This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json) Hash identifier: XjTctFsmp1gKpYx8HBeiCzjspB+IyT2Qia5kMtPZ7RQ= Subject key identifier: 8A:50:A9:51:47:B3:F4:D5:79:2A:9A:E1:F4:82:97:60:C3:0B:DC:99 Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c Certificate serial: 019AF31B43922510F8B9FD3FE732C0D053D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft Manifest number: 0891 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: EQC6I8Oe+Y64jHZ8tKc1LG9afapTvYeQv8z9L1HfSAk=) 2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=) 3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:43:92:25:10:f8:b9:fd:3f:e7:32:c0:d0:53:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=8a50a95147b3f4d5792a9ae1f4829760c30bdc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ab:fd:43:9f:cd:e7:90:33:72:3f:f3:a5:50: 46:0f:f5:1f:b2:7a:a7:fb:c0:64:a5:95:9b:56:bc: 64:2a:03:07:dc:af:63:db:d1:66:58:34:ca:e8:75: a5:24:1c:cb:b1:ee:ea:8b:13:a7:67:3e:0b:1e:3a: 63:09:f7:33:42:3a:46:e0:13:aa:8a:ef:ae:41:69: fa:39:e2:3b:cb:f5:08:3f:0c:fb:8f:07:65:35:ae: 5a:c6:6c:90:f5:aa:b0:72:1c:08:29:2d:5d:73:a5: 75:a1:7b:a0:46:b6:81:69:9e:a3:7a:8e:3f:fa:11: 2d:a4:9a:74:99:93:8c:6c:4e:42:6a:dd:fa:c8:c2: 7d:20:de:f9:49:c4:c6:f9:5b:e1:db:c2:39:1c:78: a5:21:10:e1:59:df:de:57:9b:61:d1:22:69:6f:81: 34:58:b8:1c:7f:16:cf:13:86:c8:8a:ce:ae:6e:a3: 7a:9b:b9:e3:61:31:31:5d:96:0a:a0:39:ba:9d:80: b5:df:ba:ca:90:58:1e:7a:85:d4:38:52:94:91:dd: 76:4d:9d:19:63:55:48:c7:af:f0:eb:80:7c:dd:94: f5:8f:42:7b:25:dc:f2:15:19:b9:2f:15:15:16:ed: a8:8e:a2:aa:18:fc:a8:07:5a:94:f7:b2:54:d2:38: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:A9:51:47:B3:F4:D5:79:2A:9A:E1:F4:82:97:60:C3:0B:DC:99 X509v3 Authority Key Identifier: keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:24:62:bb:da:5e:6e:68:63:6f:75:f2:38:35:d3:94:69:53: 91:87:d0:4f:96:0a:68:0e:af:2f:86:78:83:de:57:af:aa:08: a1:59:0c:27:3c:58:eb:12:dc:ef:f0:59:23:cd:3b:27:20:82: d5:c1:2c:50:a5:f4:c0:d1:1f:57:8d:04:de:91:e8:45:5a:50: 12:16:96:cc:69:58:d9:9f:d7:6e:c8:96:62:dd:e0:de:24:59: 5c:4d:fa:6a:fe:56:18:8f:43:82:72:28:9b:1f:29:a3:11:21: 3f:b8:3a:ed:e5:65:06:eb:82:12:1d:95:a7:ab:df:a4:e8:34: c9:66:f5:4e:7f:13:e9:6c:b5:51:9f:49:ec:8f:48:d9:3d:40: ed:b5:80:a0:e9:ef:f3:db:63:7a:01:25:e2:23:ab:c9:0e:67: 0b:04:85:77:28:12:35:72:20:de:4b:39:86:fe:d8:16:97:a0: f1:af:4d:85:10:03:72:af:59:9e:a4:85:64:46:b9:8f:5a:f1: ce:1a:ef:79:ad:1a:17:f6:1c:21:6c:57:0b:bf:1a:3b:c1:42: 68:fd:5f:92:78:df:8a:da:5e:a5:1e:53:bb:d7:6b:ab:23:3a: 88:35:18:b3:c3:25:06:4d:47:5b:04:b3:ad:8d:cf:4f:3a:1d: 33:3f:34:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0OSJRD4uf0/5zLA0FPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm MjgyN2MwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD Eyg4YTUwYTk1MTQ3YjNmNGQ1NzkyYTlhZTFmNDgyOTc2MGMzMGJkYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqv9Q5/N55Azcj/zpVBGD/Ufsnqn +8BkpZWbVrxkKgMH3K9j29FmWDTK6HWlJBzLse7qixOnZz4LHjpjCfczQjpG4BOq iu+uQWn6OeI7y/UIPwz7jwdlNa5axmyQ9aqwchwIKS1dc6V1oXugRraBaZ6jeo4/ +hEtpJp0mZOMbE5Cat36yMJ9IN75ScTG+Vvh28I5HHilIRDhWd/eV5th0SJpb4E0 WLgcfxbPE4bIis6ubqN6m7njYTExXZYKoDm6nYC137rKkFgeeoXUOFKUkd12TZ0Z Y1VIx6/w64B83ZT1j0J7JdzyFRm5LxUVFu2ojqKqGPyoB1qU97JU0jhoAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpQqVFHs/TVeSqa4fSCl2DDC9yZMB8GA1UdIwQY MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt YmFiNDhkYWI0Y2Q2LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2 LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCRiu9pe bmhjb3XyODXTlGlTkYfQT5YKaA6vL4Z4g95Xr6oIoVkMJzxY6xLc7/BZI807JyCC 1cEsUKX0wNEfV40E3pHoRVpQEhaWzGlY2Z/XbsiWYt3g3iRZXE36av5WGI9DgnIo mx8poxEhP7g67eVlBuuCEh2Vp6vfpOg0yWb1Tn8T6Wy1UZ9J7I9I2T1A7bWAoOnv 89tjegEl4iOryQ5nCwSFdygSNXIg3ks5hv7YFpeg8a9NhRADcq9ZnqSFZEa5j1rx zhrvea0aF/YcIWxXC78aO8FCaP1fknjfitpepR5Tu9drqyM6iDUYs8MlBk1HWwSz rY3PTzodMz803w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:02 2025 by rpki-client