This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json) Hash identifier: Hn0yQskLhoFxibvI6enZTthGNrEQn8sZR6j04gCTwpo= Subject key identifier: C8:E7:AD:BF:96:27:1F:3B:3D:1F:DB:25:49:BF:0B:86:74:FA:A8:D0 Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Certificate serial: 019B2F678C6F58D6C65A0F3DDFD5A32AB70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft Manifest number: 0C03 Signing time: Thu 18 Dec 2025 03:01:13 +0000 Manifest this update: Thu 18 Dec 2025 03:01:13 +0000 Manifest next update: Fri 19 Dec 2025 03:01:13 +0000 Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: 821O/MrgHyf3G2QksCluxx5jqCLt9PszBabA2WfapTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:8c:6f:58:d6:c6:5a:0f:3d:df:d5:a3:2a:b7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48 Validity Not Before: Dec 18 03:01:13 2025 GMT Not After : Dec 19 03:01:13 2025 GMT Subject: CN=c8e7adbf96271f3b3d1fdb2549bf0b8674faa8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2c:d2:0c:df:a0:6f:28:15:8c:e1:f1:7e:10: 59:ed:63:e1:a9:a5:ba:d6:b8:a8:14:e9:71:96:c0: d6:a3:0e:48:73:be:8d:d0:6e:0a:04:72:53:ad:d7: 4a:f9:57:c4:7d:d4:29:4c:be:90:c1:ab:e4:56:6d: 9c:90:26:98:90:24:d3:85:9c:b9:77:49:f0:7b:3b: a0:17:67:61:d2:df:e2:4e:a1:bb:89:fe:ff:26:c4: bd:dc:ec:b0:ed:ad:81:74:eb:62:1c:d4:22:60:40: ac:6f:e0:ba:9f:f1:00:a7:5c:77:4a:0b:29:9f:90: b7:8b:70:f5:54:46:66:d0:e5:94:6e:ca:b3:c1:9f: 50:d5:11:14:f9:57:10:da:5d:19:94:02:e1:a4:7b: 68:d3:2a:a3:e4:96:04:38:86:ca:1f:23:a3:ec:4f: 75:6b:87:29:ea:68:26:61:95:44:c6:b8:c3:62:9c: b3:9e:bc:83:80:24:0a:e7:fa:68:2e:11:30:82:93: 01:25:5b:3b:94:91:1e:12:f3:d4:4b:07:6f:a0:c5: 57:f0:cc:d1:f2:0c:e8:30:b5:aa:b5:24:28:0e:da: 6a:35:bc:d8:d7:0e:db:61:95:d5:85:e2:48:d9:54: 92:87:11:27:51:e3:fa:e8:8b:8c:ed:fe:f1:80:22: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E7:AD:BF:96:27:1F:3B:3D:1F:DB:25:49:BF:0B:86:74:FA:A8:D0 X509v3 Authority Key Identifier: keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:59:b3:db:20:45:8c:5b:12:b4:56:c1:55:aa:45:68:67:a9: 33:ff:68:c9:a0:7d:23:ef:81:be:99:1e:be:9a:38:b0:f6:39: 04:da:b4:4b:9d:b1:16:c6:fe:b3:e2:6e:9b:1d:1b:29:2c:93: bb:a1:4a:4f:ef:3a:7d:2e:dd:6b:e2:70:e3:be:e0:90:22:3a: 6a:ec:a9:68:54:4f:d6:de:e6:ba:3d:1b:7f:29:d2:47:70:d7: bf:ff:fa:09:ee:f7:e8:8f:c7:03:f5:93:6d:56:52:51:09:14: 70:20:31:98:19:3d:05:c6:5b:c4:44:b9:46:be:11:1b:93:f9: 8f:b5:e3:4e:08:5a:e7:21:ae:36:0f:0b:99:18:c8:bb:ab:62: a5:21:ac:49:10:3c:f1:cd:6f:bb:44:79:a6:14:9b:c9:1f:a3: 7d:2b:67:3e:d5:cb:a6:d9:83:fc:ff:19:37:6e:2e:21:4d:28: 8f:0c:84:b8:d4:f0:ac:95:93:f5:8f:55:ae:7b:23:2a:32:e4: d4:1d:bd:c0:36:0b:31:4f:70:59:07:d1:e7:71:fe:e3:d2:84: ab:1d:35:a8:f3:f9:94:80:9a:89:6f:91:70:b4:0b:56:a2:91: 67:8b:57:a6:c3:95:a4:71:6c:dd:86:ee:a0:40:1b:b5:2e:32: d3:f0:14:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ4xvWNbGWg8939WjKrcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi NjJhNDgwHhcNMjUxMjE4MDMwMTEzWhcNMjUxMjE5MDMwMTEzWjAzMTEwLwYDVQQD EyhjOGU3YWRiZjk2MjcxZjNiM2QxZmRiMjU0OWJmMGI4Njc0ZmFhOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yzSDN+gbygVjOHxfhBZ7WPhqaW6 1rioFOlxlsDWow5Ic76N0G4KBHJTrddK+VfEfdQpTL6QwavkVm2ckCaYkCTThZy5 d0nwezugF2dh0t/iTqG7if7/JsS93Oyw7a2BdOtiHNQiYECsb+C6n/EAp1x3Sgsp n5C3i3D1VEZm0OWUbsqzwZ9Q1REU+VcQ2l0ZlALhpHto0yqj5JYEOIbKHyOj7E91 a4cp6mgmYZVExrjDYpyznryDgCQK5/poLhEwgpMBJVs7lJEeEvPUSwdvoMVX8MzR 8gzoMLWqtSQoDtpqNbzY1w7bYZXVheJI2VSShxEnUeP66IuM7f7xgCJFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjnrb+WJx87PR/bJUm/C4Z0+qjQMB8GA1UdIwQY MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVmz2yBF jFsStFbBVapFaGepM/9oyaB9I++Bvpkevpo4sPY5BNq0S52xFsb+s+Jumx0bKSyT u6FKT+86fS7da+Jw477gkCI6auypaFRP1t7muj0bfynSR3DXv//6Ce736I/HA/WT bVZSUQkUcCAxmBk9BcZbxES5Rr4RG5P5j7XjTgha5yGuNg8LmRjIu6tipSGsSRA8 8c1vu0R5phSbyR+jfStnPtXLptmD/P8ZN24uIU0ojwyEuNTwrJWT9Y9VrnsjKjLk 1B29wDYLMU9wWQfR53H+49KEqx01qPP5lICaiW+RcLQLVqKRZ4tXpsOVpHFs3Ybu oEAbtS4y0/AU5w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:27 2025 by rpki-client