This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json) Hash identifier: QGotom7Rcs43P3XBNQx9WEMM7cgCcEsXHE4v58y16h0= Subject key identifier: EC:11:4C:61:36:C9:FF:A0:59:C1:0E:43:8A:E9:95:25:FD:26:62:B4 Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20 Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220 Certificate serial: 019AF12E0A466215D5D81ADE5AA6ECFB181A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft Manifest number: 1023 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: iwwWa/ndMjn6V3BAuO9QIuHRyEBaFjqJBMFahDEkTVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0a:46:62:15:d5:d8:1a:de:5a:a6:ec:fb:18:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=ec114c6136c9ffa059c10e438ae99525fd2662b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:a8:cd:e2:33:d5:b9:1e:35:30:55:cb:32: 4e:cf:08:2b:52:06:46:0e:49:6b:ba:b2:7f:a6:5b: 65:89:f2:b1:2b:51:69:2a:d1:03:33:d1:1b:e4:41: 19:84:96:ee:9e:9e:64:35:1a:16:ae:93:f4:cc:b0: 6a:5b:21:8d:8b:69:1e:57:37:dc:7f:0d:09:b4:4e: a6:32:c8:ca:77:2f:a9:dc:ad:bb:18:c2:8b:f7:0e: 81:98:17:30:25:bd:8e:f9:07:d4:f7:78:bf:bf:0d: 8c:03:5a:b6:2a:20:ec:71:98:57:0b:f3:28:7c:4b: 4b:15:1d:32:09:40:6d:8f:d8:0c:8c:7e:59:53:1e: 97:f6:4a:06:38:d6:19:d4:d6:db:5d:b4:5e:be:a8: 48:52:1c:47:59:39:5b:7f:98:72:81:22:5f:20:ab: b6:ac:db:c6:1a:20:36:4a:8d:2c:e1:dd:7e:ae:47: 5f:b5:29:a7:a9:53:06:42:d4:f1:37:25:15:73:fd: 8e:80:1a:45:86:38:5b:0e:e5:b8:56:38:c6:e2:9a: b2:3e:64:94:1d:8b:95:47:eb:00:50:5c:ff:04:6e: 26:c9:28:28:d0:12:11:af:69:ec:f6:ad:84:ca:95: b4:c3:78:53:40:3b:60:e2:ec:d5:ab:06:92:4b:f6: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:11:4C:61:36:C9:FF:A0:59:C1:0E:43:8A:E9:95:25:FD:26:62:B4 X509v3 Authority Key Identifier: keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:37:a5:87:ee:6f:aa:aa:9f:06:23:fa:51:3a:ed:64:5a:f2: 42:df:6a:3a:68:49:8f:d2:f7:4e:1d:05:e8:d8:e5:92:9f:20: 75:05:89:5d:c0:e8:c0:b9:39:ba:c9:ab:a3:ac:84:e6:2d:44: 64:42:a6:5b:13:af:70:a6:b2:51:28:d3:53:51:53:71:88:a9: 8d:a4:64:1d:02:60:60:b2:cd:47:6a:c6:6b:5a:6f:59:69:75: 8a:16:56:26:68:8d:d3:61:15:1c:77:39:ff:b7:76:3d:43:66: b0:e0:f0:36:97:02:ee:d5:d2:1e:3f:99:20:61:2f:4b:3c:6b: 1a:a1:ee:81:03:a5:c8:20:e1:9e:b8:56:cd:52:8e:93:10:0c: 1f:71:b8:9e:61:42:0e:7b:8e:fd:c7:b2:c6:ca:c5:4c:8b:5d: 87:64:cc:d9:bd:b2:69:fe:c1:b5:b6:02:ab:0d:fd:ed:3c:cb: 0e:c3:ce:23:46:27:6c:f5:08:a9:e8:69:57:6c:0c:d6:2c:dd: be:8e:ec:49:7b:ec:db:66:ef:96:c1:c7:de:44:8d:00:9e:99: f6:c9:e5:4d:e6:53:57:8a:ea:f6:a5:33:eb:20:63:e0:c3:00: 7e:bd:c5:4a:12:a9:39:7b:f8:b7:12:d2:99:04:4a:d6:1e:b8: df:53:9d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgpGYhXV2BreWqbs+xgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzBjNWQ4NjdkZTIwMGYwMTQ4NmIxYTg4MGE5NGI4NDk1 ZDcyMjAwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhlYzExNGM2MTM2YzlmZmEwNTljMTBlNDM4YWU5OTUyNWZkMjY2MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFmozeIz1bkeNTBVyzJOzwgrUgZG DklrurJ/pltlifKxK1FpKtEDM9Eb5EEZhJbunp5kNRoWrpP0zLBqWyGNi2keVzfc fw0JtE6mMsjKdy+p3K27GMKL9w6BmBcwJb2O+QfU93i/vw2MA1q2KiDscZhXC/Mo fEtLFR0yCUBtj9gMjH5ZUx6X9koGONYZ1NbbXbRevqhIUhxHWTlbf5hygSJfIKu2 rNvGGiA2So0s4d1+rkdftSmnqVMGQtTxNyUVc/2OgBpFhjhbDuW4VjjG4pqyPmSU HYuVR+sAUFz/BG4mySgo0BIRr2ns9q2EypW0w3hTQDtg4uzVqwaSS/beGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwRTGE2yf+gWcEOQ4rplSX9JmK0MB8GA1UdIwQY MBaAFOxwxdhn3iAPAUhrGogKlLhJXXIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQt YzVhZDE1M2MyZDQ2LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQtYzVhZDE1M2MyZDQ2 LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTelh+5v qqqfBiP6UTrtZFryQt9qOmhJj9L3Th0F6Njlkp8gdQWJXcDowLk5usmro6yE5i1E ZEKmWxOvcKayUSjTU1FTcYipjaRkHQJgYLLNR2rGa1pvWWl1ihZWJmiN02EVHHc5 /7d2PUNmsODwNpcC7tXSHj+ZIGEvSzxrGqHugQOlyCDhnrhWzVKOkxAMH3G4nmFC DnuO/ceyxsrFTItdh2TM2b2yaf7BtbYCqw397TzLDsPOI0YnbPUIqehpV2wM1izd vo7sSXvs22bvlsHH3kSNAJ6Z9snlTeZTV4rq9qUz6yBj4MMAfr3FShKpOXv4txLS mQRK1h6431OdpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:09 2025 by rpki-client