This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json) Hash identifier: 9ineSF4jQ+Bh+5Ao5MwJP9PFw9psc0qrB7U/sdepdlg= Subject key identifier: 03:BF:CE:33:58:02:A4:5B:9F:19:B8:71:52:E6:C4:45:FB:27:C8:62 Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29 Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429 Certificate serial: 019B3456CA3815A36A848062FF9AB88F7388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft Manifest number: 0617 Signing time: Fri 19 Dec 2025 02:01:01 +0000 Manifest this update: Fri 19 Dec 2025 02:01:01 +0000 Manifest next update: Sat 20 Dec 2025 02:01:01 +0000 Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: wv+u9yLpvK0uLbChp8y/fuOwWBPEsOFKBz1UbF/t0rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:ca:38:15:a3:6a:84:80:62:ff:9a:b8:8f:73:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429 Validity Not Before: Dec 19 02:01:01 2025 GMT Not After : Dec 20 02:01:01 2025 GMT Subject: CN=03bfce335802a45b9f19b87152e6c445fb27c862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:d5:15:b7:87:78:06:ef:7f:0a:37:cb:83: 36:cf:1e:27:66:5e:3e:28:f7:80:91:87:a5:ce:81: ce:71:1e:34:35:a0:df:68:6a:4a:1e:6d:dd:d2:5b: ee:b8:29:42:53:98:b7:34:86:28:ad:b9:f0:a5:3a: 9f:a3:6c:09:aa:9e:85:0a:00:d1:89:78:d8:c6:de: bf:06:e6:e1:4f:eb:10:d2:95:b6:b2:a2:e3:4b:a9: 20:23:23:17:03:5d:83:3c:03:1f:ac:ee:1a:a6:3d: f3:2a:e0:97:02:5c:ba:ef:b9:03:f4:ce:3c:a7:e9: bb:d6:59:ec:85:18:cc:db:27:c9:4c:76:cc:61:1d: 27:42:20:81:a9:1f:99:e9:b3:39:4a:df:2d:80:c0: 3e:b3:d7:23:76:86:26:e6:5e:3b:44:6b:6c:bf:23: 1b:cc:79:b8:a1:ee:78:a3:cb:73:f8:19:ef:08:6b: aa:83:ac:0d:83:67:a1:c1:12:fe:d1:41:82:10:3f: 76:20:0c:6f:94:d8:9d:8d:a9:73:c4:32:f2:bf:f6: 2b:04:40:0b:2e:8f:33:03:f5:b2:61:d7:f1:6d:2d: b7:f0:16:1b:7b:f7:a2:82:0e:7d:c6:33:8f:ca:c8: cd:f8:ac:bb:6d:8f:c1:02:81:de:d0:46:3c:72:0f: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BF:CE:33:58:02:A4:5B:9F:19:B8:71:52:E6:C4:45:FB:27:C8:62 X509v3 Authority Key Identifier: keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:be:2c:d1:53:db:44:6b:b3:24:d0:52:73:f0:bc:76:fb:fc: 94:97:3e:37:bb:2b:01:c0:39:a4:70:fd:6c:b2:e8:4a:af:53: 41:f6:23:00:63:0c:59:7f:6d:4f:cc:ff:95:1d:7f:a7:09:82: f0:de:f4:34:83:b3:db:f4:aa:0d:3b:87:9a:15:33:3b:ca:9d: 8f:f6:30:24:1c:a2:f7:e3:9f:b4:a4:6d:57:63:e4:1a:58:cb: f4:eb:6b:02:71:40:98:49:39:ba:59:13:67:82:df:79:8d:ac: 47:2c:4c:f7:58:4b:8e:97:10:1a:92:68:7d:af:c7:c3:14:a8: 6a:02:42:7f:0b:e2:8f:c1:e2:4b:65:85:d3:64:5f:a8:dd:3c: 3a:06:f1:b4:f4:db:a3:64:5e:f0:39:1b:4a:2b:96:70:fc:1a: 8e:3b:17:b7:df:5e:fb:fe:69:e7:b6:e7:07:8f:74:c5:1b:2c: 31:e6:58:16:cd:83:c2:e8:20:83:38:91:ad:c6:ea:44:5e:4d: 6f:e8:90:21:d9:7f:95:db:65:2f:01:ba:33:10:e4:92:cd:e0: 44:3e:b0:0b:73:47:3b:ec:8d:d5:60:e5:06:b7:c3:a0:70:89: 15:bf:96:7b:3d:eb:c1:11:30:90:80:d0:81:f6:f8:a1:fd:3b: d3:a4:dc:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vso4FaNqhIBi/5q4j3OIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDBkYTFiNGUzMGZmYmIzMmE0ZTRhNGI3YWQ3MzFjMDMx ZTQ0MjkwHhcNMjUxMjE5MDIwMTAxWhcNMjUxMjIwMDIwMTAxWjAzMTEwLwYDVQQD EygwM2JmY2UzMzU4MDJhNDViOWYxOWI4NzE1MmU2YzQ0NWZiMjdjODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX3VFbeHeAbvfwo3y4M2zx4nZl4+ KPeAkYelzoHOcR40NaDfaGpKHm3d0lvuuClCU5i3NIYorbnwpTqfo2wJqp6FCgDR iXjYxt6/BubhT+sQ0pW2sqLjS6kgIyMXA12DPAMfrO4apj3zKuCXAly677kD9M48 p+m71lnshRjM2yfJTHbMYR0nQiCBqR+Z6bM5St8tgMA+s9cjdoYm5l47RGtsvyMb zHm4oe54o8tz+BnvCGuqg6wNg2ehwRL+0UGCED92IAxvlNidjalzxDLyv/YrBEAL Lo8zA/WyYdfxbS238BYbe/eigg59xjOPysjN+Ky7bY/BAoHe0EY8cg84fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO/zjNYAqRbnxm4cVLmxEX7J8hiMB8GA1UdIwQY MBaAFO5A2htOMP+7MqTkpLetcxwDHkQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEt M2Q2NTc4MTQwZmMxLzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEtM2Q2NTc4MTQwZmMx LzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK74s0VPb RGuzJNBSc/C8dvv8lJc+N7srAcA5pHD9bLLoSq9TQfYjAGMMWX9tT8z/lR1/pwmC 8N70NIOz2/SqDTuHmhUzO8qdj/YwJByi9+OftKRtV2PkGljL9OtrAnFAmEk5ulkT Z4LfeY2sRyxM91hLjpcQGpJofa/HwxSoagJCfwvij8HiS2WF02RfqN08OgbxtPTb o2Re8DkbSiuWcPwajjsXt99e+/5p57bnB490xRssMeZYFs2DwugggziRrcbqRF5N b+iQIdl/ldtlLwG6MxDkks3gRD6wC3NHO+yN1WDlBrfDoHCJFb+Wez3rwREwkIDQ gfb4of0706TcwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:19 2025 by rpki-client