This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft File: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json) Hash identifier: 3V2r0XInFOFCmyVdSiaC85BuuZmAWsos8SCgxUNlLnM= Subject key identifier: 15:5C:DA:A9:26:78:DB:D4:D9:5F:71:A5:2F:9B:8A:F6:09:97:AD:3F Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Certificate serial: 019B4E844C8E3F8D50F4CF0A89A2882D9281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft Manifest number: 068F Signing time: Wed 24 Dec 2025 04:00:51 +0000 Manifest this update: Wed 24 Dec 2025 04:00:51 +0000 Manifest next update: Thu 25 Dec 2025 04:00:51 +0000 Files and hashes: 1: 00tdIzHocd6TrMlmwl0fE9GtEYA.roa (hash: oq1BzbGnWJoT/ZcE/ggd3PS4E29zXCy8zLCqvn+wWU8=) 2: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: DBNzA/e8+RdZ+8JXTvZM65XhtY8p6Alw3EFzBn53xYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:4c:8e:3f:8d:50:f4:cf:0a:89:a2:88:2d:92:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Validity Not Before: Dec 24 04:00:51 2025 GMT Not After : Dec 25 04:00:51 2025 GMT Subject: CN=155cdaa92678dbd4d95f71a52f9b8af60997ad3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:1f:9d:ad:17:41:22:46:52:cb:32:cd:2a: ea:ff:7c:63:62:ad:bd:d5:48:a8:e4:1a:e2:36:3e: 57:d0:0b:60:f9:74:49:0d:62:c0:25:30:ae:3d:ce: bd:8a:e4:4e:aa:e4:92:fd:25:7d:05:77:85:4f:d9: 0b:8b:e3:29:09:53:21:d3:17:e3:a2:4c:8f:1e:78: a9:53:5d:7e:46:ec:c4:82:83:26:c0:50:ed:c4:ad: 1a:be:7f:df:a3:95:af:f8:b3:e6:f6:6d:d5:c4:78: 0f:8e:13:f9:2d:2e:7a:bd:56:8a:2d:4d:e9:ab:b2: 33:e5:19:d5:81:61:fa:25:15:b4:d6:0e:90:5f:ef: 96:bc:9a:ee:27:d4:c4:ea:28:49:57:26:aa:1f:49: e0:b1:29:7a:2c:6e:52:04:45:a8:7b:3f:44:16:68: cf:d5:c3:ec:d8:52:42:e3:53:2d:21:23:e0:18:88: 0c:dd:dd:79:d9:22:8a:62:fd:9b:87:7b:2c:14:bb: 6b:83:59:98:ca:ff:16:fe:4e:e7:88:2f:4d:85:65: d8:20:0c:45:83:f6:5a:d6:77:74:e1:55:50:21:ba: 97:3f:c5:80:b4:39:9a:51:bf:ae:ba:c8:cc:90:5e: 36:e7:63:51:fd:31:91:46:20:70:d8:9a:f8:3d:57: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5C:DA:A9:26:78:DB:D4:D9:5F:71:A5:2F:9B:8A:F6:09:97:AD:3F X509v3 Authority Key Identifier: keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:50:47:e0:e6:43:5a:b4:f2:f5:d3:d9:61:53:66:ed:05:c1: 1e:ce:94:5f:24:92:57:4f:42:85:df:ca:dd:6a:8b:76:a5:a1: b3:56:a4:ee:13:1a:f9:a4:39:ec:9f:eb:c0:75:11:8b:23:dc: 1a:9f:87:b9:0c:6d:d1:f2:b8:72:de:79:d5:05:1c:80:85:26: 51:cb:94:e5:24:08:c7:39:f4:3d:b1:12:61:58:35:01:bd:05: 2c:69:b3:4b:71:fd:38:5a:78:7f:46:84:11:ca:a8:1a:62:cc: 08:6b:c4:4a:48:be:1c:db:c2:a6:4a:f9:f4:80:cd:47:f1:94: bf:df:ab:88:cc:d7:00:c6:42:87:f1:6f:62:8a:ac:1a:2b:9a: a6:57:7f:0c:99:75:84:5b:93:a7:c0:61:0b:7e:16:d7:8d:54: a8:00:32:fb:4e:2c:3b:23:fa:98:cd:d1:51:09:09:f7:20:19: 1f:46:bb:73:1c:5d:d1:30:c6:67:08:d6:60:92:b5:9f:92:d5: 88:61:44:be:fd:12:43:c3:80:53:79:06:89:4e:46:05:a9:99: 9d:c6:ce:d5:a9:e2:af:cc:34:c4:38:3f:c6:c8:7d:b6:75:57: 2d:b8:29:f9:b1:00:fa:a0:4c:14:b3:f1:6d:2b:b6:fa:bb:3d: 16:ba:d8:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhEyOP41Q9M8KiaKILZKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVmMjQ2YmZjMWVhOGZjMzg2Yzg2ZGQ0OWZiYWE4ZDg4 YzQ4ODEwHhcNMjUxMjI0MDQwMDUxWhcNMjUxMjI1MDQwMDUxWjAzMTEwLwYDVQQD EygxNTVjZGFhOTI2NzhkYmQ0ZDk1ZjcxYTUyZjliOGFmNjA5OTdhZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Ufna0XQSJGUssyzSrq/3xjYq29 1Uio5BriNj5X0Atg+XRJDWLAJTCuPc69iuROquSS/SV9BXeFT9kLi+MpCVMh0xfj okyPHnipU11+RuzEgoMmwFDtxK0avn/fo5Wv+LPm9m3VxHgPjhP5LS56vVaKLU3p q7Iz5RnVgWH6JRW01g6QX++WvJruJ9TE6ihJVyaqH0ngsSl6LG5SBEWoez9EFmjP 1cPs2FJC41MtISPgGIgM3d152SKKYv2bh3ssFLtrg1mYyv8W/k7niC9NhWXYIAxF g/Za1nd04VVQIbqXP8WAtDmaUb+uusjMkF4252NR/TGRRiBw2Jr4PVdaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVc2qkmeNvU2V9xpS+bivYJl60/MB8GA1UdIwQY MBaAFOxl8ka/weqPw4bIbdSfuqjYjEiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt NzgxMjgwZmQyNDEyLzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy LzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFBH4OZD WrTy9dPZYVNm7QXBHs6UXySSV09Chd/K3WqLdqWhs1ak7hMa+aQ57J/rwHURiyPc Gp+HuQxt0fK4ct551QUcgIUmUcuU5SQIxzn0PbESYVg1Ab0FLGmzS3H9OFp4f0aE EcqoGmLMCGvESki+HNvCpkr59IDNR/GUv9+riMzXAMZCh/FvYoqsGiuapld/DJl1 hFuTp8BhC34W141UqAAy+04sOyP6mM3RUQkJ9yAZH0a7cxxd0TDGZwjWYJK1n5LV iGFEvv0SQ8OAU3kGiU5GBamZncbO1anir8w0xDg/xsh9tnVXLbgp+bEA+qBMFLPx bSu2+rs9FrrYXw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:21:20 2025 by rpki-client