This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json) Hash identifier: Y8DowvkU+BjbKm2c7f/MMt4rmOv357OjHkVTcqqRkUI= Subject key identifier: AE:4B:52:18:89:51:3E:A6:80:35:F9:DC:97:49:06:CF:6E:32:3D:3D Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd Certificate serial: 019AF0BF28F65EEEBB2F81ACBEF4460B04FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft Manifest number: 1181 Signing time: Fri 05 Dec 2025 23:00:50 +0000 Manifest this update: Fri 05 Dec 2025 23:00:50 +0000 Manifest next update: Sat 06 Dec 2025 23:00:50 +0000 Files and hashes: 1: 0YnoXFsLC3L8LFSSyo3TEM6ihxM.roa (hash: 1mt7G/fO9VBU7/suzQGIUYMupKdv6yImTUBwyXrv1sk=) 2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: 2GoNNBiiE+yGLoa1LXvvhPraVGh3rIwPXTJ/D9Qtn2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:28:f6:5e:ee:bb:2f:81:ac:be:f4:46:0b:04:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd Validity Not Before: Dec 5 23:00:50 2025 GMT Not After : Dec 6 23:00:50 2025 GMT Subject: CN=ae4b521889513ea68035f9dc974906cf6e323d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:9f:84:de:4f:2b:97:cb:ec:a6:c5:ba:3a: ca:32:0a:cf:57:f4:e6:5d:c3:50:1d:2b:90:fe:d7: 29:20:d9:e3:c7:52:fd:4a:16:79:f7:a7:1c:f1:2c: 27:b6:76:8c:03:fe:59:43:fb:c1:07:09:db:e4:2b: be:31:81:26:8d:5d:df:16:09:2d:5b:4e:8d:aa:ab: f5:0e:da:53:8b:9c:d2:a7:d6:a0:e1:ea:8b:4c:29: f0:c7:9b:44:41:8c:6f:9e:c4:39:4b:f9:09:a0:e3: eb:2d:88:f2:51:84:ce:17:cb:06:f3:ce:78:8b:09: 66:2b:94:63:b8:70:1c:47:10:31:77:0f:42:af:51: d8:8b:57:e9:19:9d:51:2f:87:01:af:7f:a5:50:96: a0:7f:08:af:10:55:64:00:49:b2:c1:81:e9:12:de: 27:72:67:76:25:e9:d8:84:62:71:52:4d:2e:c9:14: 64:43:8d:f1:74:cc:0d:fc:b6:b3:66:a1:e1:02:f0: 86:3a:a9:be:b0:ee:f3:5f:bb:6b:63:5b:05:15:32: 3a:46:28:d4:c3:dc:43:af:41:ee:4b:96:59:bb:ed: ee:b2:8a:c8:62:27:1d:1f:fb:5b:b6:70:2b:bc:59: 8a:ab:ad:50:78:f3:d8:2b:05:50:34:9a:b1:a0:2b: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4B:52:18:89:51:3E:A6:80:35:F9:DC:97:49:06:CF:6E:32:3D:3D X509v3 Authority Key Identifier: keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5c:0e:66:43:b5:2e:45:02:6f:ed:cf:a8:84:b2:1f:d4:8a: 56:f9:91:ca:7e:54:09:17:b3:a5:53:e5:f7:0f:73:3f:3e:21: 55:21:1b:71:96:00:13:3d:1d:b4:d5:11:b5:21:35:1e:16:f4: 81:0c:a4:be:a5:d9:db:96:5a:e8:3a:0e:4e:26:c8:60:21:12: 61:99:39:13:0f:c9:7c:74:2d:6b:f5:c4:14:3e:90:cb:18:0b: 39:d0:7f:cc:51:fe:b7:71:7e:53:93:f9:b3:40:ce:dd:35:f9: 12:84:4a:73:31:73:82:3f:a0:3f:27:45:bd:56:f4:ee:50:97: 58:9b:c0:0c:68:7b:a9:de:8f:3d:90:14:2a:8d:23:22:5d:50: b7:fb:64:ea:a3:88:29:59:4e:1d:dc:f4:54:80:2a:65:80:81: e6:d6:2b:06:f9:5d:eb:a6:cc:8a:f0:4f:88:f3:b4:c8:70:c2: b0:aa:ab:61:7e:d7:ad:c1:94:38:b0:d1:ea:67:62:14:68:f8: 86:18:fb:f8:9a:d3:e1:1d:65:1b:09:c9:34:7a:e2:49:d6:8d: ce:83:16:02:c1:02:60:f4:c2:bf:02:b5:bd:23:8b:ce:95:6a: 8e:c0:96:1d:d5:58:d9:2b:f8:26:84:d9:99:f0:63:55:ef:08: 71:48:80:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyj2Xu67L4GsvvRGCwT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy ODFiZGQwHhcNMjUxMjA1MjMwMDUwWhcNMjUxMjA2MjMwMDUwWjAzMTEwLwYDVQQD EyhhZTRiNTIxODg5NTEzZWE2ODAzNWY5ZGM5NzQ5MDZjZjZlMzIzZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWyfhN5PK5fL7KbFujrKMgrPV/Tm XcNQHSuQ/tcpINnjx1L9ShZ596cc8SwntnaMA/5ZQ/vBBwnb5Cu+MYEmjV3fFgkt W06Nqqv1DtpTi5zSp9ag4eqLTCnwx5tEQYxvnsQ5S/kJoOPrLYjyUYTOF8sG8854 iwlmK5RjuHAcRxAxdw9Cr1HYi1fpGZ1RL4cBr3+lUJagfwivEFVkAEmywYHpEt4n cmd2JenYhGJxUk0uyRRkQ43xdMwN/LazZqHhAvCGOqm+sO7zX7trY1sFFTI6RijU w9xDr0HuS5ZZu+3usorIYicdH/tbtnArvFmKq61QePPYKwVQNJqxoCs84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5LUhiJUT6mgDX53JdJBs9uMj09MB8GA1UdIwQY MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2 LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslwOZkO1 LkUCb+3PqISyH9SKVvmRyn5UCRezpVPl9w9zPz4hVSEbcZYAEz0dtNURtSE1Hhb0 gQykvqXZ25Za6DoOTibIYCESYZk5Ew/JfHQta/XEFD6QyxgLOdB/zFH+t3F+U5P5 s0DO3TX5EoRKczFzgj+gPydFvVb07lCXWJvADGh7qd6PPZAUKo0jIl1Qt/tk6qOI KVlOHdz0VIAqZYCB5tYrBvld66bMivBPiPO0yHDCsKqrYX7XrcGUOLDR6mdiFGj4 hhj7+JrT4R1lGwnJNHriSdaNzoMWAsECYPTCvwK1vSOLzpVqjsCWHdVY2Sv4JoTZ mfBjVe8IcUiACQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:49 2025 by rpki-client