This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json) Hash identifier: CsV1mzsAZXvWYFX6Fzpf3Na614k6BS/p29YDqr7lDcs= Subject key identifier: 97:EB:9B:A9:8B:18:9D:4E:1E:EF:A9:5A:FD:83:A3:5C:9F:A8:48:5D Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56 Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56 Certificate serial: 019AF1D1D76C80CC3CD875652C9B5FA0C736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: ik1++59VWxmGpkppMx5aamWQ8DAnsCZ9DckptvxtTxM=) 2: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (hash: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:6c:80:cc:3c:d8:75:65:2c:9b:5f:a0:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=97eb9ba98b189d4e1eefa95afd83a35c9fa8485d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:7d:5c:70:38:39:8e:c9:11:6b:bf:b6:65: eb:70:d2:32:7c:db:e1:a1:8d:e1:03:69:a5:89:f6: d3:fc:54:9a:c2:f5:c3:50:10:17:4d:40:0d:a4:b7: 9d:e4:ac:fa:e0:eb:5f:e1:5f:c2:81:03:03:9c:14: f9:94:8e:7c:26:57:25:9d:f5:d9:02:5c:9c:60:39: d1:cb:45:24:40:65:2e:ef:13:c5:49:45:bc:43:a3: 1f:7a:a8:ad:99:52:80:25:1b:86:e4:49:6d:ae:33: 8d:16:42:3d:5c:ca:8f:ac:68:55:23:33:30:9b:4a: 04:82:f6:50:a7:63:ca:78:a4:f9:e9:90:af:63:c3: 77:a3:0c:9b:a1:cb:13:99:14:dd:ad:24:33:2f:f6: 0d:68:35:e3:a3:2b:7a:b5:e8:20:93:17:d9:7a:e4: 4c:cc:ac:f0:dc:68:1d:d7:af:c7:e7:c0:f3:16:3f: 2a:52:44:4e:d5:45:85:77:af:6f:7a:ef:af:13:d8: dc:76:81:ec:28:0c:3e:4b:2b:7b:1c:16:22:9a:4e: fd:26:a2:9e:95:d3:f1:67:24:98:6c:19:4b:0b:87: d9:7b:e5:6e:e8:e1:a6:e4:bc:84:c2:19:01:a7:ab: ef:d1:85:1f:24:62:62:ba:f5:13:5b:03:82:ed:63: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EB:9B:A9:8B:18:9D:4E:1E:EF:A9:5A:FD:83:A3:5C:9F:A8:48:5D X509v3 Authority Key Identifier: keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:89:49:4b:cc:38:37:99:a9:cf:96:91:3b:04:c3:64:54:a5: 88:25:52:dd:bf:c0:68:ab:58:80:07:41:fa:2b:64:0e:5c:a3: 1e:6d:fa:ea:4b:e0:5e:ec:b4:31:77:2f:52:d0:70:85:49:4e: 98:05:f2:11:91:7e:80:5b:ff:54:29:4a:82:de:67:aa:de:14: 94:9d:b5:c8:79:e6:66:3a:a6:ae:0e:1e:b0:4e:67:5d:fb:14: 54:e6:6e:16:7c:b9:97:7f:d0:26:bd:78:22:5b:18:4d:3d:82: 8f:8f:4f:cc:5b:e3:78:1c:8c:c2:5c:cd:47:88:ca:03:91:ce: 5f:2f:28:f9:7b:5f:ab:9c:d6:d7:83:8b:24:f7:e2:57:f5:67: 57:77:33:65:2a:bd:45:3f:95:ec:de:d0:0e:08:ac:df:2b:ac: fe:8a:73:16:57:48:1d:3e:c8:b0:bb:c6:ce:63:2b:2c:79:a3: a4:68:5b:af:bf:ea:7b:36:d7:5d:b5:9c:26:3a:96:e1:7b:17: c4:ee:60:b2:c3:18:ef:44:f9:61:e3:a8:d3:31:ac:dc:81:41: 24:ba:c4:32:d3:0f:bf:66:6a:8b:1a:81:97:ac:63:ce:31:c6: bb:9c:61:c3:39:c0:ae:82:a5:5a:43:86:26:75:b0:07:6f:13: 9a:f3:01:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ddsgMw82HVlLJtfoMc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTFmYzZhMTU5NjU5MzRjNTMzOTNkNmVkMTg5ODRjNmJh NTZmNTYwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD Eyg5N2ViOWJhOThiMTg5ZDRlMWVlZmE5NWFmZDgzYTM1YzlmYTg0ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMR9XHA4OY7JEWu/tmXrcNIyfNvh oY3hA2mlifbT/FSawvXDUBAXTUANpLed5Kz64Otf4V/CgQMDnBT5lI58JlclnfXZ AlycYDnRy0UkQGUu7xPFSUW8Q6MfeqitmVKAJRuG5EltrjONFkI9XMqPrGhVIzMw m0oEgvZQp2PKeKT56ZCvY8N3owybocsTmRTdrSQzL/YNaDXjoyt6teggkxfZeuRM zKzw3Ggd16/H58DzFj8qUkRO1UWFd69veu+vE9jcdoHsKAw+Syt7HBYimk79JqKe ldPxZySYbBlLC4fZe+Vu6OGm5LyEwhkBp6vv0YUfJGJiuvUTWwOC7WOS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfrm6mLGJ1OHu+pWv2Do1yfqEhdMB8GA1UdIwQY MBaAFO/h/GoVllk0xTOT1u0YmExrpW9WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82M2I1ZWMtYzJjOS00ZjY4LThkNDct NGQxOTkzN2UyZjIwLzEvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82M2I1ZWMtYzJjOS00ZjY4LThkNDctNGQxOTkzN2UyZjIw LzEvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0YlJS8w4 N5mpz5aROwTDZFSliCVS3b/AaKtYgAdB+itkDlyjHm366kvgXuy0MXcvUtBwhUlO mAXyEZF+gFv/VClKgt5nqt4UlJ21yHnmZjqmrg4esE5nXfsUVOZuFny5l3/QJr14 IlsYTT2Cj49PzFvjeByMwlzNR4jKA5HOXy8o+Xtfq5zW14OLJPfiV/VnV3czZSq9 RT+V7N7QDgis3yus/opzFldIHT7IsLvGzmMrLHmjpGhbr7/qezbXXbWcJjqW4XsX xO5gssMY70T5YeOo0zGs3IFBJLrEMtMPv2ZqixqBl6xjzjHGu5xhwznAroKlWkOG JnWwB28TmvMBXg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:49 2025 by rpki-client