This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft File: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json) Hash identifier: oFM2iRnknAf+JLN+v7urKhwJIMrJwyzJ8UcnbfoTzpw= Subject key identifier: 02:BA:F3:91:B4:B2:62:0E:E7:17:7B:2F:F2:2B:C0:CF:3F:7A:65:45 Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Certificate serial: 019AF5AEA6E06C8B5A5C3BB1C7A409D0429E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft Manifest number: 0661 Signing time: Sat 06 Dec 2025 22:00:55 +0000 Manifest this update: Sat 06 Dec 2025 22:00:55 +0000 Manifest next update: Sun 07 Dec 2025 22:00:55 +0000 Files and hashes: 1: 00tdIzHocd6TrMlmwl0fE9GtEYA.roa (hash: oq1BzbGnWJoT/ZcE/ggd3PS4E29zXCy8zLCqvn+wWU8=) 2: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: 9HdEXfx6d2drbYoufNVvMNDFVXhtEXsv+5DwlUCxGTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:a6:e0:6c:8b:5a:5c:3b:b1:c7:a4:09:d0:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Validity Not Before: Dec 6 22:00:55 2025 GMT Not After : Dec 7 22:00:55 2025 GMT Subject: CN=02baf391b4b2620ee7177b2ff22bc0cf3f7a6545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:1b:b2:05:b5:a8:44:42:5f:06:00:4c:13: 59:4d:9a:1b:f6:01:f0:27:7b:9b:d2:76:65:c0:44: 9b:05:ff:48:63:e1:8e:49:e7:12:24:e7:3c:03:58: ed:50:bc:17:f0:14:64:ac:70:66:4a:16:e4:0c:e8: 4e:4c:93:5a:d7:17:03:bd:35:ca:a4:dc:0d:7f:cd: 57:da:f2:e5:f6:01:a0:cb:60:15:fd:60:d5:f9:61: 12:6c:88:1e:0e:28:69:d7:65:10:14:99:1f:94:fb: d1:ad:ac:da:42:2c:e0:43:1d:f3:7e:af:36:99:c3: 91:cc:ca:3d:9b:f2:a7:e2:44:4f:d9:07:6f:7a:7d: a0:bb:9e:d6:8c:26:b1:48:ad:f9:70:14:01:53:64: f8:48:29:dc:9f:77:90:21:3e:fb:19:13:ca:68:97: 26:8b:92:bf:91:ca:98:38:cf:b7:e1:e0:85:32:6b: d5:e8:e0:22:6e:70:45:4c:11:bf:1b:2d:e0:18:e5: 7f:46:94:01:33:6b:84:dd:1c:f0:e8:3b:a4:63:f0: 61:d8:2f:fa:e5:a4:26:d4:bf:21:ca:03:b9:2d:f1: ad:13:b8:d1:ab:01:85:44:c0:9e:25:0f:0c:bb:cd: 9c:f2:ab:32:46:21:d7:ba:1d:f7:5c:e2:fc:51:33: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:F3:91:B4:B2:62:0E:E7:17:7B:2F:F2:2B:C0:CF:3F:7A:65:45 X509v3 Authority Key Identifier: keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:76:d2:d5:a3:4f:96:52:ee:40:c5:a1:3d:7e:f6:9c:41:0d: fc:f1:ad:7d:c1:2c:5c:15:6e:78:b3:12:ad:c0:65:2e:4f:a0: 27:c5:dc:f8:5a:24:c6:70:a4:c3:ed:8e:26:f7:c0:a0:55:fd: 50:02:ee:c6:cc:7a:e4:69:f9:1d:29:85:ec:db:9f:2e:a3:5b: 49:30:50:1a:67:a6:87:13:2a:95:30:23:d3:ff:6d:79:b1:ec: fc:86:e9:f0:60:c1:f0:44:44:c2:ea:fb:2b:4c:c6:05:c5:10: 6d:28:11:2f:13:62:df:ad:3c:24:bd:b0:e7:be:e0:50:d4:dc: 03:47:c0:79:15:1f:b5:e3:08:b0:49:b8:78:d6:54:29:80:46: 83:90:36:72:09:7d:33:2c:1e:fe:82:0e:54:cf:4b:3b:46:8d: e0:63:97:41:fd:f1:a2:d2:78:8b:22:82:ff:02:57:27:9d:0e: 4d:1a:40:08:18:26:40:1a:b2:67:e9:32:4c:67:45:a3:15:9a: 95:95:be:89:7b:e6:d8:69:69:d7:5e:5c:7c:62:b3:84:db:24: 6f:d5:00:1a:8a:02:f9:4f:76:52:54:b2:c4:eb:b0:fe:c1:e3: be:9a:f8:83:f8:d6:83:27:a9:41:bb:38:b6:5b:13:d9:08:0a: 01:f8:89:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqbgbItaXDuxx6QJ0EKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVmMjQ2YmZjMWVhOGZjMzg2Yzg2ZGQ0OWZiYWE4ZDg4 YzQ4ODEwHhcNMjUxMjA2MjIwMDU1WhcNMjUxMjA3MjIwMDU1WjAzMTEwLwYDVQQD EygwMmJhZjM5MWI0YjI2MjBlZTcxNzdiMmZmMjJiYzBjZjNmN2E2NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iYbsgW1qERCXwYATBNZTZob9gHw J3ub0nZlwESbBf9IY+GOSecSJOc8A1jtULwX8BRkrHBmShbkDOhOTJNa1xcDvTXK pNwNf81X2vLl9gGgy2AV/WDV+WESbIgeDihp12UQFJkflPvRrazaQizgQx3zfq82 mcORzMo9m/Kn4kRP2Qdven2gu57WjCaxSK35cBQBU2T4SCncn3eQIT77GRPKaJcm i5K/kcqYOM+34eCFMmvV6OAibnBFTBG/Gy3gGOV/RpQBM2uE3Rzw6DukY/Bh2C/6 5aQm1L8hygO5LfGtE7jRqwGFRMCeJQ8Mu82c8qsyRiHXuh33XOL8UTPVaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK685G0smIO5xd7L/IrwM8/emVFMB8GA1UdIwQY MBaAFOxl8ka/weqPw4bIbdSfuqjYjEiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt NzgxMjgwZmQyNDEyLzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy LzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanbS1aNP llLuQMWhPX72nEEN/PGtfcEsXBVueLMSrcBlLk+gJ8Xc+FokxnCkw+2OJvfAoFX9 UALuxsx65Gn5HSmF7NufLqNbSTBQGmemhxMqlTAj0/9tebHs/Ibp8GDB8EREwur7 K0zGBcUQbSgRLxNi3608JL2w577gUNTcA0fAeRUfteMIsEm4eNZUKYBGg5A2cgl9 Mywe/oIOVM9LO0aN4GOXQf3xotJ4iyKC/wJXJ50OTRpACBgmQBqyZ+kyTGdFoxWa lZW+iXvm2Glp115cfGKzhNskb9UAGooC+U92UlSyxOuw/sHjvpr4g/jWgyepQbs4 tlsT2QgKAfiJJw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:56 2025 by rpki-client