This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: /C9Cj6v1H22P0rpNzDHfZo97aY9j7EO5Q4XdxbIE+gc= Subject key identifier: 4A:2E:EB:13:C9:F6:F6:46:5E:E4:B0:C8:BE:47:21:76:3F:14:A1:A7 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B16F0C138E5C9A0AD72426DE751ABFEB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1096 Signing time: Sat 13 Dec 2025 09:00:35 +0000 Manifest this update: Sat 13 Dec 2025 09:00:35 +0000 Manifest next update: Sun 14 Dec 2025 09:00:35 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: aOZI1VfNjilwOTIymaxfOMSHz4mCS8ORbMh6OThNofQ=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:f0:c1:38:e5:c9:a0:ad:72:42:6d:e7:51:ab:fe:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 13 09:00:35 2025 GMT Not After : Dec 14 09:00:35 2025 GMT Subject: CN=4a2eeb13c9f6f6465ee4b0c8be4721763f14a1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ae:19:c7:9e:38:11:4a:31:12:68:ad:2a:75: 08:8c:b8:ba:e6:56:a1:23:c2:38:59:19:c4:9f:bf: 08:80:5c:49:7b:ec:3b:6e:6c:f8:16:07:0e:8e:c9: 27:71:9f:4f:2a:c1:86:b2:20:96:99:c7:35:33:9b: 23:f9:91:a6:63:ba:64:d4:b2:d5:29:31:ae:0f:53: c8:b7:9d:c4:d7:cd:e7:5c:f5:93:2e:95:44:04:4f: b6:73:64:aa:bc:0a:7b:27:dd:87:ba:bf:b1:28:fe: 1b:38:50:d9:e5:2d:63:8c:2a:7f:ae:14:d9:af:c6: 55:e0:86:f2:ea:c7:c4:ca:c1:f1:02:27:79:0d:eb: b6:1e:e7:59:c9:8c:51:1d:cf:fa:81:96:e8:41:cc: 2e:a3:10:82:37:b7:83:88:38:ca:92:24:c1:7d:cf: 20:e6:43:38:62:1f:03:5f:2b:bd:02:b1:7a:67:c0: c7:3e:6c:59:91:29:de:98:1a:62:81:a3:e8:8c:36: c2:8d:dd:ca:4c:73:b2:e0:6f:73:15:37:33:29:68: 51:07:a9:92:99:7d:9f:fa:72:2f:19:af:0e:6e:9e: dc:27:d5:bf:3c:f4:56:4f:5a:5f:c7:83:57:9e:ab: b5:c1:e8:18:34:ad:4a:28:4b:b5:77:87:10:e6:d7: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2E:EB:13:C9:F6:F6:46:5E:E4:B0:C8:BE:47:21:76:3F:14:A1:A7 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:50:fc:dd:b0:a4:6c:72:27:ac:8b:5e:ad:89:1b:09:83:e1: d6:81:34:1a:83:1f:2e:78:b3:ba:dd:da:60:fa:44:0f:55:c9: 51:fa:ef:2d:01:cf:ec:b3:df:17:6d:5b:ca:f5:a2:33:8b:a7: f5:31:3f:57:c3:2f:52:aa:50:3d:3a:40:20:09:9f:e5:a4:ca: d8:97:0f:e9:44:62:e5:e6:34:f9:6a:5d:8c:fa:64:e2:6c:0c: 2b:a5:61:14:7a:ab:bb:da:e2:79:6c:9f:7e:b2:d9:d5:83:44: a4:28:46:5d:54:6b:27:17:bf:86:db:77:08:c2:7d:f1:e9:4e: c1:dc:2a:b7:04:d8:ac:07:5c:d9:44:d1:7d:b6:4a:19:37:b6: dd:9d:36:4c:93:f6:1e:8b:9e:26:2b:09:8f:ea:09:f3:ee:73: c9:74:7f:60:d8:48:3a:46:b5:e7:ce:35:df:51:23:ac:a2:70: bb:35:62:42:4f:72:09:50:5e:30:2b:83:cd:e0:41:af:f6:d2: 4b:b3:8c:c0:ef:64:8c:15:42:02:7b:a6:db:16:48:a9:4e:1e: 55:b9:a0:d2:0c:b4:a9:58:4d:a3:14:4c:e0:c1:17:76:15:77: 55:1e:1a:b9:f0:4d:6a:67:22:85:d6:45:cb:a0:ee:b4:d3:7f: f4:66:2c:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsW8ME45cmgrXJCbedRq/65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjEzMDkwMDM1WhcNMjUxMjE0MDkwMDM1WjAzMTEwLwYDVQQD Eyg0YTJlZWIxM2M5ZjZmNjQ2NWVlNGIwYzhiZTQ3MjE3NjNmMTRhMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA564Zx544EUoxEmitKnUIjLi65lah I8I4WRnEn78IgFxJe+w7bmz4FgcOjskncZ9PKsGGsiCWmcc1M5sj+ZGmY7pk1LLV KTGuD1PIt53E183nXPWTLpVEBE+2c2SqvAp7J92Hur+xKP4bOFDZ5S1jjCp/rhTZ r8ZV4Iby6sfEysHxAid5Deu2HudZyYxRHc/6gZboQcwuoxCCN7eDiDjKkiTBfc8g 5kM4Yh8DXyu9ArF6Z8DHPmxZkSnemBpigaPojDbCjd3KTHOy4G9zFTczKWhRB6mS mX2f+nIvGa8Obp7cJ9W/PPRWT1pfx4NXnqu1wegYNK1KKEu1d4cQ5tdPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEou6xPJ9vZGXuSwyL5HIXY/FKGnMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVD83bCk bHInrIterYkbCYPh1oE0GoMfLnizut3aYPpED1XJUfrvLQHP7LPfF21byvWiM4un 9TE/V8MvUqpQPTpAIAmf5aTK2JcP6URi5eY0+WpdjPpk4mwMK6VhFHqru9rieWyf frLZ1YNEpChGXVRrJxe/htt3CMJ98elOwdwqtwTYrAdc2UTRfbZKGTe23Z02TJP2 HoueJisJj+oJ8+5zyXR/YNhIOka1584131EjrKJwuzViQk9yCVBeMCuDzeBBr/bS S7OMwO9kjBVCAnum2xZIqU4eVbmg0gy0qVhNoxRM4MEXdhV3VR4aufBNamcihdZF y6DutNN/9GYsdA== -----END CERTIFICATE-----Generated at Sat Dec 13 17:35:17 2025 by rpki-client