This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json) Hash identifier: 2K+LgEwvtRvlwGoOfMtuKqWawY1444n4MYDjMAu3rgI= Subject key identifier: 97:AD:1A:7A:75:06:6E:E2:F1:B9:C8:7D:2A:44:42:27:33:FD:AD:65 Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c Certificate serial: 019B53062FD87872B5FD5754AFB18042AAF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft Manifest number: 068E Signing time: Thu 25 Dec 2025 01:01:12 +0000 Manifest this update: Thu 25 Dec 2025 01:01:12 +0000 Manifest next update: Fri 26 Dec 2025 01:01:12 +0000 Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: DbkNc4dGhRhR+nDHytRsB/Xr8Yqclc5YuCqjme/rhzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:2f:d8:78:72:b5:fd:57:54:af:b1:80:42:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c Validity Not Before: Dec 25 01:01:12 2025 GMT Not After : Dec 26 01:01:12 2025 GMT Subject: CN=97ad1a7a75066ee2f1b9c87d2a44422733fdad65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9d:1f:12:4e:0f:41:8a:9f:1c:a9:86:ca:af: 2f:3c:c0:d4:b2:da:c1:a7:e4:82:d4:97:9c:79:d9: 55:d2:68:dc:d0:92:8b:30:64:8c:ed:12:40:bb:76: 49:3e:10:f5:b4:ed:f2:ea:64:e8:0d:ef:16:52:24: 71:19:ef:49:65:54:38:12:ff:06:2b:dc:47:22:7b: db:99:c0:01:3c:a3:5a:e6:88:80:b2:02:6d:43:7d: 43:ed:53:24:b2:7d:2e:13:49:9e:65:2d:ff:24:a9: 95:36:aa:1f:79:e6:8f:6e:31:f4:d1:b4:ae:c0:1a: 0a:20:f4:ac:a6:bf:af:05:52:89:d3:e9:9a:42:31: 3a:49:8f:e1:9d:5d:41:36:5d:bf:31:a0:cb:9c:d8: cc:76:6f:64:18:2b:0e:c7:40:02:14:e6:f4:60:d9: f1:7b:dc:fc:d4:ec:bf:ae:72:0d:9a:08:57:0b:0c: de:77:ed:9e:32:06:5b:4e:72:b3:cd:67:3d:3c:67: 1e:f3:aa:d9:40:7c:55:96:98:fe:a9:86:a5:da:8c: 63:df:f8:c5:7b:11:f0:df:5a:69:ca:78:87:cb:7d: 04:2e:36:67:74:9f:d9:08:32:4c:ce:e4:3b:81:44: 19:7d:74:ba:29:d1:ab:19:e9:01:3d:e7:24:50:b5: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AD:1A:7A:75:06:6E:E2:F1:B9:C8:7D:2A:44:42:27:33:FD:AD:65 X509v3 Authority Key Identifier: keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:95:14:f9:0d:d4:c0:c0:dc:88:49:df:74:bf:2e:6b:8c:60: 7f:e8:1c:f2:3d:56:71:c2:f0:2a:55:0b:9c:7a:f5:a5:19:25: f6:ce:44:95:dd:35:a8:ea:99:ad:87:56:ad:8f:97:f1:74:42: 68:2d:99:6e:bf:29:3e:a6:42:d8:de:02:26:80:f7:17:4a:63: f6:54:3e:f8:62:b9:29:46:ae:bb:92:7b:02:10:ac:27:7b:61: f7:fb:08:a5:9c:6b:43:04:33:d6:45:56:b6:67:9f:31:b0:68: 95:f3:43:3a:12:8b:4a:42:eb:8c:4b:9a:d7:5b:2e:a2:33:1e: 6a:65:56:c1:cd:34:45:11:fc:50:69:db:dc:41:95:58:b6:02: bd:26:63:5d:fc:e9:23:2b:45:50:a3:33:4f:76:ec:6d:52:95: 35:30:37:6b:52:f5:67:90:e0:17:9b:f0:23:c4:75:f6:f1:1f: 86:47:5e:5e:74:4a:d5:ee:22:de:bf:d6:e0:07:cf:43:89:94: 7d:8a:79:20:7a:ab:24:0e:76:d7:c3:ee:cd:67:ad:95:01:2e: ef:0b:79:ef:48:c3:3c:8a:b3:c4:ee:4f:63:ff:cb:28:a2:d3: 07:2d:32:d2:33:aa:a3:78:ea:bd:3c:ec:0d:33:45:f5:be:c6: 9a:03:d4:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBi/YeHK1/VdUr7GAQqr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmM2M3MTAwMDY0NTBjZGU3NGE0MTlhNzE0MzI5OGU1NTA2 NmYyNmMwHhcNMjUxMjI1MDEwMTEyWhcNMjUxMjI2MDEwMTEyWjAzMTEwLwYDVQQD Eyg5N2FkMWE3YTc1MDY2ZWUyZjFiOWM4N2QyYTQ0NDIyNzMzZmRhZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk50fEk4PQYqfHKmGyq8vPMDUstrB p+SC1JecedlV0mjc0JKLMGSM7RJAu3ZJPhD1tO3y6mToDe8WUiRxGe9JZVQ4Ev8G K9xHInvbmcABPKNa5oiAsgJtQ31D7VMksn0uE0meZS3/JKmVNqofeeaPbjH00bSu wBoKIPSspr+vBVKJ0+maQjE6SY/hnV1BNl2/MaDLnNjMdm9kGCsOx0ACFOb0YNnx e9z81Oy/rnINmghXCwzed+2eMgZbTnKzzWc9PGce86rZQHxVlpj+qYal2oxj3/jF exHw31ppyniHy30ELjZndJ/ZCDJMzuQ7gUQZfXS6KdGrGekBPeckULUahwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJetGnp1Bm7i8bnIfSpEQicz/a1lMB8GA1UdIwQY MBaAFO88cQAGRQzedKQZpxQymOVQZvJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAt NGRiZDUyZDQ1NDEwLzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAtNGRiZDUyZDQ1NDEw LzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5UU+Q3U wMDciEnfdL8ua4xgf+gc8j1WccLwKlULnHr1pRkl9s5Eld01qOqZrYdWrY+X8XRC aC2Zbr8pPqZC2N4CJoD3F0pj9lQ++GK5KUauu5J7AhCsJ3th9/sIpZxrQwQz1kVW tmefMbBolfNDOhKLSkLrjEua11suojMeamVWwc00RRH8UGnb3EGVWLYCvSZjXfzp IytFUKMzT3bsbVKVNTA3a1L1Z5DgF5vwI8R19vEfhkdeXnRK1e4i3r/W4AfPQ4mU fYp5IHqrJA5218PuzWetlQEu7wt570jDPIqzxO5PY//LKKLTBy0y0jOqo3jqvTzs DTNF9b7GmgPUQQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:28 2025 by rpki-client