This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json) Hash identifier: Y7x9zu1ic9vd+AJSXlFB4ypwvtiwzUJYuiNURBf21hI= Subject key identifier: 6D:9C:CB:98:53:79:3B:10:12:14:2F:0A:B6:FF:79:05:1C:A1:58:E6 Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Certificate serial: 019B48B98102492606D870D35ABF9180A97E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft Manifest number: 0512 Signing time: Tue 23 Dec 2025 01:01:15 +0000 Manifest this update: Tue 23 Dec 2025 01:01:15 +0000 Manifest next update: Wed 24 Dec 2025 01:01:15 +0000 Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: zg7YMxIWk4ow28wuS7QbLrNGE2LxQdwtIetHiBS7Ru8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:81:02:49:26:06:d8:70:d3:5a:bf:91:80:a9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Validity Not Before: Dec 23 01:01:15 2025 GMT Not After : Dec 24 01:01:15 2025 GMT Subject: CN=6d9ccb9853793b1012142f0ab6ff79051ca158e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:8b:f6:6e:81:cf:74:cb:65:d7:50:25:57: 7b:9b:7e:3e:ed:31:3f:ce:86:44:7d:5f:91:37:37: 5b:f0:a2:ad:09:e7:27:65:f2:b2:87:4b:9d:80:52: 4d:39:e6:2d:d4:f0:55:d6:5a:eb:79:c5:14:fc:d3: d3:f3:ec:a4:07:9a:58:4d:6a:e0:1c:7c:50:24:c0: c1:74:f4:20:3c:7f:7f:81:38:9a:31:8a:6f:24:a1: 95:b3:2a:12:09:02:4c:7a:0d:2d:60:f0:b2:ac:c6: 06:c0:7a:8a:b4:e4:d9:a9:a3:f5:72:47:dc:6d:3d: 38:21:ec:fd:00:7f:26:5e:bc:93:9a:e5:07:41:0e: 84:3e:44:3c:b3:db:92:c5:61:df:07:d8:34:1f:d8: ab:42:c1:9e:8d:d1:1a:6d:99:eb:51:08:45:42:b0: 75:28:b1:e1:75:9d:00:2b:bd:87:3b:29:6b:95:d4: 2f:9a:6f:b3:35:8c:c4:a8:6a:c1:48:a0:a5:f4:a6: c4:40:37:3c:24:44:aa:fe:16:67:e9:0d:04:9e:c4: e9:41:2e:d0:31:06:61:2f:a6:f6:1c:7e:3d:02:76: a8:c6:08:71:99:99:13:29:1a:d7:12:a5:83:cc:7b: 15:f7:f4:61:0b:2d:0d:cb:43:c4:59:ab:ea:21:c2: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9C:CB:98:53:79:3B:10:12:14:2F:0A:B6:FF:79:05:1C:A1:58:E6 X509v3 Authority Key Identifier: keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7d:57:e6:f6:ec:c1:0b:a6:3d:c8:c3:ba:0d:51:86:5c:a2: e7:f6:01:5b:e4:42:dd:ae:48:64:dd:95:60:2a:7e:c6:79:66: 18:20:56:c0:fb:df:e9:d0:cb:f1:2c:1f:d6:31:0b:39:e0:5e: 26:e6:90:89:9c:d7:b7:16:1e:3c:43:04:bf:f6:92:9d:09:55: 09:cf:f4:0c:04:8d:a5:29:02:00:05:d0:17:3b:b2:4b:47:8f: 25:fc:28:22:18:70:cd:75:44:08:7b:a0:54:de:d2:e1:0a:69: 08:51:fc:74:d8:0f:53:e5:bf:9a:54:12:42:47:83:5c:5c:22: 78:f8:72:fa:eb:5c:fc:7f:28:54:7a:75:e3:eb:37:26:a4:90: 94:48:bd:9d:87:9f:d6:2a:90:bc:d1:67:f6:63:3f:28:0b:2d: 11:e3:4f:c0:d7:a9:35:46:e5:ff:0f:cd:da:a4:4f:06:be:35: 61:4f:e3:43:8e:15:df:68:c5:80:eb:98:d5:e1:e6:a8:d6:43: f0:2c:19:bc:6e:1c:45:3f:4a:e5:cd:99:43:08:35:44:8e:a2: ab:7f:c8:74:4b:c2:b0:a5:09:44:69:be:d5:5e:f8:35:97:8e: f8:56:39:cd:a4:3f:82:d0:15:a2:54:87:15:51:cd:57:53:ac: 21:f6:55:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuYECSSYG2HDTWr+RgKl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx Y2E4ZTEwHhcNMjUxMjIzMDEwMTE1WhcNMjUxMjI0MDEwMTE1WjAzMTEwLwYDVQQD Eyg2ZDljY2I5ODUzNzkzYjEwMTIxNDJmMGFiNmZmNzkwNTFjYTE1OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppuL9m6Bz3TLZddQJVd7m34+7TE/ zoZEfV+RNzdb8KKtCecnZfKyh0udgFJNOeYt1PBV1lrrecUU/NPT8+ykB5pYTWrg HHxQJMDBdPQgPH9/gTiaMYpvJKGVsyoSCQJMeg0tYPCyrMYGwHqKtOTZqaP1ckfc bT04Iez9AH8mXryTmuUHQQ6EPkQ8s9uSxWHfB9g0H9irQsGejdEabZnrUQhFQrB1 KLHhdZ0AK72HOylrldQvmm+zNYzEqGrBSKCl9KbEQDc8JESq/hZn6Q0EnsTpQS7Q MQZhL6b2HH49AnaoxghxmZkTKRrXEqWDzHsV9/RhCy0Ny0PEWavqIcKEuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2cy5hTeTsQEhQvCrb/eQUcoVjmMB8GA1UdIwQY MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH1X5vbs wQumPcjDug1Rhlyi5/YBW+RC3a5IZN2VYCp+xnlmGCBWwPvf6dDL8Swf1jELOeBe JuaQiZzXtxYePEMEv/aSnQlVCc/0DASNpSkCAAXQFzuyS0ePJfwoIhhwzXVECHug VN7S4QppCFH8dNgPU+W/mlQSQkeDXFwiePhy+utc/H8oVHp14+s3JqSQlEi9nYef 1iqQvNFn9mM/KAstEeNPwNepNUbl/w/N2qRPBr41YU/jQ44V32jFgOuY1eHmqNZD 8CwZvG4cRT9K5c2ZQwg1RI6iq3/IdEvCsKUJRGm+1V74NZeO+FY5zaQ/gtAVolSH FVHNV1OsIfZV/w== -----END CERTIFICATE-----Generated at Tue Dec 23 04:16:29 2025 by rpki-client