This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft File: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json) Hash identifier: p+DePunOLTym4ycL+et9SeOLDcLKQrkRRlP4Rhk/xVI= Subject key identifier: 35:4C:06:72:26:D3:50:41:D1:13:16:FC:90:E3:93:B6:03:83:99:95 Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B Certificate issuer: /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b Certificate serial: 019B4A70FA7EBC34999E199E9D3D785ED92F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 09:01:16 +0000 Manifest this update: Tue 23 Dec 2025 09:01:16 +0000 Manifest next update: Wed 24 Dec 2025 09:01:16 +0000 Files and hashes: 1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: KSpblW5+x4M1GY2yGX+LJWkupAa4vVym/N6ifgsKjkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:fa:7e:bc:34:99:9e:19:9e:9d:3d:78:5e:d9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b Validity Not Before: Dec 23 09:01:16 2025 GMT Not After : Dec 24 09:01:16 2025 GMT Subject: CN=354c067226d35041d11316fc90e393b603839995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:58:a7:af:4e:84:88:63:6c:4f:b2:2c:82: 6e:82:71:86:96:8a:15:7f:3a:37:59:76:c3:b6:32: da:35:14:95:66:cc:7f:91:80:ea:54:9e:f7:4b:6c: a9:7c:a1:73:d4:ca:f9:70:f7:ff:52:bf:b6:ac:50: 80:c6:32:76:e2:de:cc:37:07:e5:4a:e6:99:62:22: 19:48:7e:7c:60:b4:72:a4:44:34:12:76:bb:6c:f2: 8a:72:af:40:a9:ac:7d:ea:eb:76:39:89:81:e6:35: 92:9c:9c:82:0d:9f:01:e0:ee:8f:17:43:18:9f:b4: f8:f7:c2:a1:04:c7:3a:f5:80:06:98:7c:ba:19:53: a3:58:6b:0c:7e:4f:96:1d:57:05:d5:e6:17:f7:60: 99:26:7a:40:5b:31:e5:2f:8b:29:a8:f2:a6:21:71: 80:5d:12:6f:2a:ad:4d:b4:69:6f:3e:36:21:d1:dc: c8:76:9c:01:fb:a3:e8:54:d0:34:02:30:34:d0:bb: 00:b1:7c:58:37:6b:76:38:b6:04:6a:84:be:ee:60: fe:4d:6a:7f:a3:59:bd:2b:80:61:49:91:dc:62:71: d4:05:1e:14:b6:a4:f1:dd:c1:98:92:5b:d6:19:2a: 9c:15:31:b0:cb:0e:82:5a:26:c4:1a:6f:77:b4:87: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4C:06:72:26:D3:50:41:D1:13:16:FC:90:E3:93:B6:03:83:99:95 X509v3 Authority Key Identifier: keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c5:a9:0c:9f:24:1a:af:e3:79:0b:66:ec:23:7e:c8:e8:32: 9d:12:8e:e7:58:f6:e4:ee:9b:35:be:0d:ef:df:34:00:08:e4: e3:c0:17:9c:96:6c:11:be:98:c3:72:98:e9:17:49:cb:2d:14: ec:a4:5e:37:65:8a:43:41:ef:3c:ea:83:74:9a:b5:fd:17:c7: ef:eb:5b:cd:0b:2e:78:fb:53:27:96:4a:f9:47:06:fb:c0:52: 5d:82:72:2f:7e:e7:fb:26:ad:e8:d6:76:a2:50:74:c0:01:53: 39:fb:b4:78:74:00:d8:c2:a2:18:a3:e1:52:9b:a5:0c:5f:cb: 0b:98:1c:28:d8:3b:40:48:b9:4f:1e:d8:fe:a3:ef:c7:cd:d4: 3f:d5:99:7b:4d:ca:cb:53:e2:e4:34:80:85:60:ee:82:16:cf: 53:c5:a9:84:ec:bf:01:bf:22:5c:a1:69:c0:8a:35:25:25:ef: b8:89:86:6a:30:6f:65:7a:70:00:df:af:ae:73:be:96:15:0c: 2b:27:80:af:cd:50:79:77:ff:d6:7c:36:82:bd:ca:ed:05:e0: cc:c3:5d:69:6c:9f:14:7e:03:e3:5e:cb:b0:92:7e:21:21:eb: 46:fd:f7:a5:b3:5a:ac:18:01:16:89:6a:b9:54:fd:24:5f:1f: 09:7e:59:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcPp+vDSZnhmenT14XtkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjJmMDk1MzAwNjEwNDVmNDJmN2JkNTFmMWMzYjYyNTll YmFlMWIwHhcNMjUxMjIzMDkwMTE2WhcNMjUxMjI0MDkwMTE2WjAzMTEwLwYDVQQD EygzNTRjMDY3MjI2ZDM1MDQxZDExMzE2ZmM5MGUzOTNiNjAzODM5OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeRYp69OhIhjbE+yLIJugnGGlooV fzo3WXbDtjLaNRSVZsx/kYDqVJ73S2ypfKFz1Mr5cPf/Ur+2rFCAxjJ24t7MNwfl SuaZYiIZSH58YLRypEQ0Ena7bPKKcq9Aqax96ut2OYmB5jWSnJyCDZ8B4O6PF0MY n7T498KhBMc69YAGmHy6GVOjWGsMfk+WHVcF1eYX92CZJnpAWzHlL4spqPKmIXGA XRJvKq1NtGlvPjYh0dzIdpwB+6PoVNA0AjA00LsAsXxYN2t2OLYEaoS+7mD+TWp/ o1m9K4BhSZHcYnHUBR4UtqTx3cGYklvWGSqcFTGwyw6CWibEGm93tIe1AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVMBnIm01BB0RMW/JDjk7YDg5mVMB8GA1UdIwQY MBaAFOyy8JUwBhBF9C971R8cO2JZ664bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUt MWFiMDdhMjY5MDEwLzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUtMWFiMDdhMjY5MDEw LzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8WpDJ8k Gq/jeQtm7CN+yOgynRKO51j25O6bNb4N7980AAjk48AXnJZsEb6Yw3KY6RdJyy0U 7KReN2WKQ0HvPOqDdJq1/RfH7+tbzQsuePtTJ5ZK+UcG+8BSXYJyL37n+yat6NZ2 olB0wAFTOfu0eHQA2MKiGKPhUpulDF/LC5gcKNg7QEi5Tx7Y/qPvx83UP9WZe03K y1Pi5DSAhWDughbPU8WphOy/Ab8iXKFpwIo1JSXvuImGajBvZXpwAN+vrnO+lhUM KyeAr81QeXf/1nw2gr3K7QXgzMNdaWyfFH4D417LsJJ+ISHrRv33pbNarBgBFolq uVT9JF8fCX5Z4Q== -----END CERTIFICATE-----Generated at Tue Dec 23 16:55:32 2025 by rpki-client