This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json) Hash identifier: Js5YKFzdH9guYvkcJ1JaCjK5wwTM7IRCEtgkhqoTAbU= Subject key identifier: F6:4C:64:4F:34:AC:28:65:A2:22:66:2F:F2:45:D3:A8:6B:E2:F4:8D Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c Certificate serial: 019AF389BC8A8E8B06BE894540F81E091DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft Manifest number: 0520 Signing time: Sat 06 Dec 2025 12:01:21 +0000 Manifest this update: Sat 06 Dec 2025 12:01:21 +0000 Manifest next update: Sun 07 Dec 2025 12:01:21 +0000 Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=) 2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: jJkmYig3xhVX3PH7lbH8swHcXBnboFR90zmjunXP9aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bc:8a:8e:8b:06:be:89:45:40:f8:1e:09:1d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c Validity Not Before: Dec 6 12:01:21 2025 GMT Not After : Dec 7 12:01:21 2025 GMT Subject: CN=f64c644f34ac2865a222662ff245d3a86be2f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:c5:ea:8d:79:ce:4f:95:ab:23:29:ea:dc: cc:a7:42:8b:f8:a6:2b:15:e3:99:ff:15:0f:0e:1c: ac:d5:9c:93:39:52:3a:a7:0c:f4:ac:7e:0d:6b:6a: 80:2f:ac:9a:23:77:f6:6a:26:d0:a5:75:28:5a:ad: 28:64:bf:7b:e9:69:e3:7f:2a:2a:8c:87:b0:46:33: 28:4e:6b:81:9b:11:48:9d:2d:ad:c1:9d:7a:ec:3e: 05:40:ce:82:d3:d2:9f:1e:e8:2f:d7:28:cc:90:6b: f5:f2:ff:9b:87:5c:11:f4:31:12:59:8c:69:1f:dd: 7b:49:d9:80:ba:27:54:b4:06:fb:c4:68:01:13:ad: 29:1e:99:a7:97:93:30:1c:7b:b1:73:a4:4c:4a:cf: a5:47:68:38:10:47:98:97:a1:d4:d0:ff:71:e9:77: 33:09:ad:6a:96:d7:1c:bf:81:24:57:87:e3:1d:a9: 22:f2:b4:34:5c:9a:a1:1d:f3:14:ad:ae:2f:9b:80: 8b:ff:85:b5:ce:b9:73:00:c3:11:b7:3c:44:c9:39: 3e:0a:dd:07:58:d6:36:9e:a2:f7:4e:f9:a5:02:a1: 50:7d:cb:ff:38:bc:80:1b:1c:1a:ee:92:68:22:03: 12:1f:28:c9:47:33:d5:72:d5:73:86:bd:02:85:c3: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:64:4F:34:AC:28:65:A2:22:66:2F:F2:45:D3:A8:6B:E2:F4:8D X509v3 Authority Key Identifier: keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:19:5e:fd:e7:5b:54:8f:cf:ce:a1:a0:4e:1e:1d:73:fb:2e: e0:aa:9a:13:9e:33:73:2b:2b:7e:b3:c5:fa:d9:7b:50:c3:fe: 87:e7:72:e9:2a:b8:25:62:6c:22:0b:3a:f1:1f:7b:b3:b3:66: 4c:18:3e:d8:ae:0b:fc:08:b3:b2:be:73:81:4a:53:a1:10:be: 6f:10:12:88:50:e6:8e:21:cd:be:27:af:09:e5:e6:0c:87:5e: 4c:66:a0:66:a9:e5:12:e0:e5:c1:8a:51:e9:65:e8:ab:a9:8b: 6a:3c:e4:fe:70:0f:12:a5:e5:37:4a:24:07:23:79:f2:5a:11: c7:9f:c5:dd:ba:f2:bb:a0:6e:25:7a:14:d4:d4:80:a2:84:64: 4d:a7:80:a6:34:7e:a7:31:76:c9:e4:43:89:7c:ca:0b:7d:18: a1:e9:d8:00:ee:97:1d:45:80:87:f8:e4:2c:82:b1:14:3f:a5: 6d:ae:62:23:48:90:c8:b4:e9:5a:e3:a3:fd:6c:ef:4d:71:64: f3:8a:9e:eb:85:26:6d:14:06:1f:72:e4:eb:e6:af:1d:ca:61: 99:d6:ff:e0:cc:fe:de:b9:6b:b9:69:2d:7f:0d:0b:a3:af:b1: e5:04:af:0e:49:0e:b3:35:a9:b3:d1:cc:f7:60:fe:1f:cb:8c: c8:69:8b:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibyKjosGvolFQPgeCR3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOTAwYTU1NTE4YjY3OWVkYzc4ZmFhOTg4M2VjNmU2MDM1 YWU3MWMwHhcNMjUxMjA2MTIwMTIxWhcNMjUxMjA3MTIwMTIxWjAzMTEwLwYDVQQD EyhmNjRjNjQ0ZjM0YWMyODY1YTIyMjY2MmZmMjQ1ZDNhODZiZTJmNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn3F6o15zk+VqyMp6tzMp0KL+KYr FeOZ/xUPDhys1ZyTOVI6pwz0rH4Na2qAL6yaI3f2aibQpXUoWq0oZL976Wnjfyoq jIewRjMoTmuBmxFInS2twZ167D4FQM6C09KfHugv1yjMkGv18v+bh1wR9DESWYxp H917SdmAuidUtAb7xGgBE60pHpmnl5MwHHuxc6RMSs+lR2g4EEeYl6HU0P9x6Xcz Ca1qltccv4EkV4fjHaki8rQ0XJqhHfMUra4vm4CL/4W1zrlzAMMRtzxEyTk+Ct0H WNY2nqL3TvmlAqFQfcv/OLyAGxwa7pJoIgMSHyjJRzPVctVzhr0ChcM2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZMZE80rChloiJmL/JF06hr4vSNMB8GA1UdIwQY MBaAFO2QClVRi2ee3Hj6qYg+xuYDWuccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmIt MGY3MzY2MWQ1ZjM1LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmItMGY3MzY2MWQ1ZjM1 LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRle/edb VI/PzqGgTh4dc/su4KqaE54zcysrfrPF+tl7UMP+h+dy6Sq4JWJsIgs68R97s7Nm TBg+2K4L/Aizsr5zgUpToRC+bxASiFDmjiHNvievCeXmDIdeTGagZqnlEuDlwYpR 6WXoq6mLajzk/nAPEqXlN0okByN58loRx5/F3bryu6BuJXoU1NSAooRkTaeApjR+ pzF2yeRDiXzKC30YoenYAO6XHUWAh/jkLIKxFD+lba5iI0iQyLTpWuOj/WzvTXFk 84qe64UmbRQGH3Lk6+avHcphmdb/4Mz+3rlruWktfw0Lo6+x5QSvDkkOszWps9HM 92D+H8uMyGmLhA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:21 2025 by rpki-client