This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft File: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json) Hash identifier: o+R1tWXVd++irq2PDrixV4knmpOjnR8TvcPYxjPiV9A= Subject key identifier: C3:81:EF:A2:0B:30:52:47:2B:8D:12:0B:1F:06:84:73:96:F4:2D:8C Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f Certificate serial: 019AF12D6F88EEE8B8DB84B27F7FB0B36589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft Manifest number: 059A Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: ngT70tOc5d4z03+WUpwl188Phg0y8nEXPYSPa0YG2WE=) 2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6f:88:ee:e8:b8:db:84:b2:7f:7f:b0:b3:65:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=c381efa20b3052472b8d120b1f06847396f42d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:dc:ac:fa:95:c4:83:0b:b5:3a:4e:7d:f6: 52:5f:94:3f:b5:69:eb:a9:a2:cc:2d:48:0b:38:28: 1b:0d:77:5e:b3:45:48:cd:40:cf:46:88:a6:59:14: d7:41:ed:a1:e3:59:fb:2a:45:4d:a1:2a:40:85:85: 43:db:b7:a7:9a:b6:08:f6:86:a1:70:a8:93:f9:bc: b9:98:04:8f:0c:30:16:a8:80:fe:8c:7d:eb:de:c4: 97:6b:2b:5f:35:01:68:77:a2:82:3d:9f:94:79:29: 4e:05:83:e3:82:74:59:17:e7:a3:a9:aa:88:66:fc: 9f:29:72:95:d5:c4:0e:54:62:5d:b2:cf:70:e5:fb: 52:73:9e:2c:7a:e9:f6:03:f4:9a:e6:57:99:8d:25: ae:a3:1e:2d:53:75:ee:38:59:a0:ec:9b:ee:82:44: 5b:41:87:c9:d0:f5:2d:40:8e:0e:2a:a5:ee:4c:21: 58:2e:c6:ff:61:aa:b3:4f:9c:b2:ec:86:e6:bb:3b: 02:06:a6:f4:0e:31:0c:ca:f7:21:8a:05:29:e2:4b: c5:79:c7:bd:f4:8a:2e:eb:cb:91:ef:c7:2b:a7:8e: 39:09:5e:8e:34:69:89:21:bb:b4:b1:e5:3d:83:d7: ca:2c:38:bf:35:19:68:1f:b8:b2:e1:7c:74:62:48: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:81:EF:A2:0B:30:52:47:2B:8D:12:0B:1F:06:84:73:96:F4:2D:8C X509v3 Authority Key Identifier: keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:46:aa:c3:d1:71:79:60:d0:11:1b:2b:7d:de:8c:28:05:65: a8:f1:fe:d8:3a:d2:f6:4f:05:ce:75:44:15:03:4b:89:33:1c: db:0c:35:cd:9a:00:53:ab:4e:ea:4c:fd:c1:8e:e2:64:09:fc: 6f:72:a4:d7:a5:8d:ad:a3:69:56:de:59:84:25:ed:91:33:d7: be:df:cf:0a:c9:ef:e1:ba:94:c2:e8:d6:f4:6d:00:c1:36:9d: d1:23:88:8e:fe:e4:1c:43:11:93:d5:01:0a:31:32:dd:ea:96: c4:c6:fc:a9:ac:d2:42:7b:6b:df:f6:bc:2c:a8:4c:78:9e:f7: 0f:3c:f1:da:0c:cb:fd:20:c6:d1:77:95:62:3b:70:c5:36:fe: 05:bf:c3:ca:50:e0:da:cc:31:7b:85:fd:47:9e:cb:2a:19:aa: 15:34:35:ff:4d:c5:d7:91:82:9d:10:d6:0e:15:46:6b:88:77: 8e:d7:60:bb:17:96:2f:7c:c1:37:f8:5e:aa:9a:44:48:4b:49: 59:a4:f3:9f:54:ea:3a:7f:bf:19:16:16:0c:eb:3f:fd:62:ee: 45:3c:6c:f0:bc:af:69:be:a2:ea:54:3f:dc:23:51:b1:db:46: 0a:a8:de:e2:d5:fe:bb:a4:8d:99:ee:50:90:4e:8d:7e:9f:57: 0e:a4:0b:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW+I7ui424Syf3+ws2WJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzcyYzJmYTIzYmU2ZmE4ZTI4YWVhNGE3MTVkNWFjMzFm MGNjOWYwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD EyhjMzgxZWZhMjBiMzA1MjQ3MmI4ZDEyMGIxZjA2ODQ3Mzk2ZjQyZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqPcrPqVxIMLtTpOffZSX5Q/tWnr qaLMLUgLOCgbDXdes0VIzUDPRoimWRTXQe2h41n7KkVNoSpAhYVD27enmrYI9oah cKiT+by5mASPDDAWqID+jH3r3sSXaytfNQFod6KCPZ+UeSlOBYPjgnRZF+ejqaqI ZvyfKXKV1cQOVGJdss9w5ftSc54seun2A/Sa5leZjSWuox4tU3XuOFmg7JvugkRb QYfJ0PUtQI4OKqXuTCFYLsb/YaqzT5yy7IbmuzsCBqb0DjEMyvchigUp4kvFece9 9Iou68uR78crp445CV6ONGmJIbu0seU9g9fKLDi/NRloH7iy4Xx0YkjE+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOB76ILMFJHK40SCx8GhHOW9C2MMB8GA1UdIwQY MBaAFO13LC+iO+b6jiiupKcV1awx8MyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYt OGZhMDk4NzQxMTNlLzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYtOGZhMDk4NzQxMTNl LzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokaqw9Fx eWDQERsrfd6MKAVlqPH+2DrS9k8FznVEFQNLiTMc2ww1zZoAU6tO6kz9wY7iZAn8 b3Kk16WNraNpVt5ZhCXtkTPXvt/PCsnv4bqUwujW9G0AwTad0SOIjv7kHEMRk9UB CjEy3eqWxMb8qazSQntr3/a8LKhMeJ73Dzzx2gzL/SDG0XeVYjtwxTb+Bb/DylDg 2swxe4X9R57LKhmqFTQ1/03F15GCnRDWDhVGa4h3jtdguxeWL3zBN/heqppESEtJ WaTzn1TqOn+/GRYWDOs//WLuRTxs8Lyvab6i6lQ/3CNRsdtGCqje4tX+u6SNme5Q kE6Nfp9XDqQL7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:00 2025 by rpki-client