This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json) Hash identifier: tq2+R31iCWIOAy56iVPzD+MjjjdPcYOF+4pqrhVOes0= Subject key identifier: 23:A2:25:AE:D9:84:59:E7:B5:35:79:FC:B6:AD:88:29:D7:D2:4C:A8 Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34 Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634 Certificate serial: 019AF19AE7BEE89533E738AC003AD2A88940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: 33G9HabTr7Q/Itc6fHVQWuqDLtMoxPIZ53lcLI7Mx1U=) 2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e7:be:e8:95:33:e7:38:ac:00:3a:d2:a8:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634 Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=23a225aed98459e7b53579fcb6ad8829d7d24ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:8f:03:ea:03:44:22:bd:9c:78:af:33:24: 4d:a0:57:51:bc:53:76:8e:d7:fc:ac:ff:8c:e7:02: d7:0d:5a:a4:49:36:48:20:3a:91:15:e0:56:55:bd: 90:55:d1:40:b3:6d:9e:da:b4:a7:45:c6:76:56:82: a0:cc:09:e8:da:3f:56:ad:25:ba:30:35:0c:1b:38: a1:03:a7:0a:3c:ab:b1:a5:6b:ee:6a:e0:b8:ed:a8: 6a:15:5e:6e:e1:95:4a:b8:6c:f4:ee:0e:e1:33:aa: cc:5c:6c:20:3d:10:c6:8c:63:fb:89:13:5b:e2:2e: 80:fe:00:76:6e:dc:26:b5:0f:b6:f0:cc:11:d7:97: ca:b5:6e:80:2b:c6:b2:41:7c:25:06:31:c5:53:9d: e3:58:83:f7:e5:1e:66:43:05:2e:6c:66:87:99:cc: fa:61:53:2d:47:0a:16:0c:5f:e2:97:32:cd:be:2d: 7e:9a:79:07:0f:db:4f:11:13:b8:a8:e5:4f:00:c2: 6e:65:cb:ef:f4:ea:69:ae:1a:04:ce:76:79:4c:95: 6f:a7:fe:7d:e3:55:0b:ed:24:e1:e4:f9:4d:9f:dc: 3b:69:3b:e0:59:21:86:0d:ed:68:47:fd:df:90:87: 96:80:36:d9:ea:93:58:22:fe:34:e0:6c:b4:10:cf: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A2:25:AE:D9:84:59:E7:B5:35:79:FC:B6:AD:88:29:D7:D2:4C:A8 X509v3 Authority Key Identifier: keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:43:63:be:d0:74:4e:59:a7:bf:63:3a:d5:c4:c7:bf:86:58: 32:d3:1e:8a:08:93:ac:bc:ad:71:00:79:4b:bb:f1:05:29:e4: 47:62:b4:9f:28:3d:2d:38:48:7e:86:78:c8:c5:43:c8:0f:30: d7:04:26:39:ab:46:38:fa:ba:79:58:df:bf:bd:d2:98:4d:b3: 9b:a1:83:2d:b7:6a:00:74:f7:89:f4:05:d7:04:36:98:13:99: b3:29:55:a3:22:17:85:4d:3f:99:10:5e:44:fd:26:9a:11:25: e1:4e:36:54:3b:66:79:7c:d7:33:13:d4:79:d4:fd:7a:df:95: 53:87:8f:e3:29:88:c0:6d:cb:d9:eb:91:71:08:65:f0:fd:f6: 01:53:29:d0:0d:d5:7d:1f:22:08:e1:3f:c0:ac:c7:09:5d:41: 40:dd:a7:2a:77:8a:e1:e8:5a:dc:b7:49:7c:cc:f2:38:46:19: 61:b5:5e:f6:5a:49:41:dd:71:a5:b9:e9:5c:84:c8:89:73:33: 3e:25:72:0a:f9:e4:87:e2:d7:f6:68:0d:0d:42:eb:ee:71:5b: ca:03:be:88:ae:84:92:2c:bd:e8:90:cb:82:e8:3b:b6:df:dc: 8a:f2:39:c3:d9:68:9f:ad:42:55:81:4e:8d:58:ee:f1:c5:83: 10:11:3c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmue+6JUz5zisADrSqIlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMmM0ODdiNmI2YmRkYTIyMTc5MDcyZDkyYThmMDFlOGU3 MzY2MzQwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EygyM2EyMjVhZWQ5ODQ1OWU3YjUzNTc5ZmNiNmFkODgyOWQ3ZDI0Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSePA+oDRCK9nHivMyRNoFdRvFN2 jtf8rP+M5wLXDVqkSTZIIDqRFeBWVb2QVdFAs22e2rSnRcZ2VoKgzAno2j9WrSW6 MDUMGzihA6cKPKuxpWvuauC47ahqFV5u4ZVKuGz07g7hM6rMXGwgPRDGjGP7iRNb 4i6A/gB2btwmtQ+28MwR15fKtW6AK8ayQXwlBjHFU53jWIP35R5mQwUubGaHmcz6 YVMtRwoWDF/ilzLNvi1+mnkHD9tPERO4qOVPAMJuZcvv9OpprhoEznZ5TJVvp/59 41UL7STh5PlNn9w7aTvgWSGGDe1oR/3fkIeWgDbZ6pNYIv404Gy0EM+/cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOiJa7ZhFnntTV5/LatiCnX0kyoMB8GA1UdIwQY MBaAFO4sSHtra92iIXkHLZKo8B6Oc2Y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmIt NGI5ODNmMWI4NGEyLzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmItNGI5ODNmMWI4NGEy LzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALENjvtB0 Tlmnv2M61cTHv4ZYMtMeigiTrLytcQB5S7vxBSnkR2K0nyg9LThIfoZ4yMVDyA8w 1wQmOatGOPq6eVjfv73SmE2zm6GDLbdqAHT3ifQF1wQ2mBOZsylVoyIXhU0/mRBe RP0mmhEl4U42VDtmeXzXMxPUedT9et+VU4eP4ymIwG3L2euRcQhl8P32AVMp0A3V fR8iCOE/wKzHCV1BQN2nKneK4eha3LdJfMzyOEYZYbVe9lpJQd1xpbnpXITIiXMz PiVyCvnkh+LX9mgNDULr7nFbygO+iK6Ekiy96JDLgug7tt/civI5w9lon61CVYFO jVju8cWDEBE8Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:33 2025 by rpki-client