This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json) Hash identifier: XraQ3ZmUc//kA7mv8oaTjXykIWw/ZPyaBOi1j7GwXdY= Subject key identifier: 9F:4D:A1:CF:3E:A7:B4:1B:5E:D5:C2:76:77:F3:73:E5:62:FE:AB:28 Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46 Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46 Certificate serial: 019AF31BA9629C5EFC49C36AA716D3C55895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft Manifest number: 0AE6 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: s53aUnfbOODy8e/B+u1GEp4eKsuj/3b/F2yatdpiXsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a9:62:9c:5e:fc:49:c3:6a:a7:16:d3:c5:58:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46 Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=9f4da1cf3ea7b41b5ed5c27677f373e562feab28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:7f:db:13:75:98:fd:64:81:c4:4e:54:9a: 9f:8a:01:a8:8d:de:24:f9:fc:44:d9:c9:a3:e1:46: 8f:df:15:f2:83:8a:3a:94:64:50:fa:51:19:57:7f: d9:2c:70:44:8c:cc:1c:1f:bf:4e:4e:30:41:10:a8: db:f2:e8:33:6c:01:7e:dd:01:81:5b:48:d3:89:fd: 02:ba:83:8b:95:7a:93:76:32:90:2b:9b:3d:ad:fa: ec:2f:3d:9a:9b:ec:d5:68:60:32:47:c5:80:8b:a6: 2f:f0:49:db:b1:c6:35:bc:2b:94:46:ad:71:ea:f8: 5b:ea:98:02:0d:99:a2:d6:02:3f:b4:e5:14:48:38: 23:4f:ab:ab:d1:26:92:ab:d4:5d:0b:5a:2e:9d:b5: 6d:27:cb:ec:40:ea:85:88:97:35:48:40:b6:37:9b: 54:72:a1:39:fd:bd:56:cd:ae:14:91:d7:2f:65:32: 94:53:d9:a2:4e:22:9d:a7:da:4b:a7:05:23:f2:53: 7e:d3:04:6e:96:fc:2a:ec:5b:a8:26:88:a4:d6:b1: 03:d2:14:38:28:07:ec:89:fe:52:ae:91:26:7c:c6: b9:ea:b2:0f:af:45:f3:69:26:56:8d:21:0c:f7:fd: fd:49:17:fb:72:eb:77:8b:94:e2:13:9b:94:f1:70: a6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:A1:CF:3E:A7:B4:1B:5E:D5:C2:76:77:F3:73:E5:62:FE:AB:28 X509v3 Authority Key Identifier: keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:31:12:48:88:1c:c3:c0:12:48:6e:96:43:c2:b4:22:09:12: 90:32:40:7e:fe:f9:23:3c:27:2a:17:1f:2e:08:5f:ba:10:23: 48:95:05:e1:fe:14:eb:71:d2:4e:6a:38:03:9a:c3:2e:3f:5a: c6:88:5c:9b:13:63:fd:87:11:85:3f:b7:af:b3:35:76:b2:3d: 8f:9c:32:5d:82:d0:d7:45:af:10:e9:67:dc:f8:0e:ec:7f:43: 9a:0a:2b:ca:b6:05:a6:84:78:2e:38:11:97:78:a0:4a:ab:e0: e1:9b:c4:3f:09:47:8b:7d:e7:c8:0e:70:94:af:a3:0f:2e:e9: b7:3c:98:68:13:d3:92:91:b5:fe:ef:d3:57:23:7d:03:c6:e7: 84:a1:a8:b7:f9:a3:6b:24:1a:85:99:9b:dc:56:e8:76:21:66: 3a:de:60:c8:98:68:e6:f7:0a:0b:7e:4c:ac:a7:da:2a:5c:4a: 8d:10:bd:43:f3:ce:76:0e:fc:d3:8b:df:ec:4d:92:1f:ed:98: ee:5e:fc:88:73:3c:53:d5:0b:be:5d:71:9c:c3:0d:d7:ea:46: fa:0e:47:4d:d4:2e:0c:22:f3:f8:a8:51:0b:c5:b4:a1:b8:be: f4:f6:8a:38:79:ed:b5:3c:44:5f:bd:04:a6:18:e6:fe:a1:d0: 6f:c3:d1:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6linF78ScNqpxbTxViVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOThkYzI1YWJkN2FiNjNlMzViNjI4ZWFhYzJhNTRkOTQ5 YTlmNDYwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD Eyg5ZjRkYTFjZjNlYTdiNDFiNWVkNWMyNzY3N2YzNzNlNTYyZmVhYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJV/2xN1mP1kgcROVJqfigGojd4k +fxE2cmj4UaP3xXyg4o6lGRQ+lEZV3/ZLHBEjMwcH79OTjBBEKjb8ugzbAF+3QGB W0jTif0CuoOLlXqTdjKQK5s9rfrsLz2am+zVaGAyR8WAi6Yv8EnbscY1vCuURq1x 6vhb6pgCDZmi1gI/tOUUSDgjT6ur0SaSq9RdC1ounbVtJ8vsQOqFiJc1SEC2N5tU cqE5/b1Wza4UkdcvZTKUU9miTiKdp9pLpwUj8lN+0wRulvwq7FuoJoik1rED0hQ4 KAfsif5SrpEmfMa56rIPr0XzaSZWjSEM9/39SRf7cut3i5TiE5uU8XCmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Noc8+p7QbXtXCdnfzc+Vi/qsoMB8GA1UdIwQY MBaAFOyY3CWr16tj41tijqrCpU2Ump9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEt ZDViM2Q3ZmNjZmU0LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEtZDViM2Q3ZmNjZmU0 LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjESSIgc w8ASSG6WQ8K0IgkSkDJAfv75IzwnKhcfLghfuhAjSJUF4f4U63HSTmo4A5rDLj9a xohcmxNj/YcRhT+3r7M1drI9j5wyXYLQ10WvEOln3PgO7H9DmgoryrYFpoR4LjgR l3igSqvg4ZvEPwlHi33nyA5wlK+jDy7ptzyYaBPTkpG1/u/TVyN9A8bnhKGot/mj ayQahZmb3FbodiFmOt5gyJho5vcKC35MrKfaKlxKjRC9Q/POdg7804vf7E2SH+2Y 7l78iHM8U9ULvl1xnMMN1+pG+g5HTdQuDCLz+KhRC8W0obi+9PaKOHnttTxEX70E phjm/qHQb8PRgA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:23 2025 by rpki-client