This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json) Hash identifier: 86VxDwtdnkk1MyX5lp1CFRN4qBKCXUPVs90SyGJI/nk= Subject key identifier: 22:9F:02:1D:0C:D3:CC:EF:BC:E1:EF:69:4B:7D:6A:6F:EC:CD:CD:4B Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96 Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96 Certificate serial: 019AF2773E42D8D7C47881A5AB43449A6AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft Manifest number: 0DFA Signing time: Sat 06 Dec 2025 07:01:32 +0000 Manifest this update: Sat 06 Dec 2025 07:01:32 +0000 Manifest next update: Sun 07 Dec 2025 07:01:32 +0000 Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: Pw8UnFb/ikSuA6tXHyVhXneOtpiQ5BQXqTN6WglUpd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3e:42:d8:d7:c4:78:81:a5:ab:43:44:9a:6a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96 Validity Not Before: Dec 6 07:01:32 2025 GMT Not After : Dec 7 07:01:32 2025 GMT Subject: CN=229f021d0cd3ccefbce1ef694b7d6a6feccdcd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:dc:3d:b1:02:80:19:46:c1:84:fa:eb:ad: 1c:f0:a9:6c:4b:fc:9a:cc:3c:08:28:33:1b:15:43: 3c:7d:63:1f:e8:ca:34:f8:8c:e8:a4:1a:20:ad:d7: ef:ad:d4:9a:e8:31:b9:3a:21:0e:04:01:5a:b2:97: 75:24:f8:b9:e0:9f:f8:91:e6:b5:42:63:6c:a9:2a: 54:74:89:13:da:bb:e0:21:80:1e:dc:da:16:52:fd: 00:bf:dc:e6:eb:03:f9:60:df:b5:04:b5:32:e5:18: 3f:59:00:70:b4:65:16:82:7f:96:40:7c:6d:b9:55: 02:5a:b5:1c:b4:31:f1:62:99:3c:a7:91:44:7d:39: 94:0b:23:a2:c6:b1:11:69:d7:b5:30:9d:56:93:7d: 64:fb:3f:bf:16:14:3d:e7:33:1c:57:5b:b8:ce:60: cf:ca:96:2c:f2:ad:8e:54:a6:0e:c5:93:a3:eb:12: ca:5f:46:6f:8a:9b:b9:19:a0:7f:96:f4:9d:7d:59: 81:1d:67:f3:83:cc:f6:a0:0b:e7:4b:8e:e7:a0:36: 1c:ce:75:45:4c:bb:9f:f4:cb:cb:5f:3a:15:b0:29: 0d:5e:e7:30:84:cd:ab:df:86:5f:52:8d:9b:af:d3: d2:1c:ef:ab:18:ef:cd:9c:66:3e:7d:a6:56:d1:d2: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9F:02:1D:0C:D3:CC:EF:BC:E1:EF:69:4B:7D:6A:6F:EC:CD:CD:4B X509v3 Authority Key Identifier: keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:c2:9b:51:c7:8e:74:18:36:54:74:57:69:dd:c8:ce:9f:ac: b2:f1:e9:67:12:6d:a2:a2:ad:4b:41:c7:25:30:d9:55:39:21: ff:ab:8c:ed:99:7a:96:f9:9b:30:60:17:81:df:80:a8:71:f8: 1b:f3:4c:57:25:af:b5:79:01:5b:50:93:32:74:41:72:69:35: bd:ee:e4:af:d2:09:43:0c:57:50:de:d1:10:71:47:40:7a:42: 7c:99:70:b6:b7:27:b6:0d:47:c5:07:03:c4:ef:0d:d1:41:b9: 93:2c:6b:ba:99:43:17:a7:b5:97:f1:3e:5d:24:80:fa:e3:2e: 46:1a:b3:bb:60:0b:ef:1e:54:69:84:b5:fc:17:26:8b:bb:43: a7:80:5e:97:25:1e:d4:7d:9f:b3:4e:84:48:e2:52:01:d5:af: 73:d0:d5:ed:77:5d:a0:ce:04:b2:81:a2:82:8d:5c:ef:6f:54: b5:33:97:9d:2a:2e:31:f1:bf:72:ef:8f:a7:71:5d:25:a3:78: 01:21:0a:4f:1e:d4:7e:52:1a:ef:5f:d4:b1:aa:1a:7c:5f:7c: 95:ef:cf:54:b8:4c:a5:34:4e:95:5e:b7:51:a4:c4:97:14:1c: 87:33:87:53:d3:22:8f:23:08:c0:9a:41:a2:fe:56:75:0d:4e: c6:7f:7a:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydz5C2NfEeIGlq0NEmmr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjk4NzE4OWRhNGUzODM4NWIwNzIxODU0ZmVjY2MzZWY0 NjZhOTYwHhcNMjUxMjA2MDcwMTMyWhcNMjUxMjA3MDcwMTMyWjAzMTEwLwYDVQQD EygyMjlmMDIxZDBjZDNjY2VmYmNlMWVmNjk0YjdkNmE2ZmVjY2RjZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdbcPbECgBlGwYT6660c8KlsS/ya zDwIKDMbFUM8fWMf6Mo0+IzopBogrdfvrdSa6DG5OiEOBAFaspd1JPi54J/4kea1 QmNsqSpUdIkT2rvgIYAe3NoWUv0Av9zm6wP5YN+1BLUy5Rg/WQBwtGUWgn+WQHxt uVUCWrUctDHxYpk8p5FEfTmUCyOixrERade1MJ1Wk31k+z+/FhQ95zMcV1u4zmDP ypYs8q2OVKYOxZOj6xLKX0Zvipu5GaB/lvSdfVmBHWfzg8z2oAvnS47noDYcznVF TLuf9MvLXzoVsCkNXucwhM2r34ZfUo2br9PSHO+rGO/NnGY+faZW0dLwnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKfAh0M08zvvOHvaUt9am/szc1LMB8GA1UdIwQY MBaAFO/5hxidpOODhbByGFT+zMPvRmqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAt ODg1ZWUxOWVkNmJmLzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAtODg1ZWUxOWVkNmJm LzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8KbUceO dBg2VHRXad3Izp+ssvHpZxJtoqKtS0HHJTDZVTkh/6uM7Zl6lvmbMGAXgd+AqHH4 G/NMVyWvtXkBW1CTMnRBcmk1ve7kr9IJQwxXUN7REHFHQHpCfJlwtrcntg1HxQcD xO8N0UG5kyxruplDF6e1l/E+XSSA+uMuRhqzu2AL7x5UaYS1/Bcmi7tDp4BelyUe 1H2fs06ESOJSAdWvc9DV7XddoM4EsoGigo1c729UtTOXnSouMfG/cu+Pp3FdJaN4 ASEKTx7UflIa71/UsaoafF98le/PVLhMpTROlV63UaTElxQchzOHU9MijyMIwJpB ov5WdQ1Oxn967w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:25 2025 by rpki-client