This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json) Hash identifier: sbCp7E9wKEJewaDraHCZyh7PLvra9HVqq24PW0cDJLc= Subject key identifier: 8B:22:F4:3D:DB:03:1D:F0:2D:5D:95:A1:2C:63:CA:AC:37:10:1F:48 Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25 Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25 Certificate serial: 019AF1640D863F53D23F04235D4027A1E9FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft Manifest number: 0AEA Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: Ecx6nkqMBFqRkzwO7vsuQD7xz3EORxborYU9gwloUSY=) 2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=) 3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0d:86:3f:53:d2:3f:04:23:5d:40:27:a1:e9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=8b22f43ddb031df02d5d95a12c63caac37101f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0f:8c:c7:4e:fb:b8:4f:4e:02:ac:d9:58:4b: ed:cf:c5:10:ee:82:76:4f:2e:d9:52:6e:ac:05:c2: 5e:c8:a7:10:6a:05:1e:88:f5:82:ec:52:18:16:61: a4:0e:56:4f:c2:72:fe:34:6f:1f:f2:15:f7:f1:d6: 71:95:a7:0e:3a:59:76:2d:c7:9d:a5:a0:14:79:a4: 9d:26:9b:85:a8:23:0e:07:5b:00:ea:a2:89:24:5a: 95:aa:71:d0:b7:0e:34:e6:52:cb:d4:7e:f9:bd:e0: 30:68:76:fa:5a:4f:fa:10:f8:a6:fb:bf:45:ae:c4: 76:37:b6:02:56:8b:31:68:c3:bd:fa:19:32:2a:06: da:5a:68:67:dd:fd:72:ed:59:46:da:89:d6:16:bd: b2:4e:78:f9:79:95:f2:bb:2e:f3:40:e7:0a:82:81: 03:0c:39:37:d0:77:35:84:ea:4e:f2:28:53:c4:16: 28:58:9e:83:02:82:bc:f9:cc:08:1b:13:da:d8:0c: f1:e1:06:a5:50:e6:5c:25:1b:b8:dd:b0:e6:b6:b7: 86:0d:e9:b5:da:9b:c7:5f:ab:6b:0d:99:bd:e8:13: 8e:11:b0:e1:5a:5a:6b:1b:3e:91:6c:42:4d:84:05: 70:36:21:90:ab:5c:d3:38:0f:f3:18:20:4f:a1:2b: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:F4:3D:DB:03:1D:F0:2D:5D:95:A1:2C:63:CA:AC:37:10:1F:48 X509v3 Authority Key Identifier: keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6a:a9:3b:68:6a:30:30:8f:20:24:30:f4:bf:f0:19:57:94: 0d:ff:44:6b:21:d3:10:f1:08:65:fb:38:be:e2:99:2f:47:b9: 23:82:90:9a:5c:2b:be:83:e2:78:cb:d3:dc:41:33:ac:ae:f8: be:51:00:7e:ac:17:e3:37:5b:12:0c:84:10:4f:aa:0a:11:c7: 59:22:ca:74:63:44:de:80:61:80:f5:11:3f:5c:76:9c:7f:6e: c8:b5:10:23:ba:f9:e8:46:02:d0:7e:0a:62:06:ff:21:76:b7: 6c:c5:40:b8:58:99:14:83:14:48:ed:14:db:6e:95:ba:49:c4: 73:20:07:13:67:26:d5:f4:1a:32:10:e6:05:f7:35:77:9d:69: a2:5e:4f:6b:34:1c:e6:ec:74:73:e5:fc:37:2c:87:cc:bd:59: 5d:1d:45:6c:2f:b9:80:40:c1:da:94:95:5e:21:7a:3b:a8:22: b1:c5:e2:10:fa:45:73:73:da:46:8c:ed:e0:c9:3f:05:fa:a5: 59:25:55:b4:9a:12:c2:53:ea:25:59:fd:12:05:1a:3c:69:b5: e7:1a:dd:94:d6:02:eb:b0:72:e2:17:ef:e1:03:02:fb:72:34: de:29:ae:d9:a5:0f:e1:d4:ef:2f:ab:53:dc:46:29:9f:b8:7b: b0:ed:49:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA2GP1PSPwQjXUAnoen/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNWZkZjZhNTFiOTgwOTFlOWVjN2JkZmFmNDgzZWM3NzQz YTVhMjUwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg4YjIyZjQzZGRiMDMxZGYwMmQ1ZDk1YTEyYzYzY2FhYzM3MTAxZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A+Mx077uE9OAqzZWEvtz8UQ7oJ2 Ty7ZUm6sBcJeyKcQagUeiPWC7FIYFmGkDlZPwnL+NG8f8hX38dZxlacOOll2Lced paAUeaSdJpuFqCMOB1sA6qKJJFqVqnHQtw405lLL1H75veAwaHb6Wk/6EPim+79F rsR2N7YCVosxaMO9+hkyKgbaWmhn3f1y7VlG2onWFr2yTnj5eZXyuy7zQOcKgoED DDk30Hc1hOpO8ihTxBYoWJ6DAoK8+cwIGxPa2Azx4QalUOZcJRu43bDmtreGDem1 2pvHX6trDZm96BOOEbDhWlprGz6RbEJNhAVwNiGQq1zTOA/zGCBPoSuAWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsi9D3bAx3wLV2VoSxjyqw3EB9IMB8GA1UdIwQY MBaAFOxf32pRuYCR6ex7369IPsd0OlolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZfZmFsRzVnSkhwN0h2ZnIwZy14M1E2V2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNmE1NTQtZDk3NC00Mzc3LWJlY2Mt Y2JmMzQzZGViN2JjLzEvN0ZfZmFsRzVnSkhwN0h2ZnIwZy14M1E2V2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lNmE1NTQtZDk3NC00Mzc3LWJlY2MtY2JmMzQzZGViN2Jj LzEvN0ZfZmFsRzVnSkhwN0h2ZnIwZy14M1E2V2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2qpO2hq MDCPICQw9L/wGVeUDf9EayHTEPEIZfs4vuKZL0e5I4KQmlwrvoPieMvT3EEzrK74 vlEAfqwX4zdbEgyEEE+qChHHWSLKdGNE3oBhgPURP1x2nH9uyLUQI7r56EYC0H4K Ygb/IXa3bMVAuFiZFIMUSO0U226VuknEcyAHE2cm1fQaMhDmBfc1d51pol5PazQc 5ux0c+X8NyyHzL1ZXR1FbC+5gEDB2pSVXiF6O6giscXiEPpFc3PaRozt4Mk/Bfql WSVVtJoSwlPqJVn9EgUaPGm15xrdlNYC67By4hfv4QMC+3I03imu2aUP4dTvL6tT 3EYpn7h7sO1JpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:41 2025 by rpki-client