This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json) Hash identifier: 4EUS6XamCC5rgKPVH3YjkhioC4L2cyhMOUvs7l8zIAA= Subject key identifier: 56:7F:1A:22:8A:9A:1D:69:A2:F4:7F:9D:F3:7F:F4:EF:1F:B6:75:B0 Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8 Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8 Certificate serial: 019B38A13D2EEC26177A727951715C6E803A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft Manifest number: 0425 Signing time: Fri 19 Dec 2025 22:00:49 +0000 Manifest this update: Fri 19 Dec 2025 22:00:49 +0000 Manifest next update: Sat 20 Dec 2025 22:00:49 +0000 Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: IarGO9dVak4qn+nFzsu+ZYgQQEetCmz51+CmpDJd4o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:3d:2e:ec:26:17:7a:72:79:51:71:5c:6e:80:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8 Validity Not Before: Dec 19 22:00:49 2025 GMT Not After : Dec 20 22:00:49 2025 GMT Subject: CN=567f1a228a9a1d69a2f47f9df37ff4ef1fb675b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:16:00:7d:08:6d:86:6d:0f:df:89:49:d7:ef: c3:5c:e0:4b:b6:79:f2:6e:1d:e2:e9:39:08:92:05: 58:d3:f4:2a:59:9a:d4:a3:df:6c:b5:9b:21:86:4b: 7c:c5:b3:ee:e0:8f:b0:55:af:75:d5:28:d7:54:5c: 10:44:43:7c:bf:e8:91:8d:88:57:79:ad:95:77:70: 42:f3:d8:02:81:82:31:01:2f:15:0f:9d:37:46:fa: a9:a9:25:f8:c9:b9:a5:76:54:4f:a6:51:a1:14:67: 98:c8:e1:9c:d7:4b:65:85:c3:ff:56:e0:c8:97:9d: 4b:e7:12:72:d8:d6:1b:28:37:24:c8:d5:76:81:68: 78:74:08:02:ac:ea:6d:59:c9:ec:1f:26:f8:cf:cf: 90:f6:55:a4:29:01:56:a0:52:ec:e4:32:8d:cb:63: bb:fc:97:e5:e1:46:d3:05:6c:e5:64:e9:6c:5d:65: 36:40:80:81:00:1f:42:8f:a2:43:d6:00:7b:fc:44: 8a:4d:5b:76:15:d3:08:ef:6b:85:24:f8:cd:09:d5: c9:76:9f:85:5f:25:dd:d4:b2:6b:77:54:02:ec:46: 10:ad:0e:cb:5a:2a:b3:f4:a4:cc:e3:a7:43:e4:81: bd:90:f5:44:47:9f:16:79:d0:7b:76:18:79:10:60: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7F:1A:22:8A:9A:1D:69:A2:F4:7F:9D:F3:7F:F4:EF:1F:B6:75:B0 X509v3 Authority Key Identifier: keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:52:2f:1a:e7:cf:20:59:8c:40:cf:e8:45:7c:91:95:fe:f3: 59:ba:b4:d9:8a:58:7a:64:a7:d7:21:3d:75:69:1d:e1:3a:f1: b1:e9:89:c2:37:cd:da:84:b7:81:05:b9:ba:4c:6a:01:df:dc: 0a:84:f8:a2:4f:46:36:78:be:4e:03:b7:a8:c0:c2:6e:ae:00: 8e:d1:05:7d:c6:7f:53:b9:22:fa:04:34:c4:a0:5d:9f:8c:27: 36:da:76:57:cd:23:8a:c2:d8:a7:14:ae:67:b0:39:1b:59:f0: 1f:10:5f:be:57:1a:69:30:9f:8d:68:d3:80:04:1b:bb:46:07: 98:d0:6d:ac:cf:e1:af:a3:87:29:5d:96:43:27:22:76:e0:73: 58:a5:7b:a4:0f:41:bb:7f:2b:9e:5d:19:cb:3f:e8:ec:a5:d6: fb:42:e9:8e:d5:2e:e6:21:0e:48:ab:65:50:ce:ce:f0:b3:be: 34:76:72:90:ee:d3:05:ea:ae:7b:c5:3e:61:8e:dc:05:cb:00: 8d:f0:c9:36:95:92:ca:96:7d:a9:f2:28:52:c7:97:7d:7c:71: 60:e7:9f:03:0d:32:a2:31:69:09:c0:06:91:98:41:4b:c6:cf: e6:73:a7:69:a3:2b:65:bc:20:f4:d8:8e:e5:5a:77:f2:b2:be: e6:90:24:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oT0u7CYXenJ5UXFcboA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMWI2YWRjOTk0OTdmZDFiMzBhMGE0ODJlZGM0MDJiMGM0 ZjBjZjgwHhcNMjUxMjE5MjIwMDQ5WhcNMjUxMjIwMjIwMDQ5WjAzMTEwLwYDVQQD Eyg1NjdmMWEyMjhhOWExZDY5YTJmNDdmOWRmMzdmZjRlZjFmYjY3NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RYAfQhthm0P34lJ1+/DXOBLtnny bh3i6TkIkgVY0/QqWZrUo99stZshhkt8xbPu4I+wVa911SjXVFwQREN8v+iRjYhX ea2Vd3BC89gCgYIxAS8VD503RvqpqSX4ybmldlRPplGhFGeYyOGc10tlhcP/VuDI l51L5xJy2NYbKDckyNV2gWh4dAgCrOptWcnsHyb4z8+Q9lWkKQFWoFLs5DKNy2O7 /Jfl4UbTBWzlZOlsXWU2QICBAB9Cj6JD1gB7/ESKTVt2FdMI72uFJPjNCdXJdp+F XyXd1LJrd1QC7EYQrQ7LWiqz9KTM46dD5IG9kPVER58WedB7dhh5EGCnrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ/GiKKmh1povR/nfN/9O8ftnWwMB8GA1UdIwQY MBaAFO0batyZSX/RswoKSC7cQCsMTwz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgt MmM5NmZiODU1NTdhLzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgtMmM5NmZiODU1NTdh LzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFIvGufP IFmMQM/oRXyRlf7zWbq02YpYemSn1yE9dWkd4TrxsemJwjfN2oS3gQW5ukxqAd/c CoT4ok9GNni+TgO3qMDCbq4AjtEFfcZ/U7ki+gQ0xKBdn4wnNtp2V80jisLYpxSu Z7A5G1nwHxBfvlcaaTCfjWjTgAQbu0YHmNBtrM/hr6OHKV2WQyciduBzWKV7pA9B u38rnl0Zyz/o7KXW+0LpjtUu5iEOSKtlUM7O8LO+NHZykO7TBeque8U+YY7cBcsA jfDJNpWSypZ9qfIoUseXfXxxYOefAw0yojFpCcAGkZhBS8bP5nOnaaMrZbwg9NiO 5Vp38rK+5pAkbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:52:23 2025 by rpki-client