This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json) Hash identifier: 02Em8rZtL3qNPKD3P9yJ3PQ4tdhWG18+rzsez6veIDA= Subject key identifier: F8:E8:9B:C9:CB:E8:E3:EF:AA:5C:4B:09:92:DD:31:42:41:1F:C2:ED Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02 Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802 Certificate serial: 019B19BACC81AE81DC184F932F8A84A66881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 22:00:30 +0000 Manifest this update: Sat 13 Dec 2025 22:00:30 +0000 Manifest next update: Sun 14 Dec 2025 22:00:30 +0000 Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: cR4IObJtx4aOg8S+VZpB0PIx0Mg5I08FlqcQNIy/69s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:cc:81:ae:81:dc:18:4f:93:2f:8a:84:a6:68:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802 Validity Not Before: Dec 13 22:00:30 2025 GMT Not After : Dec 14 22:00:30 2025 GMT Subject: CN=f8e89bc9cbe8e3efaa5c4b0992dd3142411fc2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:42:0e:65:6d:b1:8e:65:e0:b1:d8:98:7e: 12:9a:29:27:b0:ef:5d:8e:d7:9a:1b:64:aa:fd:3d: 46:19:3d:1b:fb:f2:28:1d:70:01:47:6e:4e:8b:36: 9c:92:8a:0e:a9:df:84:f1:1a:20:29:b1:43:7f:13: 01:ea:50:74:3f:81:1e:cb:f0:bc:24:dc:a7:cb:a0: 69:02:db:a5:a5:28:fa:a1:11:32:d0:62:d7:91:ce: 87:4b:f5:0f:20:c8:41:49:1f:5b:13:68:a6:08:3c: 1a:78:e5:5a:68:1b:c7:17:2c:ca:d8:1a:4f:68:35: 69:aa:38:a4:b3:15:83:d8:f2:90:4e:14:a9:70:c4: 29:07:c2:82:65:6b:0a:8a:90:1e:17:4d:e5:4d:be: 5f:1c:df:45:e8:d5:ec:40:70:c6:ea:64:58:21:85: 7f:13:4a:ac:ab:92:99:d3:0b:68:1f:bb:d4:dc:66: c2:81:10:3e:78:3a:64:e7:e6:28:9c:e4:e7:19:68: b4:7c:7e:81:9a:6d:c0:50:b9:be:8c:eb:09:bf:15: 58:73:4c:cf:b5:8d:50:67:fe:65:2b:94:8e:4e:3f: 6d:fc:15:c8:4b:10:ab:13:5c:46:99:2b:f1:5f:50: 22:8e:c4:9a:b7:cf:be:6f:78:ad:4b:6e:73:84:80: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E8:9B:C9:CB:E8:E3:EF:AA:5C:4B:09:92:DD:31:42:41:1F:C2:ED X509v3 Authority Key Identifier: keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:f9:ff:79:d7:00:89:3e:ec:cd:a6:f2:0f:59:0d:3b:e4:3b: cf:fa:e0:2e:60:db:2c:d7:12:da:f6:58:28:6f:ca:37:16:26: 9e:28:97:56:fd:a3:dc:98:23:ce:6a:8e:87:9e:fb:4d:c1:a0: ff:84:a0:89:fa:81:62:51:59:d4:6e:03:82:0b:f5:ac:d5:7e: 11:f5:19:7f:9a:b8:ea:06:f2:15:99:37:7d:6c:3f:1b:d9:0a: 05:3d:b2:00:61:d0:ee:f0:3e:6f:24:04:0c:a7:34:b3:a4:41: f1:c9:29:5c:91:64:7e:2b:9f:2d:87:3a:13:87:32:83:1f:15: 11:3b:b4:c1:a3:58:80:0a:4f:c8:c3:5d:74:2e:ee:c8:8a:25: 23:2e:5c:9d:c7:44:35:2a:6a:cb:fa:59:e5:29:bc:f7:7c:90: 79:c6:20:f8:89:13:26:5d:fa:1d:f4:92:e4:1d:fa:3d:0d:3e: 3b:32:c0:8a:d2:bc:3e:36:c9:72:96:aa:89:18:25:69:94:11: c7:2a:ce:c7:75:2d:3e:54:cb:ac:c7:e8:58:d6:89:7e:6f:11: 68:60:b9:6f:f0:39:ad:c1:d5:bd:ee:86:33:a0:d5:27:b5:58: 17:9f:62:7e:86:d7:13:b2:3b:96:71:0d:66:61:a8:1a:e6:3d: 79:c3:1d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZusyBroHcGE+TL4qEpmiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjVlMjFiODQ1YmIxZGRmYWJiMzg4ODgwMmMxOWE2MjI3 NzM4MDIwHhcNMjUxMjEzMjIwMDMwWhcNMjUxMjE0MjIwMDMwWjAzMTEwLwYDVQQD EyhmOGU4OWJjOWNiZThlM2VmYWE1YzRiMDk5MmRkMzE0MjQxMWZjMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknhCDmVtsY5l4LHYmH4SmiknsO9d jteaG2Sq/T1GGT0b+/IoHXABR25OizackooOqd+E8RogKbFDfxMB6lB0P4Eey/C8 JNyny6BpAtulpSj6oREy0GLXkc6HS/UPIMhBSR9bE2imCDwaeOVaaBvHFyzK2BpP aDVpqjiksxWD2PKQThSpcMQpB8KCZWsKipAeF03lTb5fHN9F6NXsQHDG6mRYIYV/ E0qsq5KZ0wtoH7vU3GbCgRA+eDpk5+YonOTnGWi0fH6Bmm3AULm+jOsJvxVYc0zP tY1QZ/5lK5SOTj9t/BXISxCrE1xGmSvxX1AijsSat8++b3itS25zhIAQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjom8nL6OPvqlxLCZLdMUJBH8LtMB8GA1UdIwQY MBaAFLO14huEW7Hd+rs4iIAsGaYidzgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTIt ZmU1MDY1MGUxYmU0LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTItZmU1MDY1MGUxYmU0 LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz/n/edcA iT7szabyD1kNO+Q7z/rgLmDbLNcS2vZYKG/KNxYmniiXVv2j3JgjzmqOh577TcGg /4SgifqBYlFZ1G4Dggv1rNV+EfUZf5q46gbyFZk3fWw/G9kKBT2yAGHQ7vA+byQE DKc0s6RB8ckpXJFkfiufLYc6E4cygx8VETu0waNYgApPyMNddC7uyIolIy5cncdE NSpqy/pZ5Sm893yQecYg+IkTJl36HfSS5B36PQ0+OzLAitK8PjbJcpaqiRglaZQR xyrOx3UtPlTLrMfoWNaJfm8RaGC5b/A5rcHVve6GM6DVJ7VYF59ifobXE7I7lnEN ZmGoGuY9ecMdTg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:47 2025 by rpki-client