This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json) Hash identifier: PVdt919xKWG9OjBmDNzb1ufPu5je6JrdsoMr+ELa7oU= Subject key identifier: AF:44:19:38:0E:6D:FB:0C:A3:14:93:85:BA:CB:CD:20:C2:EB:3C:36 Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba Certificate serial: 019AF2AD799E1A0D6072D9DC85C384122ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: 4iNT9CbUUlGcRsT0Yv+DIlrmAJ1IYOQfP0lHNAGoJBg=) 2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:79:9e:1a:0d:60:72:d9:dc:85:c3:84:12:2e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=af4419380e6dfb0ca3149385bacbcd20c2eb3c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:84:0f:eb:f8:4b:a6:86:7f:84:0f:fd:3a: 90:8c:33:9a:24:87:86:86:eb:a9:b5:3d:04:0b:10: fb:22:02:8d:29:5a:4b:6f:70:1d:7f:18:f0:64:37: 3c:e7:bb:93:63:79:cc:64:7a:98:55:2c:c7:73:1f: 9d:67:00:39:33:0d:b8:34:95:a2:c1:47:f2:6a:c9: ad:fb:90:d5:61:bb:3e:74:2f:84:a9:ee:de:33:33: 46:cc:fb:71:d3:fc:a4:af:c6:d3:9d:c8:5a:23:30: 4b:50:e9:00:ce:b1:b4:41:b9:16:6b:1a:b9:dd:30: 55:6a:ca:2a:34:21:d9:0a:6f:f7:5a:10:3a:a2:1e: 11:33:d5:0a:88:73:0e:a8:0b:ff:af:5b:21:24:39: 17:ef:92:ea:ea:1b:9c:4e:28:9a:d3:d0:4b:cd:be: de:28:99:11:e2:8c:08:46:94:37:47:58:c2:bc:46: 8a:46:d2:4a:14:a7:c7:1c:07:83:85:6c:b3:bd:8e: 72:62:df:f8:02:dc:9f:24:54:bf:68:e3:1c:ba:67: eb:5f:1b:29:ef:29:44:8f:d0:ee:d2:b4:81:35:e3: 88:67:5f:45:07:61:2c:d9:02:c7:3b:d6:57:b0:de: c6:10:ba:5c:d4:ec:00:09:8e:83:f0:11:e8:5c:81: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:44:19:38:0E:6D:FB:0C:A3:14:93:85:BA:CB:CD:20:C2:EB:3C:36 X509v3 Authority Key Identifier: keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fe:7d:98:a8:f9:c5:d9:90:a1:11:13:ad:85:1e:a7:21:c3: af:00:23:bb:85:2d:ce:bf:03:8b:3d:56:1f:f6:42:94:35:5c: 49:a8:3d:cc:2d:45:a6:be:b4:db:04:97:4c:57:31:3c:e3:ab: 6a:e9:27:8e:58:21:fa:ab:95:64:c6:7e:b7:69:ce:99:0c:3b: 95:e9:36:c4:d8:b0:ea:3b:a8:56:00:0a:1c:93:72:c7:73:71: 41:08:7e:d3:2f:08:4a:69:43:74:9c:81:4a:85:72:d1:92:95: 99:69:05:99:b8:2d:c2:ff:91:06:9c:24:cf:f4:9c:3b:18:63: 1c:df:f0:16:59:1b:c3:03:ff:1c:6b:eb:08:44:09:67:64:1c: a4:5e:8b:a5:f5:5b:2e:4a:96:9b:5c:e0:5e:26:79:dd:21:55: 45:03:a7:73:85:fa:ff:1f:b6:44:5e:1d:92:6c:54:77:e4:66: 54:72:05:88:2a:45:13:23:3f:85:08:5b:60:77:2f:77:5a:83: 09:35:a9:d4:7f:af:cd:af:e5:0c:60:50:85:0b:ac:c0:64:af: 24:0c:74:ce:46:91:98:f8:87:df:15:fd:1d:70:b7:c1:dd:f5: 59:5f:74:41:63:b2:5e:4d:8f:5a:bf:8e:95:14:3c:19:3c:0b: bd:09:77:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXmeGg1gctnchcOEEi7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzJlZjBjYWYwYTA1NzUyOWZiOTI4Zjc2OTYyYTc0MjUz OTBkYmEwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EyhhZjQ0MTkzODBlNmRmYjBjYTMxNDkzODViYWNiY2QyMGMyZWIzYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/WED+v4S6aGf4QP/TqQjDOaJIeG huuptT0ECxD7IgKNKVpLb3AdfxjwZDc857uTY3nMZHqYVSzHcx+dZwA5Mw24NJWi wUfyasmt+5DVYbs+dC+Eqe7eMzNGzPtx0/ykr8bTnchaIzBLUOkAzrG0QbkWaxq5 3TBVasoqNCHZCm/3WhA6oh4RM9UKiHMOqAv/r1shJDkX75Lq6hucTiia09BLzb7e KJkR4owIRpQ3R1jCvEaKRtJKFKfHHAeDhWyzvY5yYt/4AtyfJFS/aOMcumfrXxsp 7ylEj9Du0rSBNeOIZ19FB2Es2QLHO9ZXsN7GELpc1OwACY6D8BHoXIERuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9EGTgObfsMoxSThbrLzSDC6zw2MB8GA1UdIwQY MBaAFO0y7wyvCgV1KfuSj3aWKnQlOQ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEt MWRiNTMxYzlkMmQ4LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEtMWRiNTMxYzlkMmQ4 LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP59mKj5 xdmQoRETrYUepyHDrwAju4Utzr8Diz1WH/ZClDVcSag9zC1Fpr602wSXTFcxPOOr auknjlgh+quVZMZ+t2nOmQw7lek2xNiw6juoVgAKHJNyx3NxQQh+0y8ISmlDdJyB SoVy0ZKVmWkFmbgtwv+RBpwkz/ScOxhjHN/wFlkbwwP/HGvrCEQJZ2QcpF6LpfVb LkqWm1zgXiZ53SFVRQOnc4X6/x+2RF4dkmxUd+RmVHIFiCpFEyM/hQhbYHcvd1qD CTWp1H+vza/lDGBQhQuswGSvJAx0zkaRmPiH3xX9HXC3wd31WV90QWOyXk2PWr+O lRQ8GTwLvQl3Qg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:06 2025 by rpki-client