This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft File: j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json) Hash identifier: jf5rjvI7ZQ8ti03ItBQM0FhW9dvjzRjAzO4IVR1v1SI= Subject key identifier: 36:61:DF:C9:8A:C5:13:81:08:20:52:9B:07:BA:7E:3E:AD:28:E2:83 Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61 Certificate issuer: /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361 Certificate serial: 019AF31B339E388D230100EE39F26EFE5A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: Cj67PucBqFudHFFL8ImRvo91Jvf5Ixotan2unvMFmec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:33:9e:38:8d:23:01:00:ee:39:f2:6e:fe:5a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361 Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=3661dfc98ac513810820529b07ba7e3ead28e283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:d3:b4:9f:f6:25:a9:09:09:08:93:3c:48: a9:3c:4c:39:24:86:62:9e:25:16:fd:18:5c:ac:04: d5:ec:29:53:a0:8e:9a:0c:99:a4:11:5a:ca:0f:d8: 1b:6f:68:03:ff:a2:ac:1c:8d:19:9d:e5:dc:e7:bd: 1e:a5:4d:04:e5:74:19:46:c0:d0:95:a1:8b:fd:9e: 28:2b:03:64:cb:f8:97:c2:93:45:0c:0a:a2:b4:42: db:19:ac:33:61:c0:23:38:dc:0a:19:a3:d5:b0:11: 6e:a2:fb:36:0c:6f:b6:31:a5:ca:1d:4e:e3:b4:4a: 81:ba:0a:85:e9:27:e1:41:f5:f7:80:e3:72:3e:6f: 19:2d:32:c9:2b:51:95:a8:46:dc:1e:b9:c2:97:e3: 14:4e:d0:55:ec:06:8d:fe:d6:02:94:21:5e:36:41: b1:7a:d7:99:5a:cf:d1:b4:38:d4:81:63:93:69:0d: 24:60:52:09:80:f7:84:7c:f1:30:77:8d:84:e5:da: 72:61:dd:98:9c:6c:b5:9c:dc:d6:c3:d6:30:09:29: eb:2b:d5:17:95:fe:ad:a0:68:70:3c:fc:aa:ef:96: 4e:d2:58:1b:d2:cd:f0:99:f9:04:e7:d2:85:64:be: 4f:d9:55:56:f7:85:50:c8:2f:31:31:8e:c3:0e:7d: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:DF:C9:8A:C5:13:81:08:20:52:9B:07:BA:7E:3E:AD:28:E2:83 X509v3 Authority Key Identifier: keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:8d:45:a3:bc:64:d6:64:1c:e8:07:24:b2:77:54:02:39:a1: 46:ea:a0:41:75:b7:26:f8:9e:b4:bb:40:9f:38:ae:56:5e:c0: 1b:80:a5:ed:d0:ff:72:9b:e2:7c:9d:fb:84:a8:24:26:a2:5c: 51:ec:67:e4:91:70:38:43:e5:f5:da:37:80:27:6e:45:f4:85: 5a:59:87:c4:71:af:00:90:af:25:6e:e1:bf:db:2b:86:21:98: 4f:1b:49:03:87:02:e6:62:98:ec:09:31:8a:1f:bc:eb:ae:3e: 6a:c5:a0:f1:c2:2b:09:5a:2c:3f:9d:0c:8a:35:2b:fa:68:ec: a9:4a:6c:97:18:8a:fb:25:a0:6f:a6:35:6e:f5:2c:99:6c:b5: b9:b3:78:e1:3e:01:2b:7e:8c:0f:8c:b6:05:b5:a2:40:b8:50: bb:8d:18:e9:d3:b2:32:39:cf:e6:17:27:b8:ad:95:90:27:cc: b8:a5:b8:ce:b6:2a:1e:a3:0f:92:db:a1:1d:13:4b:29:2a:39: 96:ce:d7:d5:c8:09:bf:ba:46:d9:0f:d3:3a:52:b1:17:a9:87: f4:84:ac:f2:55:bf:1b:ea:6c:6a:01:57:53:27:54:a2:4e:92: 0c:0c:47:3b:e6:ea:d1:5f:e0:4a:bf:80:f7:38:9f:2b:91:26: a5:05:6e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzOeOI0jAQDuOfJu/lpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYjdhZmVjYzI2MmZhM2NmYzU5MTYxZThlOTc4YjYyOGUz ZjEzNjEwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EygzNjYxZGZjOThhYzUxMzgxMDgyMDUyOWIwN2JhN2UzZWFkMjhlMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tnTtJ/2JakJCQiTPEipPEw5JIZi niUW/RhcrATV7ClToI6aDJmkEVrKD9gbb2gD/6KsHI0ZneXc570epU0E5XQZRsDQ laGL/Z4oKwNky/iXwpNFDAqitELbGawzYcAjONwKGaPVsBFuovs2DG+2MaXKHU7j tEqBugqF6SfhQfX3gONyPm8ZLTLJK1GVqEbcHrnCl+MUTtBV7AaN/tYClCFeNkGx eteZWs/RtDjUgWOTaQ0kYFIJgPeEfPEwd42E5dpyYd2YnGy1nNzWw9YwCSnrK9UX lf6toGhwPPyq75ZO0lgb0s3wmfkE59KFZL5P2VVW94VQyC8xMY7DDn1O5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZh38mKxROBCCBSmwe6fj6tKOKDMB8GA1UdIwQY MBaAFI+3r+zCYvo8/FkWHo6Xi2KOPxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdldjdNSmktano4V1JZZWpwZUxZbzRfRTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNmMwNmEtMTA2MS00M2JlLWJiZDQt M2JkMjVhMTc3NmIzLzEvajdldjdNSmktano4V1JZZWpwZUxZbzRfRTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNmMwNmEtMTA2MS00M2JlLWJiZDQtM2JkMjVhMTc3NmIz LzEvajdldjdNSmktano4V1JZZWpwZUxZbzRfRTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwI1Fo7xk 1mQc6AcksndUAjmhRuqgQXW3JvietLtAnziuVl7AG4Cl7dD/cpvifJ37hKgkJqJc Uexn5JFwOEPl9do3gCduRfSFWlmHxHGvAJCvJW7hv9srhiGYTxtJA4cC5mKY7Akx ih+8664+asWg8cIrCVosP50MijUr+mjsqUpslxiK+yWgb6Y1bvUsmWy1ubN44T4B K36MD4y2BbWiQLhQu40Y6dOyMjnP5hcnuK2VkCfMuKW4zrYqHqMPktuhHRNLKSo5 ls7X1cgJv7pG2Q/TOlKxF6mH9ISs8lW/G+psagFXUydUok6SDAxHO+bq0V/gSr+A 9zifK5EmpQVuag== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:33 2025 by rpki-client