This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft File: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json) Hash identifier: P5henNe47pU+fhqAr2Sp6Wcw0J2L9mJpp0izdBe07gs= Subject key identifier: FD:BB:17:2D:A2:E1:89:A3:70:DF:42:5C:FB:BB:83:BA:91:02:1E:37 Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Certificate serial: 019AF31C4A05805C910A524A4B4974D27D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft Manifest number: 0EA8 Signing time: Sat 06 Dec 2025 10:01:48 +0000 Manifest this update: Sat 06 Dec 2025 10:01:48 +0000 Manifest next update: Sun 07 Dec 2025 10:01:48 +0000 Files and hashes: 1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: ZmyIWdgYhHIi1vNnkmqwhI+KJCmUMtyL15Ow8ZOGVNQ=) 2: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (hash: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4a:05:80:5c:91:0a:52:4a:4b:49:74:d2:7d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Validity Not Before: Dec 6 10:01:48 2025 GMT Not After : Dec 7 10:01:48 2025 GMT Subject: CN=fdbb172da2e189a370df425cfbbb83ba91021e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:0d:eb:e7:7b:2e:19:7f:da:6f:f5:fd:89: 7c:71:43:a1:3e:c8:8d:24:2a:25:91:80:b4:a6:fe: cb:75:b3:92:9e:24:c3:b7:20:a1:47:1a:a0:6d:9e: 4a:72:50:75:82:18:a8:72:bc:99:6e:ce:f9:64:aa: 8f:de:ad:e0:b0:c9:e8:43:10:ea:47:43:9a:a7:b1: 5a:33:73:4f:09:c3:46:61:ec:32:cc:05:6a:b4:88: 54:fd:c4:38:de:f0:37:d9:75:c1:bf:de:5f:57:65: 2d:5c:9a:ac:b2:bb:fc:81:bc:f0:c4:bd:ef:01:e7: 1e:ff:6e:1e:20:1c:5f:68:0c:fc:14:0d:9c:cc:96: 5a:06:f1:33:d7:6c:26:8a:7a:aa:05:4b:97:42:16: e1:12:09:33:c0:9e:d3:d2:a3:97:ac:f4:a9:8d:24: f5:de:07:0d:0c:b4:ae:7d:b5:38:69:11:ed:71:f3: 0a:a5:3f:40:e4:d0:aa:14:0a:1c:b8:18:dd:23:0d: 42:66:a5:6b:a4:96:ea:08:15:8f:cb:da:59:b8:69: f5:f7:32:71:59:7b:aa:5f:62:f4:39:fc:db:8f:09: 03:14:59:9b:b8:47:f5:db:51:88:a7:f0:6c:5e:08: 0a:6d:a3:0d:1c:fd:85:52:69:c4:25:eb:5a:2f:61: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:17:2D:A2:E1:89:A3:70:DF:42:5C:FB:BB:83:BA:91:02:1E:37 X509v3 Authority Key Identifier: keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b3:89:f4:d3:32:9b:85:69:0e:6b:8f:a2:52:a0:6e:16:7a: 03:2b:04:6b:ba:d2:c8:91:4d:06:3b:bd:2e:10:17:a6:5e:e2: e7:59:54:9a:3a:02:85:3e:32:6d:4d:d2:b4:7b:05:03:1b:50: a2:fe:ef:d8:ad:0e:7a:a3:ee:c5:10:68:5b:80:09:f2:ff:3f: d0:ee:79:a2:40:fb:d1:89:f6:75:4d:44:a0:e3:1b:5e:59:44: f5:77:ce:c8:9f:df:34:51:15:df:3d:86:0b:4c:5b:36:a4:d4: e9:be:6b:aa:f4:e6:b6:6c:c8:e0:0d:c1:d9:f6:a2:2d:aa:18: 2a:f9:2e:8c:51:2d:7d:1f:26:90:f3:59:5b:78:99:f9:0b:a7: 1b:2d:66:97:24:fe:52:b4:d4:6b:c6:d4:f1:17:cb:2f:35:03: 20:e1:4a:63:60:20:77:0c:79:ce:02:7b:65:e9:00:0f:7f:d3: f9:65:6d:8e:9c:62:01:74:15:90:31:5c:6d:36:40:7d:4f:f3: a0:bb:97:a0:39:44:33:d0:34:b0:71:02:a1:48:2b:44:6f:73: 48:ca:0a:b4:af:88:c7:8e:e7:7a:7a:6a:0c:3c:80:82:dc:c7: a3:74:d8:53:46:c2:bb:76:d3:ed:29:12:bc:a2:e6:46:6c:b0: 2f:78:c6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEoFgFyRClJKS0l00n0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTE1MzQxZDJhZmM2YTg1N2E1ODQxOTlmYzdmYjA3YzE3 MDFmYzYwHhcNMjUxMjA2MTAwMTQ4WhcNMjUxMjA3MTAwMTQ4WjAzMTEwLwYDVQQD EyhmZGJiMTcyZGEyZTE4OWEzNzBkZjQyNWNmYmJiODNiYTkxMDIxZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGoN6+d7Lhl/2m/1/Yl8cUOhPsiN JColkYC0pv7LdbOSniTDtyChRxqgbZ5KclB1ghiocryZbs75ZKqP3q3gsMnoQxDq R0Oap7FaM3NPCcNGYewyzAVqtIhU/cQ43vA32XXBv95fV2UtXJqssrv8gbzwxL3v Aece/24eIBxfaAz8FA2czJZaBvEz12wminqqBUuXQhbhEgkzwJ7T0qOXrPSpjST1 3gcNDLSufbU4aRHtcfMKpT9A5NCqFAocuBjdIw1CZqVrpJbqCBWPy9pZuGn19zJx WXuqX2L0OfzbjwkDFFmbuEf121GIp/BsXggKbaMNHP2FUmnEJetaL2HetwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP27Fy2i4YmjcN9CXPu7g7qRAh43MB8GA1UdIwQY MBaAFO/hU0HSr8aoV6WEGZ/H+wfBcB/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYt NjViMDczM2ZlZGQzLzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYtNjViMDczM2ZlZGQz LzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerOJ9NMy m4VpDmuPolKgbhZ6AysEa7rSyJFNBju9LhAXpl7i51lUmjoChT4ybU3StHsFAxtQ ov7v2K0OeqPuxRBoW4AJ8v8/0O55okD70Yn2dU1EoOMbXllE9XfOyJ/fNFEV3z2G C0xbNqTU6b5rqvTmtmzI4A3B2faiLaoYKvkujFEtfR8mkPNZW3iZ+QunGy1mlyT+ UrTUa8bU8RfLLzUDIOFKY2Agdwx5zgJ7ZekAD3/T+WVtjpxiAXQVkDFcbTZAfU/z oLuXoDlEM9A0sHECoUgrRG9zSMoKtK+Ix47nenpqDDyAgtzHo3TYU0bCu3bT7SkS vKLmRmywL3jG3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:23 2025 by rpki-client