This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft File: 7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json) Hash identifier: XCVBN4C2ZX7VXaf6mugLWwzby24Go2lpnQUMqEmgeSA= Subject key identifier: 8C:8F:67:F1:8A:88:60:57:CD:2F:07:51:04:C9:F2:92:7F:9B:BA:0F Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Certificate serial: 019B34FB295BFC853010F2ECE60A42AA21CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft Manifest number: 1790 Signing time: Fri 19 Dec 2025 05:00:33 +0000 Manifest this update: Fri 19 Dec 2025 05:00:33 +0000 Manifest next update: Sat 20 Dec 2025 05:00:33 +0000 Files and hashes: 1: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: UDo/rSwqHnn3jxPHd/gy8F842rpoSojaMObsGEtPBYk=) 2: HLvhD2MuHgkhYXDg-SuIbLYOHgk.roa (hash: yEbv0Qvw7CzFL55jFQMv8xIMnfPjOGOXgDPO0YO14o8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:29:5b:fc:85:30:10:f2:ec:e6:0a:42:aa:21:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Validity Not Before: Dec 19 05:00:33 2025 GMT Not After : Dec 20 05:00:33 2025 GMT Subject: CN=8c8f67f18a886057cd2f075104c9f2927f9bba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:c6:d9:13:53:bd:bf:eb:b1:69:4f:d8:bf: b0:fa:7c:cc:c4:e4:e6:15:b3:16:1f:9e:53:8b:24: aa:15:67:77:b9:03:e4:52:4e:04:1e:4f:07:4a:4d: f6:cc:a8:38:46:06:0c:85:ee:0d:61:b3:7e:4c:b6: f8:6e:56:af:11:db:e7:1d:9a:c1:68:3c:64:73:cb: a6:3a:6c:70:75:b0:c0:fe:89:e9:55:0d:a5:15:42: 9e:ac:3a:20:ca:ce:96:be:10:78:ad:b9:f3:ef:47: 96:a8:6a:09:1c:cb:4b:5b:fe:d8:52:fa:46:aa:a4: 05:31:96:fa:a7:33:d7:33:c0:20:e8:7d:25:83:9b: 4e:07:eb:c2:5d:d3:ce:ee:95:86:0f:3e:fb:d9:e7: e8:89:43:1a:26:69:12:be:af:0c:46:e6:47:9c:38: a3:c9:85:c3:bb:9e:75:b1:1d:89:f9:8d:74:bf:6f: 1d:5c:e6:7f:08:76:92:46:7c:c6:f3:81:29:bc:89: c7:03:e6:9f:8c:72:e0:94:ee:2f:3a:02:d6:73:7c: f2:b2:27:ce:ff:6c:f0:96:aa:9c:76:6a:58:a2:e1: c7:6f:7b:f3:be:32:21:d4:07:26:b1:88:6f:b6:44: 7e:51:bd:a6:30:eb:90:c2:66:31:72:0b:95:0f:16: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:67:F1:8A:88:60:57:CD:2F:07:51:04:C9:F2:92:7F:9B:BA:0F X509v3 Authority Key Identifier: keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0d:a3:82:bd:1e:c3:42:8f:75:d9:bf:3f:f4:93:34:62:ca: 16:6f:6d:87:08:d9:7a:ee:0b:77:35:b0:04:73:3d:6c:d0:fd: 1f:0a:9c:c1:2f:ec:c7:2f:30:21:01:4e:e3:4c:ec:06:b9:06: aa:9f:79:90:2b:53:fa:ee:08:25:35:8b:82:9f:3a:74:6b:98: 8c:0d:aa:73:73:66:8b:84:35:89:2d:e0:62:2f:27:e2:d4:22: 3e:44:ec:e8:b4:80:2c:83:25:45:5b:aa:04:c8:4d:e8:56:a2: 61:b9:92:8a:1d:42:4f:9d:43:81:c1:ec:f1:f2:1b:71:15:b9: 19:62:4f:f0:7c:48:68:d9:ae:87:26:21:dd:e6:86:fb:03:cd: e6:1d:f9:ee:85:14:0f:e3:49:9d:b3:ec:19:fb:67:4c:37:33: 5b:5f:9c:66:ba:03:42:4e:1f:50:7f:50:d7:d5:7f:4f:4f:19: fa:b8:ca:0e:08:27:b2:ca:df:1e:25:97:ba:79:5a:24:bc:7d: 4a:18:e4:15:e4:d9:da:fc:f9:cb:bc:96:c1:f4:ac:56:47:0c: 9d:cd:24:e4:e4:76:90:17:7c:37:c9:23:2c:0d:66:1d:1e:8c: 02:80:bc:db:ec:bd:fb:49:2a:8c:94:44:6e:9e:94:85:95:04: c5:e5:02:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+ylb/IUwEPLs5gpCqiHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNWFkYTBkYzkwMGExM2M4M2I3MGFjM2Y1ODdmYjhjMmUx ZGYwMzAwHhcNMjUxMjE5MDUwMDMzWhcNMjUxMjIwMDUwMDMzWjAzMTEwLwYDVQQD Eyg4YzhmNjdmMThhODg2MDU3Y2QyZjA3NTEwNGM5ZjI5MjdmOWJiYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O3G2RNTvb/rsWlP2L+w+nzMxOTm FbMWH55TiySqFWd3uQPkUk4EHk8HSk32zKg4RgYMhe4NYbN+TLb4blavEdvnHZrB aDxkc8umOmxwdbDA/onpVQ2lFUKerDogys6WvhB4rbnz70eWqGoJHMtLW/7YUvpG qqQFMZb6pzPXM8Ag6H0lg5tOB+vCXdPO7pWGDz772efoiUMaJmkSvq8MRuZHnDij yYXDu551sR2J+Y10v28dXOZ/CHaSRnzG84EpvInHA+afjHLglO4vOgLWc3zysifO /2zwlqqcdmpYouHHb3vzvjIh1AcmsYhvtkR+Ub2mMOuQwmYxcguVDxafTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyPZ/GKiGBXzS8HUQTJ8pJ/m7oPMB8GA1UdIwQY MBaAFOxa2g3JAKE8g7cKw/WH+4wuHfAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEt Y2ZlZmVhZWU4NjVlLzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEtY2ZlZmVhZWU4NjVl LzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApA2jgr0e w0KPddm/P/STNGLKFm9thwjZeu4LdzWwBHM9bND9HwqcwS/sxy8wIQFO40zsBrkG qp95kCtT+u4IJTWLgp86dGuYjA2qc3Nmi4Q1iS3gYi8n4tQiPkTs6LSALIMlRVuq BMhN6FaiYbmSih1CT51DgcHs8fIbcRW5GWJP8HxIaNmuhyYh3eaG+wPN5h357oUU D+NJnbPsGftnTDczW1+cZroDQk4fUH9Q19V/T08Z+rjKDggnssrfHiWXunlaJLx9 ShjkFeTZ2vz5y7yWwfSsVkcMnc0k5OR2kBd8N8kjLA1mHR6MAoC82+y9+0kqjJRE bp6UhZUExeUC2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:15 2025 by rpki-client