This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft File: 7HRpxUKO75q3aNntbCyJRDprtL4.mft (raw, json) Hash identifier: 4PZlXRQKWWy6Mf1/sMyU712TxeOfUNFIKCL1zRLyquQ= Subject key identifier: FC:4B:0C:BF:E4:DE:83:71:55:A0:BA:AA:D7:F4:76:39:73:DF:62:82 Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be Certificate serial: 019AF1D203CA0682DFF0A20332348B79D654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft Manifest number: 08B9 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: 7HRpxUKO75q3aNntbCyJRDprtL4.crl (hash: TCBkFdiG+7ekYsB4sKF5M/Z2Lfc+2zGq63Wo8EQhNKc=) 2: IefeYi4YnGA5-Btgta25kSVWpXo.roa (hash: wXwoabDrm1OGUarx1OccGEgXSjlxtoxh6QKkXSRruII=) 3: KZqAxy5iqIMDtOLtEGoxGEy07RI.roa (hash: kbgYn28oaby5NUH4Ku4hnNvchyDC07zcNQ/v/n7K8DU=) 4: KzIn4K4LGUhk7ahqCpBF3dUn2js.roa (hash: sArPRbY2NbhQMJF8NLf9Nvh0HsgPmZBF4FQAbmtOpRo=) 5: YtnZu-c0kgMDTAChjtBERUQSanA.roa (hash: tYMylqMx0c2qfSfZBjQ3pAWcw3O1p68Md9BYMc3Adjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:03:ca:06:82:df:f0:a2:03:32:34:8b:79:d6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=fc4b0cbfe4de837155a0baaad7f4763973df6282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:aa:bf:f8:93:41:db:de:b3:33:88:25:c4: 5d:96:dd:c1:c0:10:10:23:78:58:8b:e9:33:94:ff: 13:07:0d:11:1a:61:e9:0c:4f:17:90:6c:57:ca:dd: de:c7:6e:d4:b7:4e:ec:e7:a4:d9:f6:f2:d7:76:ab: 46:bf:84:57:77:b2:2b:35:03:81:90:8f:1d:bf:61: e4:eb:ff:0f:fd:0d:22:ad:79:69:04:c1:6f:6c:36: d1:d6:2e:22:4b:60:69:b7:2a:12:0d:7f:81:bf:f2: 9b:a4:ff:4f:5e:03:8c:ca:24:8f:c2:f0:66:cc:9e: 9f:5e:4c:55:ac:d7:bf:ba:35:18:a2:11:36:23:2d: 96:6e:66:c0:43:45:fd:37:71:9d:00:9d:0b:cb:e1: 64:97:3b:28:a7:d3:26:0d:b0:43:ff:bf:6b:c9:3e: 8a:65:d3:3b:e6:33:29:a8:7a:d4:a8:7a:5c:bb:11: a3:56:a3:38:f8:c1:e1:b7:8d:34:7c:22:81:29:db: a8:ad:75:eb:8c:b6:de:cd:32:62:66:6d:9e:1d:ce: 0d:0d:a7:9d:b6:0a:a2:b7:0c:4a:5b:39:f1:1c:cf: f1:44:63:4f:b3:d7:f9:ad:bc:5b:de:58:35:fd:d0: 2e:08:e4:ea:cb:46:0c:89:5e:a5:e1:d6:df:2d:b1: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4B:0C:BF:E4:DE:83:71:55:A0:BA:AA:D7:F4:76:39:73:DF:62:82 X509v3 Authority Key Identifier: keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8d:f9:da:00:6a:12:5e:8e:30:e3:72:dd:c3:8b:a9:0a:e7: 26:0e:6f:b6:9b:d3:ef:17:02:3d:58:6d:17:3c:45:8d:ea:de: d3:df:6e:8e:61:a8:7b:6c:9c:19:be:0a:dc:49:ed:cd:43:e8: 11:e6:52:d2:74:e5:e6:4d:e6:d5:ab:bc:c5:b1:ee:aa:54:1f: 04:4c:b6:25:8d:92:fe:b2:90:dc:e5:fd:1f:d9:9b:6c:16:db: bd:7e:87:d6:0a:d7:77:34:49:58:96:81:d4:45:d5:3e:b2:f7: 90:1f:c4:dd:7d:0c:df:be:05:10:ff:ba:f2:bd:99:69:c0:d6: 18:32:ce:e0:52:d9:89:8d:6a:e8:77:5c:80:82:91:ca:29:eb: 61:59:cc:87:e5:49:1f:1a:25:06:19:57:46:e0:01:61:cb:8c: 0f:2d:13:cf:5e:4f:ab:dd:0e:d5:55:33:0d:48:78:83:20:57: 56:7c:ac:29:b6:53:c3:34:7d:83:44:71:e7:8c:05:d1:b4:33: 38:f8:5c:59:9e:a1:7c:d6:a1:de:1b:99:04:8a:98:b4:0e:97: 89:7e:e5:58:52:4e:ce:cd:50:14:6e:26:7e:7d:60:bd:a5:85: 0b:5c:07:c4:a4:41:17:5d:c4:5a:98:fd:5c:b8:5f:1f:c3:c2: 20:54:e7:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gPKBoLf8KIDMjSLedZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzQ2OWM1NDI4ZWVmOWFiNzY4ZDllZDZjMmM4OTQ0M2E2 YmI0YmUwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EyhmYzRiMGNiZmU0ZGU4MzcxNTVhMGJhYWFkN2Y0NzYzOTczZGY2MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Kqv/iTQdveszOIJcRdlt3BwBAQ I3hYi+kzlP8TBw0RGmHpDE8XkGxXyt3ex27Ut07s56TZ9vLXdqtGv4RXd7IrNQOB kI8dv2Hk6/8P/Q0irXlpBMFvbDbR1i4iS2BptyoSDX+Bv/KbpP9PXgOMyiSPwvBm zJ6fXkxVrNe/ujUYohE2Iy2WbmbAQ0X9N3GdAJ0Ly+Fklzsop9MmDbBD/79ryT6K ZdM75jMpqHrUqHpcuxGjVqM4+MHht400fCKBKduorXXrjLbezTJiZm2eHc4NDaed tgqitwxKWznxHM/xRGNPs9f5rbxb3lg1/dAuCOTqy0YMiV6l4dbfLbHLZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxLDL/k3oNxVaC6qtf0djlz32KCMB8GA1UdIwQY MBaAFOx0acVCju+at2jZ7WwsiUQ6a7S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQt OGRlZTFkYTEwNzQxLzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQtOGRlZTFkYTEwNzQx LzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFI352gBq El6OMONy3cOLqQrnJg5vtpvT7xcCPVhtFzxFjere099ujmGoe2ycGb4K3EntzUPo EeZS0nTl5k3m1au8xbHuqlQfBEy2JY2S/rKQ3OX9H9mbbBbbvX6H1grXdzRJWJaB 1EXVPrL3kB/E3X0M374FEP+68r2ZacDWGDLO4FLZiY1q6HdcgIKRyinrYVnMh+VJ HxolBhlXRuABYcuMDy0Tz15Pq90O1VUzDUh4gyBXVnysKbZTwzR9g0Rx54wF0bQz OPhcWZ6hfNah3huZBIqYtA6XiX7lWFJOzs1QFG4mfn1gvaWFC1wHxKRBF13EWpj9 XLhfH8PCIFTnEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:46 2025 by rpki-client