This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json) Hash identifier: sXw6tRiq7dgRFxYxK0tR7+o8vHeM4Ou1TDmpr7UkN6g= Subject key identifier: B4:6F:B0:F0:D3:33:FE:EA:03:4B:C9:B1:78:38:4D:0E:44:7A:A9:27 Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d Certificate serial: 019AF0BF72082E591C653AF30A1C549ACA7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft Manifest number: 0E21 Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: lMZDdtCrxG1N6eRDCJcXVqEW1UM147HxIrQXvDHdgvo=) 2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:72:08:2e:59:1c:65:3a:f3:0a:1c:54:9a:ca:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=b46fb0f0d333feea034bc9b178384d0e447aa927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:9c:5d:73:3c:6c:4b:e2:23:47:f2:45:f4: 2a:3f:23:34:e3:a9:78:af:21:37:7c:3e:37:be:14: 4e:52:ba:12:9c:3a:8b:c7:07:fa:ab:7a:88:46:db: 89:57:07:b6:c1:91:bb:c9:8f:5d:ad:02:67:24:94: 3c:27:fd:e0:da:4d:b6:1f:6a:80:ca:70:d7:3a:bf: a9:9e:f5:0a:0f:52:a5:ba:7c:93:e4:b1:ee:47:80: 62:15:d5:30:66:54:53:ce:6e:f3:51:af:3b:71:b7: d6:c1:07:56:3d:4e:a6:cf:44:2c:dd:f2:af:b2:48: ee:43:f4:e6:10:90:dc:63:68:03:f0:2b:7c:9e:18: b8:72:7a:3e:4f:56:2f:3a:27:97:f3:c9:19:f2:37: bf:3f:ba:c8:2a:d0:61:d3:f1:fa:70:46:65:e1:f9: cd:85:c9:f6:2b:ed:f6:b8:02:a5:0b:66:6e:fc:3c: 93:e5:0c:55:d8:76:7b:7d:fb:06:6b:65:b0:3a:48: a9:af:ff:52:ac:1b:bb:c1:c3:c5:a1:93:2b:90:13: cb:21:35:70:39:68:85:b4:1a:1f:79:93:a3:e3:16: fa:75:a9:da:2f:d6:4e:dc:5c:a1:aa:b0:11:a3:51: 0a:bd:b9:0b:09:5b:7f:1e:e9:c9:89:a8:be:54:a7: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6F:B0:F0:D3:33:FE:EA:03:4B:C9:B1:78:38:4D:0E:44:7A:A9:27 X509v3 Authority Key Identifier: keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e0:a6:59:a9:01:51:d0:1e:3a:59:cb:61:bd:f1:26:35:6c: 66:d3:c7:02:81:18:9e:18:ab:02:e9:1f:f4:97:23:b9:0f:40: bb:01:a5:b8:4b:d2:27:73:54:c3:c2:f3:7a:0a:4c:73:bb:06: 2a:3e:ec:ec:4a:ce:25:03:17:01:cc:33:6f:59:18:b2:e0:ba: ed:1e:7d:c6:fa:9e:a2:45:92:f5:3c:8c:6d:26:82:40:02:5a: c9:88:b0:69:ac:64:9c:66:96:0e:b8:75:bf:c1:3a:8a:4a:1b: 33:02:fd:e7:86:38:0f:40:31:8c:bb:aa:d5:53:ae:26:f3:29: 71:77:f3:c4:f4:02:5f:81:43:93:66:49:c8:63:8a:2c:1e:4e: d3:dc:72:e6:ea:82:9e:aa:33:90:bb:a1:0a:bd:93:09:86:a8: b4:77:a0:60:e2:eb:be:ff:b0:1d:2d:44:af:cf:a6:ee:d4:1f: 98:ba:1d:c9:8e:3f:6b:87:26:b5:fb:a4:e9:b5:d7:60:ad:a1: 9f:30:d9:96:a6:ec:fd:1e:0b:2d:0b:2b:9c:8f:bb:ac:28:64: b4:15:e6:0f:0a:00:19:8d:10:15:ba:5b:2e:81:38:04:55:da: a0:8b:91:bd:2b:fd:1a:63:41:27:82:78:85:06:b4:08:23:e8: df:9d:cd:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3IILlkcZTrzChxUmsp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5 YTYyNWQwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD EyhiNDZmYjBmMGQzMzNmZWVhMDM0YmM5YjE3ODM4NGQwZTQ0N2FhOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gScXXM8bEviI0fyRfQqPyM046l4 ryE3fD43vhROUroSnDqLxwf6q3qIRtuJVwe2wZG7yY9drQJnJJQ8J/3g2k22H2qA ynDXOr+pnvUKD1KlunyT5LHuR4BiFdUwZlRTzm7zUa87cbfWwQdWPU6mz0Qs3fKv skjuQ/TmEJDcY2gD8Ct8nhi4cno+T1YvOieX88kZ8je/P7rIKtBh0/H6cEZl4fnN hcn2K+32uAKlC2Zu/DyT5QxV2HZ7ffsGa2WwOkipr/9SrBu7wcPFoZMrkBPLITVw OWiFtBofeZOj4xb6danaL9ZO3FyhqrARo1EKvbkLCVt/HunJiai+VKfCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRvsPDTM/7qA0vJsXg4TQ5EeqknMB8GA1UdIwQY MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5 LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOCmWakB UdAeOlnLYb3xJjVsZtPHAoEYnhirAukf9JcjuQ9AuwGluEvSJ3NUw8LzegpMc7sG Kj7s7ErOJQMXAcwzb1kYsuC67R59xvqeokWS9TyMbSaCQAJayYiwaaxknGaWDrh1 v8E6ikobMwL954Y4D0AxjLuq1VOuJvMpcXfzxPQCX4FDk2ZJyGOKLB5O09xy5uqC nqozkLuhCr2TCYaotHegYOLrvv+wHS1Er8+m7tQfmLodyY4/a4cmtfuk6bXXYK2h nzDZlqbs/R4LLQsrnI+7rChktBXmDwoAGY0QFbpbLoE4BFXaoIuRvSv9GmNBJ4J4 hQa0CCPo353NBA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:52 2025 by rpki-client