This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json) Hash identifier: Zu617qAaka1yKG9+8n6vWSaEuRIRPc6jwgJ27yWl4Jk= Subject key identifier: E1:C7:C7:DC:06:C0:1D:79:9D:7A:D9:F3:17:CA:26:24:47:47:96:EB Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Certificate serial: 019B35D75CA92C75749C1640D14B99FA11A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft Manifest number: 0C79 Signing time: Fri 19 Dec 2025 09:01:04 +0000 Manifest this update: Fri 19 Dec 2025 09:01:04 +0000 Manifest next update: Sat 20 Dec 2025 09:01:04 +0000 Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: 3S/Cqus9BMr8tZJn+D9vARk1F93/9emm0TvFZDqmK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:5c:a9:2c:75:74:9c:16:40:d1:4b:99:fa:11:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Validity Not Before: Dec 19 09:01:04 2025 GMT Not After : Dec 20 09:01:04 2025 GMT Subject: CN=e1c7c7dc06c01d799d7ad9f317ca2624474796eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:e4:c7:ae:97:4d:fd:b7:cb:57:f8:cb:dd: 10:c1:2f:05:84:91:da:e5:af:7c:0d:82:91:87:c3: c6:ce:81:89:da:33:3e:5d:01:71:d8:5c:7f:e1:e8: aa:62:fb:fb:ba:e8:fa:ef:e8:d9:d5:73:30:8d:e9: 40:d6:79:73:d0:8f:4f:a0:c3:44:91:66:ab:11:50: 62:1a:93:11:3f:10:f4:f5:f0:5b:55:90:0e:7d:8b: f8:56:da:50:1f:1b:46:46:e3:c5:c8:ba:ce:ed:98: 93:2d:be:dd:a0:fc:0c:2e:ea:e2:98:37:9c:cb:45: 7c:27:8d:46:e3:2b:ad:a4:0f:0a:ef:bc:1c:a2:3d: 3a:34:4f:2a:4d:c3:17:55:9c:6f:ab:76:ef:6e:a0: 24:ea:66:bf:89:4a:43:ba:c2:97:1b:e3:1d:2b:f0: e3:cd:07:fc:18:ea:52:b4:a5:ac:ed:66:8a:2e:17: c1:1b:c6:62:a0:86:81:c5:8f:31:6e:a1:9f:6f:99: 71:fb:16:9a:aa:02:4d:70:78:3b:09:36:ba:99:74: 64:3a:bd:a6:bf:16:2b:7a:51:c7:a6:b4:3d:49:ba: ba:af:3e:9d:e8:df:fb:2e:33:0a:6c:1b:3e:15:cc: 4e:d0:b4:a4:29:57:f4:f0:8e:a5:5d:a9:5d:ff:a2: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C7:C7:DC:06:C0:1D:79:9D:7A:D9:F3:17:CA:26:24:47:47:96:EB X509v3 Authority Key Identifier: keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ae:97:89:b6:5d:71:f4:26:4b:cb:69:8c:83:57:69:d3:1d: db:2f:fc:55:6d:07:68:01:e2:89:cf:3d:f7:87:e1:8d:e1:8b: 6f:93:f7:05:9a:c3:44:48:ab:f9:98:ef:2b:a1:40:9c:2a:17: 64:9e:4a:4b:83:e2:a2:05:60:6f:2c:21:87:16:a8:65:41:6e: 59:cf:fc:10:e5:00:e8:e9:ce:b2:b0:02:71:67:4a:22:dd:2b: 80:87:b4:47:47:93:b2:7a:67:83:ef:cd:d2:52:74:8a:9c:2d: 43:df:6e:2c:a9:62:12:8a:a4:06:34:51:49:87:d0:f8:b7:4c: b4:45:2e:59:45:b9:4a:5a:35:57:ba:e8:15:b7:74:c9:ea:bb: e9:02:dd:86:82:dd:e2:47:39:b6:2a:7f:b3:c8:9e:ee:e2:54: 92:02:0a:45:7c:d1:cd:f5:f1:71:31:db:9e:da:9a:35:14:b7: 1d:16:89:97:11:7d:3c:42:7d:61:4d:a7:f5:03:f5:f6:bd:dc: 6f:6f:d5:11:71:38:e4:ce:82:51:1d:dc:e2:8f:7e:14:b8:e3: 62:a4:12:01:40:39:5d:50:b5:f1:2a:06:24:0d:b9:26:84:9f: ef:09:c8:06:33:18:53:02:08:77:ad:e9:2f:2b:a3:cb:95:4e: 0a:f5:bc:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs111ypLHV0nBZA0UuZ+hGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGVlYTU2MjZkOWU4MzI2NDBmMWVjZGY3ZjhiYjcyNTcy NDA4NDcwHhcNMjUxMjE5MDkwMTA0WhcNMjUxMjIwMDkwMTA0WjAzMTEwLwYDVQQD EyhlMWM3YzdkYzA2YzAxZDc5OWQ3YWQ5ZjMxN2NhMjYyNDQ3NDc5NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdTkx66XTf23y1f4y90QwS8FhJHa 5a98DYKRh8PGzoGJ2jM+XQFx2Fx/4eiqYvv7uuj67+jZ1XMwjelA1nlz0I9PoMNE kWarEVBiGpMRPxD09fBbVZAOfYv4VtpQHxtGRuPFyLrO7ZiTLb7doPwMLurimDec y0V8J41G4yutpA8K77wcoj06NE8qTcMXVZxvq3bvbqAk6ma/iUpDusKXG+MdK/Dj zQf8GOpStKWs7WaKLhfBG8ZioIaBxY8xbqGfb5lx+xaaqgJNcHg7CTa6mXRkOr2m vxYrelHHprQ9Sbq6rz6d6N/7LjMKbBs+FcxO0LSkKVf08I6lXald/6JhRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHHx9wGwB15nXrZ8xfKJiRHR5brMB8GA1UdIwQY MBaAFJTe6lYm2egyZA8ezff4u3JXJAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGIt NmZmYzVkOWUwZmVkLzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGItNmZmYzVkOWUwZmVk LzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFK6XibZd cfQmS8tpjINXadMd2y/8VW0HaAHiic8994fhjeGLb5P3BZrDREir+ZjvK6FAnCoX ZJ5KS4PiogVgbywhhxaoZUFuWc/8EOUA6OnOsrACcWdKIt0rgIe0R0eTsnpng+/N 0lJ0ipwtQ99uLKliEoqkBjRRSYfQ+LdMtEUuWUW5Slo1V7roFbd0yeq76QLdhoLd 4kc5tip/s8ie7uJUkgIKRXzRzfXxcTHbntqaNRS3HRaJlxF9PEJ9YU2n9QP19r3c b2/VEXE45M6CUR3c4o9+FLjjYqQSAUA5XVC18SoGJA25JoSf7wnIBjMYUwIId63p Lyujy5VOCvW8rw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:01:36 2025 by rpki-client