This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft File: e_7CSauE-BJlaciz2OP0PNgsYRU.mft (raw, json) Hash identifier: FZfxqH7wSy73B1X2m5XLrSKjiQ9+o7XK7tsG6zG2i94= Subject key identifier: A4:D7:06:CD:07:C3:DD:03:C8:B5:DE:72:CA:6A:F8:C3:B2:BE:43:7F Authority key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15 Certificate issuer: /CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115 Certificate serial: 019B48B8E72802D2B70A9205B29E2791E436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft Manifest number: 178A Signing time: Tue 23 Dec 2025 01:00:35 +0000 Manifest this update: Tue 23 Dec 2025 01:00:35 +0000 Manifest next update: Wed 24 Dec 2025 01:00:35 +0000 Files and hashes: 1: e_7CSauE-BJlaciz2OP0PNgsYRU.crl (hash: 6FDtqWHza5ORbRnEz6jpubr6MF4dollpx0BPabQQlbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:e7:28:02:d2:b7:0a:92:05:b2:9e:27:91:e4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115 Validity Not Before: Dec 23 01:00:35 2025 GMT Not After : Dec 24 01:00:35 2025 GMT Subject: CN=a4d706cd07c3dd03c8b5de72ca6af8c3b2be437f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:8c:f0:30:35:05:56:bf:e5:a4:92:91:7c: 7b:6f:cc:ee:9b:c0:da:18:23:35:72:b6:2e:fb:09: d4:62:01:09:61:ea:19:f0:66:a6:05:61:20:43:6f: 51:83:ea:ef:dd:61:9b:8c:da:1e:56:7e:61:98:4c: ef:c9:ac:6e:4f:b2:5a:48:4f:80:2a:6c:9c:8d:50: 69:e3:2d:a4:0c:60:24:13:76:60:2f:3e:9a:6e:ec: 7f:36:4d:01:c4:e0:e9:33:71:11:d1:86:76:9a:6d: 9d:76:5d:d5:4a:4c:80:40:4e:0b:60:d0:14:c3:84: ce:e5:2f:fe:6a:21:f2:91:77:93:7e:00:79:a8:2b: 9c:c1:a2:b5:b8:65:33:a5:cd:bf:9f:ed:11:4e:77: b4:47:f7:18:af:c5:c2:b3:1d:a6:e4:4c:c9:8e:5b: af:5a:0e:c4:83:bf:9b:dd:f1:82:94:d2:38:8b:4c: ea:2d:24:ac:0b:b2:49:54:4e:c7:30:21:4e:73:66: 7b:04:6b:a9:8f:40:56:bd:79:5d:43:14:bf:4f:09: 4f:77:04:b0:60:da:cf:3a:c7:02:46:de:34:d6:f4: 57:17:9e:cb:0a:a8:79:1a:7b:1f:d6:2d:b3:a5:99: 3d:f0:30:7e:98:31:61:d0:e8:63:78:c8:77:77:77: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D7:06:CD:07:C3:DD:03:C8:B5:DE:72:CA:6A:F8:C3:B2:BE:43:7F X509v3 Authority Key Identifier: keyid:7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:33:a5:9d:e7:aa:cb:e6:48:32:2c:d9:2c:37:fa:ee:fb:da: 10:39:67:56:b8:a3:47:b3:50:c7:38:32:bb:b9:24:17:b5:86: 99:68:b3:21:1b:88:09:4e:15:84:22:71:62:4d:84:25:91:30: 00:d6:15:da:79:e5:98:d7:dd:e2:32:ea:b0:c3:94:ea:3e:67: ed:cb:d7:c9:7c:d4:38:5e:38:bf:89:65:9b:8b:86:c9:5c:14: d0:a9:45:d9:07:ea:95:4c:4f:88:6e:c8:f1:c1:71:b6:2a:b0: a7:64:c3:7a:ee:72:53:2e:94:df:57:4d:c2:32:1d:07:af:0b: 4c:4b:b8:f9:8e:ec:fc:2e:05:68:eb:43:c8:5c:3e:56:a9:a7: 27:f6:8a:2c:00:6c:0b:e1:4e:16:1a:93:a0:cb:81:5c:ac:ff: 5b:14:e3:3f:36:35:ca:23:6c:1f:72:da:af:4f:8a:42:5c:a4: e6:e5:28:d7:02:80:61:26:6e:71:8c:34:f4:61:a7:84:8d:f5: e1:3e:9d:ad:7e:f2:d4:71:74:60:00:4d:0c:2c:a3:a6:07:c1: b6:aa:fd:bb:78:12:58:14:26:3d:78:ea:6c:59:8d:7e:cb:09: 43:5e:fa:7f:9c:d2:87:76:72:57:a4:67:31:e6:c2:5b:8e:8c: f4:64:8e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuOcoAtK3CpIFsp4nkeQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZmVjMjQ5YWI4NGY4MTI2NTY5YzhiM2Q4ZTNmNDNjZDgy YzYxMTUwHhcNMjUxMjIzMDEwMDM1WhcNMjUxMjI0MDEwMDM1WjAzMTEwLwYDVQQD EyhhNGQ3MDZjZDA3YzNkZDAzYzhiNWRlNzJjYTZhZjhjM2IyYmU0MzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYeM8DA1BVa/5aSSkXx7b8zum8Da GCM1crYu+wnUYgEJYeoZ8GamBWEgQ29Rg+rv3WGbjNoeVn5hmEzvyaxuT7JaSE+A KmycjVBp4y2kDGAkE3ZgLz6abux/Nk0BxODpM3ER0YZ2mm2ddl3VSkyAQE4LYNAU w4TO5S/+aiHykXeTfgB5qCucwaK1uGUzpc2/n+0RTne0R/cYr8XCsx2m5EzJjluv Wg7Eg7+b3fGClNI4i0zqLSSsC7JJVE7HMCFOc2Z7BGupj0BWvXldQxS/TwlPdwSw YNrPOscCRt401vRXF57LCqh5Gnsf1i2zpZk98DB+mDFh0OhjeMh3d3efcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTXBs0Hw90DyLXecspq+MOyvkN/MB8GA1UdIwQY MBaAFHv+wkmrhPgSZWnIs9jj9DzYLGEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ZjMxMWItNDZlMy00YWMxLThlOWYt ZGViYzI4MmQ0ODNlLzEvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80ZjMxMWItNDZlMy00YWMxLThlOWYtZGViYzI4MmQ0ODNl LzEvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzOlneeq y+ZIMizZLDf67vvaEDlnVrijR7NQxzgyu7kkF7WGmWizIRuICU4VhCJxYk2EJZEw ANYV2nnlmNfd4jLqsMOU6j5n7cvXyXzUOF44v4llm4uGyVwU0KlF2QfqlUxPiG7I 8cFxtiqwp2TDeu5yUy6U31dNwjIdB68LTEu4+Y7s/C4FaOtDyFw+VqmnJ/aKLABs C+FOFhqToMuBXKz/WxTjPzY1yiNsH3Lar0+KQlyk5uUo1wKAYSZucYw09GGnhI31 4T6drX7y1HF0YABNDCyjpgfBtqr9u3gSWBQmPXjqbFmNfssJQ176f5zSh3ZyV6Rn MebCW46M9GSOKg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:00:27 2025 by rpki-client