: f1:8e:68:fc:80:2c:f7:6f:13:cc:b3:67:4c:3b:cf: 20:34:e9:24:b6:b5:13:de:3c:54:99:21:15:b3:46: b9:1c:18:ce:c1:87:a3:fd:74:15:67:b5:d3:e6:a2: 4e:31:6d:35:0d:28:95:44:b1:18:c4:dd:ba:a9:60: 7f:49:b2:b1:3c:ef:f5:cc:68:e2:70:8a:79:22:ed: 07:d3:5e:9b:17:23:4e:6b:a5:16:5d:5d:99:58:90: 19:75:8b:70:35:36:4e:06:b1:d9:6b:f7:84:96:8a: 17:22:50:9f:67:60:6c:2e:46:05:5a:f6:3b:5c:79: a8:0b:d8:ab:13:d3:cd:10:2e:6f:a0:27:75:f2:4e: 2d:b9:d1:67:b7:47:cc:34:7f:05:38:9f:45:2f:76: 4e:be:34:6f:1f:b9:80:79:28:b7:f2:98:25:d7:22: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:BC:F7:E3:A8:E1:23:35:74:50:12:E6:F6:5B:BC:6C:2E:DD:32 X509v3 Authority Key Identifier: keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9b:b8:92:53:9e:7d:67:2e:53:dd:a5:86:f8:93:45:db:1c: c5:52:6d:e4:ee:8e:ba:6b:49:d3:4b:cb:5f:42:f8:4a:ca:00: cb:94:fd:fd:fa:bc:be:42:1e:2d:e9:0c:dd:27:3b:b1:d9:c7: 65:67:ff:84:8c:ce:7f:72:e0:2c:6b:9c:bd:19:92:f2:9b:0e: f4:c0:b3:e0:06:a2:21:92:d3:76:f8:bd:e3:6c:c5:79:39:b9: d7:6a:50:f7:0a:9c:05:f4:c3:5c:bf:9d:9f:d7:11:31:df:e7: 4d:b0:dd:06:7a:9e:64:58:60:f8:8b:19:a8:48:11:b2:9e:b7: 86:c9:5d:d4:05:f0:d9:5f:a0:be:e0:68:d4:63:1b:4f:95:04: da:77:bf:ea:8a:7d:a7:05:e9:29:82:4a:f1:2d:92:ff:a1:5d: 94:de:a8:60:c5:15:d8:20:e1:8c:5f:4f:e2:64:0e:b2:28:84: 32:77:e0:81:67:de:a2:f3:04:a9:f4:9e:75:f8:38:9b:e4:14: e6:9d:62:ce:bb:ba:37:76:6d:b3:59:1c:32:0b:a7:6f:bf:b1: 66:d8:64:2f:cd:0e:5e:1f:71:68:f8:b7:0c:6c:d2:92:69:4b: f2:fa:ee:b4:d0:24:37:7a:ed:ca:40:39:71:4e:93:2d:10:19: 17:d0:f6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVbt/w+RgrmOAVIWZfRVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjExYjU0NTA4YTA2Mjg5YjBlZDA2YjE3MTg4YWQ2M2Y0 ZmNmZWEwHhcNMjUxMjE4MTIwMTAwWhcNMjUxMjE5MTIwMTAwWjAzMTEwLwYDVQQD EyhhOTAyYmNmN2UzYThlMTIzMzU3NDUwMTJlNmY2NWJiYzZjMmVkZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJuRWiIy49GoL9qEP0Fz+ID6O/v2 5eSfwvmbmvzrXL+qA2Vt7oE5e1fK0adyGzPvaxcsJGbMw0K4Omz3n80u3BDyLjNd HwPwWCJyfI4XfMVh9jn2E4HdJ0bxjmj8gCz3bxPMs2dMO88gNOkktrUT3jxUmSEV s0a5HBjOwYej/XQVZ7XT5qJOMW01DSiVRLEYxN26qWB/SbKxPO/1zGjicIp5Iu0H 016bFyNOa6UWXV2ZWJAZdYtwNTZOBrHZa/eElooXIlCfZ2BsLkYFWvY7XHmoC9ir E9PNEC5voCd18k4tudFnt0fMNH8FOJ9FL3ZOvjRvH7mAeSi38pgl1yIrcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkCvPfjqOEjNXRQEub2W7xsLt0yMB8GA1UdIwQY MBaAFOyxG1RQigYomw7QaxcYitY/T8/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xNGQwOTktOGU0NS00NDc5LTg0N2Ut NzQxMjZiNWMzYWI2LzEvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xNGQwOTktOGU0NS00NDc5LTg0N2UtNzQxMjZiNWMzYWI2 LzEvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZu4klOe fWcuU92lhviTRdscxVJt5O6OumtJ00vLX0L4SsoAy5T9/fq8vkIeLekM3Sc7sdnH ZWf/hIzOf3LgLGucvRmS8psO9MCz4AaiIZLTdvi942zFeTm512pQ9wqcBfTDXL+d n9cRMd/nTbDdBnqeZFhg+IsZqEgRsp63hsld1AXw2V+gvuBo1GMbT5UE2ne/6op9 pwXpKYJK8S2S/6FdlN6oYMUV2CDhjF9P4mQOsiiEMnfggWfeovMEqfSedfg4m+QU 5p1izru6N3Zts1kcMgunb7+xZthkL80OXh9xaPi3DGzSkmlL8vrutNAkN3rtykA5 cU6TLRAZF9D2OA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:08:03 2025 by rpki-client