This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json) Hash identifier: tOTC413T388qO985+w2D0cLsvpj8wT72Um9fBM9zetY= Subject key identifier: D6:03:92:58:09:10:66:99:FD:0A:90:79:34:E0:1A:2F:2A:CF:BA:DB Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48 Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48 Certificate serial: 019AF12CC3F8C9D0771E6F1AD27CA1F28D22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft Manifest number: 1413 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: fjUmpPeQKc43Mpn4tSPkQ7cjqoT/sv8SCYJlL++WxeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c3:f8:c9:d0:77:1e:6f:1a:d2:7c:a1:f2:8d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=d603925809106699fd0a907934e01a2f2acfbadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:08:b6:5b:12:30:6b:4d:c8:72:aa:4b:3a: 65:07:83:40:c6:f3:3a:0a:07:bd:45:aa:00:4a:2a: 72:74:ee:ee:10:ea:8c:6d:e7:5e:29:15:fc:a2:d5: d5:10:56:40:b3:39:09:80:72:94:e2:14:fd:93:32: 51:80:99:8c:90:55:ed:b6:5f:ed:cf:5f:33:ef:59: ce:1c:ed:8b:df:86:c3:82:c7:84:70:e3:1a:34:db: 5e:fe:6d:44:81:80:e5:68:7c:9a:93:9d:12:2d:3b: 10:77:76:77:95:cd:c4:b4:76:36:18:a1:be:08:9b: 18:91:cc:98:bb:f4:d7:d1:58:f3:6e:4e:00:49:c2: 8a:76:8d:33:01:bc:b9:60:87:d9:00:c7:61:68:df: 84:a5:08:c0:1f:0c:ef:57:ba:0e:91:45:15:b9:60: 4e:e2:9a:39:71:db:4f:a7:7a:69:65:6d:1e:a9:64: 96:a3:75:23:f9:d1:b6:51:cd:76:26:c7:0f:3a:2d: c0:6d:41:3a:97:23:b0:eb:e9:39:74:8f:03:c8:d8: 51:e9:7b:96:0e:4d:6b:46:f7:ee:4a:87:1c:4e:73: e1:98:62:03:40:de:11:91:7c:ee:36:d9:ac:ff:71: a3:58:3b:27:8a:d9:bc:29:c0:32:e8:46:1c:aa:17: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:03:92:58:09:10:66:99:FD:0A:90:79:34:E0:1A:2F:2A:CF:BA:DB X509v3 Authority Key Identifier: keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bd:ab:86:5e:d6:07:c8:31:09:9f:94:a4:84:04:02:f9:88: 8e:88:b0:a9:66:c5:d5:b3:1b:2a:f0:f1:ee:eb:14:18:f7:12: 58:ee:57:8a:3a:f7:19:b0:9b:cc:50:51:ef:52:ff:39:af:3c: 3f:5a:90:e9:2a:ac:a8:77:4a:71:13:95:10:21:30:50:f2:d2: 4e:e5:59:2a:24:e4:3e:7d:1c:73:5d:34:7e:6e:10:20:99:c0: 75:d8:6f:2c:60:c4:6d:9e:c6:f8:4a:e9:1d:cf:32:80:f7:01: 25:7a:e8:dc:c9:72:ab:86:3e:c6:83:a0:00:87:99:09:2f:67: ad:db:a5:45:de:04:03:8f:47:e9:c3:46:e9:7b:f4:d9:b1:21: 2b:e6:d5:b4:e1:ae:68:ea:69:f4:15:d7:c0:20:43:26:1b:6a: 40:6b:ef:5d:a6:c1:b8:60:3c:98:2f:9c:19:34:45:df:9c:00: 5e:0c:16:7a:69:b1:b5:92:50:ae:2f:d0:96:d2:52:dd:92:cd: f3:35:f2:ae:a3:98:53:80:78:e1:3f:84:f7:04:ec:c5:79:55: 1e:4f:38:34:30:92:c6:db:b5:b2:07:53:02:32:46:a7:da:1a: 8c:f4:db:c0:07:93:83:df:bd:76:0b:5b:60:31:75:bf:ef:7a: 2f:c6:24:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMP4ydB3Hm8a0nyh8o0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjVkNTEyZjkxMDQ0Yjc4NmExNTU4OWE2MjRhOGQ4Y2I5 MjllNDgwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EyhkNjAzOTI1ODA5MTA2Njk5ZmQwYTkwNzkzNGUwMWEyZjJhY2ZiYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2UItlsSMGtNyHKqSzplB4NAxvM6 Cge9RaoASipydO7uEOqMbedeKRX8otXVEFZAszkJgHKU4hT9kzJRgJmMkFXttl/t z18z71nOHO2L34bDgseEcOMaNNte/m1EgYDlaHyak50SLTsQd3Z3lc3EtHY2GKG+ CJsYkcyYu/TX0Vjzbk4AScKKdo0zAby5YIfZAMdhaN+EpQjAHwzvV7oOkUUVuWBO 4po5cdtPp3ppZW0eqWSWo3Uj+dG2Uc12JscPOi3AbUE6lyOw6+k5dI8DyNhR6XuW Dk1rRvfuSoccTnPhmGIDQN4RkXzuNtms/3GjWDsnitm8KcAy6EYcqhe2iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYDklgJEGaZ/QqQeTTgGi8qz7rbMB8GA1UdIwQY MBaAFOz11RL5EES3hqFViaYkqNjLkp5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUt YzE0ODFkZjdkYTQxLzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUtYzE0ODFkZjdkYTQx LzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF72rhl7W B8gxCZ+UpIQEAvmIjoiwqWbF1bMbKvDx7usUGPcSWO5Xijr3GbCbzFBR71L/Oa88 P1qQ6SqsqHdKcROVECEwUPLSTuVZKiTkPn0cc100fm4QIJnAddhvLGDEbZ7G+Erp Hc8ygPcBJXro3Mlyq4Y+xoOgAIeZCS9nrdulRd4EA49H6cNG6Xv02bEhK+bVtOGu aOpp9BXXwCBDJhtqQGvvXabBuGA8mC+cGTRF35wAXgwWemmxtZJQri/QltJS3ZLN 8zXyrqOYU4B44T+E9wTsxXlVHk84NDCSxtu1sgdTAjJGp9oajPTbwAeTg9+9dgtb YDF1v+96L8Yk3A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:27 2025 by rpki-client