This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft File: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json) Hash identifier: /rpUVlGKd2hL+P3UrsKkGuAZohqhjlBjWeRyIDsN3MQ= Subject key identifier: B7:3F:62:B7:BC:6E:5E:B8:88:24:2E:41:9A:64:F0:78:50:B6:43:B3 Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19 Certificate issuer: /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819 Certificate serial: 019B3AFD6E51795A5AD2A2008F0EF3637F49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft Manifest number: 0FDE Signing time: Sat 20 Dec 2025 09:00:45 +0000 Manifest this update: Sat 20 Dec 2025 09:00:45 +0000 Manifest next update: Sun 21 Dec 2025 09:00:45 +0000 Files and hashes: 1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: TR9fcstJLEBAlDjHu4lr1Z/KZLcV3ZM1goDdotNA6ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:6e:51:79:5a:5a:d2:a2:00:8f:0e:f3:63:7f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819 Validity Not Before: Dec 20 09:00:45 2025 GMT Not After : Dec 21 09:00:45 2025 GMT Subject: CN=b73f62b7bc6e5eb888242e419a64f07850b643b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:9c:3d:c2:93:e4:38:ac:08:cc:67:0c:27: 29:74:10:20:92:b7:90:59:f4:07:8a:b0:14:b3:ec: c0:cf:c9:f3:f6:ee:da:d5:81:83:4d:c8:3a:a6:28: bd:80:29:5c:47:19:fb:41:1b:de:ac:2f:d4:71:fe: ec:fc:7c:7c:15:19:0a:59:40:44:eb:12:ce:12:a7: 4b:5f:42:c1:4b:a3:c3:50:d4:0b:fd:c9:8a:ed:97: 9e:93:ec:09:04:89:e5:9c:7e:1c:9a:2c:bc:1b:5d: 03:17:2f:8b:1c:e8:17:56:1a:ff:05:ad:0e:3d:91: a8:16:7c:b1:f6:4c:6e:bc:95:0d:67:74:2e:62:02: 79:bb:4d:63:2e:a7:93:76:9d:3b:d0:88:9c:e0:0b: a4:bf:68:d8:af:69:a9:8a:23:89:5c:e2:86:47:75: a7:4f:eb:0b:60:ba:08:e8:d2:b5:c5:a8:38:c0:4b: 42:b8:9d:ce:aa:85:74:43:a5:df:63:04:03:2e:db: 55:36:3a:3d:bf:8e:6a:af:55:c8:38:4b:9a:e6:1b: ff:aa:2f:9a:e2:d1:9b:16:8c:a5:13:2f:2e:9b:16: eb:5b:64:d6:82:e2:ea:8a:de:f4:67:2c:28:c7:97: 05:97:ec:3e:20:65:37:5d:47:a6:a2:c0:00:92:58: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3F:62:B7:BC:6E:5E:B8:88:24:2E:41:9A:64:F0:78:50:B6:43:B3 X509v3 Authority Key Identifier: keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d9:f7:cd:1c:bb:a3:8f:57:26:79:a4:fa:cf:c4:3d:84:fb: 1f:61:63:5f:c7:b0:ae:3f:1b:03:d4:f2:72:01:3d:72:ff:1d: 0f:b8:85:0e:d3:a9:81:3c:9b:55:7a:f4:17:bb:ba:1f:b2:06: 42:d9:20:8f:ad:0c:e5:21:6b:e6:c0:51:83:f0:fe:26:7f:27: 3f:49:c3:bf:ff:5a:7c:9b:00:29:22:f5:cd:e2:d1:c1:02:58: b6:89:41:6f:ae:98:ba:af:cc:95:ec:56:66:2b:63:21:9e:ce: 3c:ac:4a:56:8d:88:c2:94:f8:1d:68:ca:b3:2a:f7:84:55:29: f0:f7:ea:2d:9b:5c:9e:d2:eb:3d:df:70:47:ed:a7:39:81:2d: c9:6a:20:51:9e:19:c2:69:07:3c:83:83:22:b9:67:b5:2f:56: b4:c2:b5:94:c6:2d:14:05:da:66:58:f8:35:b6:8e:00:74:0b: d9:fe:7e:f0:ec:c3:67:15:7e:ef:c8:a0:c3:75:c3:97:18:c2: 3c:c7:41:aa:91:62:c7:33:19:0b:87:75:5c:ab:46:2d:5a:23: b7:f2:f1:d7:63:c4:8b:99:fe:9a:fb:e3:fe:9e:73:bb:7f:71: 1f:21:23:cc:80:16:11:36:a4:44:7e:9f:e9:29:eb:d3:a3:80: 4e:46:d8:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/W5ReVpa0qIAjw7zY39JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZmM4YTZmM2M0NGI4ZWRkMTc3ZmU1MWE1OTk5MTU4Yjhk Y2Y4MTkwHhcNMjUxMjIwMDkwMDQ1WhcNMjUxMjIxMDkwMDQ1WjAzMTEwLwYDVQQD EyhiNzNmNjJiN2JjNmU1ZWI4ODgyNDJlNDE5YTY0ZjA3ODUwYjY0M2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAKcPcKT5DisCMxnDCcpdBAgkreQ WfQHirAUs+zAz8nz9u7a1YGDTcg6pii9gClcRxn7QRverC/Ucf7s/Hx8FRkKWUBE 6xLOEqdLX0LBS6PDUNQL/cmK7Zeek+wJBInlnH4cmiy8G10DFy+LHOgXVhr/Ba0O PZGoFnyx9kxuvJUNZ3QuYgJ5u01jLqeTdp070Iic4Aukv2jYr2mpiiOJXOKGR3Wn T+sLYLoI6NK1xag4wEtCuJ3OqoV0Q6XfYwQDLttVNjo9v45qr1XIOEua5hv/qi+a 4tGbFoylEy8umxbrW2TWguLqit70Zywox5cFl+w+IGU3XUemosAAkli8WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc/Yre8bl64iCQuQZpk8HhQtkOzMB8GA1UdIwQY MBaAFO/8im88RLjt0Xf+UaWZkVi43PgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQt NmRkOTM4NzE0MWE4LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQtNmRkOTM4NzE0MWE4 LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNn3zRy7 o49XJnmk+s/EPYT7H2FjX8ewrj8bA9TycgE9cv8dD7iFDtOpgTybVXr0F7u6H7IG Qtkgj60M5SFr5sBRg/D+Jn8nP0nDv/9afJsAKSL1zeLRwQJYtolBb66Yuq/MlexW ZitjIZ7OPKxKVo2IwpT4HWjKsyr3hFUp8PfqLZtcntLrPd9wR+2nOYEtyWogUZ4Z wmkHPIODIrlntS9WtMK1lMYtFAXaZlj4NbaOAHQL2f5+8OzDZxV+78igw3XDlxjC PMdBqpFixzMZC4d1XKtGLVojt/Lx12PEi5n+mvvj/p5zu39xHyEjzIAWETakRH6f 6Snr06OATkbYHA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:14 2025 by rpki-client