This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: gdhDF+vwH2xHPuyCQfrneK6aJuYbiVJy1YlaR33uSoc= Subject key identifier: F7:3B:84:29:4F:16:7E:1B:32:F6:6E:42:5A:17:05:15:A7:A1:AA:23 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019AC7C3BEEAEEEC103B887A20E6C40EA9EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 106D Signing time: Fri 28 Nov 2025 00:01:25 +0000 Manifest this update: Fri 28 Nov 2025 00:01:25 +0000 Manifest next update: Sat 29 Nov 2025 00:01:25 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: A25Tv0D8JyOEYrEQTo3H/KUvg73dzer29B4KVjidfmU=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:c3:be:ea:ee:ec:10:3b:88:7a:20:e6:c4:0e:a9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 28 00:01:25 2025 GMT Not After : Nov 29 00:01:25 2025 GMT Subject: CN=f73b84294f167e1b32f66e425a170515a7a1aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:c2:e4:18:69:f5:66:f9:36:74:d1:b5:4e: a9:57:ec:e8:a1:dc:3a:95:d2:ff:cb:e5:4b:2a:87: 2c:73:5c:da:71:49:1a:60:a8:6f:91:c5:e4:54:51: 2f:7b:6f:5a:4e:81:34:38:58:2f:ee:fc:cc:82:c1: 43:4f:31:20:1f:7f:70:a4:71:b6:28:1c:9d:43:4c: 2c:9a:2a:6e:f7:8f:30:76:b5:b0:ad:1b:c4:f1:1a: 96:eb:25:b8:50:5c:e4:9d:d9:72:6b:2f:b9:7c:24: a0:9f:ce:7d:16:ba:6d:96:d0:1c:60:6e:fd:2e:8d: 74:75:7d:1d:34:9e:14:42:10:22:94:ba:fa:ef:df: 13:e0:0a:75:63:32:0c:fd:71:3e:99:96:ed:10:a2: 35:35:bc:f4:75:fd:73:58:ce:49:95:ce:cb:d2:5c: 5c:ee:4e:b8:1d:8b:b6:28:98:46:71:4c:3c:fb:8f: 2c:b5:99:d3:8f:ab:fc:d2:cf:88:fe:c2:e1:4d:89: b8:a4:8a:c3:64:57:5f:ec:9f:ac:1e:3e:0b:10:79: a1:52:47:ea:6b:24:3a:fe:58:6f:e0:0d:07:98:3b: c2:68:ed:c4:fd:a6:ff:e9:ee:d8:e8:dc:08:85:a0: 56:4a:1e:45:e5:be:cb:60:d6:8a:48:2d:a2:32:4c: 01:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3B:84:29:4F:16:7E:1B:32:F6:6E:42:5A:17:05:15:A7:A1:AA:23 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c9:2f:98:d5:c4:3b:85:bf:17:27:af:4e:02:2f:3c:71:2b: 33:0e:bf:84:d6:1d:41:64:6b:b6:8d:36:96:66:08:59:bc:f3: 73:c9:57:d8:41:34:9e:10:5f:9a:0d:e4:74:07:65:5d:1c:80: 36:5a:64:74:c1:7e:b6:75:76:f2:d8:54:75:b0:eb:cf:d7:37: c4:4e:5f:9e:eb:4d:64:eb:f5:27:a6:fd:76:dc:70:51:e6:b0: 96:c2:77:05:46:07:97:83:88:cb:6a:1c:81:67:ac:49:47:e5: f6:01:c0:c3:67:f9:ee:08:77:1c:c8:55:66:9f:08:23:38:77: cf:0f:07:67:38:4f:04:35:b7:a2:f7:7b:a6:5d:1c:0a:da:3b: ba:e7:23:75:71:d9:c3:bb:c3:8b:37:0f:1d:1a:bb:69:11:57: d8:66:72:98:be:8d:95:7a:ec:21:10:ff:da:2c:e2:0b:d5:ff: 60:da:fb:5a:65:97:82:4a:9d:71:15:6d:6e:5c:03:d4:51:4c: a1:1e:85:63:13:69:3f:e4:01:2c:84:0e:ef:20:29:d2:fe:b6: d8:90:b0:c3:81:e0:c3:09:38:c4:ef:9f:e6:cc:e1:4a:c3:27: 2c:9a:7d:93:6d:e9:2e:97:78:e1:82:73:0e:88:6a:5e:d2:b1: 20:54:ad:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrHw77q7uwQO4h6IObEDqnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTI4MDAwMTI1WhcNMjUxMTI5MDAwMTI1WjAzMTEwLwYDVQQD EyhmNzNiODQyOTRmMTY3ZTFiMzJmNjZlNDI1YTE3MDUxNWE3YTFhYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXvC5Bhp9Wb5NnTRtU6pV+zoodw6 ldL/y+VLKocsc1zacUkaYKhvkcXkVFEve29aToE0OFgv7vzMgsFDTzEgH39wpHG2 KBydQ0wsmipu948wdrWwrRvE8RqW6yW4UFzkndlyay+5fCSgn859FrptltAcYG79 Lo10dX0dNJ4UQhAilLr6798T4Ap1YzIM/XE+mZbtEKI1Nbz0df1zWM5Jlc7L0lxc 7k64HYu2KJhGcUw8+48stZnTj6v80s+I/sLhTYm4pIrDZFdf7J+sHj4LEHmhUkfq ayQ6/lhv4A0HmDvCaO3E/ab/6e7Y6NwIhaBWSh5F5b7LYNaKSC2iMkwBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc7hClPFn4bMvZuQloXBRWnoaojMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEckvmNXE O4W/FyevTgIvPHErMw6/hNYdQWRrto02lmYIWbzzc8lX2EE0nhBfmg3kdAdlXRyA NlpkdMF+tnV28thUdbDrz9c3xE5fnutNZOv1J6b9dtxwUeawlsJ3BUYHl4OIy2oc gWesSUfl9gHAw2f57gh3HMhVZp8IIzh3zw8HZzhPBDW3ovd7pl0cCto7uucjdXHZ w7vDizcPHRq7aRFX2GZymL6NlXrsIRD/2iziC9X/YNr7WmWXgkqdcRVtblwD1FFM oR6FYxNpP+QBLIQO7yAp0v622JCww4Hgwwk4xO+f5szhSsMnLJp9k23pLpd44YJz DohqXtKxIFStIg== -----END CERTIFICATE-----Generated at Fri Nov 28 09:44:51 2025 by rpki-client