This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json) Hash identifier: VUkmdO6GLy6FSpLe+/dUVz4iL0Ou0JDRflCMzyt17ro= Subject key identifier: BF:C2:B9:B6:AB:BB:F2:42:75:41:1B:FD:DF:B0:DF:2E:71:8B:7B:33 Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95 Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95 Certificate serial: 019B2C66892DAE80C933DAF6C93E1CA291F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft Manifest number: 0656 Signing time: Wed 17 Dec 2025 13:01:15 +0000 Manifest this update: Wed 17 Dec 2025 13:01:15 +0000 Manifest next update: Thu 18 Dec 2025 13:01:15 +0000 Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: 0+kTikq3JF9vx8KDpez/g2lE/Xt4OjdpXfwuztUmaiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:89:2d:ae:80:c9:33:da:f6:c9:3e:1c:a2:91:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95 Validity Not Before: Dec 17 13:01:15 2025 GMT Not After : Dec 18 13:01:15 2025 GMT Subject: CN=bfc2b9b6abbbf24275411bfddfb0df2e718b7b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:a1:ad:89:54:17:16:8e:84:bb:5f:2e:26: 67:27:27:78:6c:67:e9:a6:88:7b:c1:67:fb:40:7e: b9:99:88:3e:0d:d3:0e:78:45:07:f4:1a:c1:60:6d: 63:b2:d8:03:37:b3:8c:1a:06:a6:01:17:f8:74:cc: f1:d5:58:7d:e4:f2:1a:53:88:c5:f9:80:f3:89:dd: cf:e0:8a:6c:22:65:04:40:de:0e:32:ea:79:7e:3f: 23:35:a2:32:9c:bd:1e:59:13:29:50:58:0a:8f:11: 20:4a:97:f1:4f:29:1b:b5:17:1f:b1:60:dc:b1:96: db:01:59:73:8e:76:17:55:f2:ae:a4:61:54:7a:d3: 93:27:93:d3:bf:c9:78:b0:91:35:fd:e7:4d:23:aa: 84:95:f5:48:66:f0:35:1d:4a:dc:71:19:05:31:81: 06:9f:2d:51:7c:52:be:23:5d:bd:9f:f4:02:59:e9: 4f:d6:da:cf:d8:80:87:66:a8:eb:30:4e:ad:a0:12: 7f:10:8c:a1:c2:22:4b:37:c0:a2:8f:ca:dc:ea:ee: 40:4d:97:ed:70:f6:a6:2c:f1:a6:b9:99:fd:2c:6c: 8b:cd:5e:1e:bf:68:10:b8:a2:e5:bb:7d:29:f0:00: a7:1f:10:a7:65:37:fe:0b:9f:89:f1:10:15:45:e0: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C2:B9:B6:AB:BB:F2:42:75:41:1B:FD:DF:B0:DF:2E:71:8B:7B:33 X509v3 Authority Key Identifier: keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:9f:e6:85:f4:85:96:37:f7:d4:60:7c:ce:ff:af:00:4f: bf:ab:e1:55:49:e2:c2:94:b3:54:2d:db:c6:c7:7c:db:6e:de: 96:27:35:b6:ef:b0:34:70:8d:ce:ce:6f:91:7f:4a:1f:d9:89: d0:03:b2:9e:10:c7:38:c4:65:7b:a2:0c:2c:8c:00:2c:47:1a: d7:e2:43:55:a7:ad:f2:73:7a:de:d2:e7:91:5a:3b:da:0f:64: 85:bb:7e:28:8e:76:71:3c:6c:92:9b:d9:29:8a:1b:30:07:7b: be:01:80:57:61:08:42:ed:dd:1f:3b:89:ef:4e:4e:a4:d5:97: 91:c1:9b:03:bc:ea:53:9a:cf:13:3e:ca:20:d5:c9:7f:9b:08: dd:82:3f:6e:c2:af:f4:da:b5:35:54:91:75:3f:c2:30:ab:fa: ae:bc:7e:ac:54:35:be:5f:e6:0e:f4:61:94:c6:6f:8f:07:0a: 87:e3:8a:82:4e:66:3c:ae:b0:87:15:54:60:ca:bf:ae:a3:b6: 9a:1f:ac:00:29:c6:b9:df:86:f4:48:4f:02:b6:eb:63:26:d3: f7:90:87:2b:ae:c7:93:94:e4:54:50:eb:0a:8b:90:0e:47:4d: 17:69:32:0c:0c:ff:68:f8:66:b9:a8:fc:a9:1d:9f:0e:4e:40: 74:cb:4d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZoktroDJM9r2yT4copH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOWEzZWM3Y2IzYjE5MGU3MjEzMDk5ZGUxNjcxYmVhMmQz MjhhOTUwHhcNMjUxMjE3MTMwMTE1WhcNMjUxMjE4MTMwMTE1WjAzMTEwLwYDVQQD EyhiZmMyYjliNmFiYmJmMjQyNzU0MTFiZmRkZmIwZGYyZTcxOGI3YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnGhrYlUFxaOhLtfLiZnJyd4bGfp poh7wWf7QH65mYg+DdMOeEUH9BrBYG1jstgDN7OMGgamARf4dMzx1Vh95PIaU4jF +YDzid3P4IpsImUEQN4OMup5fj8jNaIynL0eWRMpUFgKjxEgSpfxTykbtRcfsWDc sZbbAVlzjnYXVfKupGFUetOTJ5PTv8l4sJE1/edNI6qElfVIZvA1HUrccRkFMYEG ny1RfFK+I129n/QCWelP1trP2ICHZqjrME6toBJ/EIyhwiJLN8Cij8rc6u5ATZft cPamLPGmuZn9LGyLzV4ev2gQuKLlu30p8ACnHxCnZTf+C5+J8RAVReDcMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/Cubaru/JCdUEb/d+w3y5xi3szMB8GA1UdIwQY MBaAFO2aPsfLOxkOchMJneFnG+otMoqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEt YTQ0MmY0Nzc2NGQzLzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEtYTQ0MmY0Nzc2NGQz LzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3Kf5oX0 hZY399RgfM7/rwBPv6vhVUniwpSzVC3bxsd8227elic1tu+wNHCNzs5vkX9KH9mJ 0AOynhDHOMRle6IMLIwALEca1+JDVaet8nN63tLnkVo72g9khbt+KI52cTxskpvZ KYobMAd7vgGAV2EIQu3dHzuJ705OpNWXkcGbA7zqU5rPEz7KINXJf5sI3YI/bsKv 9Nq1NVSRdT/CMKv6rrx+rFQ1vl/mDvRhlMZvjwcKh+OKgk5mPK6whxVUYMq/rqO2 mh+sACnGud+G9EhPArbrYybT95CHK67Hk5TkVFDrCouQDkdNF2kyDAz/aPhmuaj8 qR2fDk5AdMtNpA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:50 2025 by rpki-client