This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json) Hash identifier: Oqu435DuATEAB2dAcOCxhBstv1rkpBQ0HZRhNd9XeHU= Subject key identifier: 29:1F:3B:3D:62:16:C0:18:E4:D9:05:35:44:89:A6:D6:80:95:C5:5E Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13 Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213 Certificate serial: 019AF0BF4840E7525EE1997EF11829CFABAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft Manifest number: 0E2D Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=) 2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: q8V2AYmDzMydAkEvjGeMjXDDXZI4xW7C/dx29E3YsLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:48:40:e7:52:5e:e1:99:7e:f1:18:29:cf:ab:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213 Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=291f3b3d6216c018e4d905354489a6d68095c55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:bd:00:cf:c3:3b:ab:44:fa:2d:5f:59:6f: 0b:9d:a5:9f:8f:b8:9e:21:8f:10:0c:eb:03:54:45: e8:63:b4:8d:c5:87:d8:b3:e5:7f:40:4f:0e:f2:30: bb:2c:bc:cf:67:80:96:d1:25:1b:c9:39:46:38:a5: 5f:3f:05:30:12:ca:69:11:e9:15:7c:d3:46:e3:f1: 41:f1:bc:1f:8b:fd:98:56:1b:8e:13:d6:3f:ea:2d: 8b:00:79:1b:30:39:ce:de:d9:8a:82:e3:b5:15:36: 02:74:4c:7b:06:68:32:3e:ca:a5:21:55:58:b5:aa: 9e:db:ae:54:8d:2e:ed:3a:b1:14:09:d2:00:bd:0c: c6:37:83:db:db:19:02:ca:43:ab:54:45:32:e1:ce: af:e7:60:ed:3e:15:76:f8:ea:86:ec:28:dd:b5:35: b4:fe:33:6f:a9:ae:17:1a:d9:d2:46:3b:6c:17:41: 44:5f:27:91:b8:9c:21:aa:53:9f:9a:02:02:10:c3: ea:e1:b5:75:50:f2:0f:15:c4:9e:99:17:4f:b4:8e: 09:80:b2:ab:6b:7a:7b:26:45:82:ae:73:a9:d0:8d: 9c:a4:a6:bd:26:4f:80:1e:b8:bf:f6:9c:40:34:7d: 27:e6:57:0d:72:92:8f:0a:3d:8b:72:96:3c:85:f5: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1F:3B:3D:62:16:C0:18:E4:D9:05:35:44:89:A6:D6:80:95:C5:5E X509v3 Authority Key Identifier: keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:c9:75:1d:9e:5a:4b:ab:26:a1:3e:8f:21:b7:77:ae:70:56: 5d:4e:9b:75:24:6a:e0:21:a0:6e:fb:d0:2d:69:dd:8d:09:0f: f5:77:b8:49:c6:19:ca:54:e1:77:e4:db:06:ef:18:3d:60:7e: 27:6a:c3:bb:92:3a:aa:ca:d8:c3:9f:5d:78:2d:22:d3:3f:e5: c6:0b:37:bd:c0:e3:5a:e8:b9:2c:9d:68:c5:cc:af:7d:b8:8e: 93:67:06:dc:2e:fb:f2:a3:05:89:6a:0b:75:09:1b:54:85:3d: 21:98:cd:a0:9b:15:d4:ae:d1:08:e1:0a:77:6a:8c:63:77:60: aa:50:bb:0c:0e:e8:b1:4b:cd:7f:63:76:d5:54:dc:82:8a:b9: 50:58:30:3f:19:f9:09:fc:38:f9:a8:93:14:1f:85:61:a4:65: b4:eb:fd:c1:a5:56:15:6d:28:47:73:8c:63:ca:25:49:5b:b6: c6:44:fb:ec:23:8c:a9:74:e8:7d:c2:41:22:21:fe:d4:9f:77: db:e2:c8:21:ba:e2:2d:4c:4c:c1:49:16:e1:7e:db:e6:6a:44: 30:4d:bc:44:65:c8:c1:ae:03:af:21:79:55:83:9b:3d:2f:38: 80:9a:d9:54:08:46:59:67:29:2e:39:48:fe:26:f3:66:52:59: fc:52:c6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0hA51Je4Zl+8Rgpz6uuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz OTcyMTMwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD EygyOTFmM2IzZDYyMTZjMDE4ZTRkOTA1MzU0NDg5YTZkNjgwOTVjNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG+9AM/DO6tE+i1fWW8LnaWfj7ie IY8QDOsDVEXoY7SNxYfYs+V/QE8O8jC7LLzPZ4CW0SUbyTlGOKVfPwUwEsppEekV fNNG4/FB8bwfi/2YVhuOE9Y/6i2LAHkbMDnO3tmKguO1FTYCdEx7BmgyPsqlIVVY taqe265UjS7tOrEUCdIAvQzGN4Pb2xkCykOrVEUy4c6v52DtPhV2+OqG7CjdtTW0 /jNvqa4XGtnSRjtsF0FEXyeRuJwhqlOfmgICEMPq4bV1UPIPFcSemRdPtI4JgLKr a3p7JkWCrnOp0I2cpKa9Jk+AHri/9pxANH0n5lcNcpKPCj2LcpY8hfVrCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkfOz1iFsAY5NkFNUSJptaAlcVeMB8GA1UdIwQY MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt NGYzYzMzYzA4ODg0LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0 LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcl1HZ5a S6smoT6PIbd3rnBWXU6bdSRq4CGgbvvQLWndjQkP9Xe4ScYZylThd+TbBu8YPWB+ J2rDu5I6qsrYw59deC0i0z/lxgs3vcDjWui5LJ1oxcyvfbiOk2cG3C778qMFiWoL dQkbVIU9IZjNoJsV1K7RCOEKd2qMY3dgqlC7DA7osUvNf2N21VTcgoq5UFgwPxn5 Cfw4+aiTFB+FYaRltOv9waVWFW0oR3OMY8olSVu2xkT77COMqXTofcJBIiH+1J93 2+LIIbriLUxMwUkW4X7b5mpEME28RGXIwa4DryF5VYObPS84gJrZVAhGWWcpLjlI /ibzZlJZ/FLGvg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:30 2025 by rpki-client