This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json) Hash identifier: 1ZaFzPo+9k1lc0NWRI84cQn00uFUTzjFHvpFmBw/gd4= Subject key identifier: 49:21:B8:14:6F:1D:D5:5F:8B:F7:F8:BF:61:15:5A:02:D2:76:96:AC Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81 Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81 Certificate serial: 019B334411B86D63A157A4830C799A4122D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft Manifest number: 0A51 Signing time: Thu 18 Dec 2025 21:00:57 +0000 Manifest this update: Thu 18 Dec 2025 21:00:57 +0000 Manifest next update: Fri 19 Dec 2025 21:00:57 +0000 Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: nMQQrp+Fg018eq+B4XDCSCLSj6ZcVxAUiJO2JvReLRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:11:b8:6d:63:a1:57:a4:83:0c:79:9a:41:22:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81 Validity Not Before: Dec 18 21:00:57 2025 GMT Not After : Dec 19 21:00:57 2025 GMT Subject: CN=4921b8146f1dd55f8bf7f8bf61155a02d27696ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:49:e9:85:9b:3f:20:cc:73:19:18:cf:52: 9d:a4:63:1c:70:cd:65:f4:ac:9a:fc:25:dc:64:b6: 9e:8b:33:66:bc:1b:b1:15:f0:65:8e:54:48:aa:e5: a6:d3:92:df:51:1b:41:af:03:14:ec:06:fb:4e:bb: 47:bf:c9:19:4a:c5:0c:2f:c9:c8:f2:7e:73:88:c0: 40:01:54:d6:de:5d:72:90:4d:d8:d6:42:fe:4a:0d: 85:2e:38:b5:87:65:fd:37:81:9f:94:01:2c:61:aa: c4:f2:6e:49:9f:7d:f2:c8:a9:a7:c6:24:2f:4e:64: ec:c0:c4:a3:1e:d9:95:b3:09:8f:22:23:43:9e:35: dd:c4:55:0a:ef:d1:67:5a:46:e4:8c:47:40:96:c8: 19:36:46:c4:b3:b4:50:e3:3a:2c:0f:53:85:e4:9c: 7e:f8:1d:3c:89:de:63:59:ae:50:d3:dd:fc:18:9f: c8:c6:8e:ae:cd:8f:88:43:d2:f1:b5:0d:b5:22:b5: 22:15:78:71:a9:b2:6b:a1:0a:aa:bd:5c:5a:6b:7f: 61:b7:e4:5e:ea:1c:cf:c7:64:d8:12:a8:c3:eb:f9: f3:f4:b9:f7:13:8b:7a:f7:5e:75:a3:c5:b2:14:f9: 43:4f:ad:b5:e8:71:b3:cb:f1:0d:d7:4b:f1:d5:21: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:21:B8:14:6F:1D:D5:5F:8B:F7:F8:BF:61:15:5A:02:D2:76:96:AC X509v3 Authority Key Identifier: keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4c:9f:e3:3e:b0:5a:ab:be:a5:fe:bf:80:45:c2:98:75:6a: 00:f7:31:16:5b:7e:1e:3d:af:fb:cc:72:b8:6c:a5:7c:44:8b: ad:32:a4:18:f4:4b:d1:d8:ca:d1:14:1e:54:bb:5e:e3:8e:ef: a9:13:bc:f2:81:11:06:54:a7:39:c2:b6:db:bf:20:13:ec:30: bf:40:f7:cd:a7:45:da:04:e6:99:b5:dc:96:1e:a7:c7:69:b3: 65:38:1b:f4:20:cc:87:7b:68:d4:ec:1d:c6:48:4d:04:f7:b7: 7a:a2:78:b2:56:09:1e:8d:da:20:57:b2:b4:76:e1:d0:b0:bf: b7:2b:0a:56:d5:b5:f9:ec:a3:b6:f8:83:ec:fa:c0:d0:1e:a6: 6e:b0:f7:80:6f:c2:56:f9:3b:ce:5d:40:56:1d:b3:40:dd:73: 3a:85:aa:41:b7:cf:37:fa:03:fa:d3:a0:f2:dd:eb:7f:51:e1: c8:4a:05:df:b3:88:37:8f:bc:e8:f0:92:23:9f:4e:99:c9:df: 10:9f:05:96:c5:a9:9c:19:88:80:0f:17:36:97:bb:f9:fa:13: 97:93:c5:3c:31:81:ae:6c:4c:9e:32:ed:19:79:1c:c6:10:9b: 88:a6:bd:c6:c6:bc:21:97:b2:70:71:4c:98:c3:59:04:e2:86: 71:c4:a7:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBG4bWOhV6SDDHmaQSLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmY3ZGViMThhMTI5MjA2YmFkNzczY2Y4MjIxZGU1NDRl M2ZkODEwHhcNMjUxMjE4MjEwMDU3WhcNMjUxMjE5MjEwMDU3WjAzMTEwLwYDVQQD Eyg0OTIxYjgxNDZmMWRkNTVmOGJmN2Y4YmY2MTE1NWEwMmQyNzY5NmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYFJ6YWbPyDMcxkYz1KdpGMccM1l 9Kya/CXcZLaeizNmvBuxFfBljlRIquWm05LfURtBrwMU7Ab7TrtHv8kZSsUML8nI 8n5ziMBAAVTW3l1ykE3Y1kL+Sg2FLji1h2X9N4GflAEsYarE8m5Jn33yyKmnxiQv TmTswMSjHtmVswmPIiNDnjXdxFUK79FnWkbkjEdAlsgZNkbEs7RQ4zosD1OF5Jx+ +B08id5jWa5Q0938GJ/Ixo6uzY+IQ9LxtQ21IrUiFXhxqbJroQqqvVxaa39ht+Re 6hzPx2TYEqjD6/nz9Ln3E4t69151o8WyFPlDT6216HGzy/EN10vx1SGJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkhuBRvHdVfi/f4v2EVWgLSdpasMB8GA1UdIwQY MBaAFMe/fesYoSkga613PPgiHeVE4/2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYt MDE4ZmM5YzAyOGIwLzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYtMDE4ZmM5YzAyOGIw LzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkyf4z6w Wqu+pf6/gEXCmHVqAPcxFlt+Hj2v+8xyuGylfESLrTKkGPRL0djK0RQeVLte447v qRO88oERBlSnOcK2278gE+wwv0D3zadF2gTmmbXclh6nx2mzZTgb9CDMh3to1Owd xkhNBPe3eqJ4slYJHo3aIFeytHbh0LC/tysKVtW1+eyjtviD7PrA0B6mbrD3gG/C Vvk7zl1AVh2zQN1zOoWqQbfPN/oD+tOg8t3rf1HhyEoF37OIN4+86PCSI59Omcnf EJ8FlsWpnBmIgA8XNpe7+foTl5PFPDGBrmxMnjLtGXkcxhCbiKa9xsa8IZeycHFM mMNZBOKGccSnFg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:43 2025 by rpki-client