This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json) Hash identifier: WWf2pRQ6/8zzWzPC8x38Jv/gUx1SSE9pvOFKBuA4xOk= Subject key identifier: EC:27:A3:1C:9F:C8:E0:47:A6:0C:F7:EA:F6:EA:0E:F8:09:ED:7F:1B Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95 Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95 Certificate serial: 019B5ABF9C89ECBFAFB015ED0D47E7507074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft Manifest number: 066E Signing time: Fri 26 Dec 2025 13:01:05 +0000 Manifest this update: Fri 26 Dec 2025 13:01:05 +0000 Manifest next update: Sat 27 Dec 2025 13:01:05 +0000 Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: EEZhjlo4FC0HLXoGoABJQehWnyuCCYvdax5Qxusqr1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:9c:89:ec:bf:af:b0:15:ed:0d:47:e7:50:70:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95 Validity Not Before: Dec 26 13:01:05 2025 GMT Not After : Dec 27 13:01:05 2025 GMT Subject: CN=ec27a31c9fc8e047a60cf7eaf6ea0ef809ed7f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:de:c4:a5:56:a6:3c:71:6f:e4:ef:d9:c9: 97:20:90:b0:a5:16:f0:9e:16:1b:2c:e8:70:5c:17: 5e:ff:90:93:75:c8:ce:92:d1:e4:6c:23:61:45:d6: 56:e5:dc:4b:1d:2f:fc:da:54:7d:86:ed:39:e9:fd: 69:25:56:2a:ba:32:f9:b5:6a:ad:08:b1:7c:d2:02: b8:69:40:08:32:1e:49:87:70:35:65:32:d9:19:75: 47:c6:7a:8d:37:5d:5b:95:cc:d8:e8:99:16:7c:5b: 08:b4:77:88:1c:be:b6:ba:c9:cc:32:ee:0b:60:57: 25:93:a9:ab:91:8a:2b:b1:19:99:1c:04:f5:00:e5: a4:00:b1:86:f5:97:5e:16:42:bb:7f:1c:b8:47:03: d6:00:43:cd:72:1d:85:00:a3:74:04:6b:19:e3:ff: 85:d7:17:34:56:1b:90:7b:8e:cb:74:06:c0:49:88: 31:5e:2d:c8:a1:73:33:b6:89:6c:ba:43:cf:2e:26: ad:c4:09:bd:50:ee:79:86:04:3d:ef:6d:8c:9c:4a: 7d:ca:11:5b:7d:ee:b0:fe:b9:d3:5d:2c:f0:b5:de: aa:c6:34:2a:11:8d:ce:53:29:00:fe:8e:0a:f2:1b: 3c:fc:2d:0f:06:c6:6b:9b:e2:c2:8d:69:92:45:b0: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:27:A3:1C:9F:C8:E0:47:A6:0C:F7:EA:F6:EA:0E:F8:09:ED:7F:1B X509v3 Authority Key Identifier: keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:49:64:3b:9c:8a:54:d9:2c:3a:0c:12:87:c7:86:e5:5d:13: 21:6e:de:74:5e:3b:b5:dd:4c:b6:51:3b:40:0c:69:6d:87:13: 5b:bb:8b:e0:8a:80:e2:ef:7a:95:8e:52:50:b9:e6:94:46:2f: 81:43:5d:c7:67:32:12:2e:e8:d3:86:7f:5c:e2:00:5c:73:4b: 1a:e9:0d:27:45:0a:76:e1:1c:76:d6:0f:2c:21:96:5b:16:4a: 01:95:d0:38:5e:39:83:b1:f8:c3:72:cb:51:6d:18:26:e4:62: 33:d3:ac:62:f2:73:06:80:5f:28:d3:46:6c:a4:a6:03:dc:4e: 53:b3:1c:07:b4:73:5a:3a:e9:4c:46:4b:44:8f:be:94:b7:05: 5f:bd:8b:9a:3d:82:27:54:be:83:d1:6c:30:67:77:1c:53:07: dd:7c:dd:c3:12:80:72:34:f3:bb:02:0c:06:21:67:79:a3:6e: 7a:dc:b1:83:73:ce:0d:10:9c:c4:84:28:33:14:ec:81:8e:8a: fb:73:86:a3:f5:74:f2:0b:0d:6b:e0:86:76:6b:b5:d6:2d:b6: 03:b9:5f:79:cb:d4:1b:29:6c:73:8d:58:2f:c3:b7:08:e5:86: b8:b7:7f:7c:dd:46:61:3a:bc:79:28:cb:96:e0:cf:b8:b9:15: 8e:05:b1:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav5yJ7L+vsBXtDUfnUHB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOWEzZWM3Y2IzYjE5MGU3MjEzMDk5ZGUxNjcxYmVhMmQz MjhhOTUwHhcNMjUxMjI2MTMwMTA1WhcNMjUxMjI3MTMwMTA1WjAzMTEwLwYDVQQD EyhlYzI3YTMxYzlmYzhlMDQ3YTYwY2Y3ZWFmNmVhMGVmODA5ZWQ3ZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pfexKVWpjxxb+Tv2cmXIJCwpRbw nhYbLOhwXBde/5CTdcjOktHkbCNhRdZW5dxLHS/82lR9hu056f1pJVYqujL5tWqt CLF80gK4aUAIMh5Jh3A1ZTLZGXVHxnqNN11blczY6JkWfFsItHeIHL62usnMMu4L YFclk6mrkYorsRmZHAT1AOWkALGG9ZdeFkK7fxy4RwPWAEPNch2FAKN0BGsZ4/+F 1xc0VhuQe47LdAbASYgxXi3IoXMztolsukPPLiatxAm9UO55hgQ9722MnEp9yhFb fe6w/rnTXSzwtd6qxjQqEY3OUykA/o4K8hs8/C0PBsZrm+LCjWmSRbDyXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwnoxyfyOBHpgz36vbqDvgJ7X8bMB8GA1UdIwQY MBaAFO2aPsfLOxkOchMJneFnG+otMoqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEt YTQ0MmY0Nzc2NGQzLzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEtYTQ0MmY0Nzc2NGQz LzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0lkO5yK VNksOgwSh8eG5V0TIW7edF47td1MtlE7QAxpbYcTW7uL4IqA4u96lY5SULnmlEYv gUNdx2cyEi7o04Z/XOIAXHNLGukNJ0UKduEcdtYPLCGWWxZKAZXQOF45g7H4w3LL UW0YJuRiM9OsYvJzBoBfKNNGbKSmA9xOU7McB7RzWjrpTEZLRI++lLcFX72Lmj2C J1S+g9FsMGd3HFMH3XzdwxKAcjTzuwIMBiFneaNuetyxg3PODRCcxIQoMxTsgY6K +3OGo/V08gsNa+CGdmu11i22A7lfecvUGylsc41YL8O3COWGuLd/fN1GYTq8eSjL luDPuLkVjgWxTQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:23 2025 by rpki-client