This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json) Hash identifier: envFgpq/WkLtltnRnbnlPZYmMMTwbxOfzFginJjuQX4= Subject key identifier: CF:AA:9A:28:FA:14:64:DC:F9:04:54:B4:49:39:EB:0D:EF:08:88:9E Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A Certificate issuer: /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a Certificate serial: 019AF19B16E6BA84CDAF03E6BEF8FFD768CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: AqJxYN5LHbsChSpHextVP8e+FEucRi8gVa8G4RQDOUg=) 2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:16:e6:ba:84:cd:af:03:e6:be:f8:ff:d7:68:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=cfaa9a28fa1464dcf90454b44939eb0def08889e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:d7:46:84:69:54:a9:91:23:86:f2:36:66: 09:fe:52:a6:34:c5:58:e9:6d:50:3b:cc:8f:17:49: ba:c2:fe:8e:4f:d8:f3:6c:6b:df:4d:17:fc:8c:8e: a1:19:99:dc:22:c4:7a:0f:00:9d:02:8b:46:2c:19: 27:b7:db:0a:de:d3:57:4a:e0:db:0d:bb:5c:f4:f7: b7:e0:ca:df:36:75:8a:2e:ed:68:b7:1c:c6:7f:51: 5a:33:18:02:7d:99:8f:51:63:cc:8d:8b:7a:de:6d: 43:1d:be:2f:63:52:ba:23:73:29:71:87:6b:c6:b5: eb:65:7a:ed:a0:5a:87:f2:c5:67:83:ac:9e:38:ad: ce:8b:98:61:6b:7a:90:44:1e:0a:b3:5f:f8:20:7c: b4:ac:10:7b:84:c0:88:ce:77:95:16:44:fa:ec:22: 2a:17:f9:0b:59:df:37:dd:29:a4:d8:0b:c3:c1:cc: a2:24:2c:15:3e:94:e1:4c:bd:87:c0:db:5f:7c:02: 22:36:6b:b5:f4:c5:4e:64:f7:76:02:5d:2e:84:b4: 33:15:dc:c1:3c:2f:30:42:14:58:b7:db:3b:3a:0e: ea:55:4f:48:71:ed:56:d1:ef:92:fa:0f:67:4a:b8: d7:43:85:31:95:1c:de:94:6a:bf:35:8c:69:23:68: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:9A:28:FA:14:64:DC:F9:04:54:B4:49:39:EB:0D:EF:08:88:9E X509v3 Authority Key Identifier: keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:db:ac:dc:7b:42:5f:82:4d:0a:41:72:f6:7e:0b:39:bc:d4: e5:fc:3c:48:30:02:e6:31:e6:04:aa:ff:59:c4:4c:9a:8e:db: b8:f8:9c:e1:3a:86:c1:6f:ef:cb:f8:35:36:bd:e6:45:a8:48: 02:a7:c9:b1:99:61:28:b4:3e:63:48:3b:fd:6a:1b:59:c3:c4: 00:fc:83:87:7b:39:8c:58:85:d2:43:e3:09:93:3d:fd:cc:5e: 12:18:a5:aa:65:5b:fc:2d:f5:71:65:29:27:62:0e:f2:61:ea: 78:58:8c:30:e5:3a:fe:5d:c0:cf:bf:1c:ba:63:38:99:dd:09: 95:4e:8e:ae:7e:ca:ab:4f:57:a8:4c:aa:89:6e:64:a3:be:66: c5:50:c9:01:9d:70:f2:22:8c:70:7f:b0:5d:66:d9:94:f4:a8: b9:fc:3e:89:64:60:c6:f0:49:7c:82:13:89:a6:71:4e:dc:d2: 83:d8:81:3a:e7:5c:a8:f9:d3:af:eb:bf:88:6c:c1:c4:e7:a5: ef:b1:62:83:21:e3:f2:02:d3:ea:44:7f:4c:b0:d3:1c:fa:48: d9:78:6a:01:f0:94:02:cc:86:51:85:47:2d:d6:e6:7f:2d:a0: d6:8d:77:48:41:bb:fe:e3:46:f0:e2:ee:3c:f9:7f:12:1f:da: ae:75:8a:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxbmuoTNrwPmvvj/12jLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODUwNDgzY2NlMTMzN2IxYzZjMmZkZGVhOWM1ZGJiNGE3 ZTE5MWEwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhjZmFhOWEyOGZhMTQ2NGRjZjkwNDU0YjQ0OTM5ZWIwZGVmMDg4ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gjXRoRpVKmRI4byNmYJ/lKmNMVY 6W1QO8yPF0m6wv6OT9jzbGvfTRf8jI6hGZncIsR6DwCdAotGLBknt9sK3tNXSuDb Dbtc9Pe34MrfNnWKLu1otxzGf1FaMxgCfZmPUWPMjYt63m1DHb4vY1K6I3MpcYdr xrXrZXrtoFqH8sVng6yeOK3Oi5hha3qQRB4Ks1/4IHy0rBB7hMCIzneVFkT67CIq F/kLWd833Smk2AvDwcyiJCwVPpThTL2HwNtffAIiNmu19MVOZPd2Al0uhLQzFdzB PC8wQhRYt9s7Og7qVU9Ice1W0e+S+g9nSrjXQ4UxlRzelGq/NYxpI2g5YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+qmij6FGTc+QRUtEk56w3vCIieMB8GA1UdIwQY MBaAFO2FBIPM4TN7HGwv3eqcXbtKfhkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUt YjkxNTNiMzMyMGMxLzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUtYjkxNTNiMzMyMGMx LzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydus3HtC X4JNCkFy9n4LObzU5fw8SDAC5jHmBKr/WcRMmo7buPic4TqGwW/vy/g1Nr3mRahI AqfJsZlhKLQ+Y0g7/WobWcPEAPyDh3s5jFiF0kPjCZM9/cxeEhilqmVb/C31cWUp J2IO8mHqeFiMMOU6/l3Az78cumM4md0JlU6Orn7Kq09XqEyqiW5ko75mxVDJAZ1w 8iKMcH+wXWbZlPSoufw+iWRgxvBJfIITiaZxTtzSg9iBOudcqPnTr+u/iGzBxOel 77FigyHj8gLT6kR/TLDTHPpI2XhqAfCUAsyGUYVHLdbmfy2g1o13SEG7/uNG8OLu PPl/Eh/arnWKIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:21 2025 by rpki-client