This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json) Hash identifier: XfHsYn40sjNY91n5eJQIG6yU4lnASV9taeWGOjBy0GM= Subject key identifier: 50:D8:FB:B0:60:E7:2D:68:7A:65:96:9E:A9:0B:9B:87:43:0D:7B:7C Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41 Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741 Certificate serial: 019AF208C6EA536789E2D2ED421CE1076266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft Manifest number: 1260 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: QpgXzaOrw2RhWoFglGp+DDEZCxl9VeWsppoZzPq6GFU=) 2: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (hash: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=) 3: rxB_SKD05flXCVb5a9Y1L-kYSOM.roa (hash: xxBSeAniUfhkRNjna0RuKk7EzeOrdkzGj8pWxibPVsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c6:ea:53:67:89:e2:d2:ed:42:1c:e1:07:62:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=50d8fbb060e72d687a65969ea90b9b87430d7b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:65:c3:de:d8:4b:a0:5c:04:e2:f6:5b:f5: b4:4c:b9:d9:7d:24:be:8e:e1:c5:f2:10:15:33:be: 18:c5:d8:96:42:f6:b6:b4:b7:06:cc:be:4f:58:3e: e5:7a:53:5f:35:66:ba:ad:c5:65:8b:c8:19:a0:fa: ac:ad:37:9c:c0:a0:b1:20:6c:88:b2:b6:76:b8:1b: bc:25:85:bd:f6:d2:53:47:43:e3:15:cf:10:31:7d: 14:0c:d4:bf:ff:2a:cb:9e:31:cd:6c:2b:d8:a2:e7: 23:03:87:3f:35:b7:d5:64:ce:53:95:54:72:cd:ad: b1:0e:ca:ab:6f:d5:76:af:b3:b2:bb:c4:e1:7a:bc: 4e:97:30:7a:7f:c8:f0:9e:7a:68:64:11:7b:65:96: af:19:88:a9:f7:0f:18:0c:fe:d6:43:1a:98:e9:80: 8a:93:27:ef:65:af:8d:98:e2:4f:98:47:7f:70:7b: 25:6e:9a:f3:e6:f2:38:51:cf:56:ea:30:38:74:38: f4:9c:c1:1d:e5:c0:f2:25:54:91:66:00:bb:59:4a: 58:7d:ec:bb:36:94:91:3f:0a:e5:53:6d:88:92:5b: 55:70:09:4e:54:0c:f9:8d:5c:38:3f:9f:4c:54:66: a8:1f:33:f0:3d:a2:16:57:77:e6:bf:3d:00:e5:c2: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D8:FB:B0:60:E7:2D:68:7A:65:96:9E:A9:0B:9B:87:43:0D:7B:7C X509v3 Authority Key Identifier: keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e1:1a:8c:77:f6:23:f5:a3:f3:77:c5:21:14:62:66:e0:94: 44:e3:e8:b2:b5:85:62:c5:7c:46:ca:50:57:87:58:d6:ee:5a: 5b:ef:76:5f:cc:6c:b6:47:22:5a:0c:f7:c3:fb:2e:3f:0e:f3: df:2a:7b:e4:be:a1:a9:35:b4:c2:1c:10:bc:62:64:56:d0:d4: 65:a1:c8:90:eb:95:13:dd:f0:63:f9:d2:91:1e:d4:53:c8:a6: 0e:18:83:5c:ff:d9:bd:5c:51:00:b8:12:51:3d:f1:5c:5d:68: f2:aa:dd:ce:ad:df:a1:76:8a:6b:ca:fb:54:c0:c8:c1:99:6e: c3:69:a4:47:18:60:24:07:88:41:6e:74:3c:ce:f6:1c:d5:7c: 67:b3:97:55:87:49:ef:8d:98:c2:92:fa:c4:2d:34:d7:8e:7a: 55:05:b6:a6:46:69:08:95:42:c2:79:f0:ca:88:6c:15:74:50: 52:89:33:e2:59:36:44:9b:7f:79:a1:c6:74:6b:f7:6e:3c:30: 71:ac:29:05:cc:70:43:f8:95:01:2d:32:67:63:e8:e5:e6:72: 3a:bb:10:5c:2a:d1:4c:bf:50:7d:b5:ff:a8:7f:85:57:d0:49: cb:d9:1b:dc:a6:64:27:36:ac:84:77:ed:02:29:ed:ee:ad:4e: 24:15:05:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMbqU2eJ4tLtQhzhB2JmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0 Y2U3NDEwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD Eyg1MGQ4ZmJiMDYwZTcyZDY4N2E2NTk2OWVhOTBiOWI4NzQzMGQ3YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeBlw97YS6BcBOL2W/W0TLnZfSS+ juHF8hAVM74YxdiWQva2tLcGzL5PWD7lelNfNWa6rcVli8gZoPqsrTecwKCxIGyI srZ2uBu8JYW99tJTR0PjFc8QMX0UDNS//yrLnjHNbCvYoucjA4c/NbfVZM5TlVRy za2xDsqrb9V2r7Oyu8TherxOlzB6f8jwnnpoZBF7ZZavGYip9w8YDP7WQxqY6YCK kyfvZa+NmOJPmEd/cHslbprz5vI4Uc9W6jA4dDj0nMEd5cDyJVSRZgC7WUpYfey7 NpSRPwrlU22IkltVcAlOVAz5jVw4P59MVGaoHzPwPaIWV3fmvz0A5cKqXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDY+7Bg5y1oemWWnqkLm4dDDXt8MB8GA1UdIwQY MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt OTgxZmJiMzQ0MmRkLzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOEajHf2 I/Wj83fFIRRiZuCUROPosrWFYsV8RspQV4dY1u5aW+92X8xstkciWgz3w/suPw7z 3yp75L6hqTW0whwQvGJkVtDUZaHIkOuVE93wY/nSkR7UU8imDhiDXP/ZvVxRALgS UT3xXF1o8qrdzq3foXaKa8r7VMDIwZluw2mkRxhgJAeIQW50PM72HNV8Z7OXVYdJ 742YwpL6xC001456VQW2pkZpCJVCwnnwyohsFXRQUokz4lk2RJt/eaHGdGv3bjww cawpBcxwQ/iVAS0yZ2Po5eZyOrsQXCrRTL9QfbX/qH+FV9BJy9kb3KZkJzashHft Aint7q1OJBUFsw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:38 2025 by rpki-client