This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft File: 7v5LdSmMAHIB5xyAalyMCee3dBE.mft (raw, json) Hash identifier: WrfhKfzf090+sYUQIsb4PIcc13c+XKeX83VRllw2p+M= Subject key identifier: C9:7F:C0:04:56:92:A6:68:AF:67:A9:26:ED:7F:12:3D:C3:50:89:87 Authority key identifier: EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11 Certificate issuer: /CN=eefe4b75298c007201e71c806a5c8c09e7b77411 Certificate serial: 019AF12E4C66C69CA322BAF45D2D4EF8B8F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft Manifest number: 8D Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: 7v5LdSmMAHIB5xyAalyMCee3dBE.crl (hash: cHJ6QqNUkUhnxtgZhh/L1ffiZCcr2rcMYA1ox4l1xo8=) 2: PefmmKkeHckF1TFIBsiHu-KGY9A.roa (hash: tPgDzgEVBJrCaqPTjl+G8vf08ZvCLU8Bf3lj6k6XGBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4c:66:c6:9c:a3:22:ba:f4:5d:2d:4e:f8:b8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eefe4b75298c007201e71c806a5c8c09e7b77411 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=c97fc0045692a668af67a926ed7f123dc3508987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:28:a9:70:4f:cc:27:54:7d:72:4a:f2:d5: bd:50:40:f3:59:be:ab:c5:e7:a4:7f:16:9f:f1:84: ce:c9:9d:76:a4:c6:8c:4b:74:5b:c9:74:32:b3:96: 76:48:5f:ac:64:08:8d:14:40:c1:c6:c9:d9:20:58: 49:ed:92:64:a5:5e:b9:8e:9e:8b:06:de:c0:4d:14: b1:01:2d:ea:0b:fa:65:38:54:11:3e:cb:57:3b:dd: a9:b9:0f:f3:6c:1e:29:cd:2d:f0:2b:01:20:87:d7: ed:bb:79:7d:48:ab:37:dc:76:ca:07:1b:a0:35:54: 56:2e:5b:c7:0e:c6:77:8d:90:46:b9:50:da:78:9e: 6c:60:04:51:5d:d0:81:fc:35:0b:d7:9b:2c:f2:82: 40:68:80:20:e4:22:ac:8e:28:c9:bb:70:3d:99:1a: 55:7e:cf:6b:4f:ad:c8:01:df:8e:6d:a1:3e:32:2e: 36:e9:f5:ba:17:2c:a8:ba:27:b3:9f:83:28:a8:6d: 4b:21:22:7b:2a:a2:7a:09:ee:5e:2b:70:6d:2e:99: 9f:79:34:1c:99:d9:c5:9b:a5:9d:ef:16:66:78:64: 49:95:e2:90:25:a0:32:af:ff:4b:c4:c7:68:d8:b5: 53:06:4d:f7:84:59:54:bb:09:3d:df:b6:6f:9d:70: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7F:C0:04:56:92:A6:68:AF:67:A9:26:ED:7F:12:3D:C3:50:89:87 X509v3 Authority Key Identifier: keyid:EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ba:94:be:88:1f:62:23:77:fc:fc:f0:60:e9:2d:4f:ca:96: 20:51:5d:ae:61:a6:3e:fd:89:ca:a0:2d:0f:e3:99:d7:79:6a: 86:b7:ef:0b:26:39:f0:dd:30:2c:68:37:91:89:42:44:5b:9e: a1:8d:d0:0a:a2:0c:8b:90:11:14:c8:dc:bb:51:0e:c2:e8:6f: 33:7c:92:0a:9c:79:45:67:33:02:6d:d0:84:4a:25:e8:f2:45: 15:cd:6f:be:78:87:02:e2:14:bf:20:d6:f8:31:d8:47:d7:1c: f0:94:c9:ee:12:77:b7:09:c4:80:79:1e:c1:75:56:83:ff:16: 16:77:25:fb:39:1e:52:d9:10:36:63:cb:68:28:86:60:89:f1: f6:e2:f2:4f:72:ef:43:86:35:a9:29:3d:90:69:89:18:68:4c: 4b:39:be:ab:83:07:c8:ff:43:71:d9:b7:6a:97:94:3a:95:a5: dc:33:7f:5d:52:1d:a1:31:b8:cd:b5:8a:a3:66:fc:4d:d6:f7: 15:68:d2:e9:63:d5:ad:f2:14:04:5d:37:26:5b:54:56:98:ac: 56:dc:23:eb:ba:e6:63:ea:8a:9b:fc:25:03:9d:ae:b1:ee:eb: bd:61:73:16:ee:51:2a:f7:91:de:2b:43:bb:1e:6d:08:72:ad: 38:1e:f7:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkxmxpyjIrr0XS1O+Lj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZmU0Yjc1Mjk4YzAwNzIwMWU3MWM4MDZhNWM4YzA5ZTdi Nzc0MTEwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EyhjOTdmYzAwNDU2OTJhNjY4YWY2N2E5MjZlZDdmMTIzZGMzNTA4OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuUoqXBPzCdUfXJK8tW9UEDzWb6r xeekfxaf8YTOyZ12pMaMS3RbyXQys5Z2SF+sZAiNFEDBxsnZIFhJ7ZJkpV65jp6L Bt7ATRSxAS3qC/plOFQRPstXO92puQ/zbB4pzS3wKwEgh9ftu3l9SKs33HbKBxug NVRWLlvHDsZ3jZBGuVDaeJ5sYARRXdCB/DUL15ss8oJAaIAg5CKsjijJu3A9mRpV fs9rT63IAd+ObaE+Mi426fW6Fyyouiezn4MoqG1LISJ7KqJ6Ce5eK3BtLpmfeTQc mdnFm6Wd7xZmeGRJleKQJaAyr/9LxMdo2LVTBk33hFlUuwk937ZvnXBOtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMl/wARWkqZor2epJu1/Ej3DUImHMB8GA1UdIwQY MBaAFO7+S3UpjAByAeccgGpcjAnnt3QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3Y1TGRTbU1BSElCNXh5QWFseU1DZWUzZEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTBiN2EtYWY3My00ZDliLWJkNzQt YWRjNzU1MWY2NjdkLzEvN3Y1TGRTbU1BSElCNXh5QWFseU1DZWUzZEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82ZTBiN2EtYWY3My00ZDliLWJkNzQtYWRjNzU1MWY2Njdk LzEvN3Y1TGRTbU1BSElCNXh5QWFseU1DZWUzZEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLqUvogf YiN3/PzwYOktT8qWIFFdrmGmPv2JyqAtD+OZ13lqhrfvCyY58N0wLGg3kYlCRFue oY3QCqIMi5ARFMjcu1EOwuhvM3ySCpx5RWczAm3QhEol6PJFFc1vvniHAuIUvyDW +DHYR9cc8JTJ7hJ3twnEgHkewXVWg/8WFncl+zkeUtkQNmPLaCiGYInx9uLyT3Lv Q4Y1qSk9kGmJGGhMSzm+q4MHyP9Dcdm3apeUOpWl3DN/XVIdoTG4zbWKo2b8Tdb3 FWjS6WPVrfIUBF03JltUVpisVtwj67rmY+qKm/wlA52use7rvWFzFu5RKveR3itD ux5tCHKtOB73kA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:46 2025 by rpki-client