This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft File: e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json) Hash identifier: cp/pnqA92WKNZmA20kQMrvDVpDwpxwLaa7H8VLuxeXQ= Subject key identifier: CB:09:C2:47:52:AF:FC:8C:86:34:4D:19:32:63:93:C8:7B:C6:FA:9B Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB Certificate issuer: /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb Certificate serial: 019B4DE076F9E2F14A565E3759C1F28159AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft Manifest number: 0BF8 Signing time: Wed 24 Dec 2025 01:01:54 +0000 Manifest this update: Wed 24 Dec 2025 01:01:54 +0000 Manifest next update: Thu 25 Dec 2025 01:01:54 +0000 Files and hashes: 1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: IrgAmqmFTNDz+cnnUymhuAVdaURP35fosjwzeQ3O8Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:76:f9:e2:f1:4a:56:5e:37:59:c1:f2:81:59:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb Validity Not Before: Dec 24 01:01:54 2025 GMT Not After : Dec 25 01:01:54 2025 GMT Subject: CN=cb09c24752affc8c86344d19326393c87bc6fa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:db:06:e5:04:3c:de:bf:28:12:6f:5f:53:1a: c6:f2:cb:29:61:4a:91:de:02:09:01:69:97:c3:ac: cf:a6:55:b1:fb:b7:3c:59:99:c9:95:16:55:68:ee: c3:db:57:6e:b4:c7:c6:d9:a1:f3:b4:bb:ff:5a:b6: 17:03:65:48:ee:0c:de:d2:ee:3f:0c:bd:ad:3d:fe: 6a:c6:c0:9a:b9:28:c1:e9:42:cf:eb:05:cc:c1:28: 0d:5e:f9:8a:31:6a:a4:b0:01:42:7d:47:42:50:5a: 07:44:ca:60:f1:dc:b8:02:34:35:65:aa:52:be:63: 42:10:39:e4:10:ee:31:76:ba:c0:87:0b:09:19:1e: ee:eb:ab:e1:53:8c:bc:bf:f1:b3:05:1f:d8:84:03: d6:d7:4b:16:e1:44:2c:2b:de:d2:55:32:fa:75:51: 34:e4:b1:40:c9:a9:aa:86:fd:a5:72:68:c2:39:db: 26:91:04:47:bf:79:bd:74:d8:9e:cc:6e:9c:57:30: 73:60:f1:71:df:94:7f:fa:a7:c0:1b:88:54:b0:fc: 96:97:ed:63:ae:80:4c:a3:be:48:b8:85:13:44:b9: 6d:27:d8:9e:02:c1:26:99:79:e7:7c:60:0d:9a:4c: bb:6b:ed:4a:a4:4c:e6:d9:73:6d:c1:c6:8f:28:d2: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:C2:47:52:AF:FC:8C:86:34:4D:19:32:63:93:C8:7B:C6:FA:9B X509v3 Authority Key Identifier: keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:da:4f:70:b2:53:b2:2d:20:34:e8:6d:bf:4f:a6:21:0d: 1b:0d:ca:c0:55:73:fe:8f:23:91:b6:65:ad:65:0d:38:68:42: e1:a1:c8:fa:4f:98:c5:4e:20:28:78:36:31:6f:8a:e3:5d:78: 09:80:6e:19:90:f0:a8:99:8a:3e:46:f5:70:10:80:c9:62:02: b6:12:f7:a1:78:dd:5b:14:7d:96:9e:bf:5b:e2:e1:1c:a5:1e: b6:1a:84:9a:58:76:5c:74:21:04:e0:b8:b8:ab:f3:9c:14:c5: 53:65:6b:a8:81:e2:ae:f8:2e:06:7d:61:2e:a9:dd:32:d8:16: 35:40:ae:23:43:4e:11:50:85:e9:4e:44:15:59:64:18:d4:b3: 33:15:0d:5f:0c:ee:aa:b5:a5:a7:8b:00:05:63:30:48:69:3d: e4:d3:99:68:7f:56:13:62:eb:81:e2:6a:63:18:3a:e1:36:54: a5:12:72:a5:73:b3:e2:2f:33:82:9c:f1:58:0c:5c:25:19:7c: 16:9e:a0:32:74:b2:4d:11:28:33:c8:db:c8:31:69:d5:c5:33: 50:08:68:c3:40:a4:62:20:aa:69:9f:fa:f6:84:66:85:23:2b: 8e:a3:f6:ee:1a:1f:f5:6b:89:7f:d5:e6:cf:9e:a8:fb:1d:e2: a8:fe:93:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Hb54vFKVl43WcHygVmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYjgwZGVjY2M1NmViMzY2YjM2Y2MyOTY0YzgxOWJiMWI3 MjlhZGIwHhcNMjUxMjI0MDEwMTU0WhcNMjUxMjI1MDEwMTU0WjAzMTEwLwYDVQQD EyhjYjA5YzI0NzUyYWZmYzhjODYzNDRkMTkzMjYzOTNjODdiYzZmYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69sG5QQ83r8oEm9fUxrG8sspYUqR 3gIJAWmXw6zPplWx+7c8WZnJlRZVaO7D21dutMfG2aHztLv/WrYXA2VI7gze0u4/ DL2tPf5qxsCauSjB6ULP6wXMwSgNXvmKMWqksAFCfUdCUFoHRMpg8dy4AjQ1ZapS vmNCEDnkEO4xdrrAhwsJGR7u66vhU4y8v/GzBR/YhAPW10sW4UQsK97SVTL6dVE0 5LFAyamqhv2lcmjCOdsmkQRHv3m9dNiezG6cVzBzYPFx35R/+qfAG4hUsPyWl+1j roBMo75IuIUTRLltJ9ieAsEmmXnnfGANmky7a+1KpEzm2XNtwcaPKNI0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsJwkdSr/yMhjRNGTJjk8h7xvqbMB8GA1UdIwQY MBaAFHu4DezMVus2azbMKWTIGbsbcprbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xYzNmODktMzNlMS00ZDY0LTkyMzUt NGFhOTI3NzI5NjcyLzEvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xYzNmODktMzNlMS00ZDY0LTkyMzUtNGFhOTI3NzI5Njcy LzEvZTdnTjdNeFc2elpyTnN3cFpNZ1p1eHR5bXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7TaT3Cy U7ItIDTobb9PpiENGw3KwFVz/o8jkbZlrWUNOGhC4aHI+k+YxU4gKHg2MW+K4114 CYBuGZDwqJmKPkb1cBCAyWICthL3oXjdWxR9lp6/W+LhHKUethqEmlh2XHQhBOC4 uKvznBTFU2VrqIHirvguBn1hLqndMtgWNUCuI0NOEVCF6U5EFVlkGNSzMxUNXwzu qrWlp4sABWMwSGk95NOZaH9WE2LrgeJqYxg64TZUpRJypXOz4i8zgpzxWAxcJRl8 Fp6gMnSyTREoM8jbyDFp1cUzUAhow0CkYiCqaZ/69oRmhSMrjqP27hof9WuJf9Xm z56o+x3iqP6T2Q== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:59 2025 by rpki-client