This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: BR3+JO0E0sKUUxxyNDMRGucMulOsrJN0JMyIVo8QZAg= Subject key identifier: 57:D6:30:72:E6:60:AA:C5:4F:FE:16:19:66:AF:02:1E:E0:C9:73:4E Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B0B5ABDF66CB761A5FC7A49EC1BC85A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1090 Signing time: Thu 11 Dec 2025 03:00:54 +0000 Manifest this update: Thu 11 Dec 2025 03:00:54 +0000 Manifest next update: Fri 12 Dec 2025 03:00:54 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: M+R6BWVPAy3i6Gj1cVY5Wl71ZbX1FUoansBOwn934lI=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:5a:bd:f6:6c:b7:61:a5:fc:7a:49:ec:1b:c8:5a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 11 03:00:54 2025 GMT Not After : Dec 12 03:00:54 2025 GMT Subject: CN=57d63072e660aac54ffe161966af021ee0c9734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6f:0f:fc:d9:e1:d1:3b:80:b7:3e:23:e8:3f: 8b:03:7b:d6:b4:25:48:20:d6:48:38:05:9f:4b:68: 7e:14:d8:9d:16:69:a8:24:e4:10:c9:b7:d4:ce:70: b5:f7:76:a8:fc:65:c4:8e:97:05:6f:ff:88:a9:ff: db:4e:a7:6d:1c:6d:f0:bc:4b:75:f1:60:ba:fe:26: 9f:b7:e9:d9:3e:97:f0:92:af:5f:84:be:da:68:61: 24:be:75:64:03:ad:75:7a:10:6f:a4:ae:65:30:6a: 03:93:b0:c4:82:48:22:67:72:47:d8:4f:e5:60:40: 81:cd:a1:cc:52:12:63:62:dd:db:a3:d3:e9:f6:b1: 18:06:40:1c:74:88:fa:26:0f:29:90:c9:66:cd:a1: 99:bb:ed:31:37:61:db:69:48:cf:73:a9:8e:95:91: b2:66:c7:3e:63:5a:ca:f1:20:b3:f7:8b:92:e4:c1: 01:66:72:82:c2:d6:4e:9a:4c:d6:b3:ea:7e:15:d9: 68:ba:1b:1a:56:fe:5e:56:21:b2:ed:78:d0:31:90: 19:ca:4d:56:18:d7:fb:67:54:f1:3c:6d:a0:6a:c6: 1e:b0:71:5a:64:9d:12:36:7e:51:ee:8f:ff:68:e9: 1c:e3:76:ce:e5:c4:b6:82:3b:86:08:98:5b:10:a4: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D6:30:72:E6:60:AA:C5:4F:FE:16:19:66:AF:02:1E:E0:C9:73:4E X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:df:8c:35:4b:48:54:7d:3e:ad:5c:5b:81:90:e6:6a:85:b3: b4:17:eb:d9:87:3d:90:40:58:23:5e:bf:02:5d:f7:02:03:93: f7:05:6f:07:5f:b9:e3:a0:58:05:b7:a8:89:69:c5:4e:a6:0e: a9:8d:3a:48:51:b1:47:5a:dc:4b:33:d6:9f:52:cc:f8:e5:3f: 29:5c:a3:1e:f6:25:ea:95:fe:21:4b:d0:c7:2d:d3:e4:a7:dd: 77:85:50:c8:b9:5c:84:c7:d0:9c:c0:88:c9:6b:59:ea:28:1d: 9b:76:24:39:01:25:da:a8:44:e3:bb:11:e5:86:cf:e7:30:a4: 15:05:02:5f:6f:24:5a:f6:03:f1:4a:12:64:c5:05:ed:2d:7a: 68:74:af:d0:fe:95:71:b0:59:19:5d:ae:c1:5b:71:20:d0:56: 4d:b5:b8:f0:b6:94:da:f6:25:b9:2c:52:0d:67:88:38:80:3a: 56:49:ec:fe:89:35:28:5f:1d:4e:81:68:6b:d1:5f:14:8b:46: f4:0f:10:a4:00:03:65:15:6f:1b:9e:02:3e:94:89:be:b6:7b: f0:c0:bf:a5:ba:b6:6b:a5:76:ac:c3:b1:d9:7b:b6:a3:49:f1: c0:d9:23:75:8c:df:84:cc:10:76:75:78:99:a7:7b:3f:c9:b4: db:0b:06:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLWr32bLdhpfx6SewbyFpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjExMDMwMDU0WhcNMjUxMjEyMDMwMDU0WjAzMTEwLwYDVQQD Eyg1N2Q2MzA3MmU2NjBhYWM1NGZmZTE2MTk2NmFmMDIxZWUwYzk3MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8W8P/Nnh0TuAtz4j6D+LA3vWtCVI INZIOAWfS2h+FNidFmmoJOQQybfUznC193ao/GXEjpcFb/+Iqf/bTqdtHG3wvEt1 8WC6/iaft+nZPpfwkq9fhL7aaGEkvnVkA611ehBvpK5lMGoDk7DEgkgiZ3JH2E/l YECBzaHMUhJjYt3bo9Pp9rEYBkAcdIj6Jg8pkMlmzaGZu+0xN2HbaUjPc6mOlZGy Zsc+Y1rK8SCz94uS5MEBZnKCwtZOmkzWs+p+FdlouhsaVv5eViGy7XjQMZAZyk1W GNf7Z1TxPG2gasYesHFaZJ0SNn5R7o//aOkc43bO5cS2gjuGCJhbEKTggwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfWMHLmYKrFT/4WGWavAh7gyXNOMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9+MNUtI VH0+rVxbgZDmaoWztBfr2Yc9kEBYI16/Al33AgOT9wVvB1+546BYBbeoiWnFTqYO qY06SFGxR1rcSzPWn1LM+OU/KVyjHvYl6pX+IUvQxy3T5Kfdd4VQyLlchMfQnMCI yWtZ6igdm3YkOQEl2qhE47sR5YbP5zCkFQUCX28kWvYD8UoSZMUF7S16aHSv0P6V cbBZGV2uwVtxINBWTbW48LaU2vYluSxSDWeIOIA6Vkns/ok1KF8dToFoa9FfFItG 9A8QpAADZRVvG54CPpSJvrZ78MC/pbq2a6V2rMOx2Xu2o0nxwNkjdYzfhMwQdnV4 mad7P8m02wsGHQ== -----END CERTIFICATE-----Generated at Thu Dec 11 09:54:34 2025 by rpki-client