This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json) Hash identifier: cePWuJOd3VacVMqeVUh7Lbk+xyjbDNq8Ad/pQwnqZ3U= Subject key identifier: 00:8D:8F:44:05:DD:D0:B7:23:76:5C:49:3C:15:9E:64:9E:4B:E9:7D Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Certificate serial: 019AF2AD6EB5920F602D5B27731C0085772D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: ukFEMOotOwEhctkWRHTBaqYsdkWt3b+evSVIWatyyIY=) 2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6e:b5:92:0f:60:2d:5b:27:73:1c:00:85:77:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=008d8f4405ddd0b723765c493c159e649e4be97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:ba:eb:58:9b:1e:d2:95:c1:69:e4:9e:aa: 95:3d:a2:a5:dc:d8:76:69:d6:7d:2c:08:9c:1a:f8: 15:70:59:59:2d:43:e3:2f:cb:8b:5d:5a:07:4e:b2: 70:73:9b:55:73:57:47:37:af:9d:81:b3:cf:e5:23: 0f:8f:08:75:a4:28:af:cf:31:74:4c:8f:b3:4b:62: a6:fb:eb:ad:15:a6:b3:fd:81:36:f6:5c:4a:70:13: 1d:58:68:17:43:40:cd:ac:bd:19:31:00:23:41:15: 49:de:30:bd:8d:6f:bf:af:28:46:bf:bd:06:ee:54: 0b:61:64:84:9f:7f:fb:b7:c9:2e:e8:e9:35:58:4e: 53:b4:46:49:28:5a:96:dd:4e:9b:45:31:92:6c:ef: 7f:6d:a7:18:fb:a3:f2:a0:7e:f2:12:4c:b6:02:1c: bf:2b:48:1e:21:be:52:d2:c9:c8:6a:fb:5f:78:b3: 9a:a4:f6:10:01:f9:eb:b8:f8:0b:96:31:94:ec:d1: 01:30:3d:31:7a:6a:57:e4:05:4a:66:07:33:9e:dd: 3c:ba:49:af:e7:28:2a:79:af:67:8c:71:f7:99:b0: b1:dd:25:6f:fd:34:ff:a1:be:c4:cf:73:75:51:a4: aa:06:ba:17:76:cb:44:9f:43:5f:8b:57:83:b9:dd: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:8F:44:05:DD:D0:B7:23:76:5C:49:3C:15:9E:64:9E:4B:E9:7D X509v3 Authority Key Identifier: keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:d6:1d:ab:7e:39:5a:dc:50:ba:2e:6d:50:02:53:67:96: ac:f0:5b:de:25:03:f7:1e:8a:11:8e:22:08:bf:15:eb:f0:09: 0d:42:a3:22:6b:63:ec:ff:aa:c7:5f:80:75:8e:62:0d:8e:21: 8a:0b:7d:40:e7:b3:ef:a3:05:11:d1:12:e3:b0:df:7f:bf:26: ec:8a:cb:db:8b:cf:ba:a6:6d:1e:8e:e6:2f:3d:f0:5c:89:0e: 0d:87:66:5a:52:09:4b:f5:bd:82:74:38:a7:3a:91:67:29:a6: 73:3c:15:4f:bc:0f:51:7b:0a:15:5a:ab:3c:45:ad:0d:27:11: c9:b5:38:7e:e9:7e:1c:88:1e:0a:ef:b7:34:27:dd:57:93:38: a5:4f:53:cc:62:68:a2:04:3e:2c:3d:32:c4:ae:cc:03:c7:f6: ce:c5:10:54:30:17:6b:6f:85:7a:8e:9d:97:ed:86:20:0d:68: fb:1e:04:dc:34:48:10:45:28:0e:f4:8a:ed:69:3b:86:87:e9: 70:7b:20:56:49:f7:24:b8:87:87:c6:23:69:1d:70:98:c5:06: 33:7d:d8:be:48:88:e7:83:5c:e7:6b:f7:c4:a7:8a:5e:57:ee: 6f:ac:0d:4d:05:35:43:d7:26:43:89:af:5e:a0:08:f5:88:20: b2:3d:4b:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW61kg9gLVsncxwAhXctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi Yzk5MWIwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EygwMDhkOGY0NDA1ZGRkMGI3MjM3NjVjNDkzYzE1OWU2NDllNGJlOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC2661ibHtKVwWnknqqVPaKl3Nh2 adZ9LAicGvgVcFlZLUPjL8uLXVoHTrJwc5tVc1dHN6+dgbPP5SMPjwh1pCivzzF0 TI+zS2Km++utFaaz/YE29lxKcBMdWGgXQ0DNrL0ZMQAjQRVJ3jC9jW+/ryhGv70G 7lQLYWSEn3/7t8ku6Ok1WE5TtEZJKFqW3U6bRTGSbO9/bacY+6PyoH7yEky2Ahy/ K0geIb5S0snIavtfeLOapPYQAfnruPgLljGU7NEBMD0xempX5AVKZgcznt08ukmv 5ygqea9njHH3mbCx3SVv/TT/ob7Ez3N1UaSqBroXdstEn0Nfi1eDud3xywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACNj0QF3dC3I3ZcSTwVnmSeS+l9MB8GA1UdIwQY MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt MzZlMzlmZWQ3YmVkLzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6DWHat+ OVrcULoubVACU2eWrPBb3iUD9x6KEY4iCL8V6/AJDUKjImtj7P+qx1+AdY5iDY4h igt9QOez76MFEdES47Dff78m7IrL24vPuqZtHo7mLz3wXIkODYdmWlIJS/W9gnQ4 pzqRZymmczwVT7wPUXsKFVqrPEWtDScRybU4ful+HIgeCu+3NCfdV5M4pU9TzGJo ogQ+LD0yxK7MA8f2zsUQVDAXa2+Feo6dl+2GIA1o+x4E3DRIEEUoDvSK7Wk7hofp cHsgVkn3JLiHh8YjaR1wmMUGM33YvkiI54Nc52v3xKeKXlfub6wNTQU1Q9cmQ4mv XqAI9Yggsj1Lvw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:09 2025 by rpki-client