This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json) Hash identifier: /T3uHhJAiJNgxYQwd6bACIxYEKh8L8Q3ggWr00plrDw= Subject key identifier: 6C:36:46:54:26:26:E5:4E:36:48:4A:2A:84:47:83:1C:E1:D0:B3:D4 Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9 Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9 Certificate serial: 019B4702117544E1EA64CE35955EF2D07B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft Manifest number: 1420 Signing time: Mon 22 Dec 2025 17:01:16 +0000 Manifest this update: Mon 22 Dec 2025 17:01:16 +0000 Manifest next update: Tue 23 Dec 2025 17:01:16 +0000 Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: Ksm8YO7X+mey2cJ3yPnIt3e8fCyLq7Qgez1VDfS9G4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:11:75:44:e1:ea:64:ce:35:95:5e:f2:d0:7b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9 Validity Not Before: Dec 22 17:01:16 2025 GMT Not After : Dec 23 17:01:16 2025 GMT Subject: CN=6c3646542626e54e36484a2a8447831ce1d0b3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:e3:44:01:c4:00:08:4d:6a:d0:46:c8:f6: 66:cc:59:5f:14:0b:e2:20:5c:d5:83:62:18:b9:c0: c8:b6:6a:30:fc:9d:d2:41:f3:26:c6:ec:86:12:9d: f6:71:ef:80:ff:06:ed:cc:77:65:98:ac:6f:d5:ce: a7:da:02:dc:0b:52:98:0b:cd:56:1a:19:e2:f2:d2: 9a:7d:ed:de:f2:6b:24:68:80:73:61:6e:e4:6e:f1: 65:d0:ad:d1:9e:42:de:cf:fa:40:76:0b:c9:05:3a: 5a:e4:85:96:44:54:27:51:af:e2:24:d9:9d:48:45: 52:7a:fb:43:ea:64:22:61:91:48:64:43:a6:4c:b0: 3f:3b:1f:fb:d9:0c:97:ff:71:74:24:f1:97:d6:5b: a3:01:28:d9:5f:b4:a2:6f:20:45:47:6b:96:11:40: 8a:96:3b:b1:73:cc:18:7b:bb:25:59:fe:c1:68:7d: 6b:3c:a8:0c:50:db:ca:e7:92:9c:d9:b6:6e:99:94: 87:92:e1:9b:92:aa:f4:eb:6a:34:7b:7c:65:f4:8b: ac:e1:f0:91:17:84:82:7c:62:33:14:85:69:ae:58: b6:d8:bd:f9:ee:f3:ab:68:56:aa:23:d4:66:0b:d3: 3b:d0:dd:52:10:b1:f1:e5:28:60:a9:1d:69:44:55: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:36:46:54:26:26:E5:4E:36:48:4A:2A:84:47:83:1C:E1:D0:B3:D4 X509v3 Authority Key Identifier: keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6e:a1:07:5c:7c:dc:e7:52:1b:44:e3:d4:dd:72:22:0d:ea: f7:11:12:93:21:5c:45:c1:c0:cc:c6:1d:eb:52:aa:fa:14:f0: 2b:82:25:09:5c:9a:25:aa:fd:fa:b3:5f:fa:13:0f:0a:68:2d: b6:f6:24:ca:b2:f7:84:eb:08:e6:4f:21:40:98:3f:41:e2:7e: 82:72:7e:9a:54:3c:15:87:aa:35:83:b6:79:48:24:e6:72:ee: 38:0e:3b:b4:d4:ff:c6:52:06:a6:f7:e7:31:49:d1:22:39:b9: b8:48:8f:cb:38:a4:d7:c3:71:0a:7b:cf:c0:6b:da:b8:69:8e: 5e:0b:5f:24:3a:19:a0:7e:4d:ec:22:2f:59:a4:a7:df:a5:68: a6:c9:b4:a0:f9:d0:85:69:82:84:a8:fb:8f:ad:8e:24:56:15: 55:c8:c1:a7:e7:af:92:55:39:99:76:59:2b:d9:87:1d:f0:35: 69:66:85:a5:36:61:45:c0:e1:08:3c:97:a4:18:8a:52:06:1e: 8b:a6:f3:76:c6:b3:d4:71:55:fd:5a:28:15:8b:cb:b5:ad:b8: 5c:3e:37:55:00:a9:97:55:38:22:c4:73:44:5a:de:7a:22:ee: 8d:c8:90:d1:f6:b7:6d:c2:98:59:72:89:e3:2f:f4:24:0c:66: fc:86:58:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAhF1ROHqZM41lV7y0HsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh ZTQwYTkwHhcNMjUxMjIyMTcwMTE2WhcNMjUxMjIzMTcwMTE2WjAzMTEwLwYDVQQD Eyg2YzM2NDY1NDI2MjZlNTRlMzY0ODRhMmE4NDQ3ODMxY2UxZDBiM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JDjRAHEAAhNatBGyPZmzFlfFAvi IFzVg2IYucDItmow/J3SQfMmxuyGEp32ce+A/wbtzHdlmKxv1c6n2gLcC1KYC81W Ghni8tKafe3e8mskaIBzYW7kbvFl0K3RnkLez/pAdgvJBTpa5IWWRFQnUa/iJNmd SEVSevtD6mQiYZFIZEOmTLA/Ox/72QyX/3F0JPGX1lujASjZX7SibyBFR2uWEUCK ljuxc8wYe7slWf7BaH1rPKgMUNvK55Kc2bZumZSHkuGbkqr062o0e3xl9Ius4fCR F4SCfGIzFIVprli22L357vOraFaqI9RmC9M70N1SELHx5ShgqR1pRFW6/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw2RlQmJuVONkhKKoRHgxzh0LPUMB8GA1UdIwQY MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5 LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK26hB1x8 3OdSG0Tj1N1yIg3q9xESkyFcRcHAzMYd61Kq+hTwK4IlCVyaJar9+rNf+hMPCmgt tvYkyrL3hOsI5k8hQJg/QeJ+gnJ+mlQ8FYeqNYO2eUgk5nLuOA47tNT/xlIGpvfn MUnRIjm5uEiPyzik18NxCnvPwGvauGmOXgtfJDoZoH5N7CIvWaSn36Vopsm0oPnQ hWmChKj7j62OJFYVVcjBp+evklU5mXZZK9mHHfA1aWaFpTZhRcDhCDyXpBiKUgYe i6bzdsaz1HFV/VooFYvLta24XD43VQCpl1U4IsRzRFreeiLujciQ0fa3bcKYWXKJ 4y/0JAxm/IZY8A== -----END CERTIFICATE-----Generated at Tue Dec 23 02:05:07 2025 by rpki-client