This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json) Hash identifier: OAz5o0SyViJ2873dPa1KYA6Vmxb4lLjJzkZgIeddQlQ= Subject key identifier: 76:83:EC:AD:8A:15:F2:42:E2:53:63:3D:D6:DA:65:2B:95:E5:B4:47 Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Certificate serial: 019AF19B94B0A35AFAD50D2969255574BEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: aH2jYtOYhGJ36yLSGjZb8tY3ZRIqBw6MOug0IWWqIbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:94:b0:a3:5a:fa:d5:0d:29:69:25:55:74:be:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=7683ecad8a15f242e253633dd6da652b95e5b447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:6c:23:c3:5d:df:23:4a:c4:98:db:80:8c: 78:4f:a4:02:68:59:b4:63:22:a1:e8:ac:60:b3:b3: 79:81:7a:fc:85:c3:66:4a:c4:50:22:9f:3a:2c:c4: c3:af:b9:ca:b4:7d:ad:aa:38:aa:29:6c:6a:16:bc: f7:d9:96:e2:a0:25:14:e1:58:13:1b:aa:67:0f:00: 9d:5b:a9:e6:d6:df:52:7d:aa:66:73:ac:d9:1a:d6: 1a:73:1d:3d:9f:12:6b:01:fd:a9:a0:fc:66:3b:87: 29:dc:4d:a8:35:7e:02:fc:d1:cc:3e:d3:b1:79:c7: 46:3d:d8:36:4a:dd:37:c6:45:e3:d7:93:5e:1a:57: e4:df:32:6a:75:a7:29:db:3c:dc:fc:72:a0:ff:0a: 1c:cd:39:6f:fb:5d:ca:e7:0a:fb:ba:6c:42:7c:41: af:dd:ec:bf:79:d9:a8:bf:e5:76:f2:47:f7:26:db: 33:71:e2:8c:54:74:fa:23:d6:fb:72:6e:cd:68:6b: a2:16:2c:01:25:de:ff:64:69:2e:47:0f:9f:c4:0e: 47:cd:7b:ec:fe:72:32:c8:9b:6e:3a:d0:ce:c5:f9: 3c:ee:97:0c:6d:db:ba:ec:ae:18:96:d1:e6:6c:a6: a3:ab:bc:c1:1a:56:88:3d:bc:d0:f3:d5:58:ba:f4: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:83:EC:AD:8A:15:F2:42:E2:53:63:3D:D6:DA:65:2B:95:E5:B4:47 X509v3 Authority Key Identifier: keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4d:c9:87:14:37:70:30:64:32:2b:0f:fb:36:8b:d3:af:ee: d5:20:65:ec:1d:86:58:4f:5c:d1:57:64:3e:eb:36:ab:6b:bd: c6:a9:2d:6f:38:78:69:7c:e4:2f:1b:a0:c2:43:50:3f:ed:e3: 00:13:e9:ff:47:7b:d2:e1:b2:8f:0a:b5:74:17:cd:d9:10:52: ba:3c:74:e8:8d:f2:8d:65:3d:04:7d:9b:62:65:5f:ed:d0:81: a5:60:e1:0d:f1:b7:1c:b6:bc:06:29:1e:ca:97:41:13:27:99: e5:2f:19:7d:b7:dd:30:04:f7:77:38:bc:c2:fd:f3:a1:56:e5: a5:36:b8:c8:df:52:5b:9d:39:5d:5a:c2:1e:7f:43:2f:6e:d9: 53:3c:95:ea:d9:25:6b:2a:e8:12:e3:f0:1f:60:33:7b:49:27: 86:62:b0:27:fd:f5:89:b4:0e:2f:86:a6:55:cd:78:b5:e1:52: cc:5d:60:cf:97:b1:24:c6:52:45:16:4e:f1:be:f0:b1:b2:97: 0d:48:1f:61:93:6b:21:31:37:a3:e0:c2:54:c2:29:5c:43:33: 24:00:20:59:3d:5c:47:77:3f:e0:a4:6f:9f:e8:3a:2d:6a:8b: c0:df:7f:52:06:8f:42:10:ff:88:3f:69:7c:ac:5a:80:36:0e: 53:9c:68:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5Swo1r61Q0paSVVdL7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi NjJhNDgwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg3NjgzZWNhZDhhMTVmMjQyZTI1MzYzM2RkNmRhNjUyYjk1ZTViNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIlsI8Nd3yNKxJjbgIx4T6QCaFm0 YyKh6Kxgs7N5gXr8hcNmSsRQIp86LMTDr7nKtH2tqjiqKWxqFrz32ZbioCUU4VgT G6pnDwCdW6nm1t9Sfapmc6zZGtYacx09nxJrAf2poPxmO4cp3E2oNX4C/NHMPtOx ecdGPdg2St03xkXj15NeGlfk3zJqdacp2zzc/HKg/woczTlv+13K5wr7umxCfEGv 3ey/edmov+V28kf3JtszceKMVHT6I9b7cm7NaGuiFiwBJd7/ZGkuRw+fxA5HzXvs /nIyyJtuOtDOxfk87pcMbdu67K4YltHmbKajq7zBGlaIPbzQ89VYuvRKUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaD7K2KFfJC4lNjPdbaZSuV5bRHMB8GA1UdIwQY MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk3JhxQ3 cDBkMisP+zaL06/u1SBl7B2GWE9c0VdkPus2q2u9xqktbzh4aXzkLxugwkNQP+3j ABPp/0d70uGyjwq1dBfN2RBSujx06I3yjWU9BH2bYmVf7dCBpWDhDfG3HLa8Bike ypdBEyeZ5S8ZfbfdMAT3dzi8wv3zoVblpTa4yN9SW505XVrCHn9DL27ZUzyV6tkl ayroEuPwH2Aze0knhmKwJ/31ibQOL4amVc14teFSzF1gz5exJMZSRRZO8b7wsbKX DUgfYZNrITE3o+DCVMIpXEMzJAAgWT1cR3c/4KRvn+g6LWqLwN9/UgaPQhD/iD9p fKxagDYOU5xoeg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:52 2025 by rpki-client