This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft File: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json) Hash identifier: m5owGIJ+cFdgouVNU7DB3GZxVaHmpNNyauJBRHsDs+k= Subject key identifier: F6:13:12:62:29:21:23:BD:CB:A6:3B:9F:54:2E:71:53:29:A6:29:3D Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57 Certificate issuer: /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857 Certificate serial: 019B2F672BE02CDED6257301D5954A9D0BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft Manifest number: 1711 Signing time: Thu 18 Dec 2025 03:00:49 +0000 Manifest this update: Thu 18 Dec 2025 03:00:49 +0000 Manifest next update: Fri 19 Dec 2025 03:00:49 +0000 Files and hashes: 1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: 3Q6fh+gvemvbVVuWjFecnIhNiZVnZxLXfdCs3YnE3vQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:2b:e0:2c:de:d6:25:73:01:d5:95:4a:9d:0b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857 Validity Not Before: Dec 18 03:00:49 2025 GMT Not After : Dec 19 03:00:49 2025 GMT Subject: CN=f6131262292123bdcba63b9f542e715329a6293d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:85:68:5f:5c:28:3b:40:4c:51:53:55:6b: 82:40:48:e2:7c:5c:cb:5f:b0:24:2d:59:d7:21:fc: ff:04:b8:10:36:cd:70:6b:02:81:9e:03:43:21:e0: ea:f8:4a:8b:11:36:83:83:ed:9e:2c:e1:e4:79:02: 45:cc:61:3f:51:fb:fc:3a:b1:6d:9f:8b:05:06:56: 7e:48:e7:bd:7e:08:bf:5b:a5:a3:13:63:8d:95:ef: 23:16:d0:a3:9c:85:45:4c:e7:f7:dd:fa:21:8a:5e: 07:c2:71:14:00:89:ef:b0:1f:55:39:f2:ac:55:56: 7b:6a:58:18:0e:1d:de:70:ad:f5:90:53:d9:ba:fc: b4:aa:f3:3a:36:88:79:ef:b6:58:e1:f4:ef:89:6e: 7c:a8:19:71:43:19:fc:e3:06:13:57:6d:48:db:83: b4:a5:9a:0a:8b:e3:c7:85:13:3a:f7:50:69:bb:ad: 03:7c:32:b0:5b:e6:64:87:1a:eb:f8:43:64:33:2f: 12:d0:89:f6:54:25:84:be:ac:90:4e:b0:9d:06:3a: 69:fd:cb:bc:6f:fc:74:8d:08:a1:ae:ca:22:68:fa: 08:0d:22:54:ec:68:5c:df:92:71:a5:6c:28:30:ef: 25:3c:ca:3a:17:15:62:5b:75:90:f6:91:7a:c9:db: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:13:12:62:29:21:23:BD:CB:A6:3B:9F:54:2E:71:53:29:A6:29:3D X509v3 Authority Key Identifier: keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:09:9e:7d:71:f5:66:67:c2:cd:75:82:03:c2:7a:f8:8e:24: 14:07:41:6a:bd:6c:3c:85:dc:42:0e:a3:df:30:fe:32:f2:cd: 41:c3:d3:02:d4:d8:e9:9f:e7:1f:b7:5d:a7:48:a3:09:2e:4e: b7:7d:91:cd:32:54:3f:fa:b7:64:3f:7a:bd:60:e8:01:c2:96: 05:4b:ae:6c:13:ce:f1:ed:13:28:7f:2f:da:19:32:dd:aa:46: e8:2c:d8:08:f0:b1:4f:ad:82:79:6f:ca:e0:d2:b2:ca:20:e7: ed:b9:53:eb:fb:36:fa:74:15:c9:fb:b6:be:71:af:fc:92:7b: 29:d5:15:65:eb:71:45:f2:d1:76:d9:5a:f2:25:8f:1d:e7:76: df:9a:9b:6e:15:0a:98:32:16:54:29:3e:4e:00:2b:b0:81:a6: 0b:69:d7:2f:7f:38:45:80:72:33:64:11:e0:fa:3a:ea:8b:cf: 78:0f:76:75:90:83:92:1f:fe:99:81:ff:d8:07:0e:73:cc:68: ec:b5:55:ee:68:ea:2d:f3:2d:1f:f0:5b:5a:e2:34:d9:4d:b4: 02:e9:cc:9b:48:6d:61:39:b7:80:b0:c1:55:31:31:bb:66:c1: 53:fc:1e:1d:80:6c:a7:64:73:3b:12:0d:1e:c6:88:df:42:5e: 9f:35:e6:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyvgLN7WJXMB1ZVKnQvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjQxNTAxM2YyZTljNGVlNThkN2MyZGZlZWVhYjI4MTY5 MmQ4NTcwHhcNMjUxMjE4MDMwMDQ5WhcNMjUxMjE5MDMwMDQ5WjAzMTEwLwYDVQQD EyhmNjEzMTI2MjI5MjEyM2JkY2JhNjNiOWY1NDJlNzE1MzI5YTYyOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5qFaF9cKDtATFFTVWuCQEjifFzL X7AkLVnXIfz/BLgQNs1wawKBngNDIeDq+EqLETaDg+2eLOHkeQJFzGE/Ufv8OrFt n4sFBlZ+SOe9fgi/W6WjE2ONle8jFtCjnIVFTOf33fohil4HwnEUAInvsB9VOfKs VVZ7algYDh3ecK31kFPZuvy0qvM6Noh577ZY4fTviW58qBlxQxn84wYTV21I24O0 pZoKi+PHhRM691Bpu60DfDKwW+Zkhxrr+ENkMy8S0In2VCWEvqyQTrCdBjpp/cu8 b/x0jQihrsoiaPoIDSJU7Ghc35JxpWwoMO8lPMo6FxViW3WQ9pF6ydvaaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYTEmIpISO9y6Y7n1QucVMppik9MB8GA1UdIwQY MBaAFO0kFQE/LpxO5Y18Lf7uqygWkthXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAt MDMxMWQwZDVkZGJiLzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAtMDMxMWQwZDVkZGJi LzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQmefXH1 ZmfCzXWCA8J6+I4kFAdBar1sPIXcQg6j3zD+MvLNQcPTAtTY6Z/nH7ddp0ijCS5O t32RzTJUP/q3ZD96vWDoAcKWBUuubBPO8e0TKH8v2hky3apG6CzYCPCxT62CeW/K 4NKyyiDn7blT6/s2+nQVyfu2vnGv/JJ7KdUVZetxRfLRdtla8iWPHed235qbbhUK mDIWVCk+TgArsIGmC2nXL384RYByM2QR4Po66ovPeA92dZCDkh/+mYH/2AcOc8xo 7LVV7mjqLfMtH/BbWuI02U20AunMm0htYTm3gLDBVTExu2bBU/weHYBsp2RzOxIN HsaI30JenzXm2g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:04:30 2025 by rpki-client