This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json) Hash identifier: /HitU3m5HI13jHTPv6iAj8xxtBC/43UU0QmBo25rLyQ= Subject key identifier: DD:B7:10:35:29:54:C8:09:83:04:08:3B:29:DA:24:9D:D4:E5:97:3E Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16 Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16 Certificate serial: 019AF31B7A3C487562F42A5A6B8024BB1355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft Manifest number: 0AEA Signing time: Sat 06 Dec 2025 10:00:55 +0000 Manifest this update: Sat 06 Dec 2025 10:00:55 +0000 Manifest next update: Sun 07 Dec 2025 10:00:55 +0000 Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: G8DFnnOStNPmzcbNaox9ZnSi38z+0IYMEKoXtXhJXjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:7a:3c:48:75:62:f4:2a:5a:6b:80:24:bb:13:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16 Validity Not Before: Dec 6 10:00:55 2025 GMT Not After : Dec 7 10:00:55 2025 GMT Subject: CN=ddb710352954c8098304083b29da249dd4e5973e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:ab:55:f4:a8:50:d5:26:7c:01:68:aa:05: 47:07:7b:23:62:6f:40:85:25:6e:a9:fb:1d:b0:01: 87:98:2f:3b:78:ba:5a:89:e8:79:58:00:c9:47:7c: 63:69:28:5d:d9:ab:c1:08:64:06:d1:19:85:88:27: f1:b2:54:a2:c3:2a:d3:75:53:a3:18:d9:83:49:5a: 7b:78:3a:c8:8a:a0:2e:dd:34:3a:41:ca:3b:31:58: 10:69:70:64:35:4e:9a:85:2b:b0:d9:90:2c:54:51: c0:1a:c0:28:f0:ab:56:66:55:21:6c:ed:2f:67:bf: a8:ae:01:0f:80:5b:36:bc:9e:1d:b7:8f:4f:47:5d: 13:f7:6b:e0:f0:d0:3e:46:d6:9a:66:bd:b0:4a:70: b5:97:52:59:53:0d:57:be:8a:f6:90:96:da:57:a6: 0c:2a:2e:b9:82:33:db:e7:75:f0:48:2c:2a:72:d0: ee:18:64:3d:ce:cb:da:d5:7b:e5:bd:7c:92:a9:f0: 11:36:b1:b2:40:8a:48:5f:a3:26:f2:a1:35:cd:03: fe:87:b4:d4:8b:41:b7:0c:ea:9c:8f:81:44:00:9b: 11:f1:37:6e:ee:c5:ce:6e:61:96:ac:a1:ea:44:f7: 8a:07:a1:ec:ed:f6:49:dc:8d:d4:37:84:ce:77:84: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:10:35:29:54:C8:09:83:04:08:3B:29:DA:24:9D:D4:E5:97:3E X509v3 Authority Key Identifier: keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:56:62:0b:f3:4b:70:06:7e:52:4b:fc:a5:fd:8f:ed:39:3f: c1:8f:63:20:82:2a:bd:e0:e6:f4:a0:08:4e:8b:6d:93:5a:31: 77:43:21:d9:99:13:89:99:45:9c:fe:40:b4:0b:b3:dc:f6:1b: 85:00:ff:d1:fb:98:c3:1f:ac:39:b2:39:38:9c:f5:33:03:f5: 23:a0:95:23:e9:08:e3:5e:68:ac:5b:dc:9f:96:81:5b:a5:37: 9e:e1:6e:07:09:82:2e:89:c1:95:0d:de:65:9e:90:74:c1:9b: e3:78:37:8c:46:66:8c:e1:e1:de:28:08:e2:fd:4c:3f:eb:a1: 56:50:ed:43:de:19:c1:a8:dd:40:bf:ee:69:09:84:e4:8c:9f: b2:4f:20:df:3b:e3:4d:66:01:13:1f:b1:71:01:eb:b8:4d:40: dd:35:47:ed:07:1e:de:91:a8:d3:31:f6:e8:c5:94:77:eb:26: 00:ca:37:44:91:85:7e:8b:c8:ec:32:c9:60:05:76:77:01:ea: f6:2c:13:d9:a7:88:9c:59:54:38:7a:ba:fc:54:98:d9:50:6a: 9f:8d:09:cd:4f:51:b3:ec:42:c2:9d:04:9b:75:f0:7a:31:ce: e0:71:dd:1d:53:63:e4:90:65:b1:2a:1a:8e:b5:1c:32:3e:5a: 15:e7:ea:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3o8SHVi9Cpaa4AkuxNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDk3ZjYwNzhkMjJlODJmZDNkMDRhZWM1ZDY3MjE3MTUy NTZmMTYwHhcNMjUxMjA2MTAwMDU1WhcNMjUxMjA3MTAwMDU1WjAzMTEwLwYDVQQD EyhkZGI3MTAzNTI5NTRjODA5ODMwNDA4M2IyOWRhMjQ5ZGQ0ZTU5NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWirVfSoUNUmfAFoqgVHB3sjYm9A hSVuqfsdsAGHmC87eLpaieh5WADJR3xjaShd2avBCGQG0RmFiCfxslSiwyrTdVOj GNmDSVp7eDrIiqAu3TQ6Qco7MVgQaXBkNU6ahSuw2ZAsVFHAGsAo8KtWZlUhbO0v Z7+orgEPgFs2vJ4dt49PR10T92vg8NA+RtaaZr2wSnC1l1JZUw1Xvor2kJbaV6YM Ki65gjPb53XwSCwqctDuGGQ9zsva1XvlvXySqfARNrGyQIpIX6Mm8qE1zQP+h7TU i0G3DOqcj4FEAJsR8Tdu7sXObmGWrKHqRPeKB6Hs7fZJ3I3UN4TOd4Qr6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN23EDUpVMgJgwQIOynaJJ3U5Zc+MB8GA1UdIwQY MBaAFO3Zf2B40i6C/T0ErsXWchcVJW8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTIt NGZhZGFkMDg1ODIzLzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTItNGZhZGFkMDg1ODIz LzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1ZiC/NL cAZ+Ukv8pf2P7Tk/wY9jIIIqveDm9KAITottk1oxd0Mh2ZkTiZlFnP5AtAuz3PYb hQD/0fuYwx+sObI5OJz1MwP1I6CVI+kI415orFvcn5aBW6U3nuFuBwmCLonBlQ3e ZZ6QdMGb43g3jEZmjOHh3igI4v1MP+uhVlDtQ94ZwajdQL/uaQmE5Iyfsk8g3zvj TWYBEx+xcQHruE1A3TVH7Qce3pGo0zH26MWUd+smAMo3RJGFfovI7DLJYAV2dwHq 9iwT2aeInFlUOHq6/FSY2VBqn40JzU9Rs+xCwp0Em3XwejHO4HHdHVNj5JBlsSoa jrUcMj5aFefqLA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:54 2025 by rpki-client