This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json) Hash identifier: glofCzsdsNQeemYPFxL73/OLEjVAYWE3jftJewToXDI= Subject key identifier: 33:D8:69:29:5E:FA:99:75:E6:9E:9B:82:DC:99:14:74:B1:E8:F7:DC Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf Certificate serial: 019AF5781679C19BCA0AF41FE2AE94E4795A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft Manifest number: 13B1 Signing time: Sat 06 Dec 2025 21:01:19 +0000 Manifest this update: Sat 06 Dec 2025 21:01:19 +0000 Manifest next update: Sun 07 Dec 2025 21:01:19 +0000 Files and hashes: 1: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (hash: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=) 2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: AqLcB4xYobr/qqboCXJaS0XDXkHaKCJamr7sRwZ4zb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:16:79:c1:9b:ca:0a:f4:1f:e2:ae:94:e4:79:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf Validity Not Before: Dec 6 21:01:19 2025 GMT Not After : Dec 7 21:01:19 2025 GMT Subject: CN=33d869295efa9975e69e9b82dc991474b1e8f7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a9:4b:b1:20:67:ca:75:79:b4:f4:dd:bc:6e: 53:c4:1c:94:09:49:70:60:4c:23:a4:7a:48:1b:9e: 08:ef:80:26:27:ff:f8:a6:ee:73:50:7f:7c:0e:58: 47:74:28:15:aa:7e:81:12:4f:c5:88:90:e9:bd:52: 41:60:95:72:20:bd:e5:5c:3a:39:19:b8:43:b5:65: ee:82:d6:8d:2a:4c:c3:3e:6a:82:7d:7f:33:1a:59: 16:15:72:b3:7d:e2:c1:36:cd:20:78:79:d6:0e:64: 55:b1:74:68:25:91:1d:28:2a:fe:8d:f3:15:22:c7: ea:83:9d:92:80:20:7f:a7:a8:ba:71:d7:03:73:c7: 47:22:25:82:11:d7:b2:63:97:ab:88:bc:90:d2:75: a0:24:f4:a9:b4:fc:16:03:39:3c:f9:27:4c:95:6f: a1:de:56:b1:49:ef:0f:72:33:b4:7d:5b:b4:95:2b: a8:52:e7:63:84:fd:4e:90:9a:29:56:5f:ea:d9:d9: 50:14:a0:30:6c:ff:84:30:12:c4:68:a5:be:14:fe: e6:1b:a2:68:6f:4c:36:87:1b:b1:56:be:9c:14:8b: 9e:b6:26:5c:61:77:0d:86:3f:e7:5d:e7:7a:4e:fb: a1:41:97:6b:d1:16:82:1b:a8:26:0f:c7:90:20:14: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:69:29:5E:FA:99:75:E6:9E:9B:82:DC:99:14:74:B1:E8:F7:DC X509v3 Authority Key Identifier: keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:e1:9c:07:2b:75:13:a7:c4:c3:5a:ce:a0:7f:99:87:a2:c3: 3b:e7:53:de:a6:76:13:53:04:68:37:0b:11:99:00:92:99:a2: 5f:67:fe:b0:85:39:14:4a:a0:79:f3:98:2b:4c:7c:7c:90:02: 05:81:bc:e0:b9:e5:62:1b:52:8e:2f:1b:f7:20:19:60:e3:b8: 67:65:c7:56:50:82:5e:d2:5a:59:55:8e:b5:9b:b2:9a:1d:84: 52:a2:11:1f:8b:68:43:e7:73:00:bb:91:5c:52:eb:17:84:e5: 3a:5d:4f:ce:fe:2c:82:8e:a5:2b:79:e9:ca:4f:13:b2:0a:4b: 44:6c:cd:3b:8e:c7:c8:1a:b3:65:cc:ed:9f:a4:ef:38:45:ec: 06:e4:6a:c1:73:f6:d3:fd:b7:4c:be:f8:87:c2:d4:c6:86:ce: d0:70:b8:2b:aa:a0:57:8d:44:79:48:e8:fb:51:c5:5f:c3:ce: 55:da:86:cb:9e:e4:03:03:01:a7:42:a9:9d:5c:6a:e8:78:dc: 4b:35:c8:56:c1:1c:01:d3:24:fe:b5:7f:ec:74:b0:1b:68:62: b3:78:79:e4:af:3c:17:19:26:3d:6e:94:d1:22:84:1a:08:9c: 44:34:72:49:58:c7:ca:74:76:23:1a:d3:bc:89:f5:45:1a:b9: c1:3d:4d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBZ5wZvKCvQf4q6U5HlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDczOWQwNTI4ZGNiNGZjZTU3OGQxMWY3ZWMzNGIwZTM3 NDUyY2YwHhcNMjUxMjA2MjEwMTE5WhcNMjUxMjA3MjEwMTE5WjAzMTEwLwYDVQQD EygzM2Q4NjkyOTVlZmE5OTc1ZTY5ZTliODJkYzk5MTQ3NGIxZThmN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qlLsSBnynV5tPTdvG5TxByUCUlw YEwjpHpIG54I74AmJ//4pu5zUH98DlhHdCgVqn6BEk/FiJDpvVJBYJVyIL3lXDo5 GbhDtWXugtaNKkzDPmqCfX8zGlkWFXKzfeLBNs0geHnWDmRVsXRoJZEdKCr+jfMV Isfqg52SgCB/p6i6cdcDc8dHIiWCEdeyY5eriLyQ0nWgJPSptPwWAzk8+SdMlW+h 3laxSe8PcjO0fVu0lSuoUudjhP1OkJopVl/q2dlQFKAwbP+EMBLEaKW+FP7mG6Jo b0w2hxuxVr6cFIuetiZcYXcNhj/nXed6TvuhQZdr0RaCG6gmD8eQIBRF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPYaSle+pl15p6bgtyZFHSx6PfcMB8GA1UdIwQY MBaAFO4HOdBSjctPzleNEffsNLDjdFLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGIt YjAzYzJmYmRjNjQ0LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGItYjAzYzJmYmRjNjQ0 LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuGcByt1 E6fEw1rOoH+Zh6LDO+dT3qZ2E1MEaDcLEZkAkpmiX2f+sIU5FEqgefOYK0x8fJAC BYG84LnlYhtSji8b9yAZYOO4Z2XHVlCCXtJaWVWOtZuymh2EUqIRH4toQ+dzALuR XFLrF4TlOl1Pzv4sgo6lK3npyk8TsgpLRGzNO47HyBqzZcztn6TvOEXsBuRqwXP2 0/23TL74h8LUxobO0HC4K6qgV41EeUjo+1HFX8POVdqGy57kAwMBp0KpnVxq6Hjc SzXIVsEcAdMk/rV/7HSwG2his3h55K88FxkmPW6U0SKEGgicRDRySVjHynR2IxrT vIn1RRq5wT1NdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:30 2025 by rpki-client