This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json) Hash identifier: ybh06kT91jdUTx3iv9rzbJzplKOfZYEpiK8TvT4+cDY= Subject key identifier: 9B:EB:86:04:B5:6D:57:55:08:F0:5C:08:02:7A:B3:E2:98:4C:D0:13 Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96 Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96 Certificate serial: 019B4626613432ECAD47359B32486792C4FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 13:01:18 +0000 Manifest this update: Mon 22 Dec 2025 13:01:18 +0000 Manifest next update: Tue 23 Dec 2025 13:01:18 +0000 Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: J9SxfWeMe1QGf+IBxhe2OytoHqVkaJBR8wd68YcNi2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:61:34:32:ec:ad:47:35:9b:32:48:67:92:c4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96 Validity Not Before: Dec 22 13:01:18 2025 GMT Not After : Dec 23 13:01:18 2025 GMT Subject: CN=9beb8604b56d575508f05c08027ab3e2984cd013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:8a:56:30:db:c4:ba:49:dd:8e:fd:ac:47: ec:33:4a:7f:6c:25:eb:2f:72:0a:1f:f5:9b:2f:11: 4b:0b:b0:31:9a:19:a9:9b:f5:81:d7:3f:05:e8:ba: 0d:78:9b:2a:3a:89:b6:06:e6:8d:ff:00:d7:8a:8d: b0:d5:86:7e:c2:20:0a:79:66:ae:d4:d0:c7:da:b5: 44:38:51:64:63:be:44:a7:75:70:64:49:9c:f3:c6: ea:da:7f:f7:42:e5:98:27:2c:07:0b:c0:2c:e8:5b: 64:52:b2:58:b3:f7:e0:96:5e:b3:b4:c3:6c:62:0c: 7b:75:2a:79:ab:f8:b9:6f:98:fc:3a:d5:92:d2:5c: 5e:6e:e0:a4:8c:ce:45:ff:f4:6a:c7:9b:1e:cf:8d: b1:5b:c8:41:f4:83:8c:d1:9a:4d:64:47:a3:8f:c5: f3:39:29:86:b3:2a:ad:c7:e0:c6:19:50:7b:3d:cc: b9:f5:a5:bb:78:ca:cc:58:e7:f0:f3:84:b2:f9:29: e8:b0:cf:3c:73:81:eb:57:cd:c1:d7:e7:9d:ee:93: bb:c9:e3:79:d3:5f:62:58:29:f1:61:c8:a3:98:81: e2:bb:29:0b:8a:8e:71:c5:32:91:f2:56:0e:fb:e5: 80:78:66:31:34:33:a9:17:50:f0:5a:69:1a:aa:d2: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:86:04:B5:6D:57:55:08:F0:5C:08:02:7A:B3:E2:98:4C:D0:13 X509v3 Authority Key Identifier: keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:73:20:9a:95:c6:8f:e8:90:8b:27:fb:2b:cd:64:7e:d5:b5: e0:5f:10:3a:c7:cb:6e:77:a4:aa:17:f6:ff:01:2a:03:89:fe: 40:50:b9:7b:f9:10:df:c5:ed:64:38:ff:ac:8d:e6:16:d7:12: a1:75:04:e3:38:b0:d9:71:46:51:ed:44:c4:85:61:bf:4a:f7: ca:8f:be:ec:f4:fa:02:b5:b8:72:d6:83:80:0f:f5:d8:76:d7: ca:6a:a2:c7:9e:9a:30:8b:23:19:3c:62:5e:0e:2b:9f:3b:6a: d9:8a:57:17:16:a1:99:77:f0:b4:6f:ab:18:c0:5a:78:55:27: 45:42:46:d6:e8:0a:3f:35:cc:50:1b:29:0d:ce:cc:f1:dc:7c: b2:06:27:11:4f:59:81:a2:c4:46:e6:ce:ab:49:96:ea:e3:0a: 75:24:58:e3:9d:dc:67:82:e5:5d:34:3f:79:1e:9f:fa:15:18: 60:23:2f:d1:b6:5b:02:a4:32:78:a3:d8:9a:ce:85:c9:50:48: 25:1f:91:0e:98:ab:d4:09:ad:c1:01:41:49:db:fa:08:2a:a2: e5:76:e2:84:65:e8:54:4f:52:3a:db:3e:05:b5:aa:96:b5:3c: 0c:c5:84:5a:58:bb:34:3d:56:2b:aa:f0:61:73:c6:ff:7e:ab: 33:87:45:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJmE0MuytRzWbMkhnksT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzQwNzAyMjQ3YTJmZWFjY2RlYmUxM2E5ODQyY2ZmZDNi NDBjOTYwHhcNMjUxMjIyMTMwMTE4WhcNMjUxMjIzMTMwMTE4WjAzMTEwLwYDVQQD Eyg5YmViODYwNGI1NmQ1NzU1MDhmMDVjMDgwMjdhYjNlMjk4NGNkMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysOKVjDbxLpJ3Y79rEfsM0p/bCXr L3IKH/WbLxFLC7Axmhmpm/WB1z8F6LoNeJsqOom2BuaN/wDXio2w1YZ+wiAKeWau 1NDH2rVEOFFkY75Ep3VwZEmc88bq2n/3QuWYJywHC8As6FtkUrJYs/fgll6ztMNs Ygx7dSp5q/i5b5j8OtWS0lxebuCkjM5F//Rqx5sez42xW8hB9IOM0ZpNZEejj8Xz OSmGsyqtx+DGGVB7Pcy59aW7eMrMWOfw84Sy+SnosM88c4HrV83B1+ed7pO7yeN5 019iWCnxYcijmIHiuykLio5xxTKR8lYO++WAeGYxNDOpF1DwWmkaqtLqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvrhgS1bVdVCPBcCAJ6s+KYTNATMB8GA1UdIwQY MBaAFO10BwIkei/qzN6+E6mELP/TtAyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYt NWNkYzNmNGI2MmJlLzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYtNWNkYzNmNGI2MmJl LzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0HMgmpXG j+iQiyf7K81kftW14F8QOsfLbnekqhf2/wEqA4n+QFC5e/kQ38XtZDj/rI3mFtcS oXUE4ziw2XFGUe1ExIVhv0r3yo++7PT6ArW4ctaDgA/12HbXymqix56aMIsjGTxi Xg4rnztq2YpXFxahmXfwtG+rGMBaeFUnRUJG1ugKPzXMUBspDc7M8dx8sgYnEU9Z gaLERubOq0mW6uMKdSRY453cZ4LlXTQ/eR6f+hUYYCMv0bZbAqQyeKPYms6FyVBI JR+RDpir1AmtwQFBSdv6CCqi5XbihGXoVE9SOts+BbWqlrU8DMWEWli7ND1WK6rw YXPG/36rM4dFoQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:20:32 2025 by rpki-client