This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json) Hash identifier: 5ewWeDvWyIYFN8wIJaNF0knGEtInXmHOElSh2lPG2M0= Subject key identifier: 64:C8:00:21:9C:C6:51:D4:0C:62:9B:F4:08:B1:CE:7A:65:B9:43:5B Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9 Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9 Certificate serial: 019AF50BA4ADF0F255371359146C5E9FEA22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft Manifest number: 14AD Signing time: Sat 06 Dec 2025 19:02:52 +0000 Manifest this update: Sat 06 Dec 2025 19:02:52 +0000 Manifest next update: Sun 07 Dec 2025 19:02:52 +0000 Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: gKSkKnK5/6d+aiDbp9OcYO0rhTu678CHD9gjmrPb8EA=) 2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=) 3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a4:ad:f0:f2:55:37:13:59:14:6c:5e:9f:ea:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9 Validity Not Before: Dec 6 19:02:52 2025 GMT Not After : Dec 7 19:02:52 2025 GMT Subject: CN=64c800219cc651d40c629bf408b1ce7a65b9435b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:42:e7:cf:bf:a8:3f:74:5a:3f:5f:2f:a9: b1:e9:85:a1:a9:90:89:1d:32:18:74:1a:c0:62:17: e4:bb:fd:57:47:f9:61:19:74:08:9c:0b:4a:9b:36: 4d:3f:ad:e1:2e:f4:7f:c2:e7:08:6d:7e:28:0a:92: 20:3c:93:8c:45:d1:b1:15:c5:06:9d:3f:86:b1:c8: a5:c9:e5:a6:84:d3:df:45:98:55:9e:0e:03:db:bf: 9d:a9:f3:da:0d:18:9d:fe:89:69:d0:f2:99:b3:40: a1:0e:b6:b5:3e:04:44:64:99:20:a5:4f:b2:35:62: dc:94:49:64:6a:08:7b:2a:44:4a:82:f5:3f:9e:b7: c7:94:65:6b:c6:a7:1c:4d:42:21:fa:0c:2d:d6:96: a3:20:0d:c1:9f:b0:8b:1f:de:31:97:19:9c:0b:05: 35:ca:25:62:11:96:7a:f7:d7:10:21:bd:af:f7:82: 57:30:fb:56:6a:71:fa:99:4c:95:90:9a:27:f5:fc: af:a3:ee:c7:80:23:46:65:f1:f6:0a:84:b9:c0:73: e4:db:1f:03:9a:78:c8:ae:f5:ca:23:eb:52:7f:46: c1:21:47:bb:03:df:8d:b4:9a:42:6b:1e:9f:b4:0c: e8:5b:02:46:8a:ec:37:ae:38:66:8b:ac:a9:19:a3: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C8:00:21:9C:C6:51:D4:0C:62:9B:F4:08:B1:CE:7A:65:B9:43:5B X509v3 Authority Key Identifier: keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b1:ca:4e:42:7c:f8:e5:a0:80:61:b0:d3:f8:be:a6:44:3f: b3:e2:ff:ab:07:f7:11:14:6f:47:b7:50:7c:bb:6b:47:e5:89: 7f:83:45:b1:d9:d2:e2:42:2d:61:dd:46:17:5f:55:1a:0b:6f: 85:0c:2a:59:c3:69:35:5d:97:c7:88:4e:90:3c:58:15:54:e6: f8:fa:28:38:e7:99:7c:91:a4:21:3c:a6:58:0a:22:7d:6a:bb: bc:ae:49:61:d6:45:1b:58:32:3b:9f:25:54:bf:38:24:41:2b: 95:b4:b3:83:33:37:01:3c:35:06:51:09:54:e8:a4:79:41:63: 1f:fe:09:4f:9c:36:9e:7e:52:e2:c9:e0:60:e2:27:68:97:0e: fa:a4:37:26:2f:5a:83:c5:a4:b1:ed:0e:38:d5:1a:27:ea:c7: 23:b7:4f:d1:60:a4:89:3f:0f:f4:fb:46:21:c1:4b:a4:b0:f2: 3f:6b:ce:18:ff:81:70:b5:2e:06:b5:b9:97:f1:1c:76:16:48: 01:bb:b0:08:e5:ab:9f:9f:68:f5:ea:f9:e8:7c:8d:4e:f4:81: 6f:e3:cc:d7:20:ac:85:96:94:cf:7d:15:fe:e1:6f:83:f0:7c: 8a:05:b2:03:27:36:45:ea:9c:c2:8e:da:00:8e:ee:09:83:96: ef:89:bc:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6St8PJVNxNZFGxen+oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1 ODlkYjkwHhcNMjUxMjA2MTkwMjUyWhcNMjUxMjA3MTkwMjUyWjAzMTEwLwYDVQQD Eyg2NGM4MDAyMTljYzY1MWQ0MGM2MjliZjQwOGIxY2U3YTY1Yjk0MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdC58+/qD90Wj9fL6mx6YWhqZCJ HTIYdBrAYhfku/1XR/lhGXQInAtKmzZNP63hLvR/wucIbX4oCpIgPJOMRdGxFcUG nT+GscilyeWmhNPfRZhVng4D27+dqfPaDRid/olp0PKZs0ChDra1PgREZJkgpU+y NWLclElkagh7KkRKgvU/nrfHlGVrxqccTUIh+gwt1pajIA3Bn7CLH94xlxmcCwU1 yiViEZZ699cQIb2v94JXMPtWanH6mUyVkJon9fyvo+7HgCNGZfH2CoS5wHPk2x8D mnjIrvXKI+tSf0bBIUe7A9+NtJpCax6ftAzoWwJGiuw3rjhmi6ypGaPu4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTIACGcxlHUDGKb9AixznpluUNbMB8GA1UdIwQY MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3 LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7HKTkJ8 +OWggGGw0/i+pkQ/s+L/qwf3ERRvR7dQfLtrR+WJf4NFsdnS4kItYd1GF19VGgtv hQwqWcNpNV2Xx4hOkDxYFVTm+PooOOeZfJGkITymWAoifWq7vK5JYdZFG1gyO58l VL84JEErlbSzgzM3ATw1BlEJVOikeUFjH/4JT5w2nn5S4sngYOInaJcO+qQ3Ji9a g8Wkse0OONUaJ+rHI7dP0WCkiT8P9PtGIcFLpLDyP2vOGP+BcLUuBrW5l/EcdhZI AbuwCOWrn59o9er56HyNTvSBb+PM1yCshZaUz30V/uFvg/B8igWyAyc2Reqcwo7a AI7uCYOW74m8Kw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:08 2025 by rpki-client