This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json) Hash identifier: B1RjkzRpAT3s2OBJ/6tO7iEsfuh/9eKogIpQez5X+x0= Subject key identifier: FF:A1:6C:89:A4:12:9C:A2:38:A1:26:72:DF:BF:18:99:F7:1A:C2:0E Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16 Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16 Certificate serial: 019B32D6BECA3AD434FDE054775CE2F1447C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft Manifest number: 0B0B Signing time: Thu 18 Dec 2025 19:01:32 +0000 Manifest this update: Thu 18 Dec 2025 19:01:32 +0000 Manifest next update: Fri 19 Dec 2025 19:01:32 +0000 Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: w6sl8D0PIqGk9wBsV38YdIAghJG1eLcbRk+OjFjwlS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:be:ca:3a:d4:34:fd:e0:54:77:5c:e2:f1:44:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16 Validity Not Before: Dec 18 19:01:32 2025 GMT Not After : Dec 19 19:01:32 2025 GMT Subject: CN=ffa16c89a4129ca238a12672dfbf1899f71ac20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:03:c6:f7:59:06:b6:80:44:87:f1:ba:60: 17:d8:3f:c9:92:aa:c8:2d:8f:11:9d:07:f2:b7:a3: 35:57:7f:57:e6:0b:82:17:44:6a:c3:b4:41:ec:d7: 22:a0:09:4c:43:7c:25:c0:ec:7c:22:f2:12:97:90: 8e:14:13:11:ae:55:b6:64:d1:36:71:4c:0b:d2:ab: d8:d1:25:fc:db:a3:04:cb:62:31:e3:c4:1d:e1:63: 29:b5:67:02:9f:85:a8:b9:ed:5e:ca:24:62:03:12: 3f:17:e0:30:58:3e:b8:1b:72:bf:0b:0a:bc:33:ac: af:0f:8c:b5:ac:9e:c2:7a:c2:71:9f:34:a4:42:f6: 22:29:e9:2b:42:f5:ff:7f:08:d6:45:7e:2f:3f:d3: f7:b0:e7:3d:1e:8a:53:3b:7e:93:90:d2:e7:7f:7a: 82:91:0d:ec:83:c3:89:bc:78:e8:80:4c:3a:46:e9: f6:14:f1:91:2f:de:80:01:53:2a:4b:4f:fb:d8:98: 2e:2a:c1:15:ad:86:71:6a:33:7b:dd:1f:43:a2:f5: b3:8a:8f:6b:28:32:fd:6a:0f:44:22:87:1a:b8:3b: 76:e2:64:a6:2a:a4:43:15:bd:d4:73:e7:41:0b:a3: 5e:f5:17:dd:17:18:a6:b6:49:a4:54:45:f7:b9:38: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:6C:89:A4:12:9C:A2:38:A1:26:72:DF:BF:18:99:F7:1A:C2:0E X509v3 Authority Key Identifier: keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:00:17:0e:45:e0:f9:72:9f:43:00:2f:97:e0:46:22:ec:3c: db:d8:c7:1d:83:3c:1a:39:da:59:89:a7:81:ed:53:8a:f4:91: 80:f0:35:f6:e2:62:16:98:9c:ea:68:de:13:a5:7d:dd:b9:2f: b5:a3:dd:cd:45:69:b6:fc:60:57:95:d2:b2:31:99:02:b3:55: b2:37:a2:87:2e:ff:58:1a:01:71:aa:ba:83:cb:cd:fe:0d:b0: 9c:70:80:4c:dc:9a:55:02:65:f8:a7:d9:5a:4c:ec:34:54:c2: 6c:3a:ed:95:bb:2c:ef:ae:12:9e:25:21:8f:66:9b:ef:30:95: 98:83:18:62:80:a1:4b:20:bb:46:b6:f0:f7:55:c6:f5:a2:46: 9c:c9:85:e0:60:aa:db:e2:31:60:f6:1c:cc:b1:a9:62:a3:36: aa:c6:4f:69:aa:a6:a2:9a:f8:63:cc:92:3e:0a:0d:96:7d:6f: a4:ef:e1:3f:26:dd:28:22:4b:35:1d:de:2e:e1:a7:1e:a9:de: e4:f1:bd:09:7f:49:4e:99:87:a4:75:fb:be:5d:83:9e:9c:35: 8c:95:4a:ec:20:65:33:84:18:57:cf:d3:a8:e9:27:e8:a4:a2: ec:40:d9:13:90:b2:bc:07:fa:81:06:67:1f:a1:12:e3:90:cf: 9c:3b:f1:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1r7KOtQ0/eBUd1zi8UR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDk3ZjYwNzhkMjJlODJmZDNkMDRhZWM1ZDY3MjE3MTUy NTZmMTYwHhcNMjUxMjE4MTkwMTMyWhcNMjUxMjE5MTkwMTMyWjAzMTEwLwYDVQQD EyhmZmExNmM4OWE0MTI5Y2EyMzhhMTI2NzJkZmJmMTg5OWY3MWFjMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHgDxvdZBraARIfxumAX2D/JkqrI LY8RnQfyt6M1V39X5guCF0Rqw7RB7NcioAlMQ3wlwOx8IvISl5COFBMRrlW2ZNE2 cUwL0qvY0SX826MEy2Ix48Qd4WMptWcCn4Woue1eyiRiAxI/F+AwWD64G3K/Cwq8 M6yvD4y1rJ7CesJxnzSkQvYiKekrQvX/fwjWRX4vP9P3sOc9HopTO36TkNLnf3qC kQ3sg8OJvHjogEw6Run2FPGRL96AAVMqS0/72JguKsEVrYZxajN73R9DovWzio9r KDL9ag9EIocauDt24mSmKqRDFb3Uc+dBC6Ne9RfdFximtkmkVEX3uTj8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+hbImkEpyiOKEmct+/GJn3GsIOMB8GA1UdIwQY MBaAFO3Zf2B40i6C/T0ErsXWchcVJW8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTIt NGZhZGFkMDg1ODIzLzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTItNGZhZGFkMDg1ODIz LzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgAXDkXg +XKfQwAvl+BGIuw829jHHYM8GjnaWYmnge1TivSRgPA19uJiFpic6mjeE6V93bkv taPdzUVptvxgV5XSsjGZArNVsjeihy7/WBoBcaq6g8vN/g2wnHCATNyaVQJl+KfZ WkzsNFTCbDrtlbss764SniUhj2ab7zCVmIMYYoChSyC7Rrbw91XG9aJGnMmF4GCq 2+IxYPYczLGpYqM2qsZPaaqmopr4Y8ySPgoNln1vpO/hPybdKCJLNR3eLuGnHqne 5PG9CX9JTpmHpHX7vl2Dnpw1jJVK7CBlM4QYV8/TqOkn6KSi7EDZE5CyvAf6gQZn H6ES45DPnDvxPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:23 2025 by rpki-client