This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json) Hash identifier: ssscclg8/PS4C7FfBEzjIlVN0883LOr6ojPAYcVpshg= Subject key identifier: 6E:65:D2:54:34:4D:BE:6E:B9:52:20:38:77:64:E7:FB:5F:1D:43:00 Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430 Certificate serial: 019AF2098A26C72F546759212E6B2441A5A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: vcfXekG/WTJ7ETIUgy3bSBphlCoKgKxR0TCnviOAG1c=) 2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8a:26:c7:2f:54:67:59:21:2e:6b:24:41:a5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=6e65d254344dbe6eb95220387764e7fb5f1d4300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:fb:43:8c:45:3c:ee:0c:a5:bb:6f:50:33: 2b:02:0e:8c:4e:70:d3:f6:fe:99:b9:42:78:04:c2: c1:6c:91:11:1f:0a:f2:10:d7:c7:a5:90:26:76:a3: 5d:b3:4f:bb:fe:cd:9d:1e:0b:ba:bd:91:ae:e4:bc: a5:38:e2:52:b7:a1:a0:7a:02:16:4c:d2:18:73:2f: ae:4a:48:b7:d2:56:6a:43:0b:88:c5:46:07:25:6f: 3f:82:88:34:ae:e2:b8:63:d7:ca:c7:c2:33:f6:8f: 82:1f:76:6b:0d:58:78:e6:30:7f:6e:c7:f8:2a:d7: 97:c0:9b:4b:ed:20:84:43:cf:20:ef:bd:76:72:b3: 10:53:68:e0:ea:91:97:f5:b8:ac:e4:6c:15:6c:c9: 43:db:c7:a0:83:63:32:72:3c:2d:3a:09:f5:1b:8b: bf:28:14:b4:09:fe:c2:17:05:5c:8c:a5:52:46:d8: c6:05:c1:27:af:ab:87:11:62:3a:c4:19:bf:b8:47: 6f:12:61:b3:b8:a3:46:b4:29:d6:5e:05:b5:24:8e: b0:0b:b1:6e:ec:bf:77:47:14:ac:ae:fd:27:7a:7f: f8:a3:6f:51:7b:02:63:f8:c0:2c:04:d5:6f:c6:7a: 49:c7:0c:58:3e:c0:10:ad:93:46:30:92:39:32:1c: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:65:D2:54:34:4D:BE:6E:B9:52:20:38:77:64:E7:FB:5F:1D:43:00 X509v3 Authority Key Identifier: keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:64:ed:0d:2f:2f:dd:62:99:5c:38:1b:eb:89:4d:7d:40:73: 2d:7a:56:38:fc:d8:6b:97:54:a2:51:73:12:66:dd:31:33:e1: cf:1e:75:e3:94:0b:c9:07:d4:13:ac:a1:95:0f:14:7f:4d:a8: 95:cd:4a:eb:fe:b2:91:5b:46:7b:f5:a0:f9:e8:19:41:38:a1: 85:89:44:11:8b:bd:45:f0:aa:81:2b:1d:22:68:40:f7:32:2b: 3e:a3:90:41:39:31:6e:81:40:8c:b5:22:50:77:1d:93:07:c8: fa:96:07:5d:38:18:01:b9:c9:da:cb:4b:9a:ac:36:1a:d7:7b: 9f:e4:69:a5:ef:42:e0:38:91:6e:18:4c:7a:a7:39:0a:e1:75: df:a6:76:6a:af:09:f5:46:a0:cb:8b:93:f4:13:5a:6e:18:a8: 0f:09:2d:5a:53:cd:d5:59:28:62:a5:0b:76:63:7f:6b:a4:12: 87:f6:4e:fc:6c:db:e3:e3:e5:14:66:34:b0:02:ef:a9:26:27: 09:4d:da:c6:7e:2b:1d:a7:98:da:a3:d6:08:95:e5:e1:52:5f: ba:a9:e8:c5:40:21:e5:7e:5c:69:66:4c:1a:02:d7:ef:f5:63: a7:25:04:b9:08:c2:6e:b3:bc:4e:5c:f5:ef:78:5e:fe:fe:e9: dd:76:69:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYomxy9UZ1khLmskQaWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw NmY0MzAwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD Eyg2ZTY1ZDI1NDM0NGRiZTZlYjk1MjIwMzg3NzY0ZTdmYjVmMWQ0MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1j7Q4xFPO4MpbtvUDMrAg6MTnDT 9v6ZuUJ4BMLBbJERHwryENfHpZAmdqNds0+7/s2dHgu6vZGu5LylOOJSt6GgegIW TNIYcy+uSki30lZqQwuIxUYHJW8/gog0ruK4Y9fKx8Iz9o+CH3ZrDVh45jB/bsf4 KteXwJtL7SCEQ88g7712crMQU2jg6pGX9bis5GwVbMlD28egg2MycjwtOgn1G4u/ KBS0Cf7CFwVcjKVSRtjGBcEnr6uHEWI6xBm/uEdvEmGzuKNGtCnWXgW1JI6wC7Fu 7L93RxSsrv0nen/4o29RewJj+MAsBNVvxnpJxwxYPsAQrZNGMJI5MhzQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5l0lQ0Tb5uuVIgOHdk5/tfHUMAMB8GA1UdIwQY MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0 LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGTtDS8v 3WKZXDgb64lNfUBzLXpWOPzYa5dUolFzEmbdMTPhzx5145QLyQfUE6yhlQ8Uf02o lc1K6/6ykVtGe/Wg+egZQTihhYlEEYu9RfCqgSsdImhA9zIrPqOQQTkxboFAjLUi UHcdkwfI+pYHXTgYAbnJ2stLmqw2Gtd7n+Rppe9C4DiRbhhMeqc5CuF136Z2aq8J 9Uagy4uT9BNabhioDwktWlPN1VkoYqULdmN/a6QSh/ZO/Gzb4+PlFGY0sALvqSYn CU3axn4rHaeY2qPWCJXl4VJfuqnoxUAh5X5caWZMGgLX7/VjpyUEuQjCbrO8Tlz1 73he/v7p3XZp1w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:51 2025 by rpki-client