This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft File: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json) Hash identifier: K3NeJwacQYCa3ICeN06viHHG2LbF1Yt6lAF5JaqXL0I= Subject key identifier: 86:5D:DB:ED:43:F7:6E:A3:C8:95:EC:F5:44:D0:19:CA:5C:3D:F6:CF Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97 Certificate issuer: /CN=edd482c2bee8460048d82902cec9867205222997 Certificate serial: 019AF31B6AEBE5C54948001F2896613474F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: OTNpfi06Pyp9tn7qgDOnC0qALHr4IwDU7Ge4pLuB2l4=) 2: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (hash: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6a:eb:e5:c5:49:48:00:1f:28:96:61:34:74:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd482c2bee8460048d82902cec9867205222997 Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=865ddbed43f76ea3c895ecf544d019ca5c3df6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:d7:4d:b0:49:af:8d:98:aa:67:60:c5:97: 78:97:08:88:0e:fb:3e:7b:d7:ab:2e:ea:69:47:c7: e1:69:59:23:e7:19:93:2a:6a:4d:88:48:93:b6:64: 25:ce:1c:53:12:11:51:55:d1:d5:16:45:4d:ee:30: cf:12:dd:1a:77:ae:92:d1:0f:4e:2b:50:e0:c0:18: 84:6c:20:51:56:cc:a4:3a:02:fb:a0:fa:d0:93:5e: 19:5f:20:3c:a4:5c:d1:c2:48:dc:10:96:3a:3e:ad: 4b:91:1f:14:2c:7f:89:2f:d7:16:c7:47:8f:52:5b: e8:13:a5:d2:42:c9:d3:fb:49:8c:80:fb:13:6d:c5: c6:0a:57:59:e1:3e:ee:d5:f1:5e:87:86:b1:f2:ab: f3:61:12:93:ee:a1:4a:99:a2:0c:57:26:76:cb:6d: 33:5e:6f:ad:3a:34:88:13:89:a7:4b:04:03:e9:a0: 09:38:6e:74:ce:90:4f:aa:ae:93:83:f3:2f:e1:d4: 2d:c7:ad:9c:4d:4b:71:14:b3:e1:b2:d7:60:ff:ff: 8e:93:b7:06:0d:82:fe:cc:48:3e:9d:15:a5:a4:e3: dc:e7:5b:0c:22:74:58:ea:f8:16:85:ed:ab:dd:03: fe:88:ad:bd:19:4b:d4:42:17:16:b2:21:a6:d0:0c: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:DB:ED:43:F7:6E:A3:C8:95:EC:F5:44:D0:19:CA:5C:3D:F6:CF X509v3 Authority Key Identifier: keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:36:2d:d1:5c:db:42:54:51:5c:8b:ac:b0:dd:7f:78:11:2f: 34:42:23:24:d7:69:41:7f:e6:7c:80:0e:3a:b3:d2:e7:58:a6: 67:c7:ac:56:24:ef:61:85:52:49:f3:fe:cc:16:c7:e4:fc:6f: c0:96:5d:e0:55:2f:17:d9:2a:d5:b1:40:d0:1b:d4:49:21:86: 67:fc:c6:e1:ca:91:6e:02:33:0e:0a:34:0f:d8:c2:f4:28:a3: 5d:3e:1e:98:f6:e1:42:ba:3d:52:e4:59:8d:ea:d8:0d:28:28: ab:04:bd:2a:9c:dc:25:4f:5b:9e:0d:0a:9b:0c:3a:19:3c:02: ed:75:4b:17:16:10:7e:16:e6:a8:76:3e:f2:3c:b8:ad:55:51: 6f:75:3a:d8:55:06:55:4c:ec:21:b5:60:5e:ed:97:9a:11:17: 34:b2:f7:79:4f:18:bf:37:52:8d:a4:23:20:47:c4:94:57:07: c4:3e:b3:10:1a:39:a2:7f:91:42:c6:0e:54:05:59:6c:6d:2b: 6e:bb:90:38:8a:98:61:ba:dd:60:37:6b:e6:39:b1:10:4a:4d: 83:63:d4:4e:32:57:6e:65:92:09:f4:a6:d2:dc:e6:87:63:18: 52:07:c2:4a:35:f6:e0:0e:d5:70:47:2c:ea:b4:04:fd:63:23: fb:ea:42:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2rr5cVJSAAfKJZhNHTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDQ4MmMyYmVlODQ2MDA0OGQ4MjkwMmNlYzk4NjcyMDUy MjI5OTcwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD Eyg4NjVkZGJlZDQzZjc2ZWEzYzg5NWVjZjU0NGQwMTljYTVjM2RmNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFbXTbBJr42YqmdgxZd4lwiIDvs+ e9erLuppR8fhaVkj5xmTKmpNiEiTtmQlzhxTEhFRVdHVFkVN7jDPEt0ad66S0Q9O K1DgwBiEbCBRVsykOgL7oPrQk14ZXyA8pFzRwkjcEJY6Pq1LkR8ULH+JL9cWx0eP UlvoE6XSQsnT+0mMgPsTbcXGCldZ4T7u1fFeh4ax8qvzYRKT7qFKmaIMVyZ2y20z Xm+tOjSIE4mnSwQD6aAJOG50zpBPqq6Tg/Mv4dQtx62cTUtxFLPhstdg//+Ok7cG DYL+zEg+nRWlpOPc51sMInRY6vgWhe2r3QP+iK29GUvUQhcWsiGm0Ay6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZd2+1D926jyJXs9UTQGcpcPfbPMB8GA1UdIwQY MBaAFO3UgsK+6EYASNgpAs7JhnIFIimXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2Ut OWQ5MDkxYmVkOGQ3LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2UtOWQ5MDkxYmVkOGQ3 LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzYt0Vzb QlRRXIussN1/eBEvNEIjJNdpQX/mfIAOOrPS51imZ8esViTvYYVSSfP+zBbH5Pxv wJZd4FUvF9kq1bFA0BvUSSGGZ/zG4cqRbgIzDgo0D9jC9CijXT4emPbhQro9UuRZ jerYDSgoqwS9KpzcJU9bng0Kmww6GTwC7XVLFxYQfhbmqHY+8jy4rVVRb3U62FUG VUzsIbVgXu2XmhEXNLL3eU8YvzdSjaQjIEfElFcHxD6zEBo5on+RQsYOVAVZbG0r bruQOIqYYbrdYDdr5jmxEEpNg2PUTjJXbmWSCfSm0tzmh2MYUgfCSjX24A7VcEcs 6rQE/WMj++pCMg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:11 2025 by rpki-client