This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json) Hash identifier: 4y3bAtJOGaejSmfYsRdpipCqRhSq+4F7pZSCOyfbCXY= Subject key identifier: 3E:AD:20:94:77:57:B0:FE:8D:A9:E8:82:F9:91:34:47:A9:59:57:53 Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96 Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96 Certificate serial: 019B56E2E3DC5C04DFC28CB517CB434626F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft Manifest number: 0E2E Signing time: Thu 25 Dec 2025 19:01:08 +0000 Manifest this update: Thu 25 Dec 2025 19:01:08 +0000 Manifest next update: Fri 26 Dec 2025 19:01:08 +0000 Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: sFEeKZANIoobhfErMgkl2heKXEC8HexIpkjadcnye+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e2:e3:dc:5c:04:df:c2:8c:b5:17:cb:43:46:26:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96 Validity Not Before: Dec 25 19:01:08 2025 GMT Not After : Dec 26 19:01:08 2025 GMT Subject: CN=3ead20947757b0fe8da9e882f9913447a9595753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:6d:89:cf:b8:d0:d8:9e:02:a3:52:d4:94: c7:05:b9:4f:df:a2:32:b1:99:79:5c:14:e3:dd:b5: c3:b5:a7:43:2d:09:71:7f:db:45:83:9a:9a:5c:bd: de:16:3f:62:4d:29:7e:fc:ba:32:cb:a6:55:81:ef: c7:e4:0e:27:81:0c:a2:fe:87:cc:61:7f:8c:f9:ba: 9d:1b:8e:72:8c:78:38:e0:6f:ed:ee:7b:1c:49:44: 9f:5c:0c:b1:70:d0:1c:fa:35:1e:2d:23:ae:88:e8: 54:40:69:22:ab:9c:fa:c7:e1:bd:78:34:07:1c:d6: ea:8e:9e:1a:fe:dc:8c:b2:09:b8:8a:08:c3:14:7a: 1a:97:a5:89:70:ab:27:d5:6f:c3:f7:6d:15:94:4e: 95:01:c0:57:08:e7:d5:e9:03:97:a6:b4:f6:62:4f: 43:4a:d8:12:9e:af:98:be:02:41:d8:f9:7a:4a:2b: 98:f9:cf:51:7f:a6:97:c1:e3:2f:32:5f:85:fe:f4: 61:e5:f4:b9:57:35:43:2e:f6:ff:d0:8e:e6:f8:a9: 18:46:36:e4:0e:6a:98:f6:15:aa:85:48:05:54:69: 9e:29:89:f1:ef:41:aa:98:6a:18:17:62:ae:f7:bd: 5b:1f:09:61:07:66:14:ad:5a:6b:c4:c2:1e:81:ff: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AD:20:94:77:57:B0:FE:8D:A9:E8:82:F9:91:34:47:A9:59:57:53 X509v3 Authority Key Identifier: keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ac:f2:83:3c:43:da:e8:d1:33:d4:bb:4e:75:27:7b:17:12: 92:b8:8d:1d:6b:4a:e3:5b:42:d4:bb:d3:9b:df:ca:ab:d2:cb: 4a:92:02:c0:58:c1:69:96:77:c3:a2:f5:26:eb:36:6f:7b:e6: ca:51:40:66:96:88:9d:c1:f6:2e:29:37:3c:bd:2c:90:c3:90: ea:18:25:73:a0:fe:9b:14:4e:94:72:86:a4:10:63:c6:16:5f: 78:6e:ff:da:42:af:18:e6:cd:69:e0:02:fb:ae:c4:37:b6:63: ad:3f:4a:bd:cf:f2:05:0c:a2:df:36:16:ad:99:e8:8b:94:95: 71:f9:d1:05:52:8a:0d:ee:89:44:33:46:0e:fd:a4:bf:df:9f: d6:8f:db:b3:b3:c7:cf:c6:28:b9:f9:03:3a:83:f3:cb:4a:68: 7a:be:aa:8a:be:e4:16:74:72:b1:e8:f6:3e:3a:4f:a0:52:6f: 4a:17:f0:9d:d7:11:85:75:31:97:f6:a2:ad:42:f8:35:7c:87: c4:96:67:95:d1:da:bd:06:83:22:7b:50:3b:46:1c:36:58:0a: eb:f1:25:ea:61:f9:cc:94:d5:73:06:da:9d:35:6b:e9:e4:9e: e4:30:c3:96:b9:82:73:82:37:c5:5b:ab:2d:78:7d:e3:e5:9e: 12:8a:ad:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW4uPcXATfwoy1F8tDRibzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjk4NzE4OWRhNGUzODM4NWIwNzIxODU0ZmVjY2MzZWY0 NjZhOTYwHhcNMjUxMjI1MTkwMTA4WhcNMjUxMjI2MTkwMTA4WjAzMTEwLwYDVQQD EygzZWFkMjA5NDc3NTdiMGZlOGRhOWU4ODJmOTkxMzQ0N2E5NTk1NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxChtic+40NieAqNS1JTHBblP36Iy sZl5XBTj3bXDtadDLQlxf9tFg5qaXL3eFj9iTSl+/Loyy6ZVge/H5A4ngQyi/ofM YX+M+bqdG45yjHg44G/t7nscSUSfXAyxcNAc+jUeLSOuiOhUQGkiq5z6x+G9eDQH HNbqjp4a/tyMsgm4igjDFHoal6WJcKsn1W/D920VlE6VAcBXCOfV6QOXprT2Yk9D StgSnq+YvgJB2Pl6SiuY+c9Rf6aXweMvMl+F/vRh5fS5VzVDLvb/0I7m+KkYRjbk DmqY9hWqhUgFVGmeKYnx70GqmGoYF2Ku971bHwlhB2YUrVprxMIegf8WywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6tIJR3V7D+janogvmRNEepWVdTMB8GA1UdIwQY MBaAFO/5hxidpOODhbByGFT+zMPvRmqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAt ODg1ZWUxOWVkNmJmLzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAtODg1ZWUxOWVkNmJm LzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6zygzxD 2ujRM9S7TnUnexcSkriNHWtK41tC1LvTm9/Kq9LLSpICwFjBaZZ3w6L1Jus2b3vm ylFAZpaIncH2Lik3PL0skMOQ6hglc6D+mxROlHKGpBBjxhZfeG7/2kKvGObNaeAC +67EN7ZjrT9Kvc/yBQyi3zYWrZnoi5SVcfnRBVKKDe6JRDNGDv2kv9+f1o/bs7PH z8YoufkDOoPzy0poer6qir7kFnRysej2PjpPoFJvShfwndcRhXUxl/airUL4NXyH xJZnldHavQaDIntQO0YcNlgK6/El6mH5zJTVcwbanTVr6eSe5DDDlrmCc4I3xVur LXh94+WeEoqtTw== -----END CERTIFICATE-----Generated at Thu Dec 25 21:08:01 2025 by rpki-client