This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json) Hash identifier: QElBStxAYc4pMmDqLfePo0srrovewbOMoBtPoOo6EoA= Subject key identifier: 29:5B:14:F9:61:1E:E9:6D:92:30:5A:69:5E:22:A0:D9:76:BC:E7:58 Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23 Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523 Certificate serial: 019B397D7C54884C53DC5AECBD4BD3E9B496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft Manifest number: 0BAD Signing time: Sat 20 Dec 2025 02:01:23 +0000 Manifest this update: Sat 20 Dec 2025 02:01:23 +0000 Manifest next update: Sun 21 Dec 2025 02:01:23 +0000 Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: 0wP7ZR9y1kxk84Tcv+gBW23WXIEynR90+mr0JUNHbrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:7c:54:88:4c:53:dc:5a:ec:bd:4b:d3:e9:b4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523 Validity Not Before: Dec 20 02:01:23 2025 GMT Not After : Dec 21 02:01:23 2025 GMT Subject: CN=295b14f9611ee96d92305a695e22a0d976bce758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:5c:24:06:72:79:04:57:1d:9d:3b:1e:20: d2:14:b9:af:b4:17:3a:84:7b:58:7c:cd:d8:37:20: 95:e8:36:c3:3e:f7:ab:9a:4b:69:5d:7f:da:94:21: 2d:c6:8b:4c:19:a9:0d:6a:7d:c8:6e:8f:d0:21:e5: b5:7f:10:c2:4b:0a:91:d0:41:b7:e7:0d:ec:77:32: 8f:dd:3c:02:93:b7:00:9c:8c:6d:b4:a8:9b:18:88: a8:35:7d:9e:fc:52:a5:fc:23:13:d0:a9:73:82:85: 03:98:49:2f:c9:ad:6d:6b:ce:98:c1:84:9f:42:a6: 6b:1e:e5:80:28:07:ea:1d:46:3a:60:a1:ea:2a:cb: da:2e:89:7b:37:fc:7e:40:f0:49:93:0c:cc:3f:c9: 29:97:19:8c:d8:f8:ce:ae:7e:c7:88:b6:ea:2b:16: 28:26:a1:f4:5e:bc:29:8b:55:91:6a:31:11:f1:ef: 95:ed:f4:1b:17:2a:7b:e2:96:9d:8c:a0:a7:57:dd: 20:f0:77:34:f1:77:b9:ca:b8:71:1a:52:85:7f:02: 48:35:95:f0:9e:83:64:a4:58:b3:e3:13:1c:3d:c2: fb:76:b0:c1:12:78:b6:c3:81:7c:a2:e9:c2:9f:25: 54:dd:64:41:36:8b:c6:b2:af:5f:d6:1c:17:9f:48: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:14:F9:61:1E:E9:6D:92:30:5A:69:5E:22:A0:D9:76:BC:E7:58 X509v3 Authority Key Identifier: keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f1:e0:f2:b0:e2:93:d7:4a:6b:c9:1f:ae:7d:d3:be:5e:1a: 8f:9f:4d:ba:96:f0:fd:ca:3e:aa:c9:3f:34:9f:39:50:e2:08: b5:8e:aa:c9:a0:1d:7e:64:d8:45:6a:ed:fd:2d:dd:21:6f:7b: fe:db:4d:06:cd:a5:bb:78:58:f0:a4:3b:41:87:8d:92:73:32: 53:d5:e9:09:c6:96:44:30:75:9b:ed:6c:ef:cd:6a:23:bb:fc: 30:ce:17:4d:28:c4:cf:44:26:08:8f:f6:d7:d3:0c:56:85:5c: 71:60:ac:5c:7f:58:d7:07:f6:da:ba:6a:e5:95:b3:e5:c4:73: 6b:bc:99:6e:a5:be:5b:c0:11:b9:bd:d6:9d:01:a5:2b:34:10: 07:a9:ac:c8:42:15:dd:79:1d:4a:1f:99:6f:24:b5:7f:2d:bd: ec:b6:44:36:49:ed:81:7d:68:87:90:f1:14:87:bb:d5:a7:c0: 18:46:a2:d3:90:21:d5:d7:12:78:b4:ab:eb:3c:d5:86:77:5b: c3:c9:8d:d2:2b:29:b6:00:a8:e1:d6:60:05:54:52:f0:dd:b7: a0:04:3e:4a:3a:91:ae:01:2a:33:47:52:1b:9d:ab:8b:20:de: 3f:1e:21:43:f9:67:8f:5c:5f:31:10:46:a2:27:8c:67:07:57: 54:fa:3d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fXxUiExT3FrsvUvT6bSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNjhiNjY0Y2NkNTBjYTc2N2Q0NmZmYjM0ZjUzYTA2ZDEy MGI1MjMwHhcNMjUxMjIwMDIwMTIzWhcNMjUxMjIxMDIwMTIzWjAzMTEwLwYDVQQD EygyOTViMTRmOTYxMWVlOTZkOTIzMDVhNjk1ZTIyYTBkOTc2YmNlNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdcJAZyeQRXHZ07HiDSFLmvtBc6 hHtYfM3YNyCV6DbDPvermktpXX/alCEtxotMGakNan3Ibo/QIeW1fxDCSwqR0EG3 5w3sdzKP3TwCk7cAnIxttKibGIioNX2e/FKl/CMT0KlzgoUDmEkvya1ta86YwYSf QqZrHuWAKAfqHUY6YKHqKsvaLol7N/x+QPBJkwzMP8kplxmM2PjOrn7HiLbqKxYo JqH0Xrwpi1WRajER8e+V7fQbFyp74padjKCnV90g8Hc08Xe5yrhxGlKFfwJINZXw noNkpFiz4xMcPcL7drDBEni2w4F8ounCnyVU3WRBNovGsq9f1hwXn0iqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClbFPlhHultkjBaaV4ioNl2vOdYMB8GA1UdIwQY MBaAFO5otmTM1QynZ9Rv+zT1OgbRILUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUt ZGVkN2FjMjUyNTQ0LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUtZGVkN2FjMjUyNTQ0 LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPHg8rDi k9dKa8kfrn3Tvl4aj59Nupbw/co+qsk/NJ85UOIItY6qyaAdfmTYRWrt/S3dIW97 /ttNBs2lu3hY8KQ7QYeNknMyU9XpCcaWRDB1m+1s781qI7v8MM4XTSjEz0QmCI/2 19MMVoVccWCsXH9Y1wf22rpq5ZWz5cRza7yZbqW+W8ARub3WnQGlKzQQB6msyEIV 3XkdSh+ZbyS1fy297LZENkntgX1oh5DxFIe71afAGEai05Ah1dcSeLSr6zzVhndb w8mN0isptgCo4dZgBVRS8N23oAQ+SjqRrgEqM0dSG52riyDePx4hQ/lnj1xfMRBG oieMZwdXVPo9yg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:10 2025 by rpki-client