This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft File: 7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json) Hash identifier: hv6B7VGwV2+wOoUvAHAdnZKAkgSDE2mdX9rDiq3Y9hQ= Subject key identifier: 13:07:6F:14:CC:D2:5E:37:39:5A:A9:E3:60:82:F5:A3:34:89:41:BC Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E Certificate issuer: /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e Certificate serial: 019AF61CCE33C84C30B3551E63EE06C38F6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft Manifest number: 06E5 Signing time: Sun 07 Dec 2025 00:01:14 +0000 Manifest this update: Sun 07 Dec 2025 00:01:14 +0000 Manifest next update: Mon 08 Dec 2025 00:01:14 +0000 Files and hashes: 1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: F3AejbuuytiNX0N6bpUnhf+ZUEMH64aMuj45qHSRFHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:ce:33:c8:4c:30:b3:55:1e:63:ee:06:c3:8f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e Validity Not Before: Dec 7 00:01:14 2025 GMT Not After : Dec 8 00:01:14 2025 GMT Subject: CN=13076f14ccd25e37395aa9e36082f5a3348941bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:2d:02:a9:26:d3:c4:0c:5f:ac:c9:c2:e5: 93:ba:85:c5:62:92:f3:0b:f3:35:cb:c3:c6:a7:cc: 52:a9:4f:1c:69:60:8f:9b:fe:7b:5d:5d:34:ae:d4: d2:a8:b7:0f:50:3c:ba:64:a2:d5:df:8e:ab:5e:fb: 02:e6:81:db:b7:02:11:0a:83:48:cb:42:80:d7:8a: 81:f9:3e:0e:38:c0:80:0b:da:3c:06:69:90:6a:72: 0e:0a:f9:f7:4e:75:9f:b3:d3:15:dc:96:a3:83:5d: d4:16:92:d0:b8:56:03:cd:3e:e7:b6:11:d6:ba:01: db:71:36:d9:7f:cc:33:af:4a:fb:30:d5:d2:94:e0: e7:44:b3:5e:34:16:a1:20:32:d0:06:9d:16:c7:8d: 7e:52:0d:e5:3f:97:6f:db:02:86:34:d7:ff:a6:dd: bd:91:17:f4:e2:ba:25:5c:03:f6:ea:04:b1:1e:9d: cd:81:b7:1b:fe:bf:19:28:24:a6:ea:7a:66:e3:9e: 53:6d:4b:f8:6e:60:d9:19:5a:5f:8c:1e:17:77:3a: 0b:43:c3:b6:ee:4e:a0:07:1f:6f:f7:4c:8d:da:5a: 59:6b:36:7c:62:95:e9:88:78:b7:2e:0b:ab:8e:c2: 7a:c7:60:0e:17:d4:e1:3a:ef:c5:ba:74:d4:00:6a: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:6F:14:CC:D2:5E:37:39:5A:A9:E3:60:82:F5:A3:34:89:41:BC X509v3 Authority Key Identifier: keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d9:06:4e:76:fa:56:8d:ed:ec:ed:4a:ed:97:de:5e:07:a0: 87:48:93:f9:c2:25:9b:bc:bd:7d:00:95:86:cf:0d:f9:f0:f4: 21:e3:3a:67:3e:89:31:3a:3a:a0:af:6c:05:3a:30:4e:60:56: 68:40:04:41:85:87:9c:8a:b3:0f:15:35:05:17:a2:73:93:a1: b4:26:5a:a0:a4:2e:79:e5:af:20:e6:7f:5d:c4:31:3f:a9:9e: bc:bc:42:be:fd:e3:60:0c:02:87:7c:9d:8f:34:e1:8e:25:c2: 62:1c:98:d6:c0:05:cf:64:46:ea:4f:14:ee:9b:2a:e7:97:04: 1e:25:ab:41:4c:fe:6a:97:29:05:b6:f6:de:2c:e2:46:14:71: fe:39:8c:68:86:f6:f7:57:29:30:f6:39:64:c5:63:5f:56:db: d7:c4:9b:21:a3:74:85:10:40:bd:a9:30:f4:3c:55:f1:97:aa: fd:79:ef:e1:71:be:dc:73:bb:98:56:49:8f:54:5f:db:17:6f: d3:ae:34:33:84:07:d4:4e:34:3a:39:6d:04:fa:f1:47:1b:69: 70:87:7e:85:39:5a:85:15:ef:7c:df:cb:46:b8:23:05:7d:d4: 17:f4:8e:fb:5b:87:bf:1f:7d:13:d1:c0:48:94:ec:8a:57:9a: 00:12:a6:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HM4zyEwws1UeY+4Gw49vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmNlZGVkYzdjNWFkYjg1ZmRiYjc5ZjRiMWQ3ODA0ZGZk MDEwM2UwHhcNMjUxMjA3MDAwMTE0WhcNMjUxMjA4MDAwMTE0WjAzMTEwLwYDVQQD EygxMzA3NmYxNGNjZDI1ZTM3Mzk1YWE5ZTM2MDgyZjVhMzM0ODk0MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZUtAqkm08QMX6zJwuWTuoXFYpLz C/M1y8PGp8xSqU8caWCPm/57XV00rtTSqLcPUDy6ZKLV346rXvsC5oHbtwIRCoNI y0KA14qB+T4OOMCAC9o8BmmQanIOCvn3TnWfs9MV3Jajg13UFpLQuFYDzT7nthHW ugHbcTbZf8wzr0r7MNXSlODnRLNeNBahIDLQBp0Wx41+Ug3lP5dv2wKGNNf/pt29 kRf04rolXAP26gSxHp3Ngbcb/r8ZKCSm6npm455TbUv4bmDZGVpfjB4XdzoLQ8O2 7k6gBx9v90yN2lpZazZ8YpXpiHi3LgurjsJ6x2AOF9ThOu/FunTUAGrswQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMHbxTM0l43OVqp42CC9aM0iUG8MB8GA1UdIwQY MBaAFO387e3Hxa24X9u3n0sdeATf0BA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUt NDU2MDZlZTA2NzY3LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUtNDU2MDZlZTA2NzY3 LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtkGTnb6 Vo3t7O1K7ZfeXgegh0iT+cIlm7y9fQCVhs8N+fD0IeM6Zz6JMTo6oK9sBTowTmBW aEAEQYWHnIqzDxU1BReic5OhtCZaoKQueeWvIOZ/XcQxP6mevLxCvv3jYAwCh3yd jzThjiXCYhyY1sAFz2RG6k8U7psq55cEHiWrQUz+apcpBbb23iziRhRx/jmMaIb2 91cpMPY5ZMVjX1bb18SbIaN0hRBAvakw9DxV8Zeq/Xnv4XG+3HO7mFZJj1Rf2xdv 0640M4QH1E40OjltBPrxRxtpcId+hTlahRXvfN/LRrgjBX3UF/SO+1uHvx99E9HA SJTsileaABKmWA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:30 2025 by rpki-client