This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: yS2iMEqMxzTq/0xtmxEr2H1QLH+q74R1T3FiX8uupPo= Subject key identifier: 51:D5:42:09:48:05:AA:B1:D6:06:77:3F:20:CF:3F:55:B6:BA:07:79 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B4D039B8DFF72D0433F34EDE75BDA29F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10B2 Signing time: Tue 23 Dec 2025 21:00:40 +0000 Manifest this update: Tue 23 Dec 2025 21:00:40 +0000 Manifest next update: Wed 24 Dec 2025 21:00:40 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: Sd+vh/vncrpMz+ZgAmXU26G84To4JfqhKB0QLSbRtvs=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:9b:8d:ff:72:d0:43:3f:34:ed:e7:5b:da:29:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 23 21:00:40 2025 GMT Not After : Dec 24 21:00:40 2025 GMT Subject: CN=51d542094805aab1d606773f20cf3f55b6ba0779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9e:6f:0e:84:4c:6f:7e:0a:07:56:ed:e8:c8: 01:7c:9a:4d:8a:80:c6:4c:01:62:13:a7:82:ce:1a: 8c:53:f4:e0:0b:02:76:49:8c:9a:09:ad:dd:04:f2: f0:d9:0b:08:d7:ea:89:3b:cb:78:c9:99:28:30:be: f5:d7:60:9c:49:6c:b5:d4:06:93:70:5e:b5:3f:ee: f2:82:56:47:9c:d3:d9:79:33:d6:2d:e6:16:8d:a8: a3:d4:80:24:7e:bd:fe:3e:f3:28:49:b0:71:2d:e6: 9e:5a:54:ac:cd:eb:15:d6:09:88:7e:3f:ce:e4:70: fb:d4:6d:2f:7a:ff:65:c6:2d:62:a2:9a:7a:c9:28: de:23:c2:44:c0:75:e8:1b:19:b0:4b:6f:dd:f9:ab: 76:27:4a:f3:74:12:73:a0:bf:e3:78:2b:51:69:f8: 56:0a:73:a9:6c:9c:75:20:d9:71:93:65:cf:8c:67: 52:fd:9c:1e:d3:03:55:7d:49:1b:76:8b:85:3a:30: ef:3c:b6:4c:66:96:93:1f:17:ef:44:a6:0c:06:a4: 13:50:bf:83:50:4a:bb:d3:ee:91:52:30:71:0c:df: 7a:28:5d:06:02:b4:24:48:c0:48:56:95:d8:c6:63: 80:a8:c4:7a:e9:65:b1:3a:e2:b5:55:1b:54:58:a0: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D5:42:09:48:05:AA:B1:D6:06:77:3F:20:CF:3F:55:B6:BA:07:79 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:24:5d:1d:98:f3:82:4c:57:73:52:b9:38:a2:f2:0c:22:7b: 58:0d:6a:4a:a9:af:0f:34:92:78:8a:53:c4:1c:5b:a8:c7:78: 73:7c:77:06:5c:e1:9f:04:47:f6:9e:75:7a:ee:8a:f1:36:9c: cc:24:91:d9:22:7e:2d:b6:79:e1:eb:e7:f3:0f:13:b9:a5:27: 8b:49:43:01:90:58:cf:93:d7:4e:f8:0e:2f:d6:f5:de:25:56: eb:22:08:ec:2d:a6:0c:e3:25:88:f5:e4:37:ee:30:e0:6b:e3: d4:a4:91:50:b0:e0:b9:e1:13:7c:e6:e1:49:5d:bf:5a:9e:c0: 68:96:7e:4d:d8:02:29:68:ac:c7:11:3b:03:4d:22:ba:44:20: eb:ae:3a:6d:2b:55:f5:bc:66:74:51:0a:65:38:4b:8c:c0:e6: e3:5d:78:b4:15:b7:a8:1b:f0:bf:61:c9:d0:ed:1d:2a:13:77: 05:f1:30:b1:3b:2d:6a:ea:65:80:a2:57:10:c0:98:87:03:9a: 75:27:3c:7e:55:88:93:0f:ab:4c:fa:85:5b:c5:ef:06:b0:f0: 28:78:d3:7c:4f:c1:b3:ba:7b:dc:39:64:55:db:07:18:cb:8c: e2:24:7e:00:29:67:e7:67:97:4f:8c:f2:12:f7:49:ce:b7:a2: eb:0b:ae:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA5uN/3LQQz807edb2in3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjIzMjEwMDQwWhcNMjUxMjI0MjEwMDQwWjAzMTEwLwYDVQQD Eyg1MWQ1NDIwOTQ4MDVhYWIxZDYwNjc3M2YyMGNmM2Y1NWI2YmEwNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi55vDoRMb34KB1bt6MgBfJpNioDG TAFiE6eCzhqMU/TgCwJ2SYyaCa3dBPLw2QsI1+qJO8t4yZkoML7112CcSWy11AaT cF61P+7yglZHnNPZeTPWLeYWjaij1IAkfr3+PvMoSbBxLeaeWlSszesV1gmIfj/O 5HD71G0vev9lxi1iopp6ySjeI8JEwHXoGxmwS2/d+at2J0rzdBJzoL/jeCtRafhW CnOpbJx1INlxk2XPjGdS/Zwe0wNVfUkbdouFOjDvPLZMZpaTHxfvRKYMBqQTUL+D UEq70+6RUjBxDN96KF0GArQkSMBIVpXYxmOAqMR66WWxOuK1VRtUWKCgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHVQglIBaqx1gZ3PyDPP1W2ugd5MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSRdHZjz gkxXc1K5OKLyDCJ7WA1qSqmvDzSSeIpTxBxbqMd4c3x3BlzhnwRH9p51eu6K8Tac zCSR2SJ+LbZ54evn8w8TuaUni0lDAZBYz5PXTvgOL9b13iVW6yII7C2mDOMliPXk N+4w4Gvj1KSRULDgueETfObhSV2/Wp7AaJZ+TdgCKWisxxE7A00iukQg6646bStV 9bxmdFEKZThLjMDm4114tBW3qBvwv2HJ0O0dKhN3BfEwsTstauplgKJXEMCYhwOa dSc8flWIkw+rTPqFW8XvBrDwKHjTfE/Bs7p73DlkVdsHGMuM4iR+ACln52eXT4zy EvdJzrei6wuuCg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:08:07 2025 by rpki-client