This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json) Hash identifier: 0vWM78mjuR5IUFbB3TS8G62j6ahJff92Ao9oAzE+360= Subject key identifier: 30:C8:52:30:8C:88:79:75:18:2C:7E:9C:51:46:69:8B:2F:49:86:FF Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Certificate serial: 019AF19B747B02091EE024A6083816ADA555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft Manifest number: 154A Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=) 2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: QV+4+vp3NVZ4XRA8j2Pbqf+pRGOFTcGcd9PDR3O94Ec=) 3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=) 4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:74:7b:02:09:1e:e0:24:a6:08:38:16:ad:a5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=30c852308c887975182c7e9c5146698b2f4986ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:a8:a9:c5:06:62:3f:8b:c1:4a:17:59:e7: 2c:38:86:ed:c1:ab:09:8f:3a:7a:7b:3f:7b:97:01: a3:e4:0d:b7:f0:00:17:c7:0a:b4:b6:8e:b4:cb:4e: 54:5c:82:ae:77:8e:e5:00:04:f0:b7:b9:0e:61:df: 8e:7f:4a:84:88:7f:c0:2f:f6:95:a7:8d:1a:66:92: 6c:da:0b:22:cb:e5:5a:54:0a:2c:e4:fd:dc:90:e7: 8f:ad:c7:36:73:44:ec:48:29:fb:54:6d:9b:30:e1: c3:4f:ee:13:7b:76:14:39:26:7b:33:7b:57:40:df: d6:1a:08:22:f1:a7:7d:9c:6d:5e:ca:6b:5c:66:e9: 4b:65:49:e9:66:57:61:00:17:bc:52:ac:85:68:64: 1c:a1:f8:a9:b2:4b:09:68:c5:3c:ac:a2:fb:f4:49: 93:65:37:a4:c4:58:e3:83:22:75:fe:7e:ee:85:6a: a0:6c:00:1c:c5:99:48:6b:51:77:9a:05:79:16:78: e4:54:fd:35:e3:45:0b:35:d1:94:19:ba:c5:e5:e3: 08:96:e1:45:89:74:64:f5:50:f4:f2:08:14:0c:ec: 56:82:5a:1c:a4:20:df:af:8a:9e:1c:17:16:8b:ed: d8:ba:08:8f:07:26:8d:a4:08:a7:07:37:59:08:01: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C8:52:30:8C:88:79:75:18:2C:7E:9C:51:46:69:8B:2F:49:86:FF X509v3 Authority Key Identifier: keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1f:8b:9d:87:73:ef:48:bc:25:88:44:1d:5c:59:e2:a2:fd: 69:2c:63:ff:8c:79:62:49:8e:3c:4a:53:b1:39:86:71:38:fe: aa:5b:df:85:72:c9:ca:37:f5:11:bf:3f:4e:f0:d5:33:29:6c: 0c:d9:5d:9f:21:43:ec:29:61:80:a3:e3:79:c1:a2:1d:b7:22: 4a:0b:c7:f5:e9:88:8e:3a:d8:81:85:95:7d:54:76:18:bc:cc: 3a:ae:1c:80:ba:f3:bb:0d:5d:81:4e:78:6b:23:05:1a:ff:3b: 05:d3:66:fa:38:79:f7:b4:15:90:5e:6a:66:e5:28:f6:a4:6e: f5:dd:06:c9:1b:17:38:f9:32:f5:5e:47:e9:c5:81:96:fb:97: 21:7f:f2:9c:32:82:f6:ef:ff:43:36:30:5c:d3:e7:cb:0b:93: a3:95:27:5d:2d:58:27:52:3f:70:08:e1:a9:58:58:47:8c:50: c5:d5:df:59:80:d4:41:91:51:5c:0b:7d:5e:b0:49:7e:47:32: 75:d6:e2:aa:73:7f:36:a3:d5:ab:7e:a3:85:fc:b1:61:5c:10: 6d:4a:14:bd:fe:52:5d:72:99:99:41:00:e1:57:23:0c:11:ca: 31:ef:5f:41:50:2e:ca:f1:e5:69:26:37:25:f6:06:42:fc:99: b1:bf:93:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3R7Agke4CSmCDgWraVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz YmExMDAwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EygzMGM4NTIzMDhjODg3OTc1MTgyYzdlOWM1MTQ2Njk4YjJmNDk4NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvaoqcUGYj+LwUoXWecsOIbtwasJ jzp6ez97lwGj5A238AAXxwq0to60y05UXIKud47lAATwt7kOYd+Of0qEiH/AL/aV p40aZpJs2gsiy+VaVAos5P3ckOePrcc2c0TsSCn7VG2bMOHDT+4Te3YUOSZ7M3tX QN/WGggi8ad9nG1eymtcZulLZUnpZldhABe8UqyFaGQcofipsksJaMU8rKL79EmT ZTekxFjjgyJ1/n7uhWqgbAAcxZlIa1F3mgV5FnjkVP0140ULNdGUGbrF5eMIluFF iXRk9VD08ggUDOxWglocpCDfr4qeHBcWi+3YugiPByaNpAinBzdZCAEqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDIUjCMiHl1GCx+nFFGaYsvSYb/MB8GA1UdIwQY MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3 LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh+LnYdz 70i8JYhEHVxZ4qL9aSxj/4x5YkmOPEpTsTmGcTj+qlvfhXLJyjf1Eb8/TvDVMyls DNldnyFD7ClhgKPjecGiHbciSgvH9emIjjrYgYWVfVR2GLzMOq4cgLrzuw1dgU54 ayMFGv87BdNm+jh597QVkF5qZuUo9qRu9d0GyRsXOPky9V5H6cWBlvuXIX/ynDKC 9u//QzYwXNPnywuTo5UnXS1YJ1I/cAjhqVhYR4xQxdXfWYDUQZFRXAt9XrBJfkcy ddbiqnN/NqPVq36jhfyxYVwQbUoUvf5SXXKZmUEA4VcjDBHKMe9fQVAuyvHlaSY3 JfYGQvyZsb+Tpw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:29 2025 by rpki-client