This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json) Hash identifier: HfugFxZZzCg7bB3r/G2Q9pH0Y2AjGrrUyLMMxGDS8nE= Subject key identifier: 4F:FB:61:87:08:E4:6E:6F:B8:FD:E4:09:D0:CA:A6:8A:22:0D:1C:CF Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8 Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8 Certificate serial: 019AF277438ED7D18A8897E6B7CBFFAB9173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft Manifest number: 0AD2 Signing time: Sat 06 Dec 2025 07:01:33 +0000 Manifest this update: Sat 06 Dec 2025 07:01:33 +0000 Manifest next update: Sun 07 Dec 2025 07:01:33 +0000 Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: mSJ8PDasimlHYdej20ScHvkqDTI0STDnWj0OMe8e5jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:43:8e:d7:d1:8a:88:97:e6:b7:cb:ff:ab:91:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8 Validity Not Before: Dec 6 07:01:33 2025 GMT Not After : Dec 7 07:01:33 2025 GMT Subject: CN=4ffb618708e46e6fb8fde409d0caa68a220d1ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:56:0d:6f:6a:b4:c6:2d:df:e0:12:57:15: a7:d6:82:97:d4:7e:d5:1b:fa:c2:e1:73:f4:b6:97: ac:88:68:15:3f:40:08:80:81:49:7a:14:86:39:10: 2e:9a:22:6a:c7:b3:60:e1:e1:16:56:59:80:3c:ee: 8b:d2:10:cc:76:84:9f:48:b1:60:94:49:60:63:98: 56:75:f3:0e:ba:ff:d1:cb:99:7a:88:21:c3:49:fc: 16:45:ba:73:83:63:aa:25:1e:de:60:ae:21:ed:5d: 31:1b:9d:97:50:e1:27:c7:ed:55:0c:cb:6a:96:4b: 2c:bd:cb:58:db:f1:2b:d2:9b:cb:58:c0:37:44:3a: 03:6c:f9:c2:be:cb:4d:90:f5:7a:02:70:5c:4a:03: 78:3d:6a:14:28:6c:a6:0e:c6:f5:b7:07:e6:f6:3b: f0:26:21:7b:14:eb:23:12:26:b0:d9:fa:53:f8:0a: 58:98:89:1d:24:9e:93:56:b8:58:05:67:34:35:ab: 99:74:c8:27:63:a8:a8:c4:95:75:de:18:92:b6:16: e4:ec:5e:18:f5:dc:cf:df:b6:34:fe:6f:ae:b7:8a: b6:88:fd:39:33:98:32:90:14:53:ca:21:27:5d:96: 8a:4f:00:39:6e:ef:ca:92:4d:8e:b2:01:4b:db:19: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FB:61:87:08:E4:6E:6F:B8:FD:E4:09:D0:CA:A6:8A:22:0D:1C:CF X509v3 Authority Key Identifier: keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:69:27:ea:bf:22:70:33:97:9e:a3:e1:4c:36:95:f1:8f:3f: a6:9e:ca:7b:67:7e:98:07:ec:49:6d:bd:4e:d2:47:4b:50:08: 61:fa:e5:d9:c2:d7:50:cf:66:8e:7d:08:29:07:f3:5b:3a:c0: f6:76:24:69:e8:5f:ce:6e:28:6d:d0:1f:74:f4:3c:40:57:f9: 5d:4c:e2:c7:0a:9d:5c:e2:70:4f:85:56:05:42:e0:a1:6c:1c: 02:f6:81:55:df:e7:0c:05:0b:c7:a9:aa:31:90:e8:8a:20:00: 12:9d:b7:c7:1d:71:12:57:7e:e9:48:f8:88:60:0c:f4:34:6f: 3e:83:42:1d:16:f7:77:6e:71:48:57:cd:16:18:20:4b:d6:c9: 91:65:74:7a:ce:d2:8e:8c:22:44:82:bb:c6:5c:37:aa:6d:12: 75:50:39:44:11:f2:de:bd:79:5b:e5:dc:f6:58:b6:8d:de:fc: 00:f2:ba:61:4a:6a:6c:44:23:de:c1:32:c5:04:1d:04:8b:25: d8:65:72:84:86:40:90:c1:eb:b2:db:ce:47:09:9d:d8:35:78: d4:4c:ec:70:b5:96:f7:ac:12:7b:86:02:08:8d:a5:d4:ee:a9: c1:16:36:2e:9c:9d:5a:c6:4b:bf:20:64:43:80:b2:7a:1f:61: 16:1b:82:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0OO19GKiJfmt8v/q5FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YjY0YjVmNTAyYzUxZmExY2MxMTQ4ODFjYmE1MmI1YTll YzFlYzgwHhcNMjUxMjA2MDcwMTMzWhcNMjUxMjA3MDcwMTMzWjAzMTEwLwYDVQQD Eyg0ZmZiNjE4NzA4ZTQ2ZTZmYjhmZGU0MDlkMGNhYTY4YTIyMGQxY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGtWDW9qtMYt3+ASVxWn1oKX1H7V G/rC4XP0tpesiGgVP0AIgIFJehSGORAumiJqx7Ng4eEWVlmAPO6L0hDMdoSfSLFg lElgY5hWdfMOuv/Ry5l6iCHDSfwWRbpzg2OqJR7eYK4h7V0xG52XUOEnx+1VDMtq lkssvctY2/Er0pvLWMA3RDoDbPnCvstNkPV6AnBcSgN4PWoUKGymDsb1twfm9jvw JiF7FOsjEiaw2fpT+ApYmIkdJJ6TVrhYBWc0NauZdMgnY6ioxJV13hiSthbk7F4Y 9dzP37Y0/m+ut4q2iP05M5gykBRTyiEnXZaKTwA5bu/Kkk2OsgFL2xldQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/7YYcI5G5vuP3kCdDKpooiDRzPMB8GA1UdIwQY MBaAFKe2S19QLFH6HMEUiBy6UrWp7B7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQt NDJkZjMxOTc0ZDY4LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQtNDJkZjMxOTc0ZDY4 LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2kn6r8i cDOXnqPhTDaV8Y8/pp7Ke2d+mAfsSW29TtJHS1AIYfrl2cLXUM9mjn0IKQfzWzrA 9nYkaehfzm4obdAfdPQ8QFf5XUzixwqdXOJwT4VWBULgoWwcAvaBVd/nDAULx6mq MZDoiiAAEp23xx1xEld+6Uj4iGAM9DRvPoNCHRb3d25xSFfNFhggS9bJkWV0es7S jowiRIK7xlw3qm0SdVA5RBHy3r15W+Xc9li2jd78APK6YUpqbEQj3sEyxQQdBIsl 2GVyhIZAkMHrstvORwmd2DV41EzscLWW96wSe4YCCI2l1O6pwRY2LpydWsZLvyBk Q4Cyeh9hFhuCrw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:02 2025 by rpki-client