This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json) Hash identifier: J7jofNHwSTAxsJl5Zcy4ITb693E7tl2XRLTCQFJPLsY= Subject key identifier: 71:9F:0D:2A:83:21:D3:5B:1B:3D:72:AE:37:C5:92:4D:87:2E:F3:CD Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa Certificate serial: 019AF12E24429155A86F9CD288C36642D8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft Manifest number: 1617 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=) 2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: arp7YAz2ZSELYa1kqTMkizCOBluj11mEV+1DhwMyyNI=) 3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:24:42:91:55:a8:6f:9c:d2:88:c3:66:42:d8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=719f0d2a8321d35b1b3d72ae37c5924d872ef3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:2f:62:52:a1:89:99:02:a6:77:a8:74:c5: c9:cc:30:2a:70:23:fe:bb:2c:e0:5a:fa:7d:25:3b: ab:71:c2:39:a3:4b:ee:52:12:c7:65:2b:7f:66:42: ef:28:db:34:38:be:ca:05:6d:01:05:2f:43:56:d6: f2:17:e5:53:be:ba:83:03:99:28:51:04:f5:31:4c: 66:11:29:74:16:6e:c9:2c:f3:1c:61:99:05:30:ee: de:5a:aa:0f:c2:a5:30:4a:0d:3d:61:a1:c0:ee:2d: 70:a6:45:60:05:1b:4a:04:38:bf:f7:7a:0c:05:64: fa:87:c4:2b:c9:c5:1c:66:00:2d:25:c2:02:57:0d: b3:96:c0:5a:bf:94:cb:b2:44:fe:6b:52:60:62:07: 1f:5d:35:1d:7f:6d:3e:01:87:eb:f9:c5:82:a5:12: f4:25:04:21:4f:70:96:31:20:50:9d:d3:59:44:c6: 5b:71:9e:e9:b5:73:80:c3:5f:b4:3f:70:88:91:2e: bb:54:ef:44:78:17:18:3a:95:9e:45:57:4a:5e:4e: 9a:e2:b2:e6:f2:a7:a0:05:f0:b2:ba:15:2a:6c:d4: 54:f2:8c:b3:09:cc:d8:94:16:68:1a:59:73:cc:e6: 77:0e:38:61:39:62:4e:cf:22:7c:63:cb:e2:02:90: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9F:0D:2A:83:21:D3:5B:1B:3D:72:AE:37:C5:92:4D:87:2E:F3:CD X509v3 Authority Key Identifier: keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a9:2a:89:ad:4d:26:b8:08:48:ff:06:65:ba:04:d2:c7:8c: f3:0c:6d:81:6f:a8:b3:03:8c:ae:27:dc:8b:87:76:8c:6a:d3: 40:29:ea:b1:cf:1c:29:b5:4c:d4:9e:dd:34:6c:23:6b:55:7a: 9a:40:48:6a:02:18:b5:f0:8f:71:f5:e7:da:0d:59:e6:b5:fe: f7:0c:2b:f7:20:ee:3c:be:22:83:9e:fb:04:d3:d2:d3:f7:dc: 74:d6:ca:90:40:a3:f1:ce:44:08:cc:36:d9:ee:27:ca:b4:e0: 62:d0:20:a8:c3:3e:92:73:35:7d:52:14:a8:f5:aa:d3:0f:86: e3:b3:ba:df:33:c4:b9:a5:0e:01:9c:12:9c:31:46:68:45:c7: e6:c6:d3:18:c5:7f:74:c3:f9:05:11:99:1e:4a:0f:32:6f:ac: 31:fc:80:c4:fb:5d:ae:09:b8:d2:47:88:dc:b9:b6:d1:fa:33: 0a:ab:94:6e:52:82:f5:69:2f:07:5e:e1:fa:1c:e5:1a:4b:31: ec:5d:dc:eb:72:a5:15:bb:d1:97:dc:59:2a:36:b0:0a:01:d1: 76:82:fa:e3:49:22:7e:2f:46:d2:e1:8e:f5:55:bc:5a:c1:de: 0b:f3:2b:cb:bd:8a:7e:cc:fe:13:8c:97:6c:da:61:ae:3e:a8: 3f:76:6e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiRCkVWob5zSiMNmQtinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDViM2FmMDA2NDk4MWU5NmJiNWUyN2Q4ZjA0ZDg2ZTYz MDZjZmEwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg3MTlmMGQyYTgzMjFkMzViMWIzZDcyYWUzN2M1OTI0ZDg3MmVmM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LQvYlKhiZkCpneodMXJzDAqcCP+ uyzgWvp9JTurccI5o0vuUhLHZSt/ZkLvKNs0OL7KBW0BBS9DVtbyF+VTvrqDA5ko UQT1MUxmESl0Fm7JLPMcYZkFMO7eWqoPwqUwSg09YaHA7i1wpkVgBRtKBDi/93oM BWT6h8QrycUcZgAtJcICVw2zlsBav5TLskT+a1JgYgcfXTUdf20+AYfr+cWCpRL0 JQQhT3CWMSBQndNZRMZbcZ7ptXOAw1+0P3CIkS67VO9EeBcYOpWeRVdKXk6a4rLm 8qegBfCyuhUqbNRU8oyzCczYlBZoGllzzOZ3DjhhOWJOzyJ8Y8viApAJcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGfDSqDIdNbGz1yrjfFkk2HLvPNMB8GA1UdIwQY MBaAFO7Vs68AZJgelrteJ9jwTYbmMGz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAt MDMwYWNkM2FlMzM2LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAtMDMwYWNkM2FlMzM2 LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwakqia1N JrgISP8GZboE0seM8wxtgW+oswOMrifci4d2jGrTQCnqsc8cKbVM1J7dNGwja1V6 mkBIagIYtfCPcfXn2g1Z5rX+9wwr9yDuPL4ig577BNPS0/fcdNbKkECj8c5ECMw2 2e4nyrTgYtAgqMM+knM1fVIUqPWq0w+G47O63zPEuaUOAZwSnDFGaEXH5sbTGMV/ dMP5BRGZHkoPMm+sMfyAxPtdrgm40keI3Lm20fozCquUblKC9WkvB17h+hzlGksx 7F3c63KlFbvRl9xZKjawCgHRdoL640kifi9G0uGO9VW8WsHeC/Mry72Kfsz+E4yX bNphrj6oP3ZuNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:11 2025 by rpki-client