This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: OqDf9NPlpn4DSphzvH2xE1MbSn4U+neutpd6pCN0RRQ= Subject key identifier: 8D:B1:BB:FD:1C:E5:9D:21:32:97:72:F0:54:7D:74:D7:98:E5:91:65 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B52CEC301ED9179D1BBAC3B1792EC88DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10B5 Signing time: Thu 25 Dec 2025 00:00:40 +0000 Manifest this update: Thu 25 Dec 2025 00:00:40 +0000 Manifest next update: Fri 26 Dec 2025 00:00:40 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: Q+jmzJn3K2x7KHX/ojuk0/GF04Jaq3TW9cya73hBxFA=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:c3:01:ed:91:79:d1:bb:ac:3b:17:92:ec:88:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 25 00:00:40 2025 GMT Not After : Dec 26 00:00:40 2025 GMT Subject: CN=8db1bbfd1ce59d21329772f0547d74d798e59165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:06:3c:8b:1b:24:74:e8:e9:96:dd:ce:e4: ba:1a:52:7e:46:18:7e:6e:6e:0d:e7:83:c9:bf:6e: 6a:22:ea:3f:2d:32:d3:16:ec:68:45:9d:c6:66:fd: 99:f0:14:64:65:52:84:dc:68:32:c8:24:4f:8d:ed: fb:8d:4c:4b:08:78:d9:e7:7d:27:9f:6e:d5:7b:d6: b9:0b:31:ca:aa:d0:56:a6:8c:49:8a:a3:45:19:df: ba:50:6d:2d:c1:b2:d3:3a:70:d1:5e:69:62:3b:8c: fe:60:33:9b:3d:b7:9f:44:53:08:1c:62:9e:76:84: 0b:19:f9:c4:62:05:75:80:d5:f8:86:1f:5b:57:8f: 2b:63:51:99:d5:39:56:86:39:f2:75:4a:3d:ca:b5: 2b:4b:e2:51:93:12:eb:9f:9e:2d:e7:c3:cb:74:f5: f7:48:53:be:7d:48:1d:25:bb:22:fd:8f:cb:af:22: a8:a6:ee:dc:9e:e1:6f:88:42:ae:1e:f6:ed:a2:9b: ea:a5:61:87:7b:8a:7e:3d:06:06:3e:ab:94:8c:32: 15:8c:d2:6c:3f:80:a5:1d:d7:4b:07:fe:e4:85:98: dd:77:df:f2:b8:84:68:a6:a2:e9:a0:d2:ba:29:31: 35:c4:25:9a:16:68:7c:06:f4:87:05:0f:60:ff:6d: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:BB:FD:1C:E5:9D:21:32:97:72:F0:54:7D:74:D7:98:E5:91:65 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:46:8c:2b:19:60:2e:e1:f7:83:bd:94:57:da:c9:ce:ef:e3: 5d:95:94:1c:4d:ee:7b:1e:56:da:60:d3:c2:35:45:92:21:28: 85:53:fe:d0:19:11:fb:c6:dc:01:3a:ae:18:21:42:cc:77:2c: d3:ac:93:7d:aa:c5:ec:4f:34:08:01:4e:8c:28:b7:31:ff:74: 00:be:e8:02:19:2d:6e:d2:77:45:8f:48:ff:dc:8b:0b:2e:b8: df:15:83:f6:56:b1:c7:0b:1a:70:63:a2:45:66:b9:6b:e4:67: c5:b7:5a:f6:e7:61:23:58:c9:5f:7b:be:86:d0:d4:bc:44:cf: 61:18:a0:3f:27:8e:e6:1f:f5:eb:06:c0:6c:7d:8e:95:07:08: 0f:a4:42:ba:3e:3a:f5:8c:52:9a:cf:67:4f:ab:1a:34:00:a3: d2:05:7c:47:c2:85:01:19:f1:9a:72:f5:44:8e:91:f3:83:c6: ba:e1:0b:2a:5d:b1:b0:a9:8c:1b:58:3a:18:e0:b8:bf:fb:ed: 8e:6e:18:c8:9c:e1:7a:03:bc:f1:a1:c9:d6:77:72:5e:48:b1: 35:95:64:70:7d:63:5e:34:ec:56:d1:8f:8c:aa:f4:6b:07:c2: f1:ca:4d:38:bb:d3:12:13:bb:8d:5f:e3:db:83:40:e9:f2:b3: 9c:b6:66:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzsMB7ZF50busOxeS7IjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjI1MDAwMDQwWhcNMjUxMjI2MDAwMDQwWjAzMTEwLwYDVQQD Eyg4ZGIxYmJmZDFjZTU5ZDIxMzI5NzcyZjA1NDdkNzRkNzk4ZTU5MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMAGPIsbJHTo6ZbdzuS6GlJ+Rhh+ bm4N54PJv25qIuo/LTLTFuxoRZ3GZv2Z8BRkZVKE3GgyyCRPje37jUxLCHjZ530n n27Ve9a5CzHKqtBWpoxJiqNFGd+6UG0twbLTOnDRXmliO4z+YDObPbefRFMIHGKe doQLGfnEYgV1gNX4hh9bV48rY1GZ1TlWhjnydUo9yrUrS+JRkxLrn54t58PLdPX3 SFO+fUgdJbsi/Y/LryKopu7cnuFviEKuHvbtopvqpWGHe4p+PQYGPquUjDIVjNJs P4ClHddLB/7khZjdd9/yuIRopqLpoNK6KTE1xCWaFmh8BvSHBQ9g/20eaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2xu/0c5Z0hMpdy8FR9dNeY5ZFlMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkaMKxlg LuH3g72UV9rJzu/jXZWUHE3uex5W2mDTwjVFkiEohVP+0BkR+8bcATquGCFCzHcs 06yTfarF7E80CAFOjCi3Mf90AL7oAhktbtJ3RY9I/9yLCy643xWD9laxxwsacGOi RWa5a+Rnxbda9udhI1jJX3u+htDUvETPYRigPyeO5h/16wbAbH2OlQcID6RCuj46 9YxSms9nT6saNACj0gV8R8KFARnxmnL1RI6R84PGuuELKl2xsKmMG1g6GOC4v/vt jm4YyJzhegO88aHJ1ndyXkixNZVkcH1jXjTsVtGPjKr0awfC8cpNOLvTEhO7jV/j 24NA6fKznLZm9Q== -----END CERTIFICATE-----Generated at Thu Dec 25 09:05:38 2025 by rpki-client