This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json) Hash identifier: EbpZov3otDNNCCkn3UuuS0gLGyPaEcPp9GEoX2/Zrys= Subject key identifier: 42:70:68:AE:A0:9B:BA:17:E9:2F:A5:4A:5E:A4:7A:86:AE:02:10:BE Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Certificate serial: 019AF50B086A33C2F5B6FE433EBDD8862353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:02:12 +0000 Manifest this update: Sat 06 Dec 2025 19:02:12 +0000 Manifest next update: Sun 07 Dec 2025 19:02:12 +0000 Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: 5tOBQbq96qXLdmfoGUBpIObZITYAX1dibIwEcLuRTtw=) 2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:08:6a:33:c2:f5:b6:fe:43:3e:bd:d8:86:23:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Validity Not Before: Dec 6 19:02:12 2025 GMT Not After : Dec 7 19:02:12 2025 GMT Subject: CN=427068aea09bba17e92fa54a5ea47a86ae0210be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:23:83:a4:79:61:61:d1:42:5b:a7:bd:e4: 17:c1:7b:41:99:5e:4e:57:21:94:b5:97:70:f2:a9: 33:50:59:50:6f:65:4b:d0:de:2d:b3:13:09:b5:78: ca:b5:9b:5a:ca:8d:a8:55:ba:b7:2e:c3:b8:07:77: 39:29:6a:57:93:c0:1e:b0:85:fa:8f:87:60:86:d0: c1:b7:7a:e8:15:59:09:33:17:26:2d:6b:88:97:51: de:b9:a5:b6:b7:e4:7f:8e:c7:67:de:d5:29:7d:c4: 72:85:74:a0:6c:64:a7:4c:1e:b2:87:46:04:7c:0b: a2:5e:74:40:cb:6e:f1:e1:fe:0f:37:b5:ad:fb:d9: a5:cb:10:c1:15:68:05:9a:9e:0b:b7:15:83:30:24: 62:c7:ad:39:b4:9c:ef:45:57:ea:6f:6f:37:81:2c: 31:e4:69:e4:40:44:bc:ce:23:fb:2f:ae:2d:9b:89: b4:51:73:c6:4c:89:70:04:02:24:62:e7:eb:20:4a: ca:42:39:14:90:8b:fa:12:2e:20:83:12:d2:bb:cd: bb:d2:5d:42:37:45:e4:5a:39:9d:94:f3:ac:28:1b: 8d:bb:1e:f7:92:fd:37:7a:57:60:47:13:a9:ce:7f: 88:4a:69:f9:74:8a:24:af:46:8d:e8:76:60:d0:80: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:68:AE:A0:9B:BA:17:E9:2F:A5:4A:5E:A4:7A:86:AE:02:10:BE X509v3 Authority Key Identifier: keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:18:6a:99:d0:25:eb:6c:80:e2:5e:23:60:c8:69:c8:bc:f2: 57:eb:0a:79:3d:c4:31:bf:ae:d0:ae:c6:8e:1f:57:b2:71:71: a0:d5:99:15:09:d3:ee:0b:78:f3:de:65:3b:26:48:34:5b:cd: f5:db:db:73:a4:34:5b:70:6c:c6:a9:a9:5b:79:2f:25:20:7c: 88:f9:6d:3d:b0:9c:ab:48:c3:51:45:36:a6:63:bd:a3:c6:f6: 13:3b:b3:8d:c4:99:89:9c:78:89:1e:43:8b:ea:0c:2c:1c:7f: 94:66:54:2b:9f:74:dc:1b:63:2c:7f:c7:2f:e3:1c:ad:1b:7a: 1a:2d:07:db:52:86:b4:34:d0:4c:9e:98:75:aa:ff:f3:ca:1e: 54:4d:eb:1c:76:8a:58:05:46:46:81:3c:c3:97:72:71:a4:17: 6f:25:01:3e:00:75:4f:20:70:50:d0:67:b5:28:1b:59:0d:87: 3e:13:19:4c:5d:a6:e0:92:f1:73:8e:fb:3d:f9:1e:19:60:ec: 6f:23:25:3d:cb:0f:34:64:13:2c:bb:bb:17:9c:ba:20:67:d3: 26:b6:d6:4f:1b:6d:4f:5e:83:c9:76:50:6e:e5:84:54:b3:53: 59:71:eb:63:60:6e:f9:ea:76:65:b8:1f:6d:ef:f2:76:01:c6: 0b:9d:53:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwhqM8L1tv5DPr3YhiNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTEzMTRlMDRlYzk2NzZmMmI2MDI0OGUxYjliZDAyZWYw MGUxNjgwHhcNMjUxMjA2MTkwMjEyWhcNMjUxMjA3MTkwMjEyWjAzMTEwLwYDVQQD Eyg0MjcwNjhhZWEwOWJiYTE3ZTkyZmE1NGE1ZWE0N2E4NmFlMDIxMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0jg6R5YWHRQlunveQXwXtBmV5O VyGUtZdw8qkzUFlQb2VL0N4tsxMJtXjKtZtayo2oVbq3LsO4B3c5KWpXk8AesIX6 j4dghtDBt3roFVkJMxcmLWuIl1HeuaW2t+R/jsdn3tUpfcRyhXSgbGSnTB6yh0YE fAuiXnRAy27x4f4PN7Wt+9mlyxDBFWgFmp4LtxWDMCRix605tJzvRVfqb283gSwx 5GnkQES8ziP7L64tm4m0UXPGTIlwBAIkYufrIErKQjkUkIv6Ei4ggxLSu8270l1C N0XkWjmdlPOsKBuNux73kv03eldgRxOpzn+ISmn5dIokr0aN6HZg0ID2DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJwaK6gm7oX6S+lSl6keoauAhC+MB8GA1UdIwQY MBaAFOxRMU4E7JZ28rYCSOG5vQLvAOFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2It M2JiYmNhMzEwZDcxLzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2ItM2JiYmNhMzEwZDcx LzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhhqmdAl 62yA4l4jYMhpyLzyV+sKeT3EMb+u0K7Gjh9XsnFxoNWZFQnT7gt4895lOyZINFvN 9dvbc6Q0W3BsxqmpW3kvJSB8iPltPbCcq0jDUUU2pmO9o8b2EzuzjcSZiZx4iR5D i+oMLBx/lGZUK5903BtjLH/HL+McrRt6Gi0H21KGtDTQTJ6Ydar/88oeVE3rHHaK WAVGRoE8w5dycaQXbyUBPgB1TyBwUNBntSgbWQ2HPhMZTF2m4JLxc477PfkeGWDs byMlPcsPNGQTLLu7F5y6IGfTJrbWTxttT16DyXZQbuWEVLNTWXHrY2Bu+ep2Zbgf be/ydgHGC51T3g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:56 2025 by rpki-client