This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json) Hash identifier: dSU+Me8ZtOXAzXuOmWlLH7BSreokh+Afx659PKisvhQ= Subject key identifier: 99:E7:64:5E:C4:8F:30:F7:73:20:C7:80:2A:2C:D0:7C:EC:89:82:45 Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Certificate serial: 019AF3BFF59C1D336CD77BC24FDA06BB6B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:34 +0000 Manifest this update: Sat 06 Dec 2025 13:00:34 +0000 Manifest next update: Sun 07 Dec 2025 13:00:34 +0000 Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: NxJof7SHIyWIJgcjWc9QHhdUZMXqEsvaCsDtDr0AUU8=) 2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:f5:9c:1d:33:6c:d7:7b:c2:4f:da:06:bb:6b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Validity Not Before: Dec 6 13:00:34 2025 GMT Not After : Dec 7 13:00:34 2025 GMT Subject: CN=99e7645ec48f30f77320c7802a2cd07cec898245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:16:91:ff:f5:13:17:37:89:2f:6e:c2:cd: 15:47:98:58:85:18:5e:62:e4:59:af:64:e4:73:0c: f8:8f:d3:9b:04:41:e2:25:a3:ad:66:3f:ee:8c:69: e9:29:1d:f8:0e:b5:ff:49:47:f6:46:79:3a:7d:47: f0:16:c1:09:98:f2:38:50:95:38:2c:8e:74:f3:c4: d7:72:b5:ea:37:fc:d5:4b:fb:6d:16:d3:d7:29:58: 1a:cf:47:95:aa:07:9a:f8:f0:0d:4f:6a:39:90:0e: 94:d3:9a:e3:f3:f6:1a:61:1f:6a:f4:28:5e:2f:f8: a5:7e:ad:14:56:e7:e4:d5:3f:27:e3:43:51:c6:5a: 70:94:c9:e0:22:30:d1:db:fc:e5:bd:5c:ce:05:14: b6:59:63:a8:f4:41:3d:73:ad:ca:23:cc:ff:68:7f: 8c:76:c8:53:07:56:ef:93:e9:29:1d:cc:f2:51:df: 12:19:76:b9:52:37:6f:17:4b:25:d1:9d:95:4b:d1: 51:66:2e:e0:a0:bb:a9:9b:8b:27:05:81:c1:29:70: 00:7c:80:ce:cb:79:51:2a:6f:2a:93:60:22:75:e4: 15:93:9c:5b:e0:21:d8:08:c8:cf:01:20:b5:37:18: 9a:c3:45:f1:78:7b:bb:ec:92:f1:f4:9a:a6:7f:3c: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E7:64:5E:C4:8F:30:F7:73:20:C7:80:2A:2C:D0:7C:EC:89:82:45 X509v3 Authority Key Identifier: keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:10:24:19:dc:3e:12:66:cf:24:7c:91:2a:d4:01:67:83:69: d2:81:35:07:b1:ee:66:03:fb:80:2a:7d:b6:10:5b:9e:ca:7f: c3:23:a4:e0:fd:ed:f8:4e:f2:1b:ca:74:3a:3e:c8:a9:dd:99: 44:40:d3:ec:a6:1d:87:da:55:54:d0:d3:69:95:4b:fb:78:cb: a9:65:6d:3a:cb:74:83:6e:d3:3f:55:19:7c:12:e7:90:97:e6: 0a:c3:13:31:13:20:9c:7d:ec:e6:b0:3f:6e:60:6e:9d:0f:27: c1:af:9c:1d:3a:41:c0:c3:cd:34:fa:2b:f0:05:ea:23:61:31: cf:bd:1e:b9:16:a4:22:5f:9c:45:2b:bc:cf:0b:6e:50:38:3d: 0f:92:93:51:3b:a7:91:ce:d4:58:e6:7d:04:79:6e:22:fe:d1: 50:dc:2e:67:f1:98:b2:c3:84:08:d2:60:a4:3a:fa:96:eb:2d: b1:c4:dd:67:d1:39:d7:07:81:20:fd:64:ba:a4:a7:fc:5a:77: 6c:0d:a2:17:9c:a7:02:87:5c:d7:cf:10:0a:d6:5f:b8:bc:f2: c2:45:69:aa:c2:71:e0:3d:e7:d4:2d:12:36:37:3d:9f:6e:ec: 16:e1:5a:93:6c:11:dc:b1:55:9e:8e:2c:ed:d2:52:68:5d:e5: 6f:5f:72:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/WcHTNs13vCT9oGu2sxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2ZkYWVlMWU5ZWFiZDgwMjM3NjAyOTYxYmFhMjVhYmM2 OWNkNjQwHhcNMjUxMjA2MTMwMDM0WhcNMjUxMjA3MTMwMDM0WjAzMTEwLwYDVQQD Eyg5OWU3NjQ1ZWM0OGYzMGY3NzMyMGM3ODAyYTJjZDA3Y2VjODk4MjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAoWkf/1Exc3iS9uws0VR5hYhRhe YuRZr2Tkcwz4j9ObBEHiJaOtZj/ujGnpKR34DrX/SUf2Rnk6fUfwFsEJmPI4UJU4 LI5088TXcrXqN/zVS/ttFtPXKVgaz0eVqgea+PANT2o5kA6U05rj8/YaYR9q9Che L/ilfq0UVufk1T8n40NRxlpwlMngIjDR2/zlvVzOBRS2WWOo9EE9c63KI8z/aH+M dshTB1bvk+kpHczyUd8SGXa5UjdvF0sl0Z2VS9FRZi7goLupm4snBYHBKXAAfIDO y3lRKm8qk2AideQVk5xb4CHYCMjPASC1Nxiaw0XxeHu77JLx9JqmfzzPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnnZF7EjzD3cyDHgCos0HzsiYJFMB8GA1UdIwQY MBaAFOzP2u4enqvYAjdgKWG6olq8ac1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt M2YxYzE1MjNhMTIzLzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz LzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxAkGdw+ EmbPJHyRKtQBZ4Np0oE1B7HuZgP7gCp9thBbnsp/wyOk4P3t+E7yG8p0Oj7Iqd2Z REDT7KYdh9pVVNDTaZVL+3jLqWVtOst0g27TP1UZfBLnkJfmCsMTMRMgnH3s5rA/ bmBunQ8nwa+cHTpBwMPNNPor8AXqI2Exz70euRakIl+cRSu8zwtuUDg9D5KTUTun kc7UWOZ9BHluIv7RUNwuZ/GYssOECNJgpDr6lustscTdZ9E51weBIP1kuqSn/Fp3 bA2iF5ynAodc188QCtZfuLzywkVpqsJx4D3n1C0SNjc9n27sFuFak2wR3LFVno4s 7dJSaF3lb19yDA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:40 2025 by rpki-client