This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json) Hash identifier: PtbzMlXwfZZ0fgzCF8qvOhpNO3LxJAQ9OoidTh0WMsE= Subject key identifier: F6:64:B3:DC:E2:AB:B6:90:4E:A2:C6:7D:59:96:C0:DE:04:45:79:7D Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74 Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774 Certificate serial: 019B5976EAD9452152AD627C826D9B9236CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft Manifest number: 0AF5 Signing time: Fri 26 Dec 2025 07:02:04 +0000 Manifest this update: Fri 26 Dec 2025 07:02:04 +0000 Manifest next update: Sat 27 Dec 2025 07:02:04 +0000 Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: Nj1qLGgzd3gjZbt1SpB29unkIJfBr/ZRjplwvmlNXXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ea:d9:45:21:52:ad:62:7c:82:6d:9b:92:36:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774 Validity Not Before: Dec 26 07:02:04 2025 GMT Not After : Dec 27 07:02:04 2025 GMT Subject: CN=f664b3dce2abb6904ea2c67d5996c0de0445797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:05:44:0e:af:6a:87:cf:cf:9b:84:50:37: 57:01:5d:95:2d:ef:f8:e6:02:e4:ac:45:3f:b9:66: ba:b9:90:a0:f6:d1:c7:16:b5:63:af:2d:04:9f:0d: b9:5f:29:c4:b3:a9:c2:4d:e0:70:0a:da:cd:59:26: 27:af:51:22:09:b6:43:b1:67:93:2d:33:34:f0:c0: d0:e0:25:73:f6:02:1e:fc:75:ed:25:fc:16:13:c2: 9b:f8:2c:3f:ac:2a:10:9a:fa:24:00:26:89:7a:91: dd:51:81:d5:83:e1:18:d3:5a:9a:08:b4:a0:28:0d: b6:3c:36:0e:a5:47:96:55:fc:ab:ea:6d:20:3c:24: d0:7c:1a:e4:7e:1a:b9:42:81:75:eb:15:d1:a4:91: c7:a4:9e:c4:04:15:de:70:11:c6:88:18:1b:8c:60: 3d:3a:32:b4:2b:a1:34:7e:35:9e:03:35:61:c3:70: ad:87:ee:cf:14:94:64:63:c3:e4:88:e9:72:3d:1b: e0:cf:ce:ff:3d:0c:f3:8c:9d:53:fd:cd:fe:ef:c3: 22:cc:ad:64:3c:c5:72:8e:d5:64:72:7b:0c:7d:5b: 5b:82:f2:0a:35:67:a7:6c:b9:56:96:9a:ab:a1:03: c1:62:21:81:22:21:ff:9c:20:9c:41:31:10:fd:76: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:64:B3:DC:E2:AB:B6:90:4E:A2:C6:7D:59:96:C0:DE:04:45:79:7D X509v3 Authority Key Identifier: keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:ba:7d:d3:ef:0f:81:85:a0:e9:f0:1a:e8:03:08:e5:c0: bb:1c:89:e1:0d:54:08:2e:e0:84:98:de:72:37:60:f2:74:bd: 96:0c:5f:43:bd:6e:6c:84:0c:a0:56:0c:5a:a9:46:be:ef:2e: 5b:c7:e6:5d:93:4a:b4:05:ea:b8:a1:99:6d:22:c9:0e:27:98: 20:fd:03:e7:a9:5e:26:f6:89:87:8c:81:0b:76:70:4f:27:cc: c7:0e:c9:b3:f7:73:88:22:54:2b:0e:7d:1c:47:02:ae:00:db: 6b:bf:34:5f:de:0c:88:e9:15:de:5a:de:52:79:3a:d5:90:a7: e9:59:36:25:80:3d:8a:93:55:bd:fc:0f:b8:fc:88:61:23:32: 81:97:61:be:83:46:a3:41:4a:5e:b2:92:66:83:08:96:93:59: 7f:0a:05:04:20:e1:85:d4:fe:7a:c7:22:08:8a:b6:94:ef:7a: f1:21:71:a8:c2:2a:eb:b9:a4:75:29:bd:a0:37:cd:02:f0:04: c9:3b:a0:5c:5b:b3:d4:f5:a4:75:bc:38:51:e7:10:92:30:fb: 6d:6c:d2:81:75:30:dd:53:09:fd:d8:b6:0a:e6:d3:c4:67:d2: f8:82:d7:cb:e7:05:b6:5c:9d:24:67:39:f4:79:0e:59:86:a8: 43:47:8d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdurZRSFSrWJ8gm2bkjbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMmM2ZDYyODRmMTE2NWQwOWViZWRiNDRkZTYxNzVmZTAz M2I3NzQwHhcNMjUxMjI2MDcwMjA0WhcNMjUxMjI3MDcwMjA0WjAzMTEwLwYDVQQD EyhmNjY0YjNkY2UyYWJiNjkwNGVhMmM2N2Q1OTk2YzBkZTA0NDU3OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd8FRA6vaofPz5uEUDdXAV2VLe/4 5gLkrEU/uWa6uZCg9tHHFrVjry0Enw25XynEs6nCTeBwCtrNWSYnr1EiCbZDsWeT LTM08MDQ4CVz9gIe/HXtJfwWE8Kb+Cw/rCoQmvokACaJepHdUYHVg+EY01qaCLSg KA22PDYOpUeWVfyr6m0gPCTQfBrkfhq5QoF16xXRpJHHpJ7EBBXecBHGiBgbjGA9 OjK0K6E0fjWeAzVhw3Cth+7PFJRkY8PkiOlyPRvgz87/PQzzjJ1T/c3+78MizK1k PMVyjtVkcnsMfVtbgvIKNWenbLlWlpqroQPBYiGBIiH/nCCcQTEQ/XZp8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZks9ziq7aQTqLGfVmWwN4ERXl9MB8GA1UdIwQY MBaAFO4sbWKE8RZdCevttE3mF1/gM7d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUt YzRmNTNlMTdkZGIwLzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUtYzRmNTNlMTdkZGIw LzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhe6fdPv D4GFoOnwGugDCOXAuxyJ4Q1UCC7ghJjecjdg8nS9lgxfQ71ubIQMoFYMWqlGvu8u W8fmXZNKtAXquKGZbSLJDieYIP0D56leJvaJh4yBC3ZwTyfMxw7Js/dziCJUKw59 HEcCrgDba780X94MiOkV3lreUnk61ZCn6Vk2JYA9ipNVvfwPuPyIYSMygZdhvoNG o0FKXrKSZoMIlpNZfwoFBCDhhdT+esciCIq2lO968SFxqMIq67mkdSm9oDfNAvAE yTugXFuz1PWkdbw4UecQkjD7bWzSgXUw3VMJ/di2CubTxGfS+ILXy+cFtlydJGc5 9HkOWYaoQ0eNJA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:52 2025 by rpki-client