This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json) Hash identifier: 60NqFuj0Yi1tDNNP2KZDfK16HqPDYsQ8vts1nr+mxaQ= Subject key identifier: 20:F3:F3:AF:FC:DA:24:E4:D4:A7:43:93:51:06:8E:B1:38:9E:A0:BA Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Certificate serial: 019AF163D63A5E438FB3BAB91DB8800EE9B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft Manifest number: 0DED Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=) 2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: lEV8C/qI5TrDjXnZXwGt2FahNaMeEwpyvuA6lyQS5Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d6:3a:5e:43:8f:b3:ba:b9:1d:b8:80:0e:e9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=20f3f3affcda24e4d4a7439351068eb1389ea0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:69:ee:07:98:b2:35:8f:62:95:e6:86:32: f3:21:73:e9:76:7a:b8:95:1f:77:b6:ae:40:f9:f1: 56:0b:5e:64:ad:39:71:d4:bd:f9:0f:4f:87:b0:1c: 8f:3a:65:ae:19:66:b1:d8:53:00:00:6a:80:56:3b: 40:90:06:41:5b:53:46:3a:1c:f8:11:95:94:2e:3f: 4d:e7:ce:a9:46:60:42:d3:36:b7:7f:6d:37:87:7c: 88:03:e5:b6:5d:0d:12:9b:0c:2c:ee:e9:cc:74:80: 34:99:11:8d:9e:9b:c0:01:ce:eb:b5:31:da:7f:09: dd:8e:2d:52:e8:5e:46:46:9f:84:db:55:64:92:de: 07:1d:80:fb:6f:6e:53:46:81:45:c2:11:2b:97:5b: 8a:3f:b6:45:90:f4:3e:fc:24:b4:13:b4:a3:d6:ef: 59:ae:b0:b1:7f:d3:cd:e5:3a:79:8b:a4:7d:72:6d: 7a:19:a9:66:fb:14:85:4f:25:9d:04:cb:d8:de:a2: be:e8:eb:b2:c5:29:9a:87:42:13:2b:55:15:70:80: 50:d3:38:57:a1:5a:8a:ee:71:31:08:51:07:b8:2d: be:50:09:b0:12:35:20:5c:32:58:56:ac:77:e9:16: 9b:d8:5c:af:64:d5:6c:c6:4c:38:58:bb:c9:52:9d: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F3:F3:AF:FC:DA:24:E4:D4:A7:43:93:51:06:8E:B1:38:9E:A0:BA X509v3 Authority Key Identifier: keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f3:d8:3f:4b:65:0e:58:16:00:79:f9:f9:78:ad:ed:89:5f: 43:26:e5:5e:b6:3b:4f:23:33:07:14:78:69:7c:d9:94:92:79: 40:6f:c3:1a:e9:e9:b2:be:76:41:91:a6:17:f9:7f:29:16:31: 60:f2:8f:73:5b:8f:0a:04:da:86:04:57:d8:ec:70:3c:cb:2a: 84:61:ca:3f:37:cd:52:05:9d:25:67:76:07:6d:c8:6f:a3:21: 21:61:a4:3b:1d:70:1f:07:27:38:33:ad:9c:a4:b0:4b:4c:bb: db:b5:5b:df:aa:2f:22:da:30:1c:71:8c:ab:68:f6:73:22:86: be:0b:38:22:3f:49:0a:9d:f8:5e:a8:64:5d:c2:ba:da:cc:c5: 7b:c1:ab:c8:bb:15:36:75:cd:34:c4:90:b1:f2:2b:01:c6:b1: 25:20:ae:73:7d:49:a0:af:83:30:7c:a2:33:d0:81:da:d9:5f: 4f:8c:c2:1c:bf:81:97:f5:e3:d1:b0:4e:b1:bc:82:82:21:61: 0b:86:55:17:96:5e:c2:17:88:09:2e:46:73:e9:ff:19:ff:28: ef:19:37:25:b3:7f:5b:8e:0b:fa:dc:ac:90:3c:15:e8:3d:43: 13:c6:3d:f1:14:aa:a4:48:0d:b4:c2:14:1b:9b:d1:36:11:c9: b0:c8:c9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9Y6XkOPs7q5HbiADumzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1 NmRjMzYwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD EygyMGYzZjNhZmZjZGEyNGU0ZDRhNzQzOTM1MTA2OGViMTM4OWVhMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A1p7geYsjWPYpXmhjLzIXPpdnq4 lR93tq5A+fFWC15krTlx1L35D0+HsByPOmWuGWax2FMAAGqAVjtAkAZBW1NGOhz4 EZWULj9N586pRmBC0za3f203h3yIA+W2XQ0Smwws7unMdIA0mRGNnpvAAc7rtTHa fwndji1S6F5GRp+E21Vkkt4HHYD7b25TRoFFwhErl1uKP7ZFkPQ+/CS0E7Sj1u9Z rrCxf9PN5Tp5i6R9cm16Galm+xSFTyWdBMvY3qK+6OuyxSmah0ITK1UVcIBQ0zhX oVqK7nExCFEHuC2+UAmwEjUgXDJYVqx36Rab2FyvZNVsxkw4WLvJUp3STQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDz86/82iTk1KdDk1EGjrE4nqC6MB8GA1UdIwQY MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5 LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfPYP0tl DlgWAHn5+Xit7YlfQyblXrY7TyMzBxR4aXzZlJJ5QG/DGunpsr52QZGmF/l/KRYx YPKPc1uPCgTahgRX2OxwPMsqhGHKPzfNUgWdJWd2B23Ib6MhIWGkOx1wHwcnODOt nKSwS0y727Vb36ovItowHHGMq2j2cyKGvgs4Ij9JCp34XqhkXcK62szFe8GryLsV NnXNNMSQsfIrAcaxJSCuc31JoK+DMHyiM9CB2tlfT4zCHL+Bl/Xj0bBOsbyCgiFh C4ZVF5ZewheICS5Gc+n/Gf8o7xk3JbN/W44L+tyskDwV6D1DE8Y98RSqpEgNtMIU G5vRNhHJsMjJ4w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:25 2025 by rpki-client