This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft File: 7tf2sWWjjP80bePjUhGNyZ7YIsc.mft (raw, json) Hash identifier: DxRyRPie0YJuwN6o+bKix2+1ikLZCnqV33nUoAXMqIo= Subject key identifier: E6:8B:0E:61:30:07:B4:E0:C4:69:CC:11:36:21:7D:CF:A3:59:78:7D Authority key identifier: EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7 Certificate issuer: /CN=eed7f6b165a38cff346de3e352118dc99ed822c7 Certificate serial: 019AF2402226DE2049BD2097769577916341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft Manifest number: 4D Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: 7tf2sWWjjP80bePjUhGNyZ7YIsc.crl (hash: Ol/rdYW6qKG0juWup9X1aIMtlzVgcDOPfxPS9Z11PcM=) 2: Ki-liMzit2Jo2WHroCxM5VPpxjM.roa (hash: 9WXsbfSa8emQvpxcrQX0QIVMCI+roYDTEL0EsjFfF+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:22:26:de:20:49:bd:20:97:76:95:77:91:63:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed7f6b165a38cff346de3e352118dc99ed822c7 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=e68b0e613007b4e0c469cc1136217dcfa359787d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:82:ff:5a:b2:16:76:01:aa:4c:fc:24:59: 5f:9c:c5:27:81:fc:53:7b:5e:35:00:37:dd:4f:71: c3:a6:4a:8f:46:be:64:8b:e5:7b:00:f8:50:f9:2c: a3:2a:ae:ba:de:35:9f:de:cb:02:98:fc:72:c4:06: a4:93:3c:50:47:db:65:94:4b:98:10:da:36:90:12: dd:c1:ad:a4:e5:24:e1:02:93:82:c9:41:48:42:fb: 74:3f:c2:62:06:7a:dc:8f:ea:ec:0c:77:f5:62:27: 77:9e:a5:2b:a0:63:d3:2b:51:92:28:b3:b9:f7:7e: 69:1a:75:49:25:cb:c1:64:c2:a1:31:75:3d:c9:87: 73:52:4d:87:1f:31:d8:be:29:3e:97:99:5f:b5:5b: b1:4b:11:cf:ae:09:ae:82:b6:27:42:c8:1d:5b:bb: 01:4e:f3:1d:66:7a:9e:6b:a9:b9:e3:52:8d:44:d0: 55:b2:aa:23:a4:b0:49:f7:98:b4:63:f2:84:94:78: d9:f2:90:b8:00:15:3b:2d:05:7e:0b:f2:3b:53:fd: 10:8e:29:8b:cb:c2:5b:df:39:e2:15:74:4f:bc:53: ff:7d:85:6f:50:27:be:9d:67:74:1b:88:00:79:0e: 4c:c1:a3:3f:2d:64:fb:a0:a3:d5:45:16:73:3e:c6: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:0E:61:30:07:B4:E0:C4:69:CC:11:36:21:7D:CF:A3:59:78:7D X509v3 Authority Key Identifier: keyid:EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bf:99:2c:92:2d:0f:84:f6:a8:f8:cc:4f:44:e1:6f:aa:9c: 4f:14:b2:b4:c0:96:6c:7e:c7:e2:13:1d:ab:35:3c:fb:ec:79: 7b:22:48:73:33:3d:df:1b:2d:97:1b:eb:84:dc:03:b7:e4:47: 35:95:c1:a0:8b:7f:3e:1d:a1:76:ee:73:af:a4:c3:01:ec:28: 7b:d5:03:1a:26:51:dd:7b:8f:58:07:ec:d4:62:29:0f:5c:d5: bf:a2:35:7d:80:d1:4f:0d:10:bd:bc:68:37:43:66:f4:12:f6: d9:a6:19:47:40:a9:a1:48:7f:6d:c2:48:24:f6:30:38:a1:d8: 52:03:82:50:a1:c5:5b:44:5e:f8:16:7d:98:0d:80:64:ea:29: c0:77:63:48:a7:82:76:c0:3d:68:1d:b6:a2:fc:c8:1f:0a:78: 23:65:37:d5:32:a1:00:a1:a8:f9:28:9f:7d:61:47:6e:05:f7: d4:d7:27:2c:ab:37:03:70:3f:6e:b3:c4:4e:77:9a:f3:87:80: 2f:51:61:4d:2d:ba:30:49:c7:38:04:e0:b6:e5:54:2d:82:31: f2:2f:d7:24:b5:74:f3:c0:f7:b4:e5:e3:47:d1:16:80:1c:ab: 88:2f:37:75:f4:39:f2:5b:0d:5d:7f:b5:15:06:f0:92:47:e5: 0e:59:80:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCIm3iBJvSCXdpV3kWNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDdmNmIxNjVhMzhjZmYzNDZkZTNlMzUyMTE4ZGM5OWVk ODIyYzcwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EyhlNjhiMGU2MTMwMDdiNGUwYzQ2OWNjMTEzNjIxN2RjZmEzNTk3ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n+C/1qyFnYBqkz8JFlfnMUngfxT e141ADfdT3HDpkqPRr5ki+V7APhQ+SyjKq663jWf3ssCmPxyxAakkzxQR9tllEuY ENo2kBLdwa2k5SThApOCyUFIQvt0P8JiBnrcj+rsDHf1Yid3nqUroGPTK1GSKLO5 935pGnVJJcvBZMKhMXU9yYdzUk2HHzHYvik+l5lftVuxSxHPrgmugrYnQsgdW7sB TvMdZnqea6m541KNRNBVsqojpLBJ95i0Y/KElHjZ8pC4ABU7LQV+C/I7U/0QjimL y8Jb3zniFXRPvFP/fYVvUCe+nWd0G4gAeQ5MwaM/LWT7oKPVRRZzPsaHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaLDmEwB7TgxGnMETYhfc+jWXh9MB8GA1UdIwQY MBaAFO7X9rFlo4z/NG3j41IRjcme2CLHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jNTVlYTItNjJkMC00ZGI5LTkwMWMt ZWFjNjNjMzNiMDg1LzEvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jNTVlYTItNjJkMC00ZGI5LTkwMWMtZWFjNjNjMzNiMDg1 LzEvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb+ZLJIt D4T2qPjMT0Thb6qcTxSytMCWbH7H4hMdqzU8++x5eyJIczM93xstlxvrhNwDt+RH NZXBoIt/Ph2hdu5zr6TDAewoe9UDGiZR3XuPWAfs1GIpD1zVv6I1fYDRTw0Qvbxo N0Nm9BL22aYZR0CpoUh/bcJIJPYwOKHYUgOCUKHFW0Re+BZ9mA2AZOopwHdjSKeC dsA9aB22ovzIHwp4I2U31TKhAKGo+SiffWFHbgX31NcnLKs3A3A/brPETnea84eA L1FhTS26MEnHOATgtuVULYIx8i/XJLV088D3tOXjR9EWgByriC83dfQ58lsNXX+1 FQbwkkflDlmAxA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:37 2025 by rpki-client