This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft File: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json) Hash identifier: /lLSnN2FHS/ouIGgWhaWxwKs1QASWvdFJ4jaST44Vs8= Subject key identifier: ED:D1:0B:D6:60:D6:75:E0:58:11:8D:C3:D9:DB:22:22:F8:E8:DE:EC Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5 Certificate issuer: /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5 Certificate serial: 019AF20929C4D1E5920684A9E970304E27F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft Manifest number: 070B Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: oz5E+adX6+Dbpx/oeU1vLyz837l9bp8IXWyCde5kUiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:29:c4:d1:e5:92:06:84:a9:e9:70:30:4e:27:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=edd10bd660d675e058118dc3d9db2222f8e8deec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:5d:38:b1:8b:9e:aa:35:ef:f0:fd:47:3d: 0c:a5:08:2f:d7:32:90:0c:92:67:d4:13:15:e8:31: 45:9f:01:c2:d2:b4:c9:93:b2:5a:e4:0b:e1:31:9a: ea:82:f8:ec:f3:73:d7:37:7a:14:05:4c:97:ed:fe: ba:e9:bb:d4:db:93:06:87:2a:0c:6d:b5:23:89:8d: 66:f9:31:26:b8:27:a9:15:39:c8:9e:be:f5:57:e3: b7:21:f9:c1:73:42:7f:f7:96:ac:db:40:4a:ae:c0: 8a:74:c5:b1:61:6e:a3:43:ce:23:fc:d2:f7:58:ff: 0d:d5:b9:62:ff:44:da:0c:df:fc:a6:4e:38:e1:e1: 3a:93:a9:0d:5d:49:1f:f0:a9:79:4d:93:85:c1:7c: 47:a4:66:3b:bb:b6:6c:8d:0b:df:17:03:99:78:1e: c2:cf:df:0b:59:30:02:ca:40:89:83:68:dc:48:70: a1:9d:76:58:f7:37:12:3e:fb:c0:04:4b:25:77:bb: 79:34:2e:bd:b0:27:cc:85:39:bf:43:d2:84:62:b8: f2:ea:7e:42:45:7f:13:40:94:72:a7:bf:57:23:07: 01:d4:02:3f:07:5a:f8:0f:c1:57:2a:6a:06:5b:aa: 9e:34:86:74:7e:1c:fa:a5:0f:ad:74:df:29:02:2b: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:0B:D6:60:D6:75:E0:58:11:8D:C3:D9:DB:22:22:F8:E8:DE:EC X509v3 Authority Key Identifier: keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:75:92:97:41:e2:65:93:76:f1:6f:32:b3:ca:5e:cb:c8: 1b:b8:26:47:9f:75:13:32:cc:81:13:88:95:15:63:90:38:72: dd:61:8b:44:69:b0:c2:81:fc:d8:de:5f:9c:55:97:b2:f4:df: 20:fc:a7:aa:34:12:0b:80:c3:94:f9:fb:dd:2b:42:14:54:c9: 64:ef:1d:09:c0:bb:49:8c:e5:9c:b4:0f:98:d0:1e:1e:05:5d: 64:9b:24:bd:e7:69:de:20:99:71:b4:6d:6a:c1:05:0d:60:98: 45:6d:aa:40:a0:1e:5a:44:ba:4e:36:2d:a0:a9:4f:ca:34:82: 25:b9:4c:ea:d4:f2:09:e1:cd:68:2e:49:5b:1d:a1:63:13:07: 37:61:5b:8a:fc:de:14:6a:5c:c7:61:ed:41:61:ba:18:b8:0e: 99:4c:6f:34:0e:6b:90:20:8c:c7:08:60:40:c3:cf:69:57:61: 01:20:c7:62:16:06:2d:49:4f:7b:eb:94:37:15:e5:bb:41:73: 21:59:9d:4c:81:f6:0e:15:f6:dd:8d:a3:33:17:6e:3f:b4:8b: 9e:79:56:aa:3c:b7:75:63:5f:d6:7b:d3:75:45:08:a9:85:cb: 49:17:22:8d:d1:73:82:61:7a:23:6d:25:8f:aa:c8:4f:e1:ed: f3:f9:a0:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSnE0eWSBoSp6XAwTif0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmY5Yzc5MDY5NDBlM2Q0NDM3YzZiZGNkZTE2NGQwNjVh ODBlYTUwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhlZGQxMGJkNjYwZDY3NWUwNTgxMThkYzNkOWRiMjIyMmY4ZThkZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lhdOLGLnqo17/D9Rz0MpQgv1zKQ DJJn1BMV6DFFnwHC0rTJk7Ja5AvhMZrqgvjs83PXN3oUBUyX7f666bvU25MGhyoM bbUjiY1m+TEmuCepFTnInr71V+O3IfnBc0J/95as20BKrsCKdMWxYW6jQ84j/NL3 WP8N1bli/0TaDN/8pk444eE6k6kNXUkf8Kl5TZOFwXxHpGY7u7ZsjQvfFwOZeB7C z98LWTACykCJg2jcSHChnXZY9zcSPvvABEsld7t5NC69sCfMhTm/Q9KEYrjy6n5C RX8TQJRyp79XIwcB1AI/B1r4D8FXKmoGW6qeNIZ0fhz6pQ+tdN8pAiualQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3RC9Zg1nXgWBGNw9nbIiL46N7sMB8GA1UdIwQY MBaAFO1vnHkGlA49RDfGvc3hZNBlqA6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9kYTUwZGUtMjU2OS00Y2JjLTgwNDMt NjY1ZGFmYTMwNTViLzEvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9kYTUwZGUtMjU2OS00Y2JjLTgwNDMtNjY1ZGFmYTMwNTVi LzEvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknN1kpdB 4mWTdvFvMrPKXsvIG7gmR591EzLMgROIlRVjkDhy3WGLRGmwwoH82N5fnFWXsvTf IPynqjQSC4DDlPn73StCFFTJZO8dCcC7SYzlnLQPmNAeHgVdZJskvedp3iCZcbRt asEFDWCYRW2qQKAeWkS6TjYtoKlPyjSCJblM6tTyCeHNaC5JWx2hYxMHN2Fbivze FGpcx2HtQWG6GLgOmUxvNA5rkCCMxwhgQMPPaVdhASDHYhYGLUlPe+uUNxXlu0Fz IVmdTIH2DhX23Y2jMxduP7SLnnlWqjy3dWNf1nvTdUUIqYXLSRcijdFzgmF6I20l j6rIT+Ht8/mglg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:21 2025 by rpki-client