This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json) Hash identifier: nSCtAP46I5nDd0r1gaC40yYrSVaItsbZXA/VQPqcu7I= Subject key identifier: 0C:B6:57:FF:FB:42:44:B3:40:1F:46:C3:CF:AA:92:BF:A3:11:5F:59 Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03 Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03 Certificate serial: 019AF19B362E565E3E77EDE8F18F4FCBC560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft Manifest number: 07A5 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: lM2/0O+Owzz17N8dNDetzAy34xvsKD+bzHRtMII8C6s=) 2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:2e:56:5e:3e:77:ed:e8:f1:8f:4f:cb:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef133598bb10542114681ea86a35df169831cf03 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=0cb657fffb4244b3401f46c3cfaa92bfa3115f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:1f:30:c5:a3:ef:71:e3:60:04:e8:0f:d5: b7:a5:d7:56:35:58:b5:9d:1a:5d:8b:93:7f:c8:23: 1c:50:e5:cd:83:55:34:46:b1:3e:3f:2b:01:04:f6: 60:c7:e5:aa:ad:d9:f5:6c:10:7e:f5:d9:aa:dd:68: 51:c9:70:e1:da:55:75:85:46:fe:c7:3f:29:78:18: 7c:3c:3f:49:02:75:f2:ef:a5:fd:05:68:6f:a5:f8: e5:40:19:f0:60:3d:87:d9:d5:b6:d1:54:1c:c3:fc: be:0e:35:72:e0:83:a8:31:23:bb:4a:12:09:dc:6b: 1c:0a:72:bd:d7:e1:9a:6e:dc:86:7c:0b:14:82:ac: 22:00:64:39:b7:6c:96:7c:39:82:17:cd:fe:50:c9: 13:5c:a4:fd:fc:37:50:e7:72:69:cd:96:a0:1d:75: 5c:46:29:a5:30:16:57:1a:05:66:c8:39:d2:0f:bc: 9e:6f:82:40:46:20:3d:19:32:84:35:a1:28:a9:cf: cb:cc:46:ad:4b:27:81:5e:75:c1:78:66:7e:00:85: 75:7b:24:86:a4:a5:33:98:32:af:aa:3c:e5:ba:c7: 53:45:04:79:ee:1d:c7:b0:6a:1a:a7:54:6e:ff:1b: d8:da:5b:40:09:03:be:09:4f:1f:91:3d:30:1f:d5: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B6:57:FF:FB:42:44:B3:40:1F:46:C3:CF:AA:92:BF:A3:11:5F:59 X509v3 Authority Key Identifier: keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d6:82:a6:b6:34:f5:8b:26:6e:8c:59:5e:ce:d2:4a:53:b1: 9e:b0:71:aa:a6:40:b9:e8:9f:d2:bf:88:c1:1e:20:0e:0e:cb: 41:db:8f:4f:75:17:a9:1d:8e:a1:95:a9:98:37:f3:07:a6:b6: 14:bd:eb:48:b5:33:2c:bb:ae:d3:93:06:c6:02:51:40:46:c5: b6:6f:fb:14:12:d0:be:13:56:2b:5f:64:69:1f:8a:ee:2b:a9: b7:6a:b8:f9:b5:56:9c:e4:3e:72:5c:03:f2:57:6c:a7:58:b7: 05:3f:f9:90:f0:00:e3:95:8b:a7:66:59:88:20:58:ea:7a:35: b9:b9:c0:d3:d4:99:8b:36:86:f4:0a:4f:8d:66:42:a3:de:27: fa:ea:18:eb:e5:87:fb:da:8b:cb:76:c9:d7:e9:3f:6f:18:53: cc:64:24:d1:47:6b:43:3f:80:e0:2a:24:a4:88:bf:42:bd:d6: 32:44:f7:17:1c:db:d6:e5:cc:c3:5d:d2:12:f6:a9:b0:af:ec: 8e:d1:09:14:d0:06:47:32:fa:f4:b9:aa:47:cd:8d:ea:1f:79: 24:1a:11:41:a8:c9:df:9c:c2:28:e7:40:5e:3c:be:58:ef:31: b9:fb:5c:af:05:1c:8b:88:51:47:a3:ab:9d:e9:9e:f4:c8:a0: 33:85:ca:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzYuVl4+d+3o8Y9Py8VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz MWNmMDMwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EygwY2I2NTdmZmZiNDI0NGIzNDAxZjQ2YzNjZmFhOTJiZmEzMTE1ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsagfMMWj73HjYAToD9W3pddWNVi1 nRpdi5N/yCMcUOXNg1U0RrE+PysBBPZgx+Wqrdn1bBB+9dmq3WhRyXDh2lV1hUb+ xz8peBh8PD9JAnXy76X9BWhvpfjlQBnwYD2H2dW20VQcw/y+DjVy4IOoMSO7ShIJ 3GscCnK91+GabtyGfAsUgqwiAGQ5t2yWfDmCF83+UMkTXKT9/DdQ53JpzZagHXVc RimlMBZXGgVmyDnSD7yeb4JARiA9GTKENaEoqc/LzEatSyeBXnXBeGZ+AIV1eySG pKUzmDKvqjzlusdTRQR57h3HsGoap1Ru/xvY2ltACQO+CU8fkT0wH9VhEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy2V//7QkSzQB9Gw8+qkr+jEV9ZMB8GA1UdIwQY MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1 LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9aCprY0 9YsmboxZXs7SSlOxnrBxqqZAueif0r+IwR4gDg7LQduPT3UXqR2OoZWpmDfzB6a2 FL3rSLUzLLuu05MGxgJRQEbFtm/7FBLQvhNWK19kaR+K7iupt2q4+bVWnOQ+clwD 8ldsp1i3BT/5kPAA45WLp2ZZiCBY6no1ubnA09SZizaG9ApPjWZCo94n+uoY6+WH +9qLy3bJ1+k/bxhTzGQk0UdrQz+A4CokpIi/Qr3WMkT3Fxzb1uXMw13SEvapsK/s jtEJFNAGRzL69LmqR82N6h95JBoRQajJ35zCKOdAXjy+WO8xuftcrwUci4hRR6Or neme9MigM4XKUA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:18 2025 by rpki-client