This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json) Hash identifier: 0P39OJuuUZX6JvXrha1fbR0Iy4xh98USdfPHoOSUWxA= Subject key identifier: 0E:23:51:93:47:86:3E:93:89:95:83:70:DB:5D:8C:DB:FE:4E:C6:43 Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c Certificate serial: 019AF276D29FA65718E3198DF0AA94703B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft Manifest number: 065C Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: X7o27bt0t3n071QuFRfF7M5REYDjxWPEMuHWv9eC91Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d2:9f:a6:57:18:e3:19:8d:f0:aa:94:70:3b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=0e23519347863e9389958370db5d8cdbfe4ec643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:c7:4a:82:88:98:95:98:63:77:63:fb:8e: 54:6c:e9:67:03:28:26:5b:d8:fe:b5:db:3b:58:e3: 63:1f:26:41:37:3c:23:b5:13:d0:24:0c:49:af:d4: d8:eb:fa:6b:75:4d:a7:98:ed:8e:81:94:e8:07:d4: 1f:be:79:04:93:a9:0f:3d:3a:ce:9b:ab:4e:5e:bc: 76:46:8a:d7:95:ef:fa:47:66:98:1b:07:e6:88:70: 71:76:f8:b8:4f:ab:d9:37:30:33:a6:46:1f:c3:00: 39:47:99:03:8b:2e:79:70:e6:93:5f:0b:ec:53:32: 6b:50:fa:97:d9:5c:be:82:8c:e4:91:a5:85:04:e1: b6:dd:8b:5e:f2:fd:44:64:1a:86:17:36:3c:33:90: 04:55:45:12:f8:40:c6:03:b2:a9:6c:be:b0:81:0a: 84:92:58:fd:e6:26:d8:27:2a:67:dd:08:16:56:d0: 42:2c:ea:c4:06:7e:06:13:f0:3a:28:ac:08:fb:79: 15:c3:53:74:38:22:22:d8:25:83:6d:a4:04:5d:2d: 5a:36:3f:c1:e5:2c:ea:a5:6e:57:7b:05:26:76:e3: dd:4a:de:b8:81:79:77:72:64:bf:52:9f:2a:6d:33: f5:9d:90:83:d1:21:b6:2f:83:c0:9d:b0:f0:85:32: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:23:51:93:47:86:3E:93:89:95:83:70:DB:5D:8C:DB:FE:4E:C6:43 X509v3 Authority Key Identifier: keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a9:05:46:69:a9:15:7b:9b:52:40:c5:b8:b6:22:de:ca:24: 48:e2:a9:ed:cf:19:f9:b9:0a:92:8a:53:c6:33:1f:54:59:17: 29:3f:f1:73:ed:23:73:4d:56:a4:29:20:50:ce:97:be:5b:3f: c8:18:82:a7:c4:4d:c2:0a:be:cb:06:17:0e:94:43:50:cb:3c: 2d:da:c2:6b:6e:86:d2:21:54:9e:2d:5c:28:40:ec:d0:71:e2: 31:64:60:37:fd:4d:91:bd:b4:4b:93:fc:36:be:16:2d:a5:29: 61:78:5b:d0:b1:e8:f5:19:8c:56:82:6b:a3:69:2e:11:87:b3: 6c:0a:11:9a:d8:e2:af:2f:28:56:74:0e:97:8f:ca:c9:e5:52: f3:9f:8a:30:77:35:3f:26:07:7f:de:6b:cd:a2:73:8c:fd:20: f3:ae:12:5f:be:3d:12:e3:31:23:0b:d1:50:d8:d7:6c:25:df: 58:4a:4f:df:2a:97:e3:2b:89:9e:bf:5d:98:10:87:79:b6:6d: df:9b:ac:cf:89:ee:a2:71:6d:1e:c7:e3:0d:35:a3:6f:75:fa: ca:8d:05:e3:8c:88:5a:d1:50:33:e6:1b:22:48:a8:08:bc:b6: b6:f5:cd:aa:2c:0a:61:c7:f3:25:27:57:74:8d:03:6e:c3:31: 64:e5:4f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtKfplcY4xmN8KqUcDt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmM2M3MTAwMDY0NTBjZGU3NGE0MTlhNzE0MzI5OGU1NTA2 NmYyNmMwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD EygwZTIzNTE5MzQ3ODYzZTkzODk5NTgzNzBkYjVkOGNkYmZlNGVjNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc7HSoKImJWYY3dj+45UbOlnAygm W9j+tds7WONjHyZBNzwjtRPQJAxJr9TY6/prdU2nmO2OgZToB9QfvnkEk6kPPTrO m6tOXrx2RorXle/6R2aYGwfmiHBxdvi4T6vZNzAzpkYfwwA5R5kDiy55cOaTXwvs UzJrUPqX2Vy+gozkkaWFBOG23Yte8v1EZBqGFzY8M5AEVUUS+EDGA7KpbL6wgQqE klj95ibYJypn3QgWVtBCLOrEBn4GE/A6KKwI+3kVw1N0OCIi2CWDbaQEXS1aNj/B 5SzqpW5XewUmduPdSt64gXl3cmS/Up8qbTP1nZCD0SG2L4PAnbDwhTLzQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4jUZNHhj6TiZWDcNtdjNv+TsZDMB8GA1UdIwQY MBaAFO88cQAGRQzedKQZpxQymOVQZvJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAt NGRiZDUyZDQ1NDEwLzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAtNGRiZDUyZDQ1NDEw LzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWakFRmmp FXubUkDFuLYi3sokSOKp7c8Z+bkKkopTxjMfVFkXKT/xc+0jc01WpCkgUM6Xvls/ yBiCp8RNwgq+ywYXDpRDUMs8LdrCa26G0iFUni1cKEDs0HHiMWRgN/1Nkb20S5P8 Nr4WLaUpYXhb0LHo9RmMVoJro2kuEYezbAoRmtjiry8oVnQOl4/KyeVS85+KMHc1 PyYHf95rzaJzjP0g864SX749EuMxIwvRUNjXbCXfWEpP3yqX4yuJnr9dmBCHebZt 35usz4nuonFtHsfjDTWjb3X6yo0F44yIWtFQM+YbIkioCLy2tvXNqiwKYcfzJSdX dI0DbsMxZOVPRg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:11 2025 by rpki-client