This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json) Hash identifier: lp4MNUUbDvgkog8rH6RMqsas0T2M9l2RToi1aWE9LAQ= Subject key identifier: 43:03:E4:D1:1E:5B:43:4A:BF:3F:2C:E7:ED:31:0E:9B:9C:E6:12:D0 Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d Certificate serial: 019AF42DED93488361041D14234AE9CDF0FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft Manifest number: 0754 Signing time: Sat 06 Dec 2025 15:00:41 +0000 Manifest this update: Sat 06 Dec 2025 15:00:41 +0000 Manifest next update: Sun 07 Dec 2025 15:00:41 +0000 Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: RAaFpRn++q9ahKLMG/85ABba0jKEmCVTDDtYRtch9jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ed:93:48:83:61:04:1d:14:23:4a:e9:cd:f0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d Validity Not Before: Dec 6 15:00:41 2025 GMT Not After : Dec 7 15:00:41 2025 GMT Subject: CN=4303e4d11e5b434abf3f2ce7ed310e9b9ce612d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:9f:a3:2e:06:fd:42:65:a3:d0:b8:4a:a9: d8:73:81:12:05:5b:db:1a:45:9d:23:c6:90:11:48: f9:21:5c:f6:06:65:f1:07:25:44:c6:f7:69:c3:c6: ec:91:13:de:3a:15:39:c1:f3:65:e5:16:04:06:fa: 4c:2c:26:72:38:c1:f0:3e:9e:cd:15:41:33:8b:3b: a3:73:d3:97:48:46:0e:2e:28:20:d6:c2:ca:21:5a: 8d:90:e5:e3:d1:17:eb:af:71:99:20:fa:d9:e3:fa: dd:42:2b:4d:92:3e:9f:4e:6a:f1:32:8f:82:ab:b1: 3c:eb:c4:70:9b:1f:03:de:8c:c5:11:a8:d2:fc:09: ed:d0:76:6c:8a:1b:4d:67:df:a0:ae:23:7f:75:6e: 86:90:cb:5d:45:57:52:a0:10:6b:b0:bc:1e:d5:68: 14:ef:54:a9:7a:cf:0a:ee:de:a0:d3:0a:b9:3c:e9: d2:27:44:ff:54:79:0f:5f:08:21:09:0e:59:c5:8d: 7a:6f:a7:84:67:f9:4c:d3:c7:bf:3d:7a:09:bd:81: 61:4a:27:26:59:44:60:33:5e:3d:2f:c6:d2:ce:06: 52:6a:8f:2d:26:19:8c:05:c4:6d:69:6c:22:e5:81: 54:58:cf:91:54:f8:c1:9b:a5:83:b7:b4:38:e0:f9: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:E4:D1:1E:5B:43:4A:BF:3F:2C:E7:ED:31:0E:9B:9C:E6:12:D0 X509v3 Authority Key Identifier: keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2e:c3:18:25:f6:69:d0:17:95:ee:e4:39:74:1c:a9:44:82: 77:b1:81:0b:92:f7:f5:03:1f:b7:04:62:a7:42:5f:c3:6f:4b: 1f:0b:af:6e:88:c3:f7:f3:f4:22:44:d9:a1:90:54:45:50:b5: a6:a0:b1:c5:ef:81:a1:92:5d:26:8e:89:93:15:88:eb:dd:aa: 5f:23:0a:5c:c3:8e:09:20:71:c6:a9:98:8c:b9:80:c5:41:29: 76:63:2c:58:92:14:be:90:2d:61:92:5f:30:6f:9a:f1:ea:69: 94:8d:8e:a4:74:37:0c:f0:81:7f:66:b7:c2:c3:38:e7:0e:89: f6:4c:55:e2:87:d9:7e:ef:0b:41:1d:b1:53:41:6c:d7:a6:93: cb:08:55:24:8a:11:99:95:1c:91:e4:72:13:36:a8:d1:4b:a9: d1:84:56:37:55:f7:b6:c2:9f:c4:a8:ea:48:d5:36:69:aa:42: 3b:10:e3:11:8e:d4:1e:f6:7b:f3:50:3c:81:cc:0e:d8:01:82: 83:1d:11:b2:d9:5d:0f:d6:ac:ff:77:f0:87:2a:f9:ad:64:b0: 06:f9:d5:17:61:1e:8c:e1:0e:8b:86:b3:66:8f:5d:0f:f9:28: c8:59:23:cf:ca:45:5f:b6:2f:17:03:68:0c:83:99:82:16:98: 55:83:7d:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Le2TSINhBB0UI0rpzfD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjU3ZTg5ZGFiM2ZiMTVlM2JhZTBlYjFhYzdmYWM5M2Rm NjM4NWQwHhcNMjUxMjA2MTUwMDQxWhcNMjUxMjA3MTUwMDQxWjAzMTEwLwYDVQQD Eyg0MzAzZTRkMTFlNWI0MzRhYmYzZjJjZTdlZDMxMGU5YjljZTYxMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliKfoy4G/UJlo9C4SqnYc4ESBVvb GkWdI8aQEUj5IVz2BmXxByVExvdpw8bskRPeOhU5wfNl5RYEBvpMLCZyOMHwPp7N FUEzizujc9OXSEYOLigg1sLKIVqNkOXj0Rfrr3GZIPrZ4/rdQitNkj6fTmrxMo+C q7E868Rwmx8D3ozFEajS/Ant0HZsihtNZ9+griN/dW6GkMtdRVdSoBBrsLwe1WgU 71Spes8K7t6g0wq5POnSJ0T/VHkPXwghCQ5ZxY16b6eEZ/lM08e/PXoJvYFhSicm WURgM149L8bSzgZSao8tJhmMBcRtaWwi5YFUWM+RVPjBm6WDt7Q44PnfBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMD5NEeW0NKvz8s5+0xDpuc5hLQMB8GA1UdIwQY MBaAFOxlfonas/sV47rg6xrH+sk99jhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOTFjNzAtYzNiYy00MDdmLTkzNWIt ZmQ3MDg2N2JjMzM0LzEvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8zOTFjNzAtYzNiYy00MDdmLTkzNWItZmQ3MDg2N2JjMzM0 LzEvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC7DGCX2 adAXle7kOXQcqUSCd7GBC5L39QMftwRip0Jfw29LHwuvbojD9/P0IkTZoZBURVC1 pqCxxe+BoZJdJo6JkxWI692qXyMKXMOOCSBxxqmYjLmAxUEpdmMsWJIUvpAtYZJf MG+a8epplI2OpHQ3DPCBf2a3wsM45w6J9kxV4ofZfu8LQR2xU0Fs16aTywhVJIoR mZUckeRyEzao0Uup0YRWN1X3tsKfxKjqSNU2aapCOxDjEY7UHvZ781A8gcwO2AGC gx0RstldD9as/3fwhyr5rWSwBvnVF2EejOEOi4azZo9dD/koyFkjz8pFX7YvFwNo DIOZghaYVYN9XA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:25 2025 by rpki-client