This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json) Hash identifier: GO/C6zLhxmZ5Ot4bRYCod005DIIQ5IdqebLggTwwvPg= Subject key identifier: 53:C2:FB:1B:2D:82:D6:F6:A5:0C:64:4E:FB:41:C7:FD:21:ED:DF:24 Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC Certificate issuer: /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc Certificate serial: 019AF1D1C429F89F76A3E5A0C1D714466BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft Manifest number: 90 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: x2VqrH4Vxfxcmyi5/XjQuL8MqcUbBc5mumjkzdYl9Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:29:f8:9f:76:a3:e5:a0:c1:d7:14:46:6b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=53c2fb1b2d82d6f6a50c644efb41c7fd21eddf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:fb:75:39:f0:97:5c:d2:5e:35:83:55:58: c3:f9:f4:8c:02:c8:26:5e:e8:cd:85:98:0e:61:36: 5c:a7:f1:e4:0e:dc:60:ae:a8:da:f5:41:4b:e5:8a: 48:2c:b4:20:01:7f:31:31:6a:fb:82:5e:b5:84:9b: 38:21:f8:58:cf:79:0b:1d:c1:c8:ae:75:01:68:28: 17:d6:1a:ad:99:5e:b4:78:29:ff:82:0a:0a:60:e7: cd:21:93:c6:42:73:86:ee:95:9d:0b:09:4d:40:7b: e2:04:47:2a:0d:03:59:37:bb:36:b2:5e:2e:ac:8d: 04:13:5b:c4:e2:0c:1f:ef:02:84:b3:77:7c:48:67: 97:da:36:5f:bf:92:02:8b:81:2a:fc:7a:9d:95:f2: 9e:63:60:20:0e:27:9e:1c:39:af:1f:ca:9d:de:49: 73:49:40:c0:74:e5:94:d4:1e:8e:fb:2c:e0:90:60: 5f:60:a0:2e:97:41:f2:22:35:d3:64:6e:8d:3c:28: 01:74:d4:ca:6f:2a:ed:e4:c3:49:98:c5:48:34:d0: 10:c3:37:a0:7c:5a:69:78:b6:36:44:11:ef:bd:fb: d6:56:90:1a:50:86:f4:11:e0:06:4f:84:c9:85:94: 4c:8b:17:c9:1c:dc:0b:50:6b:1e:ee:4e:97:fd:de: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C2:FB:1B:2D:82:D6:F6:A5:0C:64:4E:FB:41:C7:FD:21:ED:DF:24 X509v3 Authority Key Identifier: keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:1d:91:ae:bc:24:42:5a:77:6b:ac:97:17:b2:46:79:63: 8e:25:ee:d1:de:8d:7e:8c:0e:11:42:24:c9:2f:54:a7:b6:b2: 56:af:b2:44:da:87:ba:a1:37:41:09:85:0d:06:92:05:72:01: cc:57:a6:fd:f8:af:36:33:de:93:d7:fb:40:e6:e0:09:c7:10: ec:1c:38:f0:a2:f3:d9:8c:a2:bb:9f:47:c2:06:4d:8a:67:5e: 9c:45:b5:b9:34:0c:70:0d:73:f5:f3:83:3a:e5:ff:4a:48:81: ce:2a:4e:62:66:ef:fc:2a:09:f0:68:a2:32:ff:3a:9c:54:68: a7:63:3c:a5:7f:a6:22:40:b1:ce:d8:ae:f6:1b:f7:43:95:53: be:e0:0b:77:06:41:37:89:f1:46:55:54:08:a5:71:f9:78:4d: 23:cc:0a:f6:46:3f:7f:a3:b6:70:5c:5b:c6:48:ed:57:11:23: 04:03:82:08:97:f2:97:e8:e4:e7:61:60:ad:19:76:9c:b0:0d: c7:99:2b:1d:1d:ba:91:fc:0e:18:de:74:d7:7d:f9:13:0a:8d: 9c:2a:75:5d:08:a0:3a:e0:eb:51:92:59:63:da:a4:8c:7d:ec: b8:e5:80:fd:c7:ed:be:3d:74:ce:bd:cf:66:1f:81:f5:7f:e9: 3f:73:9c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cQp+J92o+WgwdcURmvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOTk3NzAwZjA2YWE5YjdmYzIxYWViYjE1NjIyOTlkNWE2 MjVkZGMwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg1M2MyZmIxYjJkODJkNmY2YTUwYzY0NGVmYjQxYzdmZDIxZWRkZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJj7dTnwl1zSXjWDVVjD+fSMAsgm XujNhZgOYTZcp/HkDtxgrqja9UFL5YpILLQgAX8xMWr7gl61hJs4IfhYz3kLHcHI rnUBaCgX1hqtmV60eCn/ggoKYOfNIZPGQnOG7pWdCwlNQHviBEcqDQNZN7s2sl4u rI0EE1vE4gwf7wKEs3d8SGeX2jZfv5ICi4Eq/HqdlfKeY2AgDieeHDmvH8qd3klz SUDAdOWU1B6O+yzgkGBfYKAul0HyIjXTZG6NPCgBdNTKbyrt5MNJmMVINNAQwzeg fFppeLY2RBHvvfvWVpAaUIb0EeAGT4TJhZRMixfJHNwLUGse7k6X/d5ikwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPC+xstgtb2pQxkTvtBx/0h7d8kMB8GA1UdIwQY MBaAFO6ZdwDwaqm3/CGuuxViKZ1aYl3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3BsM0FQQnFxYmY4SWE2N0ZXSXBuVnBpWGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yOTA2YWYtYzhjOC00NDQ2LWFhOTct MzgzMGI1M2YyNjVkLzEvN3BsM0FQQnFxYmY4SWE2N0ZXSXBuVnBpWGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yOTA2YWYtYzhjOC00NDQ2LWFhOTctMzgzMGI1M2YyNjVk LzEvN3BsM0FQQnFxYmY4SWE2N0ZXSXBuVnBpWGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLwdka68 JEJad2uslxeyRnljjiXu0d6NfowOEUIkyS9Up7ayVq+yRNqHuqE3QQmFDQaSBXIB zFem/fivNjPek9f7QObgCccQ7Bw48KLz2Yyiu59HwgZNimdenEW1uTQMcA1z9fOD OuX/SkiBzipOYmbv/CoJ8GiiMv86nFRop2M8pX+mIkCxztiu9hv3Q5VTvuALdwZB N4nxRlVUCKVx+XhNI8wK9kY/f6O2cFxbxkjtVxEjBAOCCJfyl+jk52FgrRl2nLAN x5krHR26kfwOGN501335EwqNnCp1XQigOuDrUZJZY9qkjH3suOWA/cftvj10zr3P Zh+B9X/pP3OcdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:56 2025 by rpki-client