This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.mft (raw, json) Hash identifier: rACOTjtNX5t+PrT89Hhx3wwwo3hqUmPxCa+0seGTNpI= Subject key identifier: CA:EC:A7:85:11:B8:EA:81:4C:BC:84:B1:09:A6:DE:38:C7:01:A8:20 Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA Certificate issuer: /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Certificate serial: 019AF0BF962F1B121E2198128363E87C9B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft Manifest number: 05 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: 7SGj8xKknz6djGxEyd4TOp7Yd-o.crl (hash: ncX8IiPG5oqL3qcg0T+q9jBPn2Qcdcazce8pkMtvWoA=) 2: GItA89gTg0p-mLBeGLPJPcYa2v0.roa (hash: EpM8bV8r7JZ4MZME62WBG/o48GsiiOJyISRSLG6lvvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:96:2f:1b:12:1e:21:98:12:83:63:e8:7c:9b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=caeca78511b8ea814cbc84b109a6de38c701a820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:08:87:55:52:f2:37:fb:34:62:5c:6e:27: 1d:0d:12:b2:27:df:61:b9:a1:09:3a:24:f9:6e:a9: 56:f2:7d:4f:51:27:a5:64:45:87:5b:18:4e:09:59: 89:91:0c:a1:0b:d7:36:33:fd:85:5a:8f:ff:4d:90: 97:78:07:eb:74:05:fc:f0:ad:ac:07:a9:01:2a:8b: 36:1d:d7:e9:e9:82:69:0f:55:35:5c:da:be:f8:a9: 5e:55:8e:85:9f:e1:d0:1b:84:fc:bb:9f:0a:c1:a6: a3:bf:06:e1:24:a4:56:64:67:ea:d0:bc:f0:f7:1e: cc:ab:58:93:4e:09:b0:81:d8:fa:a1:d1:15:5d:8d: b7:f4:32:ca:ad:13:e8:45:35:f8:05:41:3e:68:6c: c1:2f:4c:04:e7:3f:bd:22:ca:aa:69:6c:8a:e0:6b: 8b:93:06:30:5f:73:96:3e:5f:3b:ea:df:88:d9:b7: 84:d6:ce:ce:43:3e:63:07:40:8c:a0:4b:78:bb:50: a9:95:c7:0a:3e:c8:e0:91:52:c8:f7:87:05:f7:9f: eb:66:c8:c6:43:16:43:b6:f6:a9:bf:b3:92:ec:1b: ca:39:13:87:2a:ed:a1:b3:be:e1:95:3a:d2:e3:a5: 48:32:0c:6f:d1:dd:cc:17:7d:62:df:7f:93:b4:dc: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:A7:85:11:B8:EA:81:4C:BC:84:B1:09:A6:DE:38:C7:01:A8:20 X509v3 Authority Key Identifier: keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5b:40:5e:ca:e6:55:3d:16:fe:b1:22:37:99:d8:8e:53:f0: 38:45:8c:b8:1c:15:16:92:59:f5:fd:50:b5:3c:17:1d:0b:d7: 6e:b8:e1:f4:ec:49:c6:bb:5d:08:9d:e2:b9:86:80:6a:81:37: cd:10:ea:63:26:f1:5b:45:b5:d7:d1:7d:dd:58:5b:5c:aa:e8: b2:dd:53:0c:0e:e8:5c:71:be:fe:25:11:15:fd:89:b8:e4:52: 01:ac:43:91:21:4f:04:f9:a2:8e:e7:5e:2c:19:a7:80:b2:c0: f5:39:63:31:48:57:45:58:4d:0b:bf:48:ab:e0:02:63:e3:c3: c4:10:f8:88:4d:d7:30:07:85:02:f2:ce:51:9a:04:9c:50:d4: c3:0e:01:9e:6a:85:b7:85:49:d7:a8:d0:e8:fb:cc:e1:ee:51: 19:71:fa:d7:6b:9f:5d:4c:a2:dc:3e:cc:4a:f6:f5:d7:92:48: f6:a7:88:5b:b6:6e:fc:19:5c:87:24:6b:cb:ae:59:97:33:83: 36:30:24:d8:80:ad:a4:72:19:a1:d7:0d:21:83:d9:6c:3f:92: bf:0a:7c:de:bc:d2:ac:3b:2d:c6:30:65:61:ec:09:1d:6f:80: de:5a:e1:20:62:53:c1:5b:2b:73:f5:db:12:84:88:32:8b:f7: 52:54:88:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5YvGxIeIZgSg2PofJtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjFhM2YzMTJhNDlmM2U5ZDhjNmM0NGM5ZGUxMzNhOWVk ODc3ZWEwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhjYWVjYTc4NTExYjhlYTgxNGNiYzg0YjEwOWE2ZGUzOGM3MDFhODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF8Ih1VS8jf7NGJcbicdDRKyJ99h uaEJOiT5bqlW8n1PUSelZEWHWxhOCVmJkQyhC9c2M/2FWo//TZCXeAfrdAX88K2s B6kBKos2Hdfp6YJpD1U1XNq++KleVY6Fn+HQG4T8u58KwaajvwbhJKRWZGfq0Lzw 9x7Mq1iTTgmwgdj6odEVXY239DLKrRPoRTX4BUE+aGzBL0wE5z+9IsqqaWyK4GuL kwYwX3OWPl876t+I2beE1s7OQz5jB0CMoEt4u1CplccKPsjgkVLI94cF95/rZsjG QxZDtvapv7OS7BvKOROHKu2hs77hlTrS46VIMgxv0d3MF31i33+TtNzZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrsp4URuOqBTLyEsQmm3jjHAaggMB8GA1UdIwQY MBaAFO0ho/MSpJ8+nYxsRMneEzqe2HfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTct ZGYxMzRmMmEyZTZjLzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTctZGYxMzRmMmEyZTZj LzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcltAXsrm VT0W/rEiN5nYjlPwOEWMuBwVFpJZ9f1QtTwXHQvXbrjh9OxJxrtdCJ3iuYaAaoE3 zRDqYybxW0W119F93VhbXKrost1TDA7oXHG+/iURFf2JuORSAaxDkSFPBPmijude LBmngLLA9TljMUhXRVhNC79Iq+ACY+PDxBD4iE3XMAeFAvLOUZoEnFDUww4BnmqF t4VJ16jQ6PvM4e5RGXH612ufXUyi3D7MSvb115JI9qeIW7Zu/BlchyRry65ZlzOD NjAk2ICtpHIZodcNIYPZbD+Svwp83rzSrDstxjBlYewJHW+A3lrhIGJTwVsrc/Xb EoSIMov3UlSI8g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:49 2025 by rpki-client