This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft File: 7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json) Hash identifier: RvCf/hLDyScHx+vAbbkEmMyHrzn7smNBf/6CsSAEg/0= Subject key identifier: 9D:EA:2F:20:86:F3:A1:2D:D6:60:71:E3:B3:8D:9D:CA:A9:44:F6:6A Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D Certificate issuer: /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d Certificate serial: 019B2FD5A20AD66CC429FCEEF76694ABAD4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft Manifest number: 0CF1 Signing time: Thu 18 Dec 2025 05:01:28 +0000 Manifest this update: Thu 18 Dec 2025 05:01:28 +0000 Manifest next update: Fri 19 Dec 2025 05:01:28 +0000 Files and hashes: 1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: aHntkQ+SkJLTLFvFDLv6AACdQSVsv8ZEHBOinqL98lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:a2:0a:d6:6c:c4:29:fc:ee:f7:66:94:ab:ad:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d Validity Not Before: Dec 18 05:01:28 2025 GMT Not After : Dec 19 05:01:28 2025 GMT Subject: CN=9dea2f2086f3a12dd66071e3b38d9dcaa944f66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:46:8c:d9:11:09:4b:5b:e2:a3:31:4a:45: 67:58:df:81:e5:5d:0d:32:9c:09:fd:5e:6d:20:cd: 4e:c7:7e:1b:e4:85:a9:31:82:11:5e:8e:a2:06:e4: 3a:ba:99:cb:db:57:f3:97:ae:72:88:62:ac:7b:4f: 54:d3:3c:1a:c2:11:52:43:4e:6a:c6:ec:44:56:57: 3b:7c:53:51:fe:0c:43:c2:ef:1e:d4:79:9b:02:59: 08:0b:b4:89:f2:95:2a:72:0d:fe:45:1f:77:5f:4f: 3e:b0:d4:5e:b5:46:f4:22:04:0d:2a:66:4e:6d:12: a4:86:c8:4c:4e:fc:94:c2:aa:e0:b9:80:99:00:ff: b1:15:ca:92:a9:17:c7:a3:73:e5:17:16:9d:77:a7: cc:9b:24:2b:a5:50:07:0f:a1:5d:23:f7:ac:c6:ef: 32:b5:21:33:30:81:81:73:61:f8:94:0f:21:fd:71: 21:76:0a:7f:1d:ed:5e:dc:0a:b5:05:ad:84:c9:bc: fd:78:cb:1c:d9:e1:5e:b5:7e:cb:40:e1:68:b4:37: 32:15:5c:cd:31:3c:41:9e:90:72:24:f0:73:67:81: 56:d6:e6:20:32:bc:5d:d2:a3:ec:9a:ec:71:7c:4e: 85:d9:d2:81:e6:ee:e3:c0:1d:10:af:ad:10:f3:2d: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EA:2F:20:86:F3:A1:2D:D6:60:71:E3:B3:8D:9D:CA:A9:44:F6:6A X509v3 Authority Key Identifier: keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:87:50:ce:89:5d:55:d7:22:69:7b:2b:de:7b:97:a0:3c:2e: 2c:0b:50:26:f1:76:a9:1e:27:f1:49:12:9f:95:71:a1:91:40: 07:3d:6d:1d:2a:a5:e7:44:64:00:ba:44:da:60:9a:9d:e3:a1: 11:02:e7:d7:ed:22:6f:4d:e5:cd:5e:b2:46:c1:21:f3:2b:1a: e2:da:ae:c5:e3:dd:a0:71:74:a0:8a:4a:ad:67:f4:3e:c7:d3: 1b:c1:94:97:c5:0c:ac:38:c5:48:35:16:bd:73:7e:22:d0:9b: c2:6d:29:17:58:b7:34:35:da:ca:ff:fd:0b:06:0e:55:09:90: da:d9:d6:ad:21:d0:09:23:b0:5d:ee:a5:77:43:e7:1e:fa:3f: cb:a7:90:50:2b:66:13:ca:a3:da:d8:da:d0:f1:74:ea:c7:6a: 23:f2:7e:a1:3c:ba:a2:27:fb:6e:e4:69:db:d6:16:ef:ff:eb: d4:e6:b5:6e:e2:ee:a2:d7:82:18:91:00:13:6c:48:99:f7:a6: 0e:43:70:78:b1:4b:72:2f:61:3a:df:6e:bf:52:23:dc:c3:d1: ef:af:78:d4:2a:eb:36:b1:16:44:40:24:3e:ba:a3:c7:72:58: 58:b7:b6:4f:20:f9:de:97:ff:5c:40:f2:36:dc:82:45:99:c2: b8:c2:a5:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1aIK1mzEKfzu92aUq61KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDllOGMzYjVkZGJlZTk4Y2Q3ZmVlYTBkZmY4Yzc2MjVi ODVhOWQwHhcNMjUxMjE4MDUwMTI4WhcNMjUxMjE5MDUwMTI4WjAzMTEwLwYDVQQD Eyg5ZGVhMmYyMDg2ZjNhMTJkZDY2MDcxZTNiMzhkOWRjYWE5NDRmNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyelGjNkRCUtb4qMxSkVnWN+B5V0N MpwJ/V5tIM1Ox34b5IWpMYIRXo6iBuQ6upnL21fzl65yiGKse09U0zwawhFSQ05q xuxEVlc7fFNR/gxDwu8e1HmbAlkIC7SJ8pUqcg3+RR93X08+sNRetUb0IgQNKmZO bRKkhshMTvyUwqrguYCZAP+xFcqSqRfHo3PlFxadd6fMmyQrpVAHD6FdI/esxu8y tSEzMIGBc2H4lA8h/XEhdgp/He1e3Aq1Ba2Eybz9eMsc2eFetX7LQOFotDcyFVzN MTxBnpByJPBzZ4FW1uYgMrxd0qPsmuxxfE6F2dKB5u7jwB0Qr60Q8y3SbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3qLyCG86Et1mBx47ONncqpRPZqMB8GA1UdIwQY MBaAFO3Z6MO13b7pjNf+6g3/jHYluFqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hZGE3Y2YtOTFlMi00ZTM4LTk2ZmMt YTI4NmVhMTFkMTAwLzEvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hZGE3Y2YtOTFlMi00ZTM4LTk2ZmMtYTI4NmVhMTFkMTAw LzEvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWodQzold VdciaXsr3nuXoDwuLAtQJvF2qR4n8UkSn5VxoZFABz1tHSql50RkALpE2mCaneOh EQLn1+0ib03lzV6yRsEh8ysa4tquxePdoHF0oIpKrWf0PsfTG8GUl8UMrDjFSDUW vXN+ItCbwm0pF1i3NDXayv/9CwYOVQmQ2tnWrSHQCSOwXe6ld0PnHvo/y6eQUCtm E8qj2tja0PF06sdqI/J+oTy6oif7buRp29YW7//r1Oa1buLuoteCGJEAE2xImfem DkNweLFLci9hOt9uv1Ij3MPR76941CrrNrEWREAkPrqjx3JYWLe2TyD53pf/XEDy NtyCRZnCuMKlMQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:30:34 2025 by rpki-client