This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json) Hash identifier: bx4wigNZjCT4Z43r4AKFTz+h/q3re9cT1iP/HAiFabk= Subject key identifier: B8:4D:41:4D:47:DA:1B:69:AE:21:63:1A:04:5A:F2:D1:E5:90:07:37 Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Certificate serial: 019AF50AF9233A93958BD6A7DC7677959073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft Manifest number: 04D8 Signing time: Sat 06 Dec 2025 19:02:08 +0000 Manifest this update: Sat 06 Dec 2025 19:02:08 +0000 Manifest next update: Sun 07 Dec 2025 19:02:08 +0000 Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: s47hyc6cMyPhY3B6I6e/6Chw1CVPhCwTYdq2TeFU49c=) 2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:f9:23:3a:93:95:8b:d6:a7:dc:76:77:95:90:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a Validity Not Before: Dec 6 19:02:08 2025 GMT Not After : Dec 7 19:02:08 2025 GMT Subject: CN=b84d414d47da1b69ae21631a045af2d1e5900737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:f6:db:a4:53:7d:51:6d:45:15:02:fb:46: 2a:9a:5c:a3:15:42:27:16:62:08:92:fc:4a:45:5d: d6:e6:0a:da:a4:f8:55:15:f4:90:23:86:d8:f3:b2: eb:87:b8:2d:aa:2a:5b:fc:bf:5c:85:37:df:1e:43: 21:af:36:26:ba:0c:02:c1:69:08:b2:b5:21:ca:1c: c3:74:9f:45:ec:66:be:48:e4:ea:3a:fc:c4:a4:f0: e3:d8:4a:f1:a6:5b:60:1a:9b:60:d3:b9:9b:a7:39: c6:a3:00:ef:90:92:85:e1:8c:2e:13:a3:b8:29:3b: 95:2f:69:e0:70:48:bf:44:38:ab:63:69:d3:9c:99: e5:4f:58:1a:31:9d:37:d7:c0:58:26:db:32:59:49: 3e:f6:0e:7f:29:80:0b:76:89:38:fe:ea:38:40:84: e5:18:d9:dc:a8:91:6a:46:4d:26:d3:60:2b:15:bb: 78:d3:91:d2:49:dc:37:af:52:0d:22:60:ad:8e:04: e3:48:1d:b9:6b:7b:f0:4c:9e:04:59:72:b7:18:b6: b3:11:18:6b:ab:41:ac:de:6a:87:a2:b4:c7:e0:f7: 20:f5:8b:0b:99:ff:de:72:96:23:b6:0e:97:e9:4f: be:48:7b:9e:ee:b6:4f:3e:c9:d9:5b:ce:94:1e:1a: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4D:41:4D:47:DA:1B:69:AE:21:63:1A:04:5A:F2:D1:E5:90:07:37 X509v3 Authority Key Identifier: keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c8:c2:2c:d7:1f:15:74:6c:68:c5:33:f6:d8:ac:1d:ff:1b: e9:17:9a:2a:eb:61:bf:85:2d:c6:20:a7:0c:2f:a3:2d:91:c4: 5e:a2:4e:8c:4c:d1:19:ab:d8:06:02:7e:aa:ef:f0:5f:29:7e: 60:15:a7:1b:bc:25:a4:18:3e:17:81:ac:57:8c:c5:35:39:2a: f9:02:97:85:e2:d6:0c:1d:c9:94:a6:31:52:66:3b:e9:9b:37: f3:2b:2f:e4:d9:c0:3d:cb:e6:98:0d:27:89:3a:e8:18:c7:d7: 55:c7:4e:ee:ca:8b:5b:3c:5a:7f:17:12:c8:8a:40:a4:3e:3d: 47:5f:56:47:40:80:0b:6d:19:e0:b3:7d:36:ff:05:75:5e:69: e1:9b:1a:c1:55:c0:97:ce:bb:2c:a5:46:b3:5d:66:ba:0e:08: 0b:f6:ca:40:e9:12:9e:96:02:b0:e6:4a:56:04:99:62:d5:ce: b7:61:b2:73:73:a2:05:ab:08:a8:9f:51:9d:03:02:2c:4d:60: df:f4:75:80:c2:38:14:50:ff:b9:b1:da:d6:21:fc:49:27:a2: 68:86:55:12:7f:70:a6:cb:8b:23:c6:56:20:75:fd:e3:82:a5: 06:8c:4f:72:0c:b3:c1:f7:9f:f7:17:ba:ec:2f:27:d9:50:db: be:93:ab:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CvkjOpOVi9an3HZ3lZBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDE1NGY5NmFkY2ViOWJjZWUwYmRjMGI4MzVhZmJlMDUw OTc1MWEwHhcNMjUxMjA2MTkwMjA4WhcNMjUxMjA3MTkwMjA4WjAzMTEwLwYDVQQD EyhiODRkNDE0ZDQ3ZGExYjY5YWUyMTYzMWEwNDVhZjJkMWU1OTAwNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql7226RTfVFtRRUC+0YqmlyjFUIn FmIIkvxKRV3W5grapPhVFfSQI4bY87Lrh7gtqipb/L9chTffHkMhrzYmugwCwWkI srUhyhzDdJ9F7Ga+SOTqOvzEpPDj2ErxpltgGptg07mbpznGowDvkJKF4YwuE6O4 KTuVL2ngcEi/RDirY2nTnJnlT1gaMZ0318BYJtsyWUk+9g5/KYALdok4/uo4QITl GNncqJFqRk0m02ArFbt405HSSdw3r1INImCtjgTjSB25a3vwTJ4EWXK3GLazERhr q0Gs3mqHorTH4Pcg9YsLmf/ecpYjtg6X6U++SHue7rZPPsnZW86UHhrBgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhNQU1H2htpriFjGgRa8tHlkAc3MB8GA1UdIwQY MBaAFO7RVPlq3OubzuC9wLg1r74FCXUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYt NzZiN2VlZDUxZTRhLzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYtNzZiN2VlZDUxZTRh LzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8jCLNcf FXRsaMUz9tisHf8b6ReaKuthv4UtxiCnDC+jLZHEXqJOjEzRGavYBgJ+qu/wXyl+ YBWnG7wlpBg+F4GsV4zFNTkq+QKXheLWDB3JlKYxUmY76Zs38ysv5NnAPcvmmA0n iTroGMfXVcdO7sqLWzxafxcSyIpApD49R19WR0CAC20Z4LN9Nv8FdV5p4ZsawVXA l867LKVGs11mug4IC/bKQOkSnpYCsOZKVgSZYtXOt2Gyc3OiBasIqJ9RnQMCLE1g 3/R1gMI4FFD/ubHa1iH8SSeiaIZVEn9wpsuLI8ZWIHX944KlBoxPcgyzwfef9xe6 7C8n2VDbvpOrdA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:57 2025 by rpki-client