This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json) Hash identifier: w2nxu2boBoyd9/ymD7Hau551SetPpPiS2dCQazKutg4= Subject key identifier: CF:BA:CB:A3:36:7C:8E:E6:83:11:09:55:70:C8:F7:4D:9F:BC:FF:79 Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34 Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34 Certificate serial: 019AF19B2155575D3C1B4D0CE3FAB9963E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft Manifest number: 089F Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: wImqnIydRlCCf/bn6POzBZJHTp94AkjzT4TqChBIXi4=) 2: ULNxJvM-wJGOuJON7ivPOpKjWvM.roa (hash: 4PAm04+UjI196vMzGXZVMv+MQU5u1QViV4G3soVxN0g=) 3: qk0RdqiwIc4Pk8WjRSXETbEeD3w.roa (hash: CT5EukhWBYETi8Vaj273DWcEqR9wWanbCPEBswUNZM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:21:55:57:5d:3c:1b:4d:0c:e3:fa:b9:96:3e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=cfbacba3367c8ee68311095570c8f74d9fbcff79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:11:69:7b:30:52:82:e1:05:bf:70:8d:42: 5b:af:bc:29:81:c8:a5:05:52:46:58:11:4f:3a:3f: 34:d9:22:f1:5a:f0:a6:07:de:8b:76:0a:a3:b5:3d: fb:7e:15:dc:71:ad:79:97:5a:1d:5e:89:89:46:f5: b6:56:ba:78:17:de:91:28:63:03:75:05:e1:10:10: 87:89:39:08:18:7d:10:c6:7f:09:eb:a8:79:b5:81: bb:5a:e5:a7:dd:50:48:0e:bd:28:94:62:51:2d:9a: 01:4e:a8:81:fa:34:8f:a2:4d:ed:6a:fb:4d:13:e6: 9f:f9:57:5b:30:49:06:ac:1f:8b:66:50:a9:69:e5: 02:ae:fe:13:e3:94:95:f5:4d:1e:53:d5:c5:b1:3c: 2d:23:10:ce:35:f7:66:dd:d3:44:99:f6:d2:39:cd: e9:32:5d:95:41:24:b7:cb:3e:7f:e7:28:05:e0:c0: 13:13:6e:68:c3:b5:9c:44:55:7c:cb:36:92:7b:fa: 8c:62:6f:99:52:34:0a:35:ea:c4:95:de:69:03:66: e0:bb:38:3c:3a:98:9e:eb:be:c2:04:a8:2a:9e:28: 0f:82:99:72:b6:08:21:e9:2e:03:a2:7d:cd:5a:dd: 8c:f1:d6:26:bd:cd:f2:92:29:36:a8:b8:bd:a9:ab: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BA:CB:A3:36:7C:8E:E6:83:11:09:55:70:C8:F7:4D:9F:BC:FF:79 X509v3 Authority Key Identifier: keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d5:97:fe:25:08:7d:67:e7:3c:c9:ac:c1:b6:34:2c:71:f5: 5e:ca:c7:80:b4:b5:3d:eb:28:f5:9a:cb:fd:45:7d:32:a6:e0: ff:91:d6:1d:b6:80:ea:a6:d2:6f:61:2a:d0:f5:0d:02:65:6a: f3:38:2a:5f:66:02:8e:4d:13:6f:e1:6c:e2:3f:f7:15:99:c8: 8c:cd:fe:49:b8:21:29:ff:41:02:03:0f:58:3d:6b:3f:bf:fa: c7:a6:dc:54:9b:a2:0c:fa:58:21:4d:9f:96:e4:82:61:a3:f2: 0e:31:e2:b9:25:86:11:ed:a4:49:43:5c:4b:0a:b5:cf:fe:0d: 58:c8:e4:5f:bf:77:4e:fa:1b:09:b3:d8:32:41:96:7f:94:ef: 17:e8:42:fd:9c:dd:f2:3e:6b:50:57:d9:0c:82:b2:24:6b:99: 40:d5:e0:d2:cb:f2:ee:ff:e1:96:92:95:97:93:d4:18:95:4d: 10:a7:4e:3e:84:14:0f:b2:e8:6d:44:f8:5f:1a:ca:25:2f:93: 57:0b:59:7f:a6:7e:3e:47:4f:a6:35:8f:27:5a:33:9c:05:b9: e2:f9:13:64:1b:7e:be:1a:e6:88:f7:09:12:d8:4c:14:43:76: e8:fb:94:b2:9b:e5:48:71:9c:b3:24:9e:6e:72:e1:cb:62:d1: cf:4c:15:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyFVV108G00M4/q5lj4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx YzhkMzQwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EyhjZmJhY2JhMzM2N2M4ZWU2ODMxMTA5NTU3MGM4Zjc0ZDlmYmNmZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo0RaXswUoLhBb9wjUJbr7wpgcil BVJGWBFPOj802SLxWvCmB96LdgqjtT37fhXcca15l1odXomJRvW2Vrp4F96RKGMD dQXhEBCHiTkIGH0Qxn8J66h5tYG7WuWn3VBIDr0olGJRLZoBTqiB+jSPok3tavtN E+af+VdbMEkGrB+LZlCpaeUCrv4T45SV9U0eU9XFsTwtIxDONfdm3dNEmfbSOc3p Ml2VQSS3yz5/5ygF4MATE25ow7WcRFV8yzaSe/qMYm+ZUjQKNerEld5pA2bguzg8 Opie677CBKgqnigPgplytggh6S4Don3NWt2M8dYmvc3ykik2qLi9qauxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+6y6M2fI7mgxEJVXDI902fvP95MB8GA1UdIwQY MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt YTdlYjM4ZDQ4Yzc4LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4 LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtWX/iUI fWfnPMmswbY0LHH1XsrHgLS1Peso9ZrL/UV9Mqbg/5HWHbaA6qbSb2Eq0PUNAmVq 8zgqX2YCjk0Tb+Fs4j/3FZnIjM3+SbghKf9BAgMPWD1rP7/6x6bcVJuiDPpYIU2f luSCYaPyDjHiuSWGEe2kSUNcSwq1z/4NWMjkX793TvobCbPYMkGWf5TvF+hC/Zzd 8j5rUFfZDIKyJGuZQNXg0svy7v/hlpKVl5PUGJVNEKdOPoQUD7LobUT4XxrKJS+T VwtZf6Z+PkdPpjWPJ1oznAW54vkTZBt+vhrmiPcJEthMFEN26PuUspvlSHGcsySe bnLhy2LRz0wVlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:58 2025 by rpki-client