This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft File: 7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json) Hash identifier: 1Qkoa6q1h6KOVwMXJPusDpTb/Xi+fBDDm88iOjzXBzA= Subject key identifier: C9:AC:EF:C5:7C:D2:77:22:09:CE:0B:EC:ED:91:E2:5B:5B:1C:52:3B Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Certificate serial: 019AF35246A77139C891744179CD90CA9B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 11:00:46 +0000 Manifest this update: Sat 06 Dec 2025 11:00:46 +0000 Manifest next update: Sun 07 Dec 2025 11:00:46 +0000 Files and hashes: 1: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: CnEjIarumgsEoFWmeRiM4NOUlPSPwEopTX09fQz6Zng=) 2: RH-c_C366T2N_z1aBpgE1Ll4n5E.roa (hash: hwd4T2rxr91cL7njvOW+DLOJ5xoMkW8XsS2mxk5ZIks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:46:a7:71:39:c8:91:74:41:79:cd:90:ca:9b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Validity Not Before: Dec 6 11:00:46 2025 GMT Not After : Dec 7 11:00:46 2025 GMT Subject: CN=c9acefc57cd2772209ce0beced91e25b5b1c523b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:b1:7a:9c:b4:5d:0c:90:e5:0a:c8:93:de: 5b:00:f5:87:eb:b8:3f:5c:5f:2a:65:5c:2c:df:f0: 41:6c:be:b3:86:ba:75:df:f3:a9:9d:d1:88:fb:72: c5:b8:06:c5:3b:04:05:db:17:b9:cd:b5:8e:af:c6: 2f:df:f1:8f:97:05:46:7b:40:8b:89:7c:2f:6e:b7: fe:5d:8c:74:6c:35:fa:e1:ef:94:c7:f2:94:ca:7b: 18:5a:74:5a:dc:2c:fb:f1:a9:91:59:2d:83:fc:e1: 97:d1:99:15:4f:1c:e7:4e:32:c0:52:5d:1c:51:ff: f5:6f:9d:af:b1:4e:7f:f9:7d:51:73:7c:02:fb:40: 71:8c:73:d0:3b:45:8a:c7:85:7b:85:8b:36:0c:fd: e1:52:40:64:77:d4:d8:8d:14:60:6f:fa:28:77:c5: 0d:59:60:de:70:4e:df:ab:39:91:01:5e:ba:ca:4b: 81:0d:d8:78:d5:aa:5e:54:3b:db:07:97:a7:52:e0: 73:88:fa:62:87:bf:b3:9d:28:79:61:60:33:4b:11: 7d:b1:16:2d:99:2b:29:dd:74:09:fd:ec:aa:71:2c: 24:ec:86:b9:a9:d4:f5:e8:43:5c:f5:d3:9d:0a:12: 9c:a1:30:7d:30:8d:99:2f:0e:36:65:40:46:d1:23: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AC:EF:C5:7C:D2:77:22:09:CE:0B:EC:ED:91:E2:5B:5B:1C:52:3B X509v3 Authority Key Identifier: keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d8:d7:e1:a4:4c:b0:00:0a:79:a0:3b:3c:1c:97:4b:6f:17: 9c:18:7f:3b:8f:86:bf:77:04:5d:f0:48:f6:e1:67:73:19:4b: 65:eb:55:69:66:9a:f2:42:dd:b5:d2:0e:27:ab:f4:51:2b:40: 9f:f9:f9:b3:69:7e:cc:46:24:eb:a4:83:7d:8c:b2:7d:e8:87: 49:06:f4:e9:85:0d:1b:b6:68:6e:3d:2e:1a:da:03:f1:ba:31: 95:1a:4a:e0:c1:8d:19:ce:29:25:b0:8e:fb:10:db:3a:bc:c2: 00:22:cf:ad:7c:ac:8b:97:9f:3b:1b:9a:18:7a:4c:1e:4c:5c: dc:ac:ae:3b:1a:f6:c9:ed:cf:61:9b:d3:97:55:80:53:82:35: f9:ad:8e:56:22:b6:e6:38:86:c0:55:b1:95:72:22:82:83:f0: 44:88:28:01:fc:09:6b:13:ef:39:47:51:62:8a:3d:f5:83:32: cb:ac:0d:6e:fc:42:9e:97:1a:60:9d:78:84:21:0d:c8:5e:3e: 25:82:2a:4d:01:4b:92:da:de:0a:74:38:d9:f9:2a:61:4e:e1: 7f:4a:1b:49:4c:56:83:a2:c2:a9:06:69:c8:ca:6e:a5:52:14: b2:61:d6:04:78:b4:96:a4:38:c4:23:78:3c:e2:0a:34:0f:f5: 67:4b:52:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkancTnIkXRBec2QypteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNWFkYTBkYzkwMGExM2M4M2I3MGFjM2Y1ODdmYjhjMmUx ZGYwMzAwHhcNMjUxMjA2MTEwMDQ2WhcNMjUxMjA3MTEwMDQ2WjAzMTEwLwYDVQQD EyhjOWFjZWZjNTdjZDI3NzIyMDljZTBiZWNlZDkxZTI1YjViMWM1MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLSxepy0XQyQ5QrIk95bAPWH67g/ XF8qZVws3/BBbL6zhrp13/OpndGI+3LFuAbFOwQF2xe5zbWOr8Yv3/GPlwVGe0CL iXwvbrf+XYx0bDX64e+Ux/KUynsYWnRa3Cz78amRWS2D/OGX0ZkVTxznTjLAUl0c Uf/1b52vsU5/+X1Rc3wC+0BxjHPQO0WKx4V7hYs2DP3hUkBkd9TYjRRgb/ood8UN WWDecE7fqzmRAV66ykuBDdh41apeVDvbB5enUuBziPpih7+znSh5YWAzSxF9sRYt mSsp3XQJ/eyqcSwk7Ia5qdT16ENc9dOdChKcoTB9MI2ZLw42ZUBG0SMsmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMms78V80nciCc4L7O2R4ltbHFI7MB8GA1UdIwQY MBaAFOxa2g3JAKE8g7cKw/WH+4wuHfAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEt Y2ZlZmVhZWU4NjVlLzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEtY2ZlZmVhZWU4NjVl LzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdjX4aRM sAAKeaA7PByXS28XnBh/O4+Gv3cEXfBI9uFncxlLZetVaWaa8kLdtdIOJ6v0UStA n/n5s2l+zEYk66SDfYyyfeiHSQb06YUNG7Zobj0uGtoD8boxlRpK4MGNGc4pJbCO +xDbOrzCACLPrXysi5efOxuaGHpMHkxc3KyuOxr2ye3PYZvTl1WAU4I1+a2OViK2 5jiGwFWxlXIigoPwRIgoAfwJaxPvOUdRYoo99YMyy6wNbvxCnpcaYJ14hCENyF4+ JYIqTQFLktreCnQ42fkqYU7hf0obSUxWg6LCqQZpyMpupVIUsmHWBHi0lqQ4xCN4 POIKNA/1Z0tS7g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:23 2025 by rpki-client