This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json) Hash identifier: b5Yu/2KMDoCmQXyBO66JUN81wWgY2s8dTTRCWs7Ua4A= Subject key identifier: B0:6A:AF:62:34:FC:1B:5D:8F:D9:DE:D9:97:2F:B1:FF:D8:70:E8:33 Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c Certificate serial: 019B341FC28C1AC22B5FA6554F725FDC8CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft Manifest number: 067E Signing time: Fri 19 Dec 2025 01:00:55 +0000 Manifest this update: Fri 19 Dec 2025 01:00:55 +0000 Manifest next update: Sat 20 Dec 2025 01:00:55 +0000 Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: nL+S/+NUY9k4JfDwAGxqEEytb7r1HCqFPrnHR6f1akk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:c2:8c:1a:c2:2b:5f:a6:55:4f:72:5f:dc:8c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c Validity Not Before: Dec 19 01:00:55 2025 GMT Not After : Dec 20 01:00:55 2025 GMT Subject: CN=b06aaf6234fc1b5d8fd9ded9972fb1ffd870e833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:a4:cb:ee:19:44:3f:ff:35:fa:56:d1:98: 9d:f1:cd:29:f6:2f:cd:a5:3b:e1:f7:2d:8b:80:fe: 1f:b9:c3:60:fd:7b:88:fe:39:f3:fb:e1:f9:88:d9: 31:f4:4d:ae:a9:56:89:be:f7:b9:ad:b9:04:4f:ab: e3:06:61:9d:a2:ec:3c:03:03:86:2b:91:ca:e8:ba: 84:43:07:c8:07:a2:9c:3d:3c:c7:81:bb:dc:60:ce: 49:bb:e7:76:8e:d5:1b:a4:91:4f:0f:b9:8e:f3:bd: 90:5d:1d:c0:be:47:c8:db:4c:2c:b8:e9:51:33:a4: 5e:1c:7e:db:03:07:45:22:72:e7:cf:68:5d:ac:41: 9e:af:56:f9:d6:7d:a8:c4:2e:b7:33:f5:0f:52:6b: 65:87:55:e6:96:54:86:a1:ac:52:ca:00:2e:28:dd: 30:d6:b2:e8:81:64:89:f7:4e:6b:24:63:6b:59:cf: 7b:2e:a5:93:8a:c1:c5:ec:cc:74:23:63:6c:fd:68: a1:85:dc:c8:c3:3e:85:42:3a:b8:13:78:30:80:ba: 50:62:e9:15:24:7a:c0:01:24:36:39:5f:03:bc:fe: b2:73:74:b6:cd:e3:d3:d9:d0:85:fe:a3:63:ba:2f: ac:bb:78:84:01:ed:3c:bd:25:2a:8d:71:4b:d3:2d: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:AF:62:34:FC:1B:5D:8F:D9:DE:D9:97:2F:B1:FF:D8:70:E8:33 X509v3 Authority Key Identifier: keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ec:ea:c1:69:84:62:94:8e:ba:24:e0:ec:56:48:4b:a3:2f: 17:ec:9d:1f:29:af:d2:b8:e0:9d:c7:2b:b8:1c:7b:29:c2:f1: 95:b6:70:db:b4:b1:58:b8:e2:d0:4c:af:b1:15:be:80:8e:61: 12:b5:0c:b7:b5:77:a1:c4:f7:6c:79:72:fa:21:da:c0:1e:ec: ab:34:a4:e7:79:53:d5:c6:fc:92:7c:7f:ab:5d:23:55:ed:34: bb:2a:e9:40:76:ab:c7:e3:e2:bf:b3:1f:e4:c9:7c:f5:39:75: 83:66:bf:2a:c7:06:69:1a:ae:74:ec:49:49:7f:f9:4f:ca:9f: 28:c6:f2:0c:82:7d:7c:c0:10:6b:f3:24:72:18:56:bd:f9:74: ea:b7:4b:d5:65:28:da:a3:4f:75:16:2a:69:d8:16:92:cd:ec: 8c:d9:dd:56:00:7c:77:e6:36:bf:1c:8e:0e:94:ab:f0:f3:de: f0:d9:60:78:8c:e8:dd:51:18:ae:6a:d9:bf:2a:84:dc:24:0f: 56:ea:05:fc:ea:4a:0c:24:86:22:18:5e:1d:9c:90:40:59:ea: b2:53:10:04:48:f3:96:16:b7:9b:b5:5c:09:1e:9a:65:01:05: 30:a9:61:c2:27:52:34:5e:fc:84:66:3d:38:59:8f:c6:b2:f9: b4:70:34:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H8KMGsIrX6ZVT3Jf3IyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmM2M3MTAwMDY0NTBjZGU3NGE0MTlhNzE0MzI5OGU1NTA2 NmYyNmMwHhcNMjUxMjE5MDEwMDU1WhcNMjUxMjIwMDEwMDU1WjAzMTEwLwYDVQQD EyhiMDZhYWY2MjM0ZmMxYjVkOGZkOWRlZDk5NzJmYjFmZmQ4NzBlODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDCky+4ZRD//NfpW0Zid8c0p9i/N pTvh9y2LgP4fucNg/XuI/jnz++H5iNkx9E2uqVaJvve5rbkET6vjBmGdouw8AwOG K5HK6LqEQwfIB6KcPTzHgbvcYM5Ju+d2jtUbpJFPD7mO872QXR3AvkfI20wsuOlR M6ReHH7bAwdFInLnz2hdrEGer1b51n2oxC63M/UPUmtlh1XmllSGoaxSygAuKN0w 1rLogWSJ905rJGNrWc97LqWTisHF7Mx0I2Ns/WihhdzIwz6FQjq4E3gwgLpQYukV JHrAASQ2OV8DvP6yc3S2zePT2dCF/qNjui+su3iEAe08vSUqjXFL0y3qLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBqr2I0/Btdj9ne2Zcvsf/YcOgzMB8GA1UdIwQY MBaAFO88cQAGRQzedKQZpxQymOVQZvJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAt NGRiZDUyZDQ1NDEwLzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAtNGRiZDUyZDQ1NDEw LzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATezqwWmE YpSOuiTg7FZIS6MvF+ydHymv0rjgnccruBx7KcLxlbZw27SxWLji0EyvsRW+gI5h ErUMt7V3ocT3bHly+iHawB7sqzSk53lT1cb8knx/q10jVe00uyrpQHarx+Piv7Mf 5Ml89Tl1g2a/KscGaRqudOxJSX/5T8qfKMbyDIJ9fMAQa/MkchhWvfl06rdL1WUo 2qNPdRYqadgWks3sjNndVgB8d+Y2vxyODpSr8PPe8NlgeIzo3VEYrmrZvyqE3CQP VuoF/OpKDCSGIhheHZyQQFnqslMQBEjzlha3m7VcCR6aZQEFMKlhwidSNF78hGY9 OFmPxrL5tHA0kw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:04 2025 by rpki-client