This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json) Hash identifier: L8OVID3iM/rAcam/wvQSIN+yU88/nwi5Tc+b5V+Wc4Q= Subject key identifier: 01:F5:52:39:C9:F9:31:72:AF:A4:15:B8:CE:98:0D:DE:14:CA:74:67 Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7 Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7 Certificate serial: 019AF578031BBCEA74320F4B1EDE30763B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft Manifest number: 0ED1 Signing time: Sat 06 Dec 2025 21:01:14 +0000 Manifest this update: Sat 06 Dec 2025 21:01:14 +0000 Manifest next update: Sun 07 Dec 2025 21:01:14 +0000 Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: 0xNISGYsOrsPv/ZOTOktsyLKYdejPx7HdbCSTyldF/Q=) 2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:03:1b:bc:ea:74:32:0f:4b:1e:de:30:76:3b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7 Validity Not Before: Dec 6 21:01:14 2025 GMT Not After : Dec 7 21:01:14 2025 GMT Subject: CN=01f55239c9f93172afa415b8ce980dde14ca7467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:e8:a0:a6:fc:ce:e2:7e:25:e8:ee:de:11: 28:c9:2d:f6:c0:ce:1e:74:d6:fa:ed:38:8b:19:05: 78:70:c9:63:bd:a0:09:1e:d9:fa:5e:a9:90:ba:46: 11:1b:d7:07:fd:da:97:8e:2a:1d:3e:b5:f2:75:39: 2e:b4:0c:18:5d:21:36:7b:75:4d:9e:2b:7e:27:24: 00:c6:7b:37:0e:d2:1d:aa:58:65:ab:50:58:a4:f1: 59:55:87:a0:9c:93:7a:e5:f1:3a:6d:15:8c:e1:dd: 24:12:e0:c5:ab:87:e5:85:6b:f6:f6:72:7e:94:6f: 11:57:0d:b0:11:fc:50:e1:cc:91:45:a2:26:b0:a5: cb:a3:61:b0:c2:f4:e2:8a:32:37:c1:8d:dd:60:57: 3e:16:0a:54:56:0a:5e:eb:c9:7c:ff:e3:5c:96:ab: bd:45:68:f0:a6:cb:d4:79:3e:75:45:e3:16:21:ee: 9e:49:cd:70:bf:91:86:d0:43:a2:bf:ca:c4:3f:87: bb:33:11:78:87:6c:09:01:b2:01:c2:8b:77:b6:b0: d7:e0:d2:64:bb:11:d6:3f:84:ca:a8:de:a7:6f:9f: d6:a6:4b:50:cf:10:4e:16:21:c0:bd:78:2d:a3:12: d8:d6:66:67:b2:0b:f3:15:cd:8d:bd:0f:da:97:51: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F5:52:39:C9:F9:31:72:AF:A4:15:B8:CE:98:0D:DE:14:CA:74:67 X509v3 Authority Key Identifier: keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3c:64:90:25:33:a2:c9:f7:70:b3:ac:1f:4d:32:af:8b:4b: e3:e9:87:5d:2b:59:36:8e:c2:9f:0f:04:11:bf:a3:57:79:34: 01:d7:60:dc:00:83:57:99:53:89:be:d9:83:71:20:6f:42:8f: db:96:80:23:5d:c3:e7:c2:bd:6d:e6:87:d4:72:24:de:41:66: 34:45:19:22:dc:cf:b7:8a:fa:d0:f5:0c:79:ed:ab:9a:9c:8d: b1:ad:31:10:1d:6b:9c:04:eb:62:a6:c5:f6:7d:bb:c6:e9:d4: 7f:9e:02:09:d9:9b:ea:00:a8:0a:b4:e8:59:17:cb:d1:b3:26: fd:01:2f:63:58:37:13:ed:b0:88:03:65:9b:cd:58:a2:27:c8: 5a:70:58:d1:de:db:b8:43:2d:e8:49:ca:c9:87:4d:e2:7e:aa: f7:eb:7a:51:45:bb:09:de:97:6f:8b:80:f3:d2:bb:f5:b0:75: 86:1e:f2:89:b6:76:4b:f5:b7:2a:2a:97:2f:84:cb:4f:04:46: 55:77:95:7d:70:b2:31:0d:fc:a8:5e:2c:d5:20:cb:d4:c8:91: e0:b7:71:3e:04:22:df:eb:47:34:02:80:ef:44:01:c9:5e:a2: 72:12:87:76:d9:f4:8f:d4:7b:d7:6b:fe:47:f9:aa:51:e7:23: 29:34:ef:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eAMbvOp0Mg9LHt4wdjt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmMzM2ZkMDExNzhhZTJmOTc0ZWVlZDVkY2RjZDNjMTc1 ZTE2YTcwHhcNMjUxMjA2MjEwMTE0WhcNMjUxMjA3MjEwMTE0WjAzMTEwLwYDVQQD EygwMWY1NTIzOWM5ZjkzMTcyYWZhNDE1YjhjZTk4MGRkZTE0Y2E3NDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU3ooKb8zuJ+Jeju3hEoyS32wM4e dNb67TiLGQV4cMljvaAJHtn6XqmQukYRG9cH/dqXjiodPrXydTkutAwYXSE2e3VN nit+JyQAxns3DtIdqlhlq1BYpPFZVYegnJN65fE6bRWM4d0kEuDFq4flhWv29nJ+ lG8RVw2wEfxQ4cyRRaImsKXLo2GwwvTiijI3wY3dYFc+FgpUVgpe68l8/+Nclqu9 RWjwpsvUeT51ReMWIe6eSc1wv5GG0EOiv8rEP4e7MxF4h2wJAbIBwot3trDX4NJk uxHWP4TKqN6nb5/WpktQzxBOFiHAvXgtoxLY1mZnsgvzFc2NvQ/al1EwIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAH1UjnJ+TFyr6QVuM6YDd4UynRnMB8GA1UdIwQY MBaAFOy8M/0BF4ri+XTu7V3NzTwXXhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMt M2UwNWIzN2UxMzhiLzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMtM2UwNWIzN2UxMzhi LzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjxkkCUz osn3cLOsH00yr4tL4+mHXStZNo7Cnw8EEb+jV3k0Addg3ACDV5lTib7Zg3Egb0KP 25aAI13D58K9beaH1HIk3kFmNEUZItzPt4r60PUMee2rmpyNsa0xEB1rnATrYqbF 9n27xunUf54CCdmb6gCoCrToWRfL0bMm/QEvY1g3E+2wiANlm81YoifIWnBY0d7b uEMt6EnKyYdN4n6q9+t6UUW7Cd6Xb4uA89K79bB1hh7yibZ2S/W3KiqXL4TLTwRG VXeVfXCyMQ38qF4s1SDL1MiR4LdxPgQi3+tHNAKA70QByV6ichKHdtn0j9R712v+ R/mqUecjKTTvOg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:03 2025 by rpki-client