This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: NP/ZJ258HfY/Xzoeuu6+zoTML9gJf9qA7QzPCrcVn4g= Subject key identifier: 87:EE:78:4A:10:12:AB:93:1D:84:24:C2:02:AF:CA:3A:8D:83:9A:C0 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B39B428EA39336369828FAF81D5EFA627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10A8 Signing time: Sat 20 Dec 2025 03:01:06 +0000 Manifest this update: Sat 20 Dec 2025 03:01:06 +0000 Manifest next update: Sun 21 Dec 2025 03:01:06 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 399Nmhd4FzG4j9Zglru8TeQu4IWTFDISTSwQAeVpPRc=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:28:ea:39:33:63:69:82:8f:af:81:d5:ef:a6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 20 03:01:06 2025 GMT Not After : Dec 21 03:01:06 2025 GMT Subject: CN=87ee784a1012ab931d8424c202afca3a8d839ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:b2:97:64:d8:65:21:8d:14:93:56:98:d2: ef:90:26:29:1c:65:ef:08:34:e6:50:2d:b5:e3:10: 3b:3c:27:0a:6c:8d:fa:8f:77:fc:9b:1a:c4:9e:2c: 07:29:a2:26:bf:17:f2:96:23:30:65:70:b0:cb:55: d1:81:9c:5b:ab:c5:89:aa:89:d9:15:fd:5d:57:10: 21:52:35:81:48:c9:de:db:e6:d2:39:9f:0a:4f:8d: 51:20:da:ca:9f:c7:4e:d5:52:3d:3f:46:0b:e3:2f: 36:71:15:42:b6:76:a3:ed:2d:72:51:31:80:0a:59: e8:7c:9c:5c:c3:d5:3c:ee:38:7b:c6:95:10:de:ed: 4d:f7:03:a7:d0:3b:36:17:f2:79:54:54:5b:72:a1: 3c:d7:63:85:05:b6:bc:68:4c:3b:92:c4:79:fb:a0: ea:75:27:42:e9:7d:a2:c5:46:39:37:c8:9f:05:f6: 4c:b6:d2:66:d7:b7:2a:5f:ac:4c:51:be:d3:30:d6: d9:2a:7d:57:e4:c8:cf:b1:7f:82:25:f8:bc:0a:0f: a8:90:f5:33:46:18:7f:cc:0e:dd:a8:46:d0:9c:bc: 1e:79:9d:5a:68:46:0f:88:ab:a8:48:11:74:cf:16: 22:7d:d9:4d:d3:2d:e3:16:3b:ee:80:bf:05:06:49: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EE:78:4A:10:12:AB:93:1D:84:24:C2:02:AF:CA:3A:8D:83:9A:C0 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:54:a3:10:a7:ce:3e:44:69:2e:13:6d:4b:01:53:58:2f:57: 70:d6:74:30:7d:bd:91:33:11:c2:e3:b0:e5:9a:74:3e:66:d7: 2f:72:41:48:28:5d:b8:6a:82:10:7c:c5:f4:5d:18:4b:29:a4: f6:a7:48:83:14:e4:d1:56:aa:a0:54:1e:2e:de:77:d5:73:e0: 91:ea:b8:e7:4f:e1:ee:86:9e:ff:02:6a:f4:b5:98:a7:92:9f: cc:d8:14:d0:d9:e0:10:99:79:15:23:df:5a:1a:08:7b:c4:5f: 7a:81:b8:4b:9d:1e:c5:b6:e4:02:81:fb:ad:6c:30:b4:53:0e: 9f:3d:3d:13:b1:81:e3:73:24:76:02:82:9b:df:86:fb:af:cd: c7:e4:ec:b8:83:9d:fb:6b:71:db:ca:69:59:b1:d4:37:43:ac: f0:00:ec:3b:37:05:48:f5:ac:7b:e5:79:1c:f7:40:bf:b2:d9: 06:52:39:b6:91:50:1e:43:7f:6a:e2:37:d0:bf:11:36:61:80: 67:02:8d:15:8c:7c:66:35:93:42:f3:04:73:79:1a:2a:e5:49: 57:25:63:e7:ee:66:7f:0d:ae:b6:81:bb:ed:83:3b:88:df:9f: d3:c9:48:6e:42:45:d7:b6:08:35:d9:d3:fc:b5:73:cc:50:cc: 41:6f:d4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCjqOTNjaYKPr4HV76YnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjIwMDMwMTA2WhcNMjUxMjIxMDMwMTA2WjAzMTEwLwYDVQQD Eyg4N2VlNzg0YTEwMTJhYjkzMWQ4NDI0YzIwMmFmY2EzYThkODM5YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB6yl2TYZSGNFJNWmNLvkCYpHGXv CDTmUC214xA7PCcKbI36j3f8mxrEniwHKaImvxfyliMwZXCwy1XRgZxbq8WJqonZ Ff1dVxAhUjWBSMne2+bSOZ8KT41RINrKn8dO1VI9P0YL4y82cRVCtnaj7S1yUTGA ClnofJxcw9U87jh7xpUQ3u1N9wOn0Ds2F/J5VFRbcqE812OFBba8aEw7ksR5+6Dq dSdC6X2ixUY5N8ifBfZMttJm17cqX6xMUb7TMNbZKn1X5MjPsX+CJfi8Cg+okPUz Rhh/zA7dqEbQnLweeZ1aaEYPiKuoSBF0zxYifdlN0y3jFjvugL8FBkkzUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfueEoQEquTHYQkwgKvyjqNg5rAMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFSjEKfO PkRpLhNtSwFTWC9XcNZ0MH29kTMRwuOw5Zp0PmbXL3JBSChduGqCEHzF9F0YSymk 9qdIgxTk0VaqoFQeLt531XPgkeq450/h7oae/wJq9LWYp5KfzNgU0NngEJl5FSPf WhoIe8RfeoG4S50exbbkAoH7rWwwtFMOnz09E7GB43MkdgKCm9+G+6/Nx+TsuIOd +2tx28ppWbHUN0Os8ADsOzcFSPWse+V5HPdAv7LZBlI5tpFQHkN/auI30L8RNmGA ZwKNFYx8ZjWTQvMEc3kaKuVJVyVj5+5mfw2utoG77YM7iN+f08lIbkJF17YINdnT /LVzzFDMQW/Upw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:36:19 2025 by rpki-client