This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json) Hash identifier: 1dZt0imJOG9K4eDCxhShmiPH3eqD7G+bq91nbBZqw9E= Subject key identifier: 53:9E:E7:A5:AC:0E:41:C3:FD:B1:88:1A:77:3C:E0:1F:46:2B:36:0C Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b Certificate serial: 019B32D768FEFC291BA08132732DF3BAF096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft Manifest number: 114B Signing time: Thu 18 Dec 2025 19:02:16 +0000 Manifest this update: Thu 18 Dec 2025 19:02:16 +0000 Manifest next update: Fri 19 Dec 2025 19:02:16 +0000 Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: lkjlq5DOnifbHel6S7IobofhgiVaIKLZS/TwXa85hpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:68:fe:fc:29:1b:a0:81:32:73:2d:f3:ba:f0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b Validity Not Before: Dec 18 19:02:16 2025 GMT Not After : Dec 19 19:02:16 2025 GMT Subject: CN=539ee7a5ac0e41c3fdb1881a773ce01f462b360c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:ee:7a:a8:d1:fe:05:a1:40:bc:48:3f:f7: c8:8f:a1:b1:6c:f2:81:05:e6:b3:9a:98:66:d9:5a: 3d:0e:ae:09:db:5a:88:4b:37:f0:48:b6:68:87:73: 25:3a:dd:b2:e9:34:c1:52:54:bf:fa:51:08:df:4a: 7a:54:4b:30:b3:e4:78:a4:61:b0:b2:94:86:93:69: ef:75:22:07:4c:6c:54:23:94:ac:34:d3:e9:e4:10: 0e:c5:e3:cd:28:49:90:96:a9:cd:5f:40:53:ec:b4: 2c:cc:72:88:d4:12:70:d8:d3:a6:37:59:b4:b8:74: 46:43:46:75:82:bc:d0:21:76:35:67:a3:dc:0f:0d: 09:f5:6a:8b:16:d9:7e:8b:9a:2e:45:6c:4c:57:b2: 4b:bd:9b:20:f0:79:9d:86:48:90:3d:0a:6f:fb:72: 6c:59:da:77:10:b3:f2:f5:a1:66:1f:b7:65:a1:33: da:0a:d0:cf:3c:70:9f:2d:2d:62:3f:68:a0:fe:d6: 48:8f:ed:cd:06:9b:f5:b7:9e:35:f0:d6:46:5e:2e: 4a:34:b6:e7:c2:26:8d:a9:f5:fa:7c:e2:56:93:9e: e8:5f:0e:aa:b1:93:0e:0f:c8:25:d4:6c:b2:35:41: 1b:03:7d:8a:83:16:cd:cf:7e:52:a8:d8:47:92:1e: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:E7:A5:AC:0E:41:C3:FD:B1:88:1A:77:3C:E0:1F:46:2B:36:0C X509v3 Authority Key Identifier: keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:53:12:e2:b2:14:25:22:c1:23:bf:48:1e:20:83:f7:f1:19: 98:39:f5:11:f7:02:ca:a5:2f:39:e0:54:44:d1:70:c6:0c:82: 65:1b:9f:3d:d1:8c:8b:b0:27:04:cb:6c:d9:64:49:02:b2:42: d4:c1:e6:1e:38:aa:a4:72:9a:da:da:9d:64:2f:0a:28:1f:b7: 24:a7:9e:77:a1:5e:89:31:7b:46:7b:ae:db:10:a9:ec:57:3c: 39:3d:8e:41:ab:fb:3b:14:e8:9d:bd:29:3e:d6:33:ac:16:1d: 47:87:e7:7f:d4:c1:5c:c5:f4:b9:fa:8a:ee:c7:76:24:e3:45: 66:7d:9d:3f:42:51:77:dd:a8:d9:2b:f5:59:12:e5:11:7a:91: 99:fe:5a:f3:31:93:59:4e:2b:bc:87:eb:b9:e5:38:d7:7c:b2: c2:5c:ea:16:c8:a6:08:44:a8:d7:34:03:52:a0:b7:20:6c:ad: d0:8d:c6:7e:a5:a9:28:f1:e0:a0:00:61:31:76:37:4e:3b:76: b0:55:52:57:b0:98:fd:01:de:0c:8b:87:5f:07:9b:b0:10:14: ed:c4:c6:3e:28:4d:48:53:a8:bd:9a:a9:24:c0:15:45:2e:23: f0:22:ab:80:bc:fe:76:fb:47:f0:0a:bc:dd:5c:f1:b4:c8:2a: 72:62:2f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy12j+/CkboIEycy3zuvCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm NzE1OWIwHhcNMjUxMjE4MTkwMjE2WhcNMjUxMjE5MTkwMjE2WjAzMTEwLwYDVQQD Eyg1MzllZTdhNWFjMGU0MWMzZmRiMTg4MWE3NzNjZTAxZjQ2MmIzNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+DueqjR/gWhQLxIP/fIj6GxbPKB Beazmphm2Vo9Dq4J21qISzfwSLZoh3MlOt2y6TTBUlS/+lEI30p6VEsws+R4pGGw spSGk2nvdSIHTGxUI5SsNNPp5BAOxePNKEmQlqnNX0BT7LQszHKI1BJw2NOmN1m0 uHRGQ0Z1grzQIXY1Z6PcDw0J9WqLFtl+i5ouRWxMV7JLvZsg8HmdhkiQPQpv+3Js Wdp3ELPy9aFmH7dloTPaCtDPPHCfLS1iP2ig/tZIj+3NBpv1t5418NZGXi5KNLbn wiaNqfX6fOJWk57oXw6qsZMOD8gl1GyyNUEbA32KgxbNz35SqNhHkh6sYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOe56WsDkHD/bGIGnc84B9GKzYMMB8GA1UdIwQY MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1MS4rIU JSLBI79IHiCD9/EZmDn1EfcCyqUvOeBURNFwxgyCZRufPdGMi7AnBMts2WRJArJC 1MHmHjiqpHKa2tqdZC8KKB+3JKeed6FeiTF7Rnuu2xCp7Fc8OT2OQav7OxTonb0p PtYzrBYdR4fnf9TBXMX0ufqK7sd2JONFZn2dP0JRd92o2Sv1WRLlEXqRmf5a8zGT WU4rvIfrueU413yywlzqFsimCESo1zQDUqC3IGyt0I3GfqWpKPHgoABhMXY3Tjt2 sFVSV7CY/QHeDIuHXwebsBAU7cTGPihNSFOovZqpJMAVRS4j8CKrgLz+dvtH8Aq8 3VzxtMgqcmIvkw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:32:33 2025 by rpki-client