This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json) Hash identifier: hGSun1SIjRBayHMNz/3qtooQP88Y24yjesJUVvgsPc4= Subject key identifier: 17:E2:FB:4F:D3:69:12:07:81:91:92:DA:CC:25:6C:C4:66:2A:41:7D Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Certificate serial: 019B424AFC6FF77456A80F11B4299BEE832F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft Manifest number: 09FE Signing time: Sun 21 Dec 2025 19:02:49 +0000 Manifest this update: Sun 21 Dec 2025 19:02:49 +0000 Manifest next update: Mon 22 Dec 2025 19:02:49 +0000 Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: f0g6si85WldftbLiJGwEBi1fpdm6pdFWuEJiyyCeE4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:fc:6f:f7:74:56:a8:0f:11:b4:29:9b:ee:83:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Validity Not Before: Dec 21 19:02:49 2025 GMT Not After : Dec 22 19:02:49 2025 GMT Subject: CN=17e2fb4fd3691207819192dacc256cc4662a417d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:40:5a:9d:c7:89:dc:1d:7c:13:1c:a6:d4: 51:65:85:20:bd:ea:82:97:c7:5c:e0:a3:dd:b4:6e: f0:8d:5a:8c:af:83:11:73:85:2f:f0:39:7e:ce:bc: 1b:79:e0:7e:f7:e3:cc:f3:82:af:2b:c5:e9:49:9e: 41:d9:64:6c:b7:ac:81:ff:2d:02:6f:2f:c6:e8:12: 8c:fd:65:cc:15:82:0e:68:8e:f2:7d:52:7d:99:7f: 4f:a2:0f:f0:28:1b:fe:fe:24:d0:0e:77:6e:d2:47: 0e:a8:db:d9:b3:85:cd:0a:0c:d4:e6:16:44:52:13: 30:21:17:66:49:35:a4:1a:b5:33:fc:99:30:e2:fb: 7a:77:f0:4b:f1:b8:f3:af:18:19:97:40:aa:64:d0: d9:a9:b6:2b:64:33:04:20:a9:08:bd:e6:f2:6f:ab: 1d:19:f4:52:50:cf:34:f0:7a:86:e9:5f:b7:1d:77: ef:fb:ea:69:e1:ac:75:a8:26:d0:1f:ed:42:32:fe: f0:2d:fa:2d:a3:3e:40:dc:97:56:3a:34:ea:65:9c: c5:4d:c6:f4:04:07:76:b4:f6:24:2c:c0:b1:62:a0: fc:ff:33:26:34:4a:79:e4:be:3d:58:2f:f9:0a:c2: 73:14:b4:95:5a:80:6a:74:65:30:c3:89:d3:86:58: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:FB:4F:D3:69:12:07:81:91:92:DA:CC:25:6C:C4:66:2A:41:7D X509v3 Authority Key Identifier: keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:76:8f:3c:f8:ae:8d:d3:fb:3e:be:2d:bf:95:27:ab:8a:30: aa:c5:8f:06:81:20:1a:d1:dd:52:a6:14:73:3d:ab:1d:b6:64: d7:a6:65:74:98:eb:64:e4:94:41:52:ce:8b:fc:57:6f:17:a5: ee:c6:92:28:f0:dc:99:92:e9:a5:a8:e6:39:55:0d:b7:a5:42: e6:1c:ec:7c:85:fa:ef:41:9f:bb:b3:4b:18:93:c1:52:a9:3e: 3f:1d:bf:e4:20:72:da:48:cf:ec:50:94:10:03:5c:2e:e9:c2: 90:40:97:74:a0:c5:0f:17:09:f7:a6:0f:e6:ec:35:7d:6e:6b: bc:e2:6a:38:8b:01:df:fe:c7:6b:36:22:e5:1d:b3:d0:8c:6d: f2:79:7a:5f:e2:67:cd:be:f0:84:d4:84:c4:f0:b4:fb:f1:2f: 97:e7:5a:13:02:45:f0:05:41:cc:98:dc:0d:01:4b:04:61:ae: 13:87:32:73:ed:fb:11:b0:9b:34:b9:0b:f5:99:e3:37:a1:5a: c5:42:c1:5c:78:4e:e7:7c:41:27:89:10:f9:ce:97:99:f8:96: 39:ea:dd:56:c2:4e:29:9e:b5:1c:76:b1:ea:63:89:43:77:0d: 53:bb:1f:94:d3:bd:5d:1d:54:51:33:03:ec:b7:79:95:65:d7: 2b:2e:98:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSvxv93RWqA8RtCmb7oMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw MjA0Y2IwHhcNMjUxMjIxMTkwMjQ5WhcNMjUxMjIyMTkwMjQ5WjAzMTEwLwYDVQQD EygxN2UyZmI0ZmQzNjkxMjA3ODE5MTkyZGFjYzI1NmNjNDY2MmE0MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJdAWp3HidwdfBMcptRRZYUgveqC l8dc4KPdtG7wjVqMr4MRc4Uv8Dl+zrwbeeB+9+PM84KvK8XpSZ5B2WRst6yB/y0C by/G6BKM/WXMFYIOaI7yfVJ9mX9Pog/wKBv+/iTQDndu0kcOqNvZs4XNCgzU5hZE UhMwIRdmSTWkGrUz/Jkw4vt6d/BL8bjzrxgZl0CqZNDZqbYrZDMEIKkIvebyb6sd GfRSUM808HqG6V+3HXfv++pp4ax1qCbQH+1CMv7wLfotoz5A3JdWOjTqZZzFTcb0 BAd2tPYkLMCxYqD8/zMmNEp55L49WC/5CsJzFLSVWoBqdGUww4nThlhS0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfi+0/TaRIHgZGS2swlbMRmKkF9MB8GA1UdIwQY MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHaPPPiu jdP7Pr4tv5Unq4owqsWPBoEgGtHdUqYUcz2rHbZk16ZldJjrZOSUQVLOi/xXbxel 7saSKPDcmZLppajmOVUNt6VC5hzsfIX670Gfu7NLGJPBUqk+Px2/5CBy2kjP7FCU EANcLunCkECXdKDFDxcJ96YP5uw1fW5rvOJqOIsB3/7HazYi5R2z0Ixt8nl6X+Jn zb7whNSExPC0+/Evl+daEwJF8AVBzJjcDQFLBGGuE4cyc+37EbCbNLkL9ZnjN6Fa xULBXHhO53xBJ4kQ+c6XmfiWOerdVsJOKZ61HHax6mOJQ3cNU7sflNO9XR1UUTMD 7Ld5lWXXKy6YjQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:24:59 2025 by rpki-client