This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json) Hash identifier: 6IZTVaZtnxHe7kJp+WHe9e1wrp0/G8eJLcqMgv5BXfs= Subject key identifier: CB:53:51:FE:D9:88:4A:6B:38:17:DD:8E:A2:2A:30:EA:46:FF:B4:59 Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b Certificate serial: 019AF12D358EE04044E3E9741F6717DBE112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft Manifest number: 1129 Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: Yv8nY+ID1gpUgfboLBVd7mm2+uaYuzQjTlIsrXwetnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:35:8e:e0:40:44:e3:e9:74:1f:67:17:db:e1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=cb5351fed9884a6b3817dd8ea22a30ea46ffb459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:db:28:31:4b:27:a0:9a:c2:fa:48:df:e4: 8c:89:a2:e4:4a:98:6d:20:67:83:e3:88:51:32:98: b1:0b:b7:a9:26:61:1e:65:d7:58:3c:94:54:42:b3: 2c:7a:85:89:15:93:ac:0a:00:9d:bf:16:7f:3d:83: c4:30:dd:52:ea:a2:ce:d5:1e:13:d7:b5:13:c6:e5: 4d:44:50:a7:fb:dd:da:fd:26:f2:7b:31:eb:74:26: 3e:4b:d2:0b:0d:8c:c0:59:6f:7a:51:46:2f:92:cc: 7b:55:cc:a3:0c:bb:ca:70:d2:1b:ab:7e:d3:47:de: 01:da:03:4c:f4:80:52:a9:11:00:8d:80:57:44:96: 53:23:a5:d2:2f:98:4c:7b:73:a2:cd:63:59:f4:73: b3:ac:bf:3c:22:9d:c4:07:c6:50:73:eb:95:cd:2a: 8b:84:7b:34:ef:b7:11:63:01:28:f2:ab:a1:ce:e9: d1:8e:9c:01:02:1a:18:a2:b2:5e:3e:ab:fc:66:8e: d5:45:86:9c:1f:db:e3:f6:bd:68:3c:67:d8:ba:33: 74:d5:1b:51:40:9e:e0:6b:91:4d:cc:4f:45:97:bc: 80:8b:3e:4b:cb:33:5a:f1:12:6f:2a:29:26:71:d3: 03:40:6a:9f:f7:a8:53:02:d5:5f:23:16:b5:c7:0d: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:53:51:FE:D9:88:4A:6B:38:17:DD:8E:A2:2A:30:EA:46:FF:B4:59 X509v3 Authority Key Identifier: keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a5:5c:f0:ff:63:90:d1:2e:4c:57:c4:cc:49:28:ef:09:3d: 65:b9:fc:53:81:80:f1:f9:e0:19:c6:61:0d:f4:17:ad:f9:a3: 76:26:6f:aa:71:d9:ff:b6:c8:43:d8:6f:13:dc:8a:3b:e1:0d: cc:f9:a0:c1:cc:dc:6c:6e:a3:76:e3:6f:74:6f:97:a1:a6:e8: 72:1d:fb:a6:a8:b7:24:ba:31:ce:06:0e:eb:c8:95:38:ed:22: 04:db:ee:d8:7f:0c:55:dd:cb:14:b3:9d:4f:9d:c1:c9:db:8e: 18:ba:97:20:c5:5f:94:b0:62:8a:7c:2f:3b:d2:3c:6c:34:9c: bd:27:3f:11:c8:ca:27:79:93:e3:93:f9:cd:f9:c9:2f:c2:1f: 8f:e0:a7:9f:f0:ca:b6:d3:c8:be:22:0a:dc:cd:d7:ff:03:61: 6e:99:19:49:cd:44:bd:07:44:7f:42:86:32:bf:2b:e0:25:9d: c5:c2:ec:ea:3e:bd:7b:a0:a7:3d:1a:c5:1a:bd:72:d3:46:05: b8:39:8b:ff:f2:12:60:53:a1:04:b6:9b:14:0a:16:9f:34:b0: 08:eb:1a:b0:f0:a9:8c:6c:f7:b3:cd:32:4a:57:70:62:92:47: e8:06:89:8f:b1:66:c0:7a:26:9c:2f:b6:84:27:f5:8a:3f:38: 99:ce:f3:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTWO4EBE4+l0H2cX2+ESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm NzE1OWIwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD EyhjYjUzNTFmZWQ5ODg0YTZiMzgxN2RkOGVhMjJhMzBlYTQ2ZmZiNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHfbKDFLJ6CawvpI3+SMiaLkSpht IGeD44hRMpixC7epJmEeZddYPJRUQrMseoWJFZOsCgCdvxZ/PYPEMN1S6qLO1R4T 17UTxuVNRFCn+93a/SbyezHrdCY+S9ILDYzAWW96UUYvksx7VcyjDLvKcNIbq37T R94B2gNM9IBSqREAjYBXRJZTI6XSL5hMe3OizWNZ9HOzrL88Ip3EB8ZQc+uVzSqL hHs077cRYwEo8quhzunRjpwBAhoYorJePqv8Zo7VRYacH9vj9r1oPGfYujN01RtR QJ7ga5FNzE9Fl7yAiz5LyzNa8RJvKikmcdMDQGqf96hTAtVfIxa1xw14oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtTUf7ZiEprOBfdjqIqMOpG/7RZMB8GA1UdIwQY MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKVc8P9j kNEuTFfEzEko7wk9Zbn8U4GA8fngGcZhDfQXrfmjdiZvqnHZ/7bIQ9hvE9yKO+EN zPmgwczcbG6jduNvdG+Xoaboch37pqi3JLoxzgYO68iVOO0iBNvu2H8MVd3LFLOd T53ByduOGLqXIMVflLBiinwvO9I8bDScvSc/EcjKJ3mT45P5zfnJL8Ifj+Cnn/DK ttPIviIK3M3X/wNhbpkZSc1EvQdEf0KGMr8r4CWdxcLs6j69e6CnPRrFGr1y00YF uDmL//ISYFOhBLabFAoWnzSwCOsasPCpjGz3s80ySldwYpJH6AaJj7FmwHomnC+2 hCf1ij84mc7zZA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:35:15 2025 by rpki-client