This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft File: D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json) Hash identifier: BsjBvF/eyBtieVrjlXycoLZ6F7WhqHp0DJbdoEegw80= Subject key identifier: 7A:75:EB:6E:08:2F:53:AB:CD:A0:27:2A:EE:92:B4:9E:1F:DA:C9:22 Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019AF0518D40F05002EBF6D6DB0B1CDEFEE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft Manifest number: 0E8F Signing time: Fri 05 Dec 2025 21:01:07 +0000 Manifest this update: Fri 05 Dec 2025 21:01:07 +0000 Manifest next update: Sat 06 Dec 2025 21:01:07 +0000 Files and hashes: 1: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=) 2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: ltUD+Ekn0xugo1oGk7UR66XTin5LGR/pwwvPLK8EneI=) 3: E3-oQ4BmjuAUAxuY3lI4bGAJJn0.roa (hash: QkhM3KqaZ6ST7G4nJ7m93zJ83x4l2g7lj5o1mYVsrgc=) 4: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=) 5: PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa (hash: tdD/J8H0M27lW/hpYh2V2pKuEbxFXSmLFYYHtZ17IpE=) 6: gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa (hash: zVtlbSj16lTrnOVx6GM9u2ecIQWNTuwNYnRaanJM7XY=) 7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:8d:40:f0:50:02:eb:f6:d6:db:0b:1c:de:fe:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Dec 5 21:01:07 2025 GMT Not After : Dec 6 21:01:07 2025 GMT Subject: CN=7a75eb6e082f53abcda0272aee92b49e1fdac922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:68:3f:a7:d8:40:de:c3:41:b9:02:7c:57: 16:87:aa:f9:bc:f0:06:59:f8:62:a9:e6:67:06:85: ac:69:46:cc:8c:e3:35:b9:8d:cd:96:3b:ef:c3:df: 89:28:9f:70:0c:02:19:e8:c2:f3:ea:6a:09:58:8e: ac:21:51:2d:45:2d:f5:3e:fa:3e:44:03:72:8d:ea: 49:ed:37:46:32:95:b9:c3:51:aa:50:84:25:34:da: 50:a4:1b:31:a0:9e:a4:21:ce:51:42:c1:af:0f:79: 32:95:ca:d4:d7:95:6f:73:1d:ea:b7:9f:49:bc:2a: cf:5f:60:40:04:d3:ce:40:54:86:33:cc:c9:cd:95: 4b:a7:c9:fa:bc:74:48:ef:fd:96:8c:d5:27:36:34: 88:a8:b2:fe:23:1c:c2:d0:30:a4:b9:48:67:05:d9: cc:02:bf:49:4e:ca:f4:95:d8:3f:18:79:1f:d8:06: bc:00:ba:97:12:12:16:72:3b:54:6e:38:d0:28:dc: 1a:e1:8f:10:c6:05:16:be:94:c3:e0:f1:e6:b1:ac: 02:91:ce:ad:be:64:da:c3:24:5d:86:be:0d:98:df: 09:b3:e3:af:7c:b7:d1:64:12:f8:ab:12:c7:a5:52: 7a:58:9f:ed:c9:91:e5:55:07:81:35:8c:a2:54:c1: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:EB:6E:08:2F:53:AB:CD:A0:27:2A:EE:92:B4:9E:1F:DA:C9:22 X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:15:8f:d0:64:2d:35:29:8a:e9:c6:ae:22:f5:66:7e:57:89: bf:3f:10:fe:7b:28:5f:a5:e7:5c:c3:b7:0f:0e:01:62:28:c0: d0:6c:93:9f:b5:8c:2e:fe:f3:fc:08:3a:9e:0e:e6:16:0c:b7: c2:2e:67:cc:a2:c4:d7:b9:26:d0:f4:52:e8:6a:cc:7a:60:6c: 71:6d:5d:e5:bf:4b:a9:f8:de:85:81:0e:d3:ad:68:92:40:28: 37:b0:6e:ec:41:b0:ce:3f:4b:f2:d6:9c:51:34:6a:2f:21:1f: ab:00:f4:2e:9e:cb:4e:0d:24:79:1b:ab:f0:36:6a:b6:3b:76: 82:b3:d6:9a:53:74:a6:b8:4c:ef:2f:73:8f:b1:ac:0c:1f:91: 32:0a:56:39:b3:ab:91:88:25:0d:e0:4b:da:24:66:47:e7:24: 3c:9f:e8:af:b0:1d:86:86:71:59:19:ba:6e:a7:94:6e:99:f3: 6e:44:13:df:24:b3:04:a6:e6:47:43:76:b0:06:5e:76:a5:e3: 34:98:f0:86:2b:70:f1:57:63:e9:14:f9:a4:fc:88:28:cd:cd: 15:26:a2:bd:18:d2:38:68:0f:79:0f:0d:08:ca:87:b6:9b:58: a7:d7:80:7b:d9:c8:6e:ad:91:ae:11:29:1a:59:83:60:3b:df: a4:c4:9a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUY1A8FAC6/bW2wsc3v7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjUxMjA1MjEwMTA3WhcNMjUxMjA2MjEwMTA3WjAzMTEwLwYDVQQD Eyg3YTc1ZWI2ZTA4MmY1M2FiY2RhMDI3MmFlZTkyYjQ5ZTFmZGFjOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLVoP6fYQN7DQbkCfFcWh6r5vPAG WfhiqeZnBoWsaUbMjOM1uY3Nljvvw9+JKJ9wDAIZ6MLz6moJWI6sIVEtRS31Pvo+ RANyjepJ7TdGMpW5w1GqUIQlNNpQpBsxoJ6kIc5RQsGvD3kylcrU15Vvcx3qt59J vCrPX2BABNPOQFSGM8zJzZVLp8n6vHRI7/2WjNUnNjSIqLL+IxzC0DCkuUhnBdnM Ar9JTsr0ldg/GHkf2Aa8ALqXEhIWcjtUbjjQKNwa4Y8QxgUWvpTD4PHmsawCkc6t vmTawyRdhr4NmN8Js+OvfLfRZBL4qxLHpVJ6WJ/tyZHlVQeBNYyiVMEhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp1624IL1OrzaAnKu6StJ4f2skiMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxWP0GQt NSmK6cauIvVmfleJvz8Q/nsoX6XnXMO3Dw4BYijA0GyTn7WMLv7z/Ag6ng7mFgy3 wi5nzKLE17km0PRS6GrMemBscW1d5b9LqfjehYEO061okkAoN7Bu7EGwzj9L8tac UTRqLyEfqwD0Lp7LTg0keRur8DZqtjt2grPWmlN0prhM7y9zj7GsDB+RMgpWObOr kYglDeBL2iRmR+ckPJ/or7AdhoZxWRm6bqeUbpnzbkQT3ySzBKbmR0N2sAZedqXj NJjwhitw8Vdj6RT5pPyIKM3NFSaivRjSOGgPeQ8NCMqHtptYp9eAe9nIbq2RrhEp GlmDYDvfpMSa3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:25 2025 by rpki-client