This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json) Hash identifier: jzYCmG3MmK0hzwSsBmXw5B5D6RYtW993Y8MsnqNw4jM= Subject key identifier: 59:2D:7D:D0:B2:EB:00:C7:1F:61:02:85:C1:AC:31:27:38:7C:3B:24 Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Certificate serial: 019AF12CFD109B9C5761EFAA2FEAB26B73B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: NEVyHfghC_0IzY6RTdXjWpjvCt0.roa (hash: xHfTcNtnEobrDQmw9/aNxrvi78pLeFshtErwqNjdN7Q=) 2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: 6iDM3ajsxudnqpYKk4mm1tJMUVqDoqdW0x5zKfzctlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fd:10:9b:9c:57:61:ef:aa:2f:ea:b2:6b:73:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=592d7dd0b2eb00c71f610285c1ac3127387c3b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:f0:c2:18:9f:5e:7c:d5:d6:b1:94:7f:ef: 07:d5:be:79:32:f8:dc:e2:08:ca:bf:02:56:d0:94: 8c:83:15:f4:cf:58:bb:e0:c1:99:5f:4e:5d:e4:2f: 78:b4:34:c1:95:e5:be:5b:bb:d4:dc:79:7f:35:03: 78:68:bb:ec:2c:e0:b5:30:40:1c:c7:90:29:5d:21: f4:9a:66:da:43:0c:2d:a5:fa:ea:20:73:c8:4e:fa: 73:81:92:c7:b3:d9:9b:f9:30:81:58:52:f8:a6:76: 4a:0e:db:e3:cf:19:a2:33:cc:22:1f:3f:a9:6e:9b: b3:5e:7b:a4:0e:bf:c0:cb:5c:c8:44:0f:ce:f5:96: fb:0f:a7:bd:44:b0:b5:9d:7f:79:40:5a:b8:11:b5: 7a:bc:c6:da:bb:cf:c8:85:23:34:95:32:19:14:af: 92:86:fe:dd:f7:ca:e6:6c:84:77:93:a1:50:0a:69: ba:e1:de:e9:2c:51:85:c6:a0:07:d8:f0:ab:ae:52: 50:ba:08:44:a5:25:3f:3d:e4:fa:04:d2:18:66:7f: 83:a1:2e:a3:db:44:7b:a5:24:8a:7a:e0:0b:92:48: fd:d2:d0:9d:c1:d4:24:9f:07:86:da:8b:4d:9f:b5: 51:93:4c:54:ad:49:30:3c:af:d3:dd:37:c3:55:58: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:7D:D0:B2:EB:00:C7:1F:61:02:85:C1:AC:31:27:38:7C:3B:24 X509v3 Authority Key Identifier: keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3c:6b:0a:f6:b1:34:56:1d:a3:fd:75:07:0e:cc:e4:f7:b1: 6a:81:4c:91:54:5f:3e:71:db:42:5b:31:2e:c1:3c:c6:46:c7: 23:5d:c7:df:9e:c2:c8:b6:8a:d6:d3:1b:15:6b:14:5e:3f:6e: 99:fd:52:6f:16:e1:53:08:5c:1a:ba:dd:98:49:2c:a7:90:e7: f7:a6:ec:2b:5c:44:44:c3:57:c8:ce:99:91:01:6b:4d:96:d4: 58:52:64:3f:b3:a9:33:fb:0a:11:c6:48:84:13:7c:04:1e:74: 23:d6:b1:a5:a7:90:71:ba:d0:f7:88:ad:bc:c6:27:da:3d:76: 11:62:7a:d6:4c:89:86:43:94:e0:01:61:43:d2:d3:74:7d:31: 31:be:f3:d5:fd:1f:3b:4b:16:0d:5e:cb:26:34:a5:86:7d:2c: fe:e6:cc:89:96:96:3d:5a:88:28:41:84:97:98:7a:02:43:ba: e1:4e:c9:01:31:3c:4e:50:87:63:c2:76:3f:41:44:3c:e5:7a: 29:dc:c1:cb:98:a4:f1:9e:08:84:87:03:a0:ad:75:15:12:5f: 2a:b6:76:63:00:9b:37:73:8b:f9:ca:8c:df:5b:38:29:6a:04: e8:8a:7f:28:d7:85:14:8b:0f:62:c8:42:ce:f7:1f:af:1a:5b: 78:b9:42:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP0Qm5xXYe+qL+qya3O2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3 MmY5M2IwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD Eyg1OTJkN2RkMGIyZWIwMGM3MWY2MTAyODVjMWFjMzEyNzM4N2MzYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71PwwhifXnzV1rGUf+8H1b55Mvjc 4gjKvwJW0JSMgxX0z1i74MGZX05d5C94tDTBleW+W7vU3Hl/NQN4aLvsLOC1MEAc x5ApXSH0mmbaQwwtpfrqIHPITvpzgZLHs9mb+TCBWFL4pnZKDtvjzxmiM8wiHz+p bpuzXnukDr/Ay1zIRA/O9Zb7D6e9RLC1nX95QFq4EbV6vMbau8/IhSM0lTIZFK+S hv7d98rmbIR3k6FQCmm64d7pLFGFxqAH2PCrrlJQughEpSU/PeT6BNIYZn+DoS6j 20R7pSSKeuALkkj90tCdwdQknweG2otNn7VRk0xUrUkwPK/T3TfDVVgL/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFktfdCy6wDHH2EChcGsMSc4fDskMB8GA1UdIwQY MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt NGI1OTU3YWE3NDdmLzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDxrCvax NFYdo/11Bw7M5PexaoFMkVRfPnHbQlsxLsE8xkbHI13H357CyLaK1tMbFWsUXj9u mf1SbxbhUwhcGrrdmEksp5Dn96bsK1xERMNXyM6ZkQFrTZbUWFJkP7OpM/sKEcZI hBN8BB50I9axpaeQcbrQ94itvMYn2j12EWJ61kyJhkOU4AFhQ9LTdH0xMb7z1f0f O0sWDV7LJjSlhn0s/ubMiZaWPVqIKEGEl5h6AkO64U7JATE8TlCHY8J2P0FEPOV6 KdzBy5ik8Z4IhIcDoK11FRJfKrZ2YwCbN3OL+cqM31s4KWoE6Ip/KNeFFIsPYshC zvcfrxpbeLlC7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:06 2025 by rpki-client