This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft File: 7VxHFPIguKxeq3Au-sEaEUJdCmk.mft (raw, json) Hash identifier: y2jScEAkXaEQldpunZIxPDGoPSrozWvv1XrnRLw9L3Y= Subject key identifier: 9F:6E:49:DE:F8:2C:67:D6:10:63:6E:D2:AB:39:0B:96:4E:91:07:F3 Authority key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69 Certificate issuer: /CN=ed5c4714f220b8ac5eab702efac11a11425d0a69 Certificate serial: 019AF31CD5FF7E0F3C7EA91ACA50AEB1D126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft Manifest number: 43 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: 7VxHFPIguKxeq3Au-sEaEUJdCmk.crl (hash: 2jS3Y9JGAIWMBdQubwJdGTwrkVPWpzwvIrzFebqNIfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d5:ff:7e:0f:3c:7e:a9:1a:ca:50:ae:b1:d1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=9f6e49def82c67d610636ed2ab390b964e9107f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:5f:e5:82:1a:ad:29:a4:2a:f2:23:c4:80: 87:8d:3d:3a:9b:ea:aa:f2:b0:70:2b:0d:5b:5d:6d: 68:90:91:ce:a9:b8:26:85:4f:f7:b7:5b:c0:9b:fa: 0f:94:5e:d3:20:ef:39:96:57:f9:2f:b8:04:43:2b: 0c:d7:1d:f1:3a:65:2c:d5:02:a8:06:e0:4b:4e:aa: c7:1e:00:c2:be:2f:29:d6:ba:19:2f:db:bf:12:f0: 1e:e5:cc:ad:6e:8e:4c:78:e5:14:99:a5:36:e6:f6: 1b:49:a7:d9:29:c2:2d:68:56:39:65:7b:74:bd:6b: 5c:41:be:63:76:32:ef:11:94:4e:62:15:cc:65:d7: cb:00:64:36:5d:ee:77:61:16:3c:73:83:f5:c2:02: 51:1b:44:58:79:8a:93:49:fe:80:64:30:b1:54:16: cd:11:c0:95:96:08:1f:98:ca:08:83:37:c2:28:ae: 50:67:48:05:e3:89:e6:6a:37:b1:ba:41:e7:d9:7e: d5:8e:b5:9a:00:30:0e:1f:d1:65:4c:93:f4:d5:74: 7f:fc:73:c1:87:22:44:ad:a3:9f:81:cc:44:d7:e2: a4:e4:b7:e4:d3:1f:ef:fc:55:9a:46:12:17:94:f9: 63:c8:c9:96:37:90:ab:83:01:60:5e:48:ed:ff:0e: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:49:DE:F8:2C:67:D6:10:63:6E:D2:AB:39:0B:96:4E:91:07:F3 X509v3 Authority Key Identifier: keyid:ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5f:d4:1b:2c:2b:b3:2c:81:7f:91:0c:44:5a:6c:1b:29:66: d6:9f:ed:39:b1:7b:d2:f8:13:5d:b9:6a:4a:64:45:c3:08:ae: 17:f3:ea:48:9b:c9:f5:23:6f:88:ab:2c:cb:98:3d:72:07:b7: 60:87:8b:34:7a:e2:fb:30:3c:f0:de:e1:d6:cb:4f:00:a0:f9: 4c:f1:aa:2f:f5:0b:5f:48:bf:f5:aa:c6:1c:69:0c:ee:36:6d: ae:12:66:25:0e:f9:0a:44:87:dd:b7:c4:5a:59:fc:8f:34:d8: fe:36:72:12:2a:f2:af:3d:87:1a:c4:9c:52:6c:04:a3:4c:a3: 61:c5:70:dc:8c:fc:d2:72:e7:44:86:29:73:57:80:7f:87:ca: 2b:32:a7:ef:9f:ed:ea:91:aa:95:3f:2b:7c:dc:33:c5:2c:b7: 72:a3:76:98:2b:d5:ff:c8:c8:91:73:6c:83:7b:e6:e6:50:9b: db:9f:b1:5b:c4:c3:ed:9d:3a:59:ff:60:c2:06:9e:0e:80:fd: bb:aa:7d:71:89:38:9c:b8:58:f8:1c:d9:19:12:03:de:0d:1b: eb:c8:7a:b8:bb:83:88:26:ec:24:d1:3d:f7:d8:d5:68:f8:28: 77:ca:21:ef:ab:5b:35:44:4b:12:91:f9:28:e6:cb:df:6a:98: 8e:0b:cf:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNX/fg88fqkaylCusdEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNWM0NzE0ZjIyMGI4YWM1ZWFiNzAyZWZhYzExYTExNDI1 ZDBhNjkwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD Eyg5ZjZlNDlkZWY4MmM2N2Q2MTA2MzZlZDJhYjM5MGI5NjRlOTEwN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h9f5YIarSmkKvIjxICHjT06m+qq 8rBwKw1bXW1okJHOqbgmhU/3t1vAm/oPlF7TIO85llf5L7gEQysM1x3xOmUs1QKo BuBLTqrHHgDCvi8p1roZL9u/EvAe5cytbo5MeOUUmaU25vYbSafZKcItaFY5ZXt0 vWtcQb5jdjLvEZROYhXMZdfLAGQ2Xe53YRY8c4P1wgJRG0RYeYqTSf6AZDCxVBbN EcCVlggfmMoIgzfCKK5QZ0gF44nmajexukHn2X7VjrWaADAOH9FlTJP01XR//HPB hyJEraOfgcxE1+Kk5Lfk0x/v/FWaRhIXlPljyMmWN5CrgwFgXkjt/w7IjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9uSd74LGfWEGNu0qs5C5ZOkQfzMB8GA1UdIwQY MBaAFO1cRxTyILisXqtwLvrBGhFCXQppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iOThlOTAtNzk1ZC00MmM5LTk2OWEt OWFiNjAxMjNlNjdmLzEvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iOThlOTAtNzk1ZC00MmM5LTk2OWEtOWFiNjAxMjNlNjdm LzEvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATF/UGywr syyBf5EMRFpsGylm1p/tObF70vgTXblqSmRFwwiuF/PqSJvJ9SNviKssy5g9cge3 YIeLNHri+zA88N7h1stPAKD5TPGqL/ULX0i/9arGHGkM7jZtrhJmJQ75CkSH3bfE Wln8jzTY/jZyEiryrz2HGsScUmwEo0yjYcVw3Iz80nLnRIYpc1eAf4fKKzKn75/t 6pGqlT8rfNwzxSy3cqN2mCvV/8jIkXNsg3vm5lCb25+xW8TD7Z06Wf9gwgaeDoD9 u6p9cYk4nLhY+BzZGRID3g0b68h6uLuDiCbsJNE999jVaPgod8oh76tbNURLEpH5 KObL32qYjgvPWw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:16:40 2025 by rpki-client