This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft File: 7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json) Hash identifier: 1yFse0gOgJn/pErjIt2kJDDdA9OjKFvVSpIkiWzW8Ck= Subject key identifier: 0F:54:CB:09:DF:69:49:48:88:62:50:3D:1B:7F:63:25:27:70:A6:82 Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8 Certificate issuer: /CN=ed54b2e75935531278e7bad157c48c8aec43eee8 Certificate serial: 019AF31CA2FCF1C872DECF5CD209F07AA033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft Manifest number: 0742 Signing time: Sat 06 Dec 2025 10:02:11 +0000 Manifest this update: Sat 06 Dec 2025 10:02:11 +0000 Manifest next update: Sun 07 Dec 2025 10:02:11 +0000 Files and hashes: 1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: tfzRlVpr0UdUqLWtrIo3CaWY0E38BVbDX+2toATKkp8=) 2: lvckIph_fXtXurl5ym_WZRsaXmo.roa (hash: 5C1YRHd0ILljxfVn9Q8Mwd3r0vdxXZvngPftxEnCVwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a2:fc:f1:c8:72:de:cf:5c:d2:09:f0:7a:a0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8 Validity Not Before: Dec 6 10:02:11 2025 GMT Not After : Dec 7 10:02:11 2025 GMT Subject: CN=0f54cb09df6949488862503d1b7f63252770a682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:8b:50:ec:00:b8:5b:ca:4a:a0:d6:29:4f: 1a:78:fb:8f:b0:bd:08:43:92:11:d8:82:84:0b:64: c4:f1:17:81:bb:a3:78:a6:84:b5:a0:79:33:93:84: 32:45:2b:1b:62:80:63:57:01:73:f6:a0:52:d3:8a: e7:bf:a7:0a:1d:c9:37:69:ee:50:c2:f4:0c:b6:35: 99:d7:11:06:24:9e:28:ff:d8:87:ee:a5:ea:ac:f2: 3c:07:a0:f4:35:4b:9a:36:c3:9b:8b:a9:c8:83:83: f5:19:3f:69:fe:10:9d:27:b2:49:ad:2f:97:65:20: a2:21:51:44:5b:9b:69:e4:88:4c:7f:a1:63:97:9f: 53:41:32:ef:87:bc:a2:5c:da:15:0c:2c:b1:71:e4: a3:b0:7a:ec:bd:2f:aa:8b:51:0a:80:66:81:7a:ce: 15:8a:97:6d:ab:06:81:5a:50:b4:9e:cf:2d:b6:31: e9:a9:73:28:76:74:fa:7a:23:12:2f:fb:cb:4b:d0: 6f:a3:8e:cb:02:01:01:5d:3e:b5:55:82:b0:9a:55: 6c:b0:51:05:c2:e4:2e:fb:34:33:6d:a3:e0:11:b2: 03:f7:15:db:d8:48:b4:06:71:8f:95:1f:ab:fc:9d: 58:94:32:da:b4:8c:26:53:e6:e4:6a:ed:d6:7b:cf: fd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:54:CB:09:DF:69:49:48:88:62:50:3D:1B:7F:63:25:27:70:A6:82 X509v3 Authority Key Identifier: keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f5:6d:34:36:26:8e:47:8e:18:55:1e:b1:2e:00:f4:70:c4: ef:eb:b8:a4:37:b9:7a:c7:aa:9d:b9:d9:f6:e3:ee:7d:ca:9d: 6e:1a:71:a4:08:07:12:77:a4:11:97:cc:db:b4:19:74:47:d6: 70:08:0a:fc:67:8a:42:03:78:e5:d0:24:63:6c:59:66:d4:4c: af:e1:d3:0b:3f:8d:d7:92:bc:04:f0:46:a4:67:b4:75:5f:a9: 4b:46:e9:3d:41:aa:1e:19:ae:f6:9a:6f:e5:86:18:ad:2a:aa: 7c:79:e3:d6:f9:a5:ad:05:53:14:8b:cb:30:fc:f1:78:b7:19: 08:d1:54:54:cb:bb:77:6a:d0:7b:1f:79:6a:65:69:13:d1:58: bb:b0:bc:f4:e1:ac:f6:cf:96:56:69:a4:5d:6c:68:10:04:f1: 49:fe:86:ad:af:da:49:37:1c:f4:3b:bd:c5:a6:03:8e:47:82: da:c1:40:54:94:5a:3d:62:ad:bd:14:69:cf:16:c8:5f:14:10: 5d:e7:15:73:1a:1d:e9:97:3f:b2:59:85:6c:69:7a:bb:90:20: 7d:fb:46:b2:61:57:d5:54:89:90:79:ee:7d:16:64:e7:46:6a: 85:4f:ea:bc:b6:36:2c:30:af:f7:3c:ba:ef:bf:19:b2:8d:cb: a6:d5:74:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKL88chy3s9c0gnweqAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTRiMmU3NTkzNTUzMTI3OGU3YmFkMTU3YzQ4YzhhZWM0 M2VlZTgwHhcNMjUxMjA2MTAwMjExWhcNMjUxMjA3MTAwMjExWjAzMTEwLwYDVQQD EygwZjU0Y2IwOWRmNjk0OTQ4ODg2MjUwM2QxYjdmNjMyNTI3NzBhNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaaLUOwAuFvKSqDWKU8aePuPsL0I Q5IR2IKEC2TE8ReBu6N4poS1oHkzk4QyRSsbYoBjVwFz9qBS04rnv6cKHck3ae5Q wvQMtjWZ1xEGJJ4o/9iH7qXqrPI8B6D0NUuaNsObi6nIg4P1GT9p/hCdJ7JJrS+X ZSCiIVFEW5tp5IhMf6Fjl59TQTLvh7yiXNoVDCyxceSjsHrsvS+qi1EKgGaBes4V ipdtqwaBWlC0ns8ttjHpqXModnT6eiMSL/vLS9Bvo47LAgEBXT61VYKwmlVssFEF wuQu+zQzbaPgEbID9xXb2Ei0BnGPlR+r/J1YlDLatIwmU+bkau3We8/9fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9UywnfaUlIiGJQPRt/YyUncKaCMB8GA1UdIwQY MBaAFO1UsudZNVMSeOe60VfEjIrsQ+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAt MTA0NTU3MjU3ZmI4LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAtMTA0NTU3MjU3ZmI4 LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPVtNDYm jkeOGFUesS4A9HDE7+u4pDe5eseqnbnZ9uPufcqdbhpxpAgHEnekEZfM27QZdEfW cAgK/GeKQgN45dAkY2xZZtRMr+HTCz+N15K8BPBGpGe0dV+pS0bpPUGqHhmu9ppv 5YYYrSqqfHnj1vmlrQVTFIvLMPzxeLcZCNFUVMu7d2rQex95amVpE9FYu7C89OGs 9s+WVmmkXWxoEATxSf6Gra/aSTcc9Du9xaYDjkeC2sFAVJRaPWKtvRRpzxbIXxQQ XecVcxod6Zc/slmFbGl6u5AgfftGsmFX1VSJkHnufRZk50ZqhU/qvLY2LDCv9zy6 778Zso3LptV0DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:34:47 2025 by rpki-client