This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json) Hash identifier: lCuCWIL8pNsU+YUtEJBnC6BeGlyPXsqil9Xn+LCz2xQ= Subject key identifier: 95:C6:4D:9E:67:17:F9:FB:55:60:28:54:D7:76:29:95:C8:DC:29:2A Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6 Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6 Certificate serial: 019B348D67DC37B0C9D784CFF1C24ACE2271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft Manifest number: 0523 Signing time: Fri 19 Dec 2025 03:00:40 +0000 Manifest this update: Fri 19 Dec 2025 03:00:40 +0000 Manifest next update: Sat 20 Dec 2025 03:00:40 +0000 Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: 478qxh8wWKJtWM9qLutcH8iln1hUGYP/wNQPohcVDdI=) 2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=) 3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:67:dc:37:b0:c9:d7:84:cf:f1:c2:4a:ce:22:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6 Validity Not Before: Dec 19 03:00:40 2025 GMT Not After : Dec 20 03:00:40 2025 GMT Subject: CN=95c64d9e6717f9fb55602854d7762995c8dc292a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:6c:52:cc:ab:e4:59:94:50:93:fa:39:8d: 9c:9a:8b:6d:32:b2:12:78:92:76:68:c6:31:7d:9d: 21:40:22:42:e4:bd:71:2d:1a:30:27:c4:81:d1:ad: 2d:75:52:ce:2f:3b:f6:5f:fb:60:de:e5:8e:aa:55: 5d:5d:db:e8:ee:52:83:94:67:37:d2:79:82:a9:53: 3c:aa:af:cc:cc:41:49:b4:95:ed:eb:03:7b:27:b4: d2:0f:cf:47:43:99:27:32:c1:33:aa:58:99:72:c3: a2:20:d1:05:52:27:d8:6a:f4:21:31:bc:ce:25:ac: 2f:c4:b0:8f:6b:0d:7c:16:b0:d3:5e:2d:41:54:c8: 28:0f:f0:09:bc:8c:f1:49:55:9e:a1:0e:47:3a:9a: a6:26:ce:25:ab:45:be:e4:9b:7a:7a:31:d4:5b:6d: 18:e6:76:7b:91:17:07:f5:e2:8a:b8:f1:88:df:67: 85:24:9b:f3:87:0b:e6:8f:b0:97:5b:cf:7b:00:2c: 21:5a:6e:3d:0c:9f:b6:8d:c9:99:e5:88:af:a1:5f: 10:0b:ed:f2:02:e7:d5:45:bb:bd:5f:c8:0d:15:74: ab:b2:a0:22:68:fc:f3:df:76:3f:d6:8c:b2:1e:82: 07:ef:a7:d5:4e:f6:60:ff:b4:9e:82:be:92:bf:c1: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:4D:9E:67:17:F9:FB:55:60:28:54:D7:76:29:95:C8:DC:29:2A X509v3 Authority Key Identifier: keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6d:17:a2:07:ac:d9:7b:3a:56:6f:17:85:1d:8f:f2:c0:8f: a4:7c:24:b8:4a:05:de:54:39:d3:5e:29:ff:99:91:d0:00:15: 46:25:f1:29:8d:f1:50:13:45:6a:6b:08:a6:58:ee:d7:a6:3c: bd:db:fb:c1:f2:9f:e4:3f:17:9c:d0:5c:7c:1b:0e:e5:45:92: d5:61:2c:bd:6d:9d:3b:ec:b7:b0:41:dc:ee:bb:ca:01:40:8a: a3:1b:29:ec:4b:ad:e2:e2:75:0d:7c:35:50:68:f3:d5:1d:00: 2e:10:69:8e:ee:05:5f:f3:89:49:38:bc:40:56:a3:31:1d:1f: e6:ea:de:02:36:89:28:2f:1b:ee:54:f2:3e:ed:59:7e:e0:ce: 81:22:87:1f:a3:a5:77:dd:74:c9:e3:da:95:c1:6c:c8:61:d2: 06:71:f9:05:00:1b:56:bc:ed:eb:a1:b2:b8:99:d5:46:48:0c: 82:96:2b:8d:bd:51:5b:3f:db:33:cf:4e:6b:4b:84:d6:74:68: de:44:61:33:d5:a0:6a:7f:f3:b7:6c:aa:3f:f8:3d:25:a8:0b: dc:cd:f7:68:a3:c7:f0:b5:fe:c7:80:f4:cd:b0:11:dd:a2:ee: ed:29:64:d4:fe:64:68:8a:2f:a0:37:12:49:a4:d0:99:31:36: a9:60:42:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jWfcN7DJ14TP8cJKziJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1 MzY5ZjYwHhcNMjUxMjE5MDMwMDQwWhcNMjUxMjIwMDMwMDQwWjAzMTEwLwYDVQQD Eyg5NWM2NGQ5ZTY3MTdmOWZiNTU2MDI4NTRkNzc2Mjk5NWM4ZGMyOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti1sUsyr5FmUUJP6OY2cmottMrIS eJJ2aMYxfZ0hQCJC5L1xLRowJ8SB0a0tdVLOLzv2X/tg3uWOqlVdXdvo7lKDlGc3 0nmCqVM8qq/MzEFJtJXt6wN7J7TSD89HQ5knMsEzqliZcsOiINEFUifYavQhMbzO JawvxLCPaw18FrDTXi1BVMgoD/AJvIzxSVWeoQ5HOpqmJs4lq0W+5Jt6ejHUW20Y 5nZ7kRcH9eKKuPGI32eFJJvzhwvmj7CXW897ACwhWm49DJ+2jcmZ5YivoV8QC+3y AufVRbu9X8gNFXSrsqAiaPzz33Y/1oyyHoIH76fVTvZg/7Segr6Sv8GxKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXGTZ5nF/n7VWAoVNd2KZXI3CkqMB8GA1UdIwQY MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1 LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkG0Xoges 2Xs6Vm8XhR2P8sCPpHwkuEoF3lQ5014p/5mR0AAVRiXxKY3xUBNFamsIplju16Y8 vdv7wfKf5D8XnNBcfBsO5UWS1WEsvW2dO+y3sEHc7rvKAUCKoxsp7Eut4uJ1DXw1 UGjz1R0ALhBpju4FX/OJSTi8QFajMR0f5ureAjaJKC8b7lTyPu1ZfuDOgSKHH6Ol d910yePalcFsyGHSBnH5BQAbVrzt66GyuJnVRkgMgpYrjb1RWz/bM89Oa0uE1nRo 3kRhM9Wgan/zt2yqP/g9JagL3M33aKPH8LX+x4D0zbAR3aLu7Slk1P5kaIovoDcS SaTQmTE2qWBCWg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:26 2025 by rpki-client