This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json) Hash identifier: M8Y9VEvYsDRuefVbLrbtwHihVZApWj4iakWUbiO0WE4= Subject key identifier: 94:67:E3:9C:F0:C5:D2:C1:CE:A0:60:A4:AA:C6:D6:24:29:D9:1E:80 Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a Certificate serial: 019AF23FAF89FB1D8D042570A086BFE75FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft Manifest number: 0EC7 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: CRmmqoERVfbW16yO71W26sDtlAVD7DLDgAYktFoWGF8=) 2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:af:89:fb:1d:8d:04:25:70:a0:86:bf:e7:5f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=9467e39cf0c5d2c1cea060a4aac6d62429d91e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:6f:f3:72:59:09:4d:27:0b:18:b3:b7:92: 9b:ec:c1:c2:ed:14:0f:ee:2c:27:00:f2:28:d8:5d: d1:07:c2:fd:be:95:ca:06:c9:10:9f:6d:70:c7:f0: aa:d6:12:34:7c:c9:d0:f2:46:f9:2d:b8:7c:bc:34: d3:46:c8:9b:25:92:25:7f:e6:67:27:7f:db:d5:3c: fd:12:f4:56:02:b8:c5:b3:33:d6:7f:18:3f:d8:ba: 01:aa:3a:01:15:7d:dd:18:27:03:94:f4:f1:6c:f0: 44:1f:42:8a:b2:58:ee:f2:d9:99:18:ed:44:b9:f4: 29:4f:c2:b7:63:11:59:c0:bd:06:a1:69:af:74:0a: 87:a8:10:ef:c9:0b:60:6f:42:f7:23:7e:70:b5:d5: e4:fe:67:d8:2f:0f:c8:df:a8:f1:67:0d:8d:38:5a: af:33:71:c8:c1:44:ab:48:4a:7d:6e:05:59:82:9e: 22:47:91:27:8f:ef:a9:1a:3f:01:dd:3c:6c:97:23: ee:ec:68:20:5a:8b:6f:44:22:94:ef:85:46:5b:6e: cb:8a:a1:6a:1e:10:81:df:90:f2:3c:77:37:a4:1c: b0:1a:a0:0e:f8:f7:f8:3e:9d:aa:18:f7:41:6d:86: cb:bd:1c:de:fd:d6:39:4b:d1:84:ba:10:5f:0d:c0: a9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:E3:9C:F0:C5:D2:C1:CE:A0:60:A4:AA:C6:D6:24:29:D9:1E:80 X509v3 Authority Key Identifier: keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:07:db:50:2e:b2:37:10:5a:05:1c:50:e1:11:b1:b8:cc:c1: ca:e9:23:e1:96:67:d7:0d:8b:1c:db:58:9f:6e:09:9a:ee:b5: 3b:99:c3:65:40:01:c6:cd:e5:09:eb:e2:6a:e0:d7:b5:c5:09: bc:8e:e4:b7:f8:9c:af:2e:96:17:5e:3a:59:e4:8c:b0:b7:62: 3a:a5:f2:35:c7:87:71:49:24:d0:7c:61:ed:ab:62:9d:20:90: 30:72:15:f6:06:a4:41:8c:0d:d7:c5:8e:27:bf:92:b5:ae:ce: be:fd:15:90:03:10:f2:02:79:51:c1:33:68:34:e1:e4:2d:58: 66:5c:2d:d3:f8:8b:a6:7f:93:72:0a:e1:67:c7:2f:fa:68:50: 1c:15:57:a5:5c:01:77:27:69:6f:f4:1c:6c:ff:aa:f9:93:fa: d0:22:91:8e:9d:e8:48:cc:71:d7:7d:0d:b7:70:47:ce:4e:76: a2:af:ea:e4:24:1f:bc:73:7d:f5:4d:6f:c7:a8:2b:73:66:a9: 6a:83:81:64:06:fe:48:7e:d0:d0:c7:53:0b:32:0f:79:b8:33: 0d:5b:6f:a7:5d:c5:df:ab:eb:e7:ed:51:8d:06:4e:0f:eb:14: d1:6f:9c:c1:cb:d0:05:6c:8b:6b:9b:aa:54:2d:c5:dc:9e:bc: 0a:cf:e1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6+J+x2NBCVwoIa/51/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz MDhmM2EwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg5NDY3ZTM5Y2YwYzVkMmMxY2VhMDYwYTRhYWM2ZDYyNDI5ZDkxZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJpv83JZCU0nCxizt5Kb7MHC7RQP 7iwnAPIo2F3RB8L9vpXKBskQn21wx/Cq1hI0fMnQ8kb5Lbh8vDTTRsibJZIlf+Zn J3/b1Tz9EvRWArjFszPWfxg/2LoBqjoBFX3dGCcDlPTxbPBEH0KKslju8tmZGO1E ufQpT8K3YxFZwL0GoWmvdAqHqBDvyQtgb0L3I35wtdXk/mfYLw/I36jxZw2NOFqv M3HIwUSrSEp9bgVZgp4iR5Enj++pGj8B3TxslyPu7GggWotvRCKU74VGW27LiqFq HhCB35DyPHc3pBywGqAO+Pf4Pp2qGPdBbYbLvRze/dY5S9GEuhBfDcCpbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRn45zwxdLBzqBgpKrG1iQp2R6AMB8GA1UdIwQY MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwfbUC6y NxBaBRxQ4RGxuMzByukj4ZZn1w2LHNtYn24Jmu61O5nDZUABxs3lCeviauDXtcUJ vI7kt/icry6WF146WeSMsLdiOqXyNceHcUkk0Hxh7atinSCQMHIV9gakQYwN18WO J7+Sta7Ovv0VkAMQ8gJ5UcEzaDTh5C1YZlwt0/iLpn+TcgrhZ8cv+mhQHBVXpVwB dydpb/QcbP+q+ZP60CKRjp3oSMxx130Nt3BHzk52oq/q5CQfvHN99U1vx6grc2ap aoOBZAb+SH7Q0MdTCzIPebgzDVtvp13F36vr5+1RjQZOD+sU0W+cwcvQBWyLa5uq VC3F3J68Cs/hOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:32 2025 by rpki-client