This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json) Hash identifier: h0lnrkUBeS95GAxCQAvrSZooHWoYZIj4uuEbsZ7pXek= Subject key identifier: 3B:67:4F:15:57:80:A5:6A:5D:8A:EA:13:DA:09:4D:B2:2E:60:F4:A7 Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea Certificate serial: 019B42B7241E651D211BF0DDFA38D84DA253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 21:00:57 +0000 Manifest this update: Sun 21 Dec 2025 21:00:57 +0000 Manifest next update: Mon 22 Dec 2025 21:00:57 +0000 Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: QwxLqs25tn3P9GVaTfhr1nfm3giMl4xFYdhYkTiqrTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:24:1e:65:1d:21:1b:f0:dd:fa:38:d8:4d:a2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea Validity Not Before: Dec 21 21:00:57 2025 GMT Not After : Dec 22 21:00:57 2025 GMT Subject: CN=3b674f155780a56a5d8aea13da094db22e60f4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:c4:04:1b:2d:9f:ab:58:02:36:a2:a2:26: b0:c6:be:17:17:56:d7:ff:15:71:03:c7:94:d1:27: 11:56:cc:e7:4e:69:af:f1:26:1c:ee:fa:d6:73:c9: 4a:24:73:b9:e9:b7:c7:b0:d3:d3:b9:0f:db:a0:41: 00:43:3f:36:7d:9c:3f:ca:53:40:99:a6:a3:22:ed: 35:83:6b:ae:26:b8:bf:cc:a0:20:7b:5b:b8:85:d2: dd:39:1c:8b:f0:30:5c:cd:7d:6b:24:5f:b8:02:7a: 94:ae:78:88:ce:33:fb:5d:7c:de:88:03:f6:dc:a7: c0:ff:7b:c9:77:a7:11:1c:c4:d7:90:08:fb:6a:8e: a7:f2:20:c5:13:ac:a6:81:04:7e:20:46:b4:6f:9d: 20:56:e7:bb:2d:c1:15:f8:bf:d2:79:3c:e3:5f:1f: 9d:8a:2e:9c:59:dc:ab:39:62:0d:15:8f:82:18:40: ad:eb:f8:3d:31:12:bb:d7:c0:92:c5:48:1d:1e:cb: fe:04:60:6a:ec:75:25:1f:7c:0e:1e:11:ea:77:60: db:95:22:63:1f:dc:40:d7:77:f8:2e:1f:02:9a:d1: 23:95:38:7e:de:a2:dc:c3:5e:3c:41:5d:30:ba:03: ad:fe:8e:18:24:09:0f:13:6b:60:65:06:ed:b4:8c: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:67:4F:15:57:80:A5:6A:5D:8A:EA:13:DA:09:4D:B2:2E:60:F4:A7 X509v3 Authority Key Identifier: keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1a:2d:ec:c7:fe:27:70:94:0f:fa:f1:09:89:e0:4c:ed:dd: 25:b0:d1:04:d4:91:f2:25:6b:6e:a3:ef:a7:00:28:9c:ea:02: 87:78:0d:28:57:78:2f:8a:02:7b:4f:4f:b1:cd:13:11:5f:9c: 7f:de:33:d0:f0:46:2d:e0:21:d1:0f:bc:fd:fe:eb:a6:63:af: d1:75:61:52:be:a6:4a:a1:7f:28:c6:2e:f5:18:71:ec:2c:13: 2e:ff:4b:20:81:34:84:55:f5:d4:49:cf:8e:7b:e3:63:b5:ea: 26:82:fd:eb:ae:2c:d1:10:97:57:82:e3:6b:26:ce:29:e0:ee: ca:77:cd:7d:cd:13:48:2c:4a:d0:52:25:16:f7:a6:3e:dd:9f: 51:5c:ce:32:0f:41:7a:8a:75:ca:ff:d0:35:5c:a9:48:9a:0d: d0:ee:f0:e5:81:3b:1a:27:0f:8a:8f:5b:2e:a4:8f:ee:2c:8c: 69:1c:63:ad:84:cc:3c:8c:9f:22:ea:a0:4d:66:57:ed:e9:7d: 95:3f:04:55:db:a2:e4:e0:f9:45:24:96:19:89:69:6f:e7:3e: 46:0b:c4:55:19:50:7b:e1:f8:10:84:a0:22:96:ed:3d:0d:76: ae:05:4d:55:de:60:e1:a0:77:5b:38:38:f1:47:f0:64:48:23: e0:81:70:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtyQeZR0hG/Dd+jjYTaJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjExYjU0NTA4YTA2Mjg5YjBlZDA2YjE3MTg4YWQ2M2Y0 ZmNmZWEwHhcNMjUxMjIxMjEwMDU3WhcNMjUxMjIyMjEwMDU3WjAzMTEwLwYDVQQD EygzYjY3NGYxNTU3ODBhNTZhNWQ4YWVhMTNkYTA5NGRiMjJlNjBmNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM7EBBstn6tYAjaioiawxr4XF1bX /xVxA8eU0ScRVsznTmmv8SYc7vrWc8lKJHO56bfHsNPTuQ/boEEAQz82fZw/ylNA maajIu01g2uuJri/zKAge1u4hdLdORyL8DBczX1rJF+4AnqUrniIzjP7XXzeiAP2 3KfA/3vJd6cRHMTXkAj7ao6n8iDFE6ymgQR+IEa0b50gVue7LcEV+L/SeTzjXx+d ii6cWdyrOWINFY+CGECt6/g9MRK718CSxUgdHsv+BGBq7HUlH3wOHhHqd2DblSJj H9xA13f4Lh8CmtEjlTh+3qLcw148QV0wugOt/o4YJAkPE2tgZQbttIwAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtnTxVXgKVqXYrqE9oJTbIuYPSnMB8GA1UdIwQY MBaAFOyxG1RQigYomw7QaxcYitY/T8/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xNGQwOTktOGU0NS00NDc5LTg0N2Ut NzQxMjZiNWMzYWI2LzEvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xNGQwOTktOGU0NS00NDc5LTg0N2UtNzQxMjZiNWMzYWI2 LzEvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBot7Mf+ J3CUD/rxCYngTO3dJbDRBNSR8iVrbqPvpwAonOoCh3gNKFd4L4oCe09Psc0TEV+c f94z0PBGLeAh0Q+8/f7rpmOv0XVhUr6mSqF/KMYu9Rhx7CwTLv9LIIE0hFX11EnP jnvjY7XqJoL9664s0RCXV4LjaybOKeDuynfNfc0TSCxK0FIlFvemPt2fUVzOMg9B eop1yv/QNVypSJoN0O7w5YE7GicPio9bLqSP7iyMaRxjrYTMPIyfIuqgTWZX7el9 lT8EVdui5OD5RSSWGYlpb+c+RgvEVRlQe+H4EISgIpbtPQ12rgVNVd5g4aB3Wzg4 8UfwZEgj4IFwUQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:02 2025 by rpki-client