This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json) Hash identifier: 7TWMhqC9LW7UId9u+tAIQp8OtIdVMoyTn+e2tV+2EA0= Subject key identifier: AB:4B:C3:CB:2A:3D:AC:C6:55:4D:D9:96:03:3C:9D:EE:D3:8F:7A:93 Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56 Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956 Certificate serial: 019B19160E0051853DCB0546F744C32087A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft Manifest number: 124A Signing time: Sat 13 Dec 2025 19:00:34 +0000 Manifest this update: Sat 13 Dec 2025 19:00:34 +0000 Manifest next update: Sun 14 Dec 2025 19:00:34 +0000 Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: dHvFioHtmS5fcCwSAc30VPd/mhGlZOttzCDSIjDtc6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:0e:00:51:85:3d:cb:05:46:f7:44:c3:20:87:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956 Validity Not Before: Dec 13 19:00:34 2025 GMT Not After : Dec 14 19:00:34 2025 GMT Subject: CN=ab4bc3cb2a3dacc6554dd996033c9deed38f7a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:89:23:92:9e:f5:69:09:b5:7e:3d:e9:d7: 8e:0d:df:07:3a:27:fe:1f:96:52:43:70:b4:f0:45: 62:11:2a:e7:c4:74:b5:7b:0d:86:81:8e:84:50:38: 21:71:b3:a2:87:bd:57:28:61:87:31:7e:77:cc:be: 17:62:0f:ac:3f:11:8d:e0:98:17:a7:05:fa:aa:1f: 0a:e9:15:54:e4:e8:9c:5b:d7:94:12:58:35:7c:e0: bb:ba:bf:5f:4b:1c:9b:3a:53:bd:fc:5f:0c:dd:06: 9b:20:9f:f5:0e:c5:8c:d5:cb:56:f7:32:4c:61:12: f4:99:04:91:d9:df:5e:00:a9:4a:41:7b:af:86:a7: b6:a8:d9:5f:20:d1:b2:c8:c7:59:c0:51:17:e0:f7: f2:6f:aa:a3:8a:dd:79:fb:c6:73:27:2d:99:49:0a: 98:b4:47:2b:8c:f5:89:1a:0f:b3:64:14:2d:a8:f8: 55:0f:21:d7:7c:a8:0c:c7:65:02:8e:30:e1:c4:de: 9c:ae:99:86:5c:7c:ff:cb:dd:c2:b2:7f:cf:c5:b5: 64:87:39:92:f5:52:f2:7e:b4:98:62:a3:09:34:ed: a0:5b:07:73:7a:b8:1b:ef:ea:b4:b5:1a:d9:fe:46: 70:2f:62:90:58:5f:e7:40:af:30:c1:54:fa:fa:79: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:C3:CB:2A:3D:AC:C6:55:4D:D9:96:03:3C:9D:EE:D3:8F:7A:93 X509v3 Authority Key Identifier: keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ab:b2:e7:a9:c9:e3:86:75:12:27:c5:e1:93:d7:a7:cd:bc: e9:5d:fb:85:d4:3c:18:c9:ef:e6:f7:69:5f:77:14:fa:c7:ed: 19:99:2d:8e:33:30:e7:57:58:f4:b9:6c:93:1a:21:e4:6c:35: 52:82:a8:c2:7b:b9:52:8a:d0:6c:3a:cd:c9:ef:d5:f0:30:3c: 0d:1c:83:86:0b:4f:fc:72:e3:37:92:d7:dc:98:53:79:3b:4f: 18:d9:fd:1c:1b:74:d5:b5:d5:7a:3a:af:d2:a5:28:64:58:b4: 18:09:f7:bd:c9:66:b9:d8:9e:87:5b:57:25:c5:51:9d:0a:10: 91:8a:18:e7:a5:1e:31:e1:e1:c2:c4:ee:15:c7:93:cc:0b:f1: 97:c8:76:88:d7:26:d7:29:f1:56:c0:2e:fc:76:6f:8b:c3:d9: 42:16:87:e8:99:0c:95:05:23:b4:c7:47:81:49:90:6d:0c:57: 03:94:0d:2c:43:22:1a:0b:22:92:f2:fd:07:4c:ad:03:f8:4c: fc:50:67:35:da:d1:40:d9:e8:06:6f:c6:30:38:59:37:43:c7: e2:0d:70:4a:51:5a:a4:b8:6c:13:a5:45:92:c9:cb:d3:bf:07: f2:0f:44:53:f2:8d:5d:e5:c5:34:df:54:d2:8c:f4:01:2f:f3: 92:b7:24:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFg4AUYU9ywVG90TDIIeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjMzODdiZTZkMjBkNGEyY2UxM2NjMDkyZTg3Zjc3N2I4 Yjk5NTYwHhcNMjUxMjEzMTkwMDM0WhcNMjUxMjE0MTkwMDM0WjAzMTEwLwYDVQQD EyhhYjRiYzNjYjJhM2RhY2M2NTU0ZGQ5OTYwMzNjOWRlZWQzOGY3YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0qJI5Ke9WkJtX496deODd8HOif+ H5ZSQ3C08EViESrnxHS1ew2GgY6EUDghcbOih71XKGGHMX53zL4XYg+sPxGN4JgX pwX6qh8K6RVU5OicW9eUElg1fOC7ur9fSxybOlO9/F8M3QabIJ/1DsWM1ctW9zJM YRL0mQSR2d9eAKlKQXuvhqe2qNlfINGyyMdZwFEX4Pfyb6qjit15+8ZzJy2ZSQqY tEcrjPWJGg+zZBQtqPhVDyHXfKgMx2UCjjDhxN6crpmGXHz/y93Csn/PxbVkhzmS 9VLyfrSYYqMJNO2gWwdzergb7+q0tRrZ/kZwL2KQWF/nQK8wwVT6+nkA0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtLw8sqPazGVU3ZlgM8ne7Tj3qTMB8GA1UdIwQY MBaAFAuzOHvm0g1KLOE8wJLof3d7i5lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgt NDQwNGQ3ZWU3MTIyLzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgtNDQwNGQ3ZWU3MTIy LzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKuy56nJ 44Z1EifF4ZPXp8286V37hdQ8GMnv5vdpX3cU+sftGZktjjMw51dY9Llskxoh5Gw1 UoKownu5UorQbDrNye/V8DA8DRyDhgtP/HLjN5LX3JhTeTtPGNn9HBt01bXVejqv 0qUoZFi0GAn3vclmudieh1tXJcVRnQoQkYoY56UeMeHhwsTuFceTzAvxl8h2iNcm 1ynxVsAu/HZvi8PZQhaH6JkMlQUjtMdHgUmQbQxXA5QNLEMiGgsikvL9B0ytA/hM /FBnNdrRQNnoBm/GMDhZN0PH4g1wSlFapLhsE6VFksnL078H8g9EU/KNXeXFNN9U 0oz0AS/zkrcksw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:36:57 2025 by rpki-client