This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: Oj4GbbSoPMmazlpufTTGi8Ida7e67qbL7dt660Iprgk= Subject key identifier: 5E:B3:D4:84:F4:3A:4F:DC:31:72:6E:61:E2:44:F7:1D:45:D6:9D:B0 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B2C2FA4E2A14F3DA366670E7498D78800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10A1 Signing time: Wed 17 Dec 2025 12:01:18 +0000 Manifest this update: Wed 17 Dec 2025 12:01:18 +0000 Manifest next update: Thu 18 Dec 2025 12:01:18 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: aEceyQc2J68MPi+Gfeot2ePrGATTH3faQXIkuAsXokM=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a4:e2:a1:4f:3d:a3:66:67:0e:74:98:d7:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 17 12:01:18 2025 GMT Not After : Dec 18 12:01:18 2025 GMT Subject: CN=5eb3d484f43a4fdc31726e61e244f71d45d69db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:25:60:2b:f3:20:9b:08:e2:de:3b:ef:dd: 25:9f:d8:bc:5e:b6:a2:4e:6a:0c:92:8e:12:c1:ea: f3:6f:12:b5:81:4d:94:1e:0b:ef:8d:34:63:d3:92: c3:27:db:b0:48:47:bd:ad:b2:14:9a:e9:35:f7:6c: 4c:6d:a8:e9:3f:a6:4d:4d:3d:2d:5c:8f:7a:86:cc: a0:b6:56:62:6f:ad:99:c5:c1:2e:55:f7:1e:01:c4: df:96:cf:ef:ce:b4:c6:64:8b:4d:0c:82:4b:9a:cb: 85:f3:03:96:89:57:05:3f:68:ac:1a:20:d9:03:34: 7c:a3:d8:3f:d9:37:46:63:ab:64:51:64:35:b0:f5: f8:09:26:19:c6:35:5c:cc:38:b1:f5:8a:d1:16:fe: 35:8b:24:95:e0:8d:c4:b0:bc:e2:99:d3:a6:4d:6b: ae:f8:4a:24:ee:cd:da:56:8d:f1:65:16:89:b3:7e: b6:1c:39:d1:a8:1a:b4:e7:12:71:4e:d9:b5:9f:28: 10:5c:c8:59:03:9f:67:91:e5:5c:38:c4:86:04:2b: e2:92:38:6e:61:ac:56:4e:81:a5:58:98:2b:a0:c9: e3:75:f6:39:99:56:c8:c8:9e:16:6a:6e:74:aa:3c: 1b:20:74:e8:3c:c5:f1:82:07:27:37:3c:92:66:d7: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:D4:84:F4:3A:4F:DC:31:72:6E:61:E2:44:F7:1D:45:D6:9D:B0 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0d:de:2b:1c:37:9e:80:a8:33:bf:5c:19:e6:fd:44:46:85: e8:45:c6:c0:c8:a5:8b:0c:89:d4:73:d2:e3:c8:da:f6:55:ff: d4:5f:e6:b1:f0:2b:b2:f1:cc:1b:6d:31:24:48:08:d9:e7:9f: 63:f8:e6:5f:38:7a:c5:20:7d:d1:11:80:31:26:59:dc:68:14: 3b:b4:e9:6e:ab:f0:bc:0b:ec:89:f6:97:3a:df:45:74:7e:e4: 4e:0a:ac:f2:d9:0b:a1:12:4d:5b:f1:0a:46:be:45:4d:28:81: 49:5e:f3:58:08:ce:b2:ba:d2:f3:5c:2f:f4:7a:75:86:a1:29: e4:c9:ca:b9:8f:39:65:fb:47:e1:3b:a3:d2:00:c3:bb:97:a9: e4:ba:01:c8:a8:ee:86:ce:10:d5:37:3a:72:e8:c9:fc:19:04: cf:0d:a9:30:dd:56:3f:21:55:24:e0:64:8b:4d:51:2d:bd:5b: 1d:4e:7c:a7:09:a2:64:24:d2:a3:f6:9f:18:46:69:fa:a5:60: e6:b7:09:50:b8:7d:93:1d:20:74:58:38:5d:08:28:d2:53:8f: 9a:71:d0:0b:ad:05:e6:fc:d8:4d:25:d8:cf:41:cb:9f:e7:cd: 11:2d:2d:87:54:eb:bf:f1:2e:96:97:af:eb:1f:69:7f:cc:45: 32:98:fd:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6TioU89o2ZnDnSY14gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjE3MTIwMTE4WhcNMjUxMjE4MTIwMTE4WjAzMTEwLwYDVQQD Eyg1ZWIzZDQ4NGY0M2E0ZmRjMzE3MjZlNjFlMjQ0ZjcxZDQ1ZDY5ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweslYCvzIJsI4t47790ln9i8Xrai TmoMko4SwerzbxK1gU2UHgvvjTRj05LDJ9uwSEe9rbIUmuk192xMbajpP6ZNTT0t XI96hsygtlZib62ZxcEuVfceAcTfls/vzrTGZItNDIJLmsuF8wOWiVcFP2isGiDZ AzR8o9g/2TdGY6tkUWQ1sPX4CSYZxjVczDix9YrRFv41iySV4I3EsLzimdOmTWuu +Eok7s3aVo3xZRaJs362HDnRqBq05xJxTtm1nygQXMhZA59nkeVcOMSGBCvikjhu YaxWToGlWJgroMnjdfY5mVbIyJ4Wam50qjwbIHToPMXxggcnNzySZtctPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6z1IT0Ok/cMXJuYeJE9x1F1p2wMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw3eKxw3 noCoM79cGeb9REaF6EXGwMiliwyJ1HPS48ja9lX/1F/msfArsvHMG20xJEgI2eef Y/jmXzh6xSB90RGAMSZZ3GgUO7TpbqvwvAvsifaXOt9FdH7kTgqs8tkLoRJNW/EK Rr5FTSiBSV7zWAjOsrrS81wv9Hp1hqEp5MnKuY85ZftH4Tuj0gDDu5ep5LoByKju hs4Q1Tc6cujJ/BkEzw2pMN1WPyFVJOBki01RLb1bHU58pwmiZCTSo/afGEZp+qVg 5rcJULh9kx0gdFg4XQgo0lOPmnHQC60F5vzYTSXYz0HLn+fNES0th1Trv/Eulpev 6x9pf8xFMpj9uQ== -----END CERTIFICATE-----Generated at Wed Dec 17 14:36:11 2025 by rpki-client