This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: unB5s78f+uLVzuissjIqAtLOyLSrRPFI35zz4JazFg8= Subject key identifier: 2B:37:5D:C0:B6:3B:2C:13:63:8D:F9:A0:3E:E8:31:C2:C2:D9:82:68 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019AD16BD6EC48336416E488092A7CB32CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1072 Signing time: Sat 29 Nov 2025 21:01:36 +0000 Manifest this update: Sat 29 Nov 2025 21:01:36 +0000 Manifest next update: Sun 30 Nov 2025 21:01:36 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: TAHGbKBVX0NGwqarMywAQTe349rt3uRAfM8tItE7+Tg=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 16:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d1:6b:d6:ec:48:33:64:16:e4:88:09:2a:7c:b3:2c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 29 21:01:36 2025 GMT Not After : Nov 30 21:01:36 2025 GMT Subject: CN=2b375dc0b63b2c13638df9a03ee831c2c2d98268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:98:45:dc:bb:ae:50:d2:9a:89:ac:87:bc: e4:31:3f:02:c9:11:6b:8d:b4:40:78:6c:78:79:08: d2:0d:70:84:43:8a:4d:46:9d:8b:ae:e5:a3:d7:41: 9a:62:a3:c9:bb:56:34:3e:ac:ba:6f:5e:95:00:7f: 99:cc:2d:b0:b7:5a:f3:06:ab:d4:55:f7:f3:3c:81: 28:a4:c6:c2:13:84:d9:f3:9f:20:33:f5:2f:fc:a9: 25:b7:1c:50:b2:a1:ba:61:89:39:6a:5f:c5:ec:83: fa:46:ec:0e:6e:88:a7:87:56:71:07:b0:e0:75:97: 0c:71:e6:96:f8:7f:bd:b5:c9:1f:44:9a:12:12:64: 4b:7b:35:e7:78:aa:62:e9:0a:5d:2f:44:f3:7e:26: e4:2e:bc:50:1a:40:42:61:58:33:59:4d:de:41:34: 2b:99:d3:f9:07:98:df:0e:d5:0a:87:6d:27:00:b1: 7c:9d:4f:c4:cf:80:0a:0f:bb:ca:39:c1:2b:c9:18: 59:6a:f4:8b:f1:64:59:46:40:9b:ad:f3:16:21:41: a0:fd:d2:9c:b7:ff:1f:f4:a4:e3:8c:d2:ef:b2:36: 88:53:b5:9d:54:76:0b:f5:7d:31:ab:b3:52:73:9a: 41:10:9d:76:0d:47:bb:95:20:b3:99:1b:ef:b1:96: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:5D:C0:B6:3B:2C:13:63:8D:F9:A0:3E:E8:31:C2:C2:D9:82:68 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:31:e4:c0:73:a6:1e:c9:6f:a8:f8:dd:11:32:2b:52:d7:e8: 41:39:d9:85:10:3c:c8:d2:49:4e:60:f9:a5:fb:eb:3c:24:5f: da:62:39:65:7f:03:fc:cb:83:aa:95:51:49:1d:05:04:c6:db: 79:7d:fb:af:b6:0c:05:51:c3:5c:48:88:cc:68:c0:03:34:54: 60:d8:4b:7b:ab:25:ed:e0:80:b7:fc:11:7f:d6:fb:6b:11:24: 9b:45:7e:1f:cd:ae:16:44:c9:b6:88:14:86:52:bc:33:85:9b: 33:f2:c3:62:41:74:6f:fe:6f:25:6a:ff:e3:bf:bf:75:77:84: e7:79:04:a3:d2:ca:79:62:ba:11:a4:0e:f1:1a:68:3d:6b:65: b4:19:09:a4:cb:76:1b:d8:35:4f:dd:cc:9b:d9:e6:84:2c:87: 55:8e:cf:9d:86:94:b7:95:d7:ca:48:6c:1f:da:60:31:24:2b: 1f:84:06:7c:63:b6:1b:b9:57:0d:c2:90:fa:94:74:d2:2c:e4: 9b:37:f1:4a:08:88:76:59:67:85:1c:26:17:2b:db:37:30:52: 29:30:e3:12:1a:3b:5b:f9:48:f1:62:4e:3f:73:cb:79:c8:30: 85:83:e9:af:95:a0:c0:15:19:24:b6:78:b3:6c:3d:ee:5f:b4: 8b:8d:ea:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrRa9bsSDNkFuSICSp8syzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTI5MjEwMTM2WhcNMjUxMTMwMjEwMTM2WjAzMTEwLwYDVQQD EygyYjM3NWRjMGI2M2IyYzEzNjM4ZGY5YTAzZWU4MzFjMmMyZDk4MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaeYRdy7rlDSmomsh7zkMT8CyRFr jbRAeGx4eQjSDXCEQ4pNRp2LruWj10GaYqPJu1Y0Pqy6b16VAH+ZzC2wt1rzBqvU VffzPIEopMbCE4TZ858gM/Uv/KkltxxQsqG6YYk5al/F7IP6RuwOboinh1ZxB7Dg dZcMceaW+H+9tckfRJoSEmRLezXneKpi6QpdL0TzfibkLrxQGkBCYVgzWU3eQTQr mdP5B5jfDtUKh20nALF8nU/Ez4AKD7vKOcEryRhZavSL8WRZRkCbrfMWIUGg/dKc t/8f9KTjjNLvsjaIU7WdVHYL9X0xq7NSc5pBEJ12DUe7lSCzmRvvsZaXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs3XcC2OywTY435oD7oMcLC2YJoMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjHkwHOm HslvqPjdETIrUtfoQTnZhRA8yNJJTmD5pfvrPCRf2mI5ZX8D/MuDqpVRSR0FBMbb eX37r7YMBVHDXEiIzGjAAzRUYNhLe6sl7eCAt/wRf9b7axEkm0V+H82uFkTJtogU hlK8M4WbM/LDYkF0b/5vJWr/47+/dXeE53kEo9LKeWK6EaQO8RpoPWtltBkJpMt2 G9g1T93Mm9nmhCyHVY7PnYaUt5XXykhsH9pgMSQrH4QGfGO2G7lXDcKQ+pR00izk mzfxSgiIdllnhRwmFyvbNzBSKTDjEho7W/lI8WJOP3PLecgwhYPpr5WgwBUZJLZ4 s2w97l+0i43qqw== -----END CERTIFICATE-----Generated at Sun Nov 30 00:34:40 2025 by rpki-client