This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json) Hash identifier: kp8NKgG2aIPt+rHJQifzr/oHjb6cw/JESO6kD23LfrA= Subject key identifier: 83:F3:9F:9C:A2:B1:59:5B:90:6D:DB:CB:EB:A3:73:C2:3E:C2:C0:43 Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Certificate serial: 019AF5AF41CCA2ACEC20E17239ED412203E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft Manifest number: 04E7 Signing time: Sat 06 Dec 2025 22:01:34 +0000 Manifest this update: Sat 06 Dec 2025 22:01:34 +0000 Manifest next update: Sun 07 Dec 2025 22:01:34 +0000 Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: QJix5k+QBq4YLQ8jUiDKN+uDGNiaTn2S8VrDTwv5MTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:41:cc:a2:ac:ec:20:e1:72:39:ed:41:22:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Validity Not Before: Dec 6 22:01:34 2025 GMT Not After : Dec 7 22:01:34 2025 GMT Subject: CN=83f39f9ca2b1595b906ddbcbeba373c23ec2c043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:ed:5d:d9:1f:45:6c:8d:f0:22:27:bf:e0: 3e:34:6f:7c:62:40:e0:87:a7:8a:57:52:a4:9a:8c: d3:f5:ef:de:c4:5e:46:6f:15:2d:e5:7a:99:f5:05: 44:e8:42:e9:29:ff:c9:b8:02:63:e1:ce:ec:d7:c9: ae:76:4f:7a:28:3c:29:4a:3b:23:8b:d6:f0:86:98: ed:c7:4d:08:87:8e:d7:8c:c7:6a:72:c1:34:eb:5d: f0:3b:dd:00:a9:39:1e:c5:fc:eb:25:23:fa:81:7c: 0e:91:3b:fa:39:28:c4:35:58:50:63:77:25:2b:cf: ac:79:6f:fd:60:ae:19:bc:7c:36:e6:1d:0d:e3:3d: f9:92:40:f7:25:1b:75:98:7e:e1:fa:8c:7d:f0:78: ba:bf:4a:71:8d:81:e9:54:9d:98:52:02:b2:8e:71: 53:69:f9:2b:87:93:36:f4:f7:d4:76:d0:d1:f9:e9: 07:61:2c:c0:63:2f:a0:92:4a:f9:ec:3b:3c:b6:ff: c7:f7:dc:0f:2e:88:d2:d4:42:c1:c8:59:78:d0:22: 1c:84:1e:5d:ec:d5:24:fd:13:02:68:1d:a7:6b:14: 2e:08:e4:26:a1:50:bf:16:17:d8:ec:83:8d:23:df: e3:04:6d:aa:4f:53:3c:c0:4b:e5:be:16:b4:07:a0: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:9F:9C:A2:B1:59:5B:90:6D:DB:CB:EB:A3:73:C2:3E:C2:C0:43 X509v3 Authority Key Identifier: keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:21:93:36:36:e3:3a:d4:7e:38:d0:de:0b:bc:08:2c:59:06: 76:1d:0e:7f:60:98:28:7e:fd:86:04:e1:a3:2f:fe:f4:0b:d1: da:18:98:14:3b:8a:55:67:a1:eb:6f:2e:42:32:98:f3:71:cd: 79:d6:8f:a0:2e:f7:9b:ba:85:4b:1a:dc:e7:9d:99:38:50:b8: 18:b0:00:7b:c0:02:ff:d4:48:a9:9b:f5:a9:e7:4b:a4:61:e7: 15:10:94:45:f9:3d:b6:d8:e3:c9:5e:89:00:52:da:7e:c1:09: 90:c8:01:90:eb:6c:cb:ba:f5:0b:3a:70:c4:c2:54:a5:e7:f7: a4:f7:ed:39:f1:5b:e5:fa:31:b0:76:ad:e8:fb:fc:21:6c:76: 0c:66:19:1d:3b:1a:87:32:3d:1d:65:38:9b:88:43:28:9f:90: f3:51:fd:d3:fd:e4:da:ed:3b:cc:00:20:67:c2:d1:39:77:c1: 86:26:9f:ee:68:56:e3:20:ad:7e:f5:c1:3d:d5:17:73:84:1e: fa:b3:1e:3d:ca:7f:5a:6e:3a:93:9a:b2:05:e1:bc:d6:5f:9d: 18:6e:d1:66:7b:0a:42:8e:09:03:6e:6b:b6:ed:cc:ab:e3:35: 1b:ff:72:c9:b0:63:4b:b5:86:c2:7a:8f:ef:61:c9:42:a8:e4: cc:49:79:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1r0HMoqzsIOFyOe1BIgPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx Y2E4ZTEwHhcNMjUxMjA2MjIwMTM0WhcNMjUxMjA3MjIwMTM0WjAzMTEwLwYDVQQD Eyg4M2YzOWY5Y2EyYjE1OTViOTA2ZGRiY2JlYmEzNzNjMjNlYzJjMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+LtXdkfRWyN8CInv+A+NG98YkDg h6eKV1KkmozT9e/exF5GbxUt5XqZ9QVE6ELpKf/JuAJj4c7s18mudk96KDwpSjsj i9bwhpjtx00Ih47XjMdqcsE0613wO90AqTkexfzrJSP6gXwOkTv6OSjENVhQY3cl K8+seW/9YK4ZvHw25h0N4z35kkD3JRt1mH7h+ox98Hi6v0pxjYHpVJ2YUgKyjnFT afkrh5M29PfUdtDR+ekHYSzAYy+gkkr57Ds8tv/H99wPLojS1ELByFl40CIchB5d 7NUk/RMCaB2naxQuCOQmoVC/FhfY7IONI9/jBG2qT1M8wEvlvha0B6D1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPzn5yisVlbkG3by+ujc8I+wsBDMB8GA1UdIwQY MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2iGTNjbj OtR+ONDeC7wILFkGdh0Of2CYKH79hgThoy/+9AvR2hiYFDuKVWeh628uQjKY83HN edaPoC73m7qFSxrc552ZOFC4GLAAe8AC/9RIqZv1qedLpGHnFRCURfk9ttjjyV6J AFLafsEJkMgBkOtsy7r1CzpwxMJUpef3pPftOfFb5foxsHat6Pv8IWx2DGYZHTsa hzI9HWU4m4hDKJ+Q81H90/3k2u07zAAgZ8LROXfBhiaf7mhW4yCtfvXBPdUXc4Qe +rMePcp/Wm46k5qyBeG81l+dGG7RZnsKQo4JA25rtu3Mq+M1G/9yybBjS7WGwnqP 72HJQqjkzEl5Ng== -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:02 2025 by rpki-client