This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json) Hash identifier: NoG0ux8vdf/DM4EjkoQYfv0AZcdQg6a8YYxphgql7TY= Subject key identifier: A1:00:38:05:10:9C:99:89:48:1A:54:08:E0:FA:A2:4A:1B:90:38:EB Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23 Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23 Certificate serial: 019AF276A2C134D0C24285FF72BB75B9FA96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: aUp+tk9Jmq7114aQVMzaabOhhOJNzcId6A419UBvPZA=) 2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a2:c1:34:d0:c2:42:85:ff:72:bb:75:b9:fa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23 Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=a1003805109c9989481a5408e0faa24a1b9038eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:cc:bf:e0:16:15:33:27:3d:19:8b:d3:32: b4:90:62:04:18:36:7b:c9:0f:5f:2b:de:e6:b4:02: 1f:1b:e2:7f:3f:aa:dc:63:6b:9b:bb:2b:39:b3:e2: 5b:3f:7b:9f:75:31:e9:53:2b:08:71:14:57:c0:99: bd:84:2f:dc:60:96:98:fd:9c:db:06:50:2a:18:74: ee:58:1f:69:0f:ee:81:c8:c6:00:b8:f4:dd:46:30: 0e:f7:ac:ef:e7:a1:07:a0:95:6a:bd:e9:cb:bb:28: 3a:d2:80:80:9b:29:cd:43:88:00:af:f2:9c:4a:a4: a1:3e:ea:21:40:4d:2b:fe:35:1a:68:17:0b:e1:64: ef:f2:7a:77:b0:28:fd:72:67:d6:03:02:07:ce:06: 9a:e8:5a:21:a9:ec:61:a7:df:05:d3:26:26:36:2b: d0:c6:48:20:94:cb:b1:18:33:f7:ba:88:2a:6a:e3: 72:44:3d:ba:c9:b8:16:6d:43:e0:b2:98:44:0c:a2: e8:15:b8:b2:1f:c9:fc:58:e2:d1:7f:52:95:50:5d: 02:c1:e7:31:97:4a:e1:24:5f:8c:85:5e:f5:0e:61: 3a:4e:3f:60:4c:c5:da:78:8f:b6:61:8b:f6:f8:96: 0a:f6:35:b3:63:3f:59:0b:73:64:20:ae:7f:b5:23: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:00:38:05:10:9C:99:89:48:1A:54:08:E0:FA:A2:4A:1B:90:38:EB X509v3 Authority Key Identifier: keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:55:1d:7d:4f:ea:da:5a:8e:ef:8f:80:b7:91:25:21:cd:bf: e2:f3:1a:67:1d:85:8e:f1:21:fe:97:ad:e6:e8:38:77:f7:62: f2:8a:dd:ca:b2:57:d4:46:0a:92:ac:06:ad:a4:d3:3d:11:2a: c2:ad:a5:6b:02:13:91:d4:8c:34:70:ba:4a:9f:4d:f1:1e:59: 14:21:a1:c3:28:f8:53:9f:df:8e:43:eb:cb:d9:aa:d5:8a:81: 22:b2:25:c8:2a:60:2d:70:e9:81:7e:e2:47:17:88:8f:3d:0a: 49:ae:22:f6:f2:18:53:97:ae:a5:f8:5b:c5:b6:19:cd:91:59: 70:51:7f:d5:e5:a8:e8:21:13:4b:97:ed:22:37:ed:3e:87:c4: 9c:ef:35:48:e3:83:68:86:a6:6f:ec:0e:f5:a3:1d:24:9d:dd: d4:2f:05:92:da:51:62:9f:50:ee:7d:be:86:38:e7:ee:de:e1: ca:d3:4d:5c:e8:98:a5:f7:0e:4d:64:96:fd:42:78:86:22:4d: 69:f2:9b:02:d5:a3:bc:2f:89:af:2f:f0:1d:07:1b:20:d5:b5: 0d:6a:4c:e1:76:0a:03:8b:52:f9:86:3d:73:d3:3a:a0:d4:d9: 73:56:eb:f1:0a:62:01:df:0e:85:08:a4:77:2c:1b:ef:58:e6: f0:8a:31:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqLBNNDCQoX/crt1ufqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5 MGRhMjMwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD EyhhMTAwMzgwNTEwOWM5OTg5NDgxYTU0MDhlMGZhYTI0YTFiOTAzOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPzMv+AWFTMnPRmL0zK0kGIEGDZ7 yQ9fK97mtAIfG+J/P6rcY2ubuys5s+JbP3ufdTHpUysIcRRXwJm9hC/cYJaY/Zzb BlAqGHTuWB9pD+6ByMYAuPTdRjAO96zv56EHoJVqvenLuyg60oCAmynNQ4gAr/Kc SqShPuohQE0r/jUaaBcL4WTv8np3sCj9cmfWAwIHzgaa6Fohqexhp98F0yYmNivQ xkgglMuxGDP3uogqauNyRD26ybgWbUPgsphEDKLoFbiyH8n8WOLRf1KVUF0Cwecx l0rhJF+MhV71DmE6Tj9gTMXaeI+2YYv2+JYK9jWzYz9ZC3NkIK5/tSPtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEAOAUQnJmJSBpUCOD6okobkDjrMB8GA1UdIwQY MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt MzE3ZTgyMGRmY2RiLzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlUdfU/q 2lqO74+At5ElIc2/4vMaZx2FjvEh/pet5ug4d/di8ordyrJX1EYKkqwGraTTPREq wq2lawITkdSMNHC6Sp9N8R5ZFCGhwyj4U5/fjkPry9mq1YqBIrIlyCpgLXDpgX7i RxeIjz0KSa4i9vIYU5eupfhbxbYZzZFZcFF/1eWo6CETS5ftIjftPofEnO81SOOD aIamb+wO9aMdJJ3d1C8FktpRYp9Q7n2+hjjn7t7hytNNXOiYpfcOTWSW/UJ4hiJN afKbAtWjvC+Jry/wHQcbINW1DWpM4XYKA4tS+YY9c9M6oNTZc1br8QpiAd8OhQik dywb71jm8Iox6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:04 2025 by rpki-client