This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json) Hash identifier: KHIQUBPII/f5Sj4hBq0XCsRq146YWqDXOS65uDEFtIw= Subject key identifier: D6:32:DE:03:C8:F5:B0:39:B0:65:90:4C:A5:53:E7:B5:5D:6D:A9:EB Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Certificate serial: 019B4A7161C21DE50A3244A11F3B9F0A517F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft Manifest number: 0C11 Signing time: Tue 23 Dec 2025 09:01:43 +0000 Manifest this update: Tue 23 Dec 2025 09:01:43 +0000 Manifest next update: Wed 24 Dec 2025 09:01:43 +0000 Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: 9qTXH/F6p0pvebOt2EI+bVeca+n6Ex1lpgHyBZbLeE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:61:c2:1d:e5:0a:32:44:a1:1f:3b:9f:0a:51:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Validity Not Before: Dec 23 09:01:43 2025 GMT Not After : Dec 24 09:01:43 2025 GMT Subject: CN=d632de03c8f5b039b065904ca553e7b55d6da9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f4:dc:4e:37:fc:58:40:00:f2:19:bc:62:17: 75:78:52:8e:1a:0d:06:2b:c8:5b:a5:17:9e:04:13: 52:8b:36:8d:ee:9b:21:e1:a2:c3:12:71:43:42:7f: 48:2b:86:bd:e8:f7:a4:b0:3e:d7:bd:9d:a2:8a:fd: 64:c9:82:5f:47:56:c1:ce:89:bd:51:f4:0f:17:97: df:db:d3:b2:9a:7e:e1:45:21:dd:8e:3f:2c:38:c9: a7:23:3f:02:a6:01:b7:38:3d:a3:35:d5:41:ba:04: 28:82:dd:6e:05:42:ff:02:6d:8c:e3:cd:e8:37:3e: 6d:37:5a:b9:c5:b7:9e:cd:ea:ef:7a:31:ec:14:dc: 45:e1:d2:84:ff:ed:72:f2:03:58:b3:65:5e:cd:f0: 25:94:41:51:d0:3e:51:b7:f5:42:75:b0:0b:d4:ca: d5:0d:78:35:8b:1b:d5:ea:02:d9:a1:35:97:11:bb: 3c:d3:9c:f4:29:ef:96:b8:df:f5:39:f1:25:05:9d: 6c:c6:8c:33:51:41:e8:ab:d2:85:15:26:2f:65:76: bf:f1:14:0b:31:dc:56:20:c3:1a:d4:9b:7e:f1:4d: e1:2f:f1:25:5f:50:ef:3e:0a:e8:91:c1:ef:87:d7: f8:08:c2:3c:7e:c6:1c:f7:d2:cf:78:28:e8:1c:20: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:32:DE:03:C8:F5:B0:39:B0:65:90:4C:A5:53:E7:B5:5D:6D:A9:EB X509v3 Authority Key Identifier: keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:70:32:e7:53:2b:57:ee:f7:67:33:e9:2d:b5:49:54:28:55: 62:a3:52:9e:02:30:09:ee:d1:b7:40:b7:d1:0f:a9:72:94:7d: 76:e3:78:33:51:d6:2c:9f:7f:df:a4:0e:7c:d8:2f:57:28:c0: 57:67:06:5c:6f:f1:94:34:90:57:e1:f1:55:6d:1d:f7:67:62: 91:89:b3:2a:6b:da:e9:b7:70:b3:dd:14:26:c0:59:63:fd:ae: 09:52:92:8b:8b:39:6b:b9:10:64:0e:80:3f:b2:4a:ff:da:13: 17:e3:f8:79:4f:14:cc:bf:3b:2f:52:09:6f:0d:2e:eb:c4:e5: 30:f0:19:66:0d:69:98:bf:54:18:31:2c:f3:c0:f1:10:7e:5b: ba:f1:ca:57:73:de:75:af:3c:3b:ea:3e:44:2e:d7:58:8f:6d: b9:27:8e:ae:55:62:66:d7:82:75:ac:90:16:4f:2d:3f:00:54: 4c:cd:e6:1f:ac:40:2c:b8:1a:73:04:eb:20:64:a7:80:cc:4b: 8a:43:e8:12:97:85:a5:52:0c:a8:ed:3c:04:13:63:38:f2:8e: 24:3d:e7:5c:ea:f5:ed:f8:13:ae:6c:f0:a0:ee:ad:ca:99:5e: f4:c9:c6:8b:31:13:b2:07:0f:98:d1:a6:0b:7c:5f:49:20:b8: 25:66:b1:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcWHCHeUKMkShHzufClF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi NjJhNDgwHhcNMjUxMjIzMDkwMTQzWhcNMjUxMjI0MDkwMTQzWjAzMTEwLwYDVQQD EyhkNjMyZGUwM2M4ZjViMDM5YjA2NTkwNGNhNTUzZTdiNTVkNmRhOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/TcTjf8WEAA8hm8Yhd1eFKOGg0G K8hbpReeBBNSizaN7psh4aLDEnFDQn9IK4a96PeksD7XvZ2iiv1kyYJfR1bBzom9 UfQPF5ff29Oymn7hRSHdjj8sOMmnIz8CpgG3OD2jNdVBugQogt1uBUL/Am2M483o Nz5tN1q5xbeezervejHsFNxF4dKE/+1y8gNYs2VezfAllEFR0D5Rt/VCdbAL1MrV DXg1ixvV6gLZoTWXEbs805z0Ke+WuN/1OfElBZ1sxowzUUHoq9KFFSYvZXa/8RQL MdxWIMMa1Jt+8U3hL/ElX1DvPgrokcHvh9f4CMI8fsYc99LPeCjoHCAE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYy3gPI9bA5sGWQTKVT57VdbanrMB8GA1UdIwQY MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3Ay51Mr V+73ZzPpLbVJVChVYqNSngIwCe7Rt0C30Q+pcpR9duN4M1HWLJ9/36QOfNgvVyjA V2cGXG/xlDSQV+HxVW0d92dikYmzKmva6bdws90UJsBZY/2uCVKSi4s5a7kQZA6A P7JK/9oTF+P4eU8UzL87L1IJbw0u68TlMPAZZg1pmL9UGDEs88DxEH5buvHKV3Pe da88O+o+RC7XWI9tuSeOrlViZteCdayQFk8tPwBUTM3mH6xALLgacwTrIGSngMxL ikPoEpeFpVIMqO08BBNjOPKOJD3nXOr17fgTrmzwoO6typle9MnGizETsgcPmNGm C3xfSSC4JWaxaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:51:09 2025 by rpki-client