This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json) Hash identifier: GTX773gOz2tZUMT5iooNr80BKKux5SHkqMEEn+Uu9BQ= Subject key identifier: A8:92:BB:EF:2C:58:E5:48:69:A9:95:5C:3B:F5:49:88:09:77:A2:30 Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0 Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0 Certificate serial: 019AF1D25E93A8984733C87C8B495445BE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft Manifest number: 0740 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: uVF0aS1P7w2ZVwasye24Piu4ffOIHA7lGqDgXxLGYI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5e:93:a8:98:47:33:c8:7c:8b:49:54:45:be:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=a892bbef2c58e54869a9955c3bf549880977a230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:b3:8f:49:54:8a:c0:af:89:65:78:33:3c: 64:21:00:a7:e7:f4:8c:18:90:05:80:ba:ab:f9:42: e0:65:1c:bd:8d:30:7a:f5:7e:0d:e6:9b:90:38:c6: 88:86:02:87:c9:66:ec:b2:b1:da:be:d0:c4:3a:89: 0c:1a:e1:cd:23:10:a2:6a:3c:ab:6c:a6:fd:ab:41: 8a:60:dc:c6:f3:28:1b:8d:cc:4d:38:0e:9b:e7:bb: 6f:11:95:9a:ed:cd:37:9b:c3:35:4f:a4:9f:20:c7: 64:6a:ed:f0:95:7c:92:fc:54:ca:cd:1a:df:a0:b8: 80:1b:f9:1e:29:2c:d2:3e:3d:1c:83:fa:4c:ac:3a: ae:31:12:2d:f8:ce:63:34:a1:09:83:b8:3d:4b:2f: a8:d3:dc:71:a6:18:77:71:82:c3:ea:ea:9f:55:e5: 11:8a:67:ec:da:d6:84:42:50:79:ab:69:48:fd:57: 56:7e:ab:9d:5d:44:73:72:5b:b0:75:eb:5d:74:b2: 6b:e2:b9:bb:20:a9:f4:ac:cf:2c:25:b9:fc:43:75: 26:6e:52:22:68:95:f6:22:04:f6:93:3c:41:3b:2d: c7:7d:db:e3:67:97:38:72:2b:5c:88:0c:5e:b6:fc: c9:af:0a:0e:07:57:2b:63:82:40:5d:78:84:52:f5: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:92:BB:EF:2C:58:E5:48:69:A9:95:5C:3B:F5:49:88:09:77:A2:30 X509v3 Authority Key Identifier: keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cc:f0:b6:58:db:1f:04:65:f2:12:8e:96:96:13:a6:e5:b2: 50:12:b8:91:e7:39:4c:bf:e3:72:5c:3e:28:53:a3:fd:6a:28: 51:be:13:78:58:b5:1a:7c:bc:b3:53:00:5a:50:ba:6e:7c:f3: df:7e:9f:7e:ea:3d:65:ed:2e:53:45:00:eb:9b:85:23:85:74: bf:4e:ea:bd:36:54:23:27:23:54:75:af:fe:89:47:f4:49:2d: b9:e8:aa:20:56:07:4a:06:e1:92:82:a2:5e:72:f9:d4:51:3b: b9:ca:18:c7:03:44:e9:a2:e8:cc:da:7b:07:5f:22:25:77:a9: a4:1c:4a:4b:a7:db:0d:d9:10:db:7f:48:9f:38:e0:ca:10:b2: 19:04:b3:67:6e:91:cb:79:e9:c1:05:ce:28:de:47:f1:a9:90: 6f:86:72:c7:a0:f1:3c:e6:02:50:9a:51:d6:26:87:38:d5:c1: 52:ee:31:8f:0c:33:d3:6a:4d:95:13:59:5b:cd:bc:e3:de:95: fc:f1:0b:04:e8:79:ea:48:ee:4f:fe:9d:63:e0:67:53:1c:cc: 2d:96:26:47:57:b3:b9:96:a3:1c:5f:e2:47:19:40:04:a3:29: b9:84:00:42:9a:fc:ce:ec:06:10:d2:71:81:ec:d5:5a:ee:a6: b1:27:11:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l6TqJhHM8h8i0lURb5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjkyOTM4ZWE4Y2Y3YTNmNjA5OWNhNmQ2ZTNlNWEyN2I4 OTdjZjAwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EyhhODkyYmJlZjJjNThlNTQ4NjlhOTk1NWMzYmY1NDk4ODA5NzdhMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4+zj0lUisCviWV4MzxkIQCn5/SM GJAFgLqr+ULgZRy9jTB69X4N5puQOMaIhgKHyWbssrHavtDEOokMGuHNIxCiajyr bKb9q0GKYNzG8ygbjcxNOA6b57tvEZWa7c03m8M1T6SfIMdkau3wlXyS/FTKzRrf oLiAG/keKSzSPj0cg/pMrDquMRIt+M5jNKEJg7g9Sy+o09xxphh3cYLD6uqfVeUR imfs2taEQlB5q2lI/VdWfqudXURzcluwdetddLJr4rm7IKn0rM8sJbn8Q3UmblIi aJX2IgT2kzxBOy3HfdvjZ5c4citciAxetvzJrwoOB1crY4JAXXiEUvUUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiSu+8sWOVIaamVXDv1SYgJd6IwMB8GA1UdIwQY MBaAFO65KTjqjPej9gmcptbj5aJ7iXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgt MGJmMDI4MmE2ZDY3LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgtMGJmMDI4MmE2ZDY3 LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMzwtljb HwRl8hKOlpYTpuWyUBK4kec5TL/jclw+KFOj/WooUb4TeFi1Gny8s1MAWlC6bnzz 336ffuo9Ze0uU0UA65uFI4V0v07qvTZUIycjVHWv/olH9EktueiqIFYHSgbhkoKi XnL51FE7ucoYxwNE6aLozNp7B18iJXeppBxKS6fbDdkQ239InzjgyhCyGQSzZ26R y3npwQXOKN5H8amQb4Zyx6DxPOYCUJpR1iaHONXBUu4xjwwz02pNlRNZW828496V /PELBOh56kjuT/6dY+BnUxzMLZYmR1ezuZajHF/iRxlABKMpuYQAQpr8zuwGENJx gezVWu6msScRKg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:57 2025 by rpki-client