This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json) Hash identifier: jYDeH0ynbsUIviSzSFgN0xErO24Z4eX68siQQIFXP0k= Subject key identifier: 9F:2E:E5:4A:82:51:15:0B:96:5A:15:9D:A1:12:79:8C:D3:1A:E5:E0 Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8 Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8 Certificate serial: 019B1EE1A316AC27975CC2054752A59B6045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft Manifest number: 0AE9 Signing time: Sun 14 Dec 2025 22:01:02 +0000 Manifest this update: Sun 14 Dec 2025 22:01:02 +0000 Manifest next update: Mon 15 Dec 2025 22:01:02 +0000 Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: SbuGUvD65hw2XbS88UGNvGDjhirpq9gshEYpA3C9vTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:a3:16:ac:27:97:5c:c2:05:47:52:a5:9b:60:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8 Validity Not Before: Dec 14 22:01:02 2025 GMT Not After : Dec 15 22:01:02 2025 GMT Subject: CN=9f2ee54a8251150b965a159da112798cd31ae5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:55:91:00:c6:5f:23:3b:6d:d9:6f:95:84: 76:18:f2:bc:ad:12:b4:08:4e:9e:e4:4b:e0:f3:c7: c2:1c:d4:99:e0:93:e1:02:62:69:42:d0:78:06:a4: 30:91:19:45:a4:cf:9e:73:87:d0:20:44:2a:7b:d2: b4:ba:f6:30:0a:39:a3:db:4c:53:43:5a:87:cc:a2: fe:e8:15:e9:66:6c:80:d2:cf:25:fa:12:3c:ba:77: ea:32:0f:fb:10:f8:17:71:2d:96:37:3a:3b:4f:9f: aa:54:39:2d:ff:27:71:fe:03:82:bf:08:60:c5:10: 00:83:b4:ec:76:68:b3:b8:77:90:37:2f:8c:8f:44: a5:72:d1:7a:be:84:7b:23:f7:2a:77:5f:83:34:5c: 9b:6c:cb:37:b0:01:24:90:bc:ae:c0:98:3d:e6:dc: e8:f0:f3:2f:47:de:68:20:ce:87:64:50:3e:40:82: 4f:35:0e:39:45:6d:3f:2b:96:61:38:10:f4:b2:99: 3e:ee:84:4d:99:83:f1:43:fa:0d:79:74:35:de:5d: 70:79:82:cd:f6:f8:a9:fb:7a:71:08:5d:54:ce:9e: 9c:a9:cd:8b:34:25:6e:94:67:c8:dd:e9:67:b4:e6: 0d:43:32:49:d5:26:db:81:11:5f:51:bf:9e:d9:78: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2E:E5:4A:82:51:15:0B:96:5A:15:9D:A1:12:79:8C:D3:1A:E5:E0 X509v3 Authority Key Identifier: keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:36:23:6a:c3:f3:70:7d:8f:aa:21:e9:8b:7d:0e:10:7b:2a: df:3e:86:0e:d6:40:a9:32:2a:1f:db:8d:4f:5c:1d:2f:d2:73: c1:59:42:4f:95:11:a4:5a:76:ce:55:0e:8d:46:38:98:6f:e7: a9:64:5d:8f:71:af:aa:00:c8:52:e9:fd:5e:01:af:cb:9e:cb: df:9c:87:e6:cb:28:14:35:4a:e2:bf:e5:f9:97:f3:54:72:d8: 9f:e5:f8:b3:33:7e:8b:20:7b:a4:00:e9:96:ea:30:55:9e:e4: 79:63:ef:df:1b:6a:4e:8f:03:11:dd:29:16:53:e8:25:76:99: 36:59:26:39:3f:47:f6:93:e1:e9:49:e5:44:80:af:cf:73:48: c7:e7:d1:c6:1c:d8:ba:1f:35:de:32:5f:09:00:47:e6:61:ee: b8:c1:df:10:7b:dc:67:dd:d5:81:5d:6c:3a:7a:3f:45:3c:9a: 7c:dd:9a:03:d9:22:6e:3d:f3:bf:e3:72:15:86:83:05:79:b9: b9:23:b0:8d:c2:cd:65:ab:67:35:f1:e8:c3:7e:0b:30:e8:5f: 1f:33:4f:ae:2e:5b:c7:79:f0:21:6b:cb:56:7d:c4:d8:b8:47: ab:3f:60:5a:66:72:6f:b5:db:21:3f:69:e8:32:c4:46:50:61: 8f:8b:e8:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4aMWrCeXXMIFR1Klm2BFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YjY0YjVmNTAyYzUxZmExY2MxMTQ4ODFjYmE1MmI1YTll YzFlYzgwHhcNMjUxMjE0MjIwMTAyWhcNMjUxMjE1MjIwMTAyWjAzMTEwLwYDVQQD Eyg5ZjJlZTU0YTgyNTExNTBiOTY1YTE1OWRhMTEyNzk4Y2QzMWFlNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSlVkQDGXyM7bdlvlYR2GPK8rRK0 CE6e5Evg88fCHNSZ4JPhAmJpQtB4BqQwkRlFpM+ec4fQIEQqe9K0uvYwCjmj20xT Q1qHzKL+6BXpZmyA0s8l+hI8unfqMg/7EPgXcS2WNzo7T5+qVDkt/ydx/gOCvwhg xRAAg7TsdmizuHeQNy+Mj0SlctF6voR7I/cqd1+DNFybbMs3sAEkkLyuwJg95tzo 8PMvR95oIM6HZFA+QIJPNQ45RW0/K5ZhOBD0spk+7oRNmYPxQ/oNeXQ13l1weYLN 9vip+3pxCF1Uzp6cqc2LNCVulGfI3elntOYNQzJJ1SbbgRFfUb+e2Xil7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8u5UqCURULlloVnaESeYzTGuXgMB8GA1UdIwQY MBaAFKe2S19QLFH6HMEUiBy6UrWp7B7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQt NDJkZjMxOTc0ZDY4LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQtNDJkZjMxOTc0ZDY4 LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTYjasPz cH2PqiHpi30OEHsq3z6GDtZAqTIqH9uNT1wdL9JzwVlCT5URpFp2zlUOjUY4mG/n qWRdj3GvqgDIUun9XgGvy57L35yH5ssoFDVK4r/l+ZfzVHLYn+X4szN+iyB7pADp luowVZ7keWPv3xtqTo8DEd0pFlPoJXaZNlkmOT9H9pPh6UnlRICvz3NIx+fRxhzY uh813jJfCQBH5mHuuMHfEHvcZ93VgV1sOno/RTyafN2aA9kibj3zv+NyFYaDBXm5 uSOwjcLNZatnNfHow34LMOhfHzNPri5bx3nwIWvLVn3E2LhHqz9gWmZyb7XbIT9p 6DLERlBhj4vo2A== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:56 2025 by rpki-client