This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json) Hash identifier: pi7NYHnAt9l/nTEmNjsn0CyV3CFXSN433ObDLkYdL8Y= Subject key identifier: 34:24:76:15:F0:C2:D9:91:1B:27:1C:49:59:88:62:A4:B6:EC:B1:AC Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81 Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81 Certificate serial: 019AF38962DD057EBA11E014012D16298EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft Manifest number: 0A30 Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: wmnF60FaPuH6i+Slzl5F8v21SwU28WTmYR3Jzezq2bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:62:dd:05:7e:ba:11:e0:14:01:2d:16:29:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81 Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=34247615f0c2d9911b271c49598862a4b6ecb1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:7c:06:50:aa:63:e9:0b:95:9b:fc:26:fe: 1c:67:79:5d:81:f2:64:f0:62:b9:5c:89:32:e0:3f: b6:54:32:87:39:a8:57:0b:e7:42:78:63:ba:cc:f1: 41:d8:9b:0c:bf:41:19:c9:b3:73:16:75:7c:95:95: cd:48:c2:8c:a1:2f:08:27:4b:89:f4:71:42:85:de: bd:b0:2c:c1:f8:7a:9c:4b:cc:3c:37:16:74:6c:6f: 21:95:e9:65:a4:30:d2:c8:c9:88:c8:f4:d3:e4:5a: f2:28:58:3e:21:68:95:e8:3b:7d:b9:f8:ac:cb:a0: 21:f2:60:c4:f0:34:e8:d0:d7:d1:f4:4d:74:af:0d: cd:de:c3:80:87:34:24:7e:ca:2a:26:48:b8:29:5a: 62:11:39:1c:f3:3f:f8:20:93:0b:1a:89:2d:38:de: a3:85:a5:a7:00:e5:a7:3a:37:5e:43:22:72:79:b2: d5:32:0f:9d:2a:87:54:76:74:5c:e7:5f:3c:d7:b1: 59:b6:7e:20:52:e8:d0:a4:c5:8f:09:4d:d8:c4:52: c3:f8:5b:97:bc:27:d8:1d:26:a3:0c:e5:95:f5:72: 84:ed:5a:0e:67:4e:2a:92:ad:3e:08:18:33:f5:fa: 48:18:8c:81:6c:89:01:9d:97:f6:39:46:23:9e:bf: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:24:76:15:F0:C2:D9:91:1B:27:1C:49:59:88:62:A4:B6:EC:B1:AC X509v3 Authority Key Identifier: keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0a:a4:4d:a8:c9:04:7d:0b:04:d8:8d:17:6f:d5:b0:b1:92: 14:6b:35:0d:15:7d:bc:2e:71:24:75:be:cf:63:fb:83:7f:9b: 09:15:97:d9:29:f5:cf:52:93:82:9d:8a:8f:6d:1b:cb:21:3c: 42:a2:a2:9b:40:de:98:08:8f:4d:e0:47:38:fc:55:a0:ad:68: a6:ef:be:0a:e4:a7:e5:2c:f5:fa:40:6a:89:17:ea:d7:89:2f: dd:7f:96:5e:f7:1c:ec:c1:42:0b:18:6c:04:f2:94:f2:5d:7f: fa:68:88:ca:d8:4e:8f:ad:be:03:09:0a:d1:43:ac:4a:96:01: c3:c1:5b:6d:ea:c0:c5:d5:62:ee:f9:f6:fc:7c:c0:8d:95:a8: 9c:51:70:d7:1b:b2:58:e7:63:07:88:1e:5e:c3:25:55:0c:33: 17:12:e0:5e:aa:89:cb:30:df:7c:bf:e4:69:e4:86:e0:ff:c5: 65:7b:5a:17:28:df:ff:c0:9e:d6:bc:e3:15:5d:40:0b:31:11: d6:fc:81:e9:dc:b0:17:f9:30:f4:70:7c:84:56:54:9e:19:02: 62:4e:95:99:b4:b9:a4:6b:83:0b:8e:8e:cb:28:47:10:c4:53: fd:a0:29:8d:5e:fc:8b:1c:8c:c3:ab:ee:46:40:f3:3e:9b:36: 42:07:a5:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWLdBX66EeAUAS0WKY7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmY3ZGViMThhMTI5MjA2YmFkNzczY2Y4MjIxZGU1NDRl M2ZkODEwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EygzNDI0NzYxNWYwYzJkOTkxMWIyNzFjNDk1OTg4NjJhNGI2ZWNiMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQF8BlCqY+kLlZv8Jv4cZ3ldgfJk 8GK5XIky4D+2VDKHOahXC+dCeGO6zPFB2JsMv0EZybNzFnV8lZXNSMKMoS8IJ0uJ 9HFChd69sCzB+HqcS8w8NxZ0bG8hlellpDDSyMmIyPTT5FryKFg+IWiV6Dt9ufis y6Ah8mDE8DTo0NfR9E10rw3N3sOAhzQkfsoqJki4KVpiETkc8z/4IJMLGoktON6j haWnAOWnOjdeQyJyebLVMg+dKodUdnRc518817FZtn4gUujQpMWPCU3YxFLD+FuX vCfYHSajDOWV9XKE7VoOZ04qkq0+CBgz9fpIGIyBbIkBnZf2OUYjnr9YpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQkdhXwwtmRGyccSVmIYqS27LGsMB8GA1UdIwQY MBaAFMe/fesYoSkga613PPgiHeVE4/2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYt MDE4ZmM5YzAyOGIwLzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYtMDE4ZmM5YzAyOGIw LzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAqkTajJ BH0LBNiNF2/VsLGSFGs1DRV9vC5xJHW+z2P7g3+bCRWX2Sn1z1KTgp2Kj20byyE8 QqKim0DemAiPTeBHOPxVoK1opu++CuSn5Sz1+kBqiRfq14kv3X+WXvcc7MFCCxhs BPKU8l1/+miIythOj62+AwkK0UOsSpYBw8FbberAxdVi7vn2/HzAjZWonFFw1xuy WOdjB4geXsMlVQwzFxLgXqqJyzDffL/kaeSG4P/FZXtaFyjf/8Ce1rzjFV1ACzER 1vyB6dywF/kw9HB8hFZUnhkCYk6VmbS5pGuDC46OyyhHEMRT/aApjV78ixyMw6vu RkDzPps2QgelcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:27 2025 by rpki-client