This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: FjCBuQ/YDFDMxrjLSyHCRjmCzjMd3hpCyG6GwS5tbQ8= Subject key identifier: E6:13:4A:BD:A2:88:C2:59:90:0F:67:66:E2:FA:17:36:6C:B1:D5:80 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B2475ADDE024FE7015728F46831015419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 109D Signing time: Tue 16 Dec 2025 00:00:50 +0000 Manifest this update: Tue 16 Dec 2025 00:00:50 +0000 Manifest next update: Wed 17 Dec 2025 00:00:50 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: +8Z68ogZ2ji5H65lDQIM6DYLNUBYwzI0PItaehJA28U=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:ad:de:02:4f:e7:01:57:28:f4:68:31:01:54:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 16 00:00:50 2025 GMT Not After : Dec 17 00:00:50 2025 GMT Subject: CN=e6134abda288c259900f6766e2fa17366cb1d580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:26:64:03:55:9a:af:80:a8:73:68:c4:91: 33:a3:31:e6:b2:ef:a6:73:0d:fe:37:a0:0c:66:f0: c7:20:e1:90:a0:bd:db:98:f5:5b:21:8e:e1:c3:88: 47:ee:b4:8f:38:11:7c:63:c6:89:1a:75:f9:ab:01: 3a:ea:2d:69:2b:9a:16:b2:b0:06:39:46:c8:3b:87: 0d:5c:ab:91:67:73:fb:94:3b:c6:9b:58:d4:0a:a6: 57:8b:02:47:75:d8:8f:ff:62:29:1b:aa:d8:eb:cc: f7:6a:50:5c:49:47:d7:a5:d1:bb:05:56:fa:0e:5f: 74:ca:a0:b1:5f:79:df:b1:89:94:d9:60:3a:0e:57: 91:23:a3:b9:1c:86:be:9f:74:01:11:ca:11:6b:d4: b6:82:d8:52:9f:9b:2f:8f:a9:b0:9e:c7:bc:b8:23: 24:d5:46:aa:53:e7:09:37:32:63:7a:4a:1a:4d:5d: be:3f:35:12:5d:97:03:70:31:26:7a:98:25:37:86: 0d:69:31:87:6f:03:91:dd:9e:4f:48:94:66:96:6e: a0:cb:ec:00:9e:fb:a7:4c:49:e2:5f:0e:2b:b6:3e: 0d:b1:43:ef:ba:57:21:be:aa:98:4a:d8:e9:66:26: 30:e0:79:bf:91:71:34:ec:be:7e:33:93:77:fd:fa: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:13:4A:BD:A2:88:C2:59:90:0F:67:66:E2:FA:17:36:6C:B1:D5:80 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4c:98:f5:f7:0a:53:69:a0:64:60:6f:72:8e:31:9d:18:08: f0:8b:c5:5d:76:bb:17:ba:a6:f6:44:fb:8d:65:9a:c0:4d:5c: bf:28:ea:85:ec:45:e9:33:01:36:a7:25:bb:4f:6d:b4:19:b4: 6f:5a:9d:2e:85:39:5a:25:7d:06:da:d9:b6:67:c4:69:61:e5: 59:23:50:a1:43:46:b5:1e:95:e5:5d:19:a2:60:40:18:83:7c: 69:e6:4a:11:89:09:af:a7:0b:c4:86:17:ae:5a:cc:d3:8c:d4: ba:00:aa:ea:77:47:07:2b:63:6e:5a:5c:6f:29:b6:57:77:de: 3b:1d:28:10:a1:26:26:ed:80:99:86:a4:eb:16:cc:7f:06:c2: 33:ff:b0:99:51:73:0e:db:51:52:a6:73:2c:5a:c1:32:e4:1a: b9:d9:43:f2:b2:93:cf:56:e2:bb:05:1a:52:8f:38:d1:c3:03: ee:e2:80:c2:0e:98:f9:da:ef:bc:c5:79:fe:25:20:35:ca:c3: 20:5a:54:98:97:1f:0e:3f:11:3a:a6:dc:6d:a2:a8:5a:59:48: 31:36:db:ee:65:f5:d5:a2:a9:23:cb:2f:02:4f:89:e0:d9:0d: b3:9f:8d:89:e9:c9:67:60:eb:84:8b:10:9b:d4:5d:72:12:e9: 7e:e3:a3:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskda3eAk/nAVco9GgxAVQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjE2MDAwMDUwWhcNMjUxMjE3MDAwMDUwWjAzMTEwLwYDVQQD EyhlNjEzNGFiZGEyODhjMjU5OTAwZjY3NjZlMmZhMTczNjZjYjFkNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEYmZANVmq+AqHNoxJEzozHmsu+m cw3+N6AMZvDHIOGQoL3bmPVbIY7hw4hH7rSPOBF8Y8aJGnX5qwE66i1pK5oWsrAG OUbIO4cNXKuRZ3P7lDvGm1jUCqZXiwJHddiP/2IpG6rY68z3alBcSUfXpdG7BVb6 Dl90yqCxX3nfsYmU2WA6DleRI6O5HIa+n3QBEcoRa9S2gthSn5svj6mwnse8uCMk 1UaqU+cJNzJjekoaTV2+PzUSXZcDcDEmepglN4YNaTGHbwOR3Z5PSJRmlm6gy+wA nvunTEniXw4rtj4NsUPvulchvqqYStjpZiYw4Hm/kXE07L5+M5N3/fqSlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYTSr2iiMJZkA9nZuL6FzZssdWAMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0yY9fcK U2mgZGBvco4xnRgI8IvFXXa7F7qm9kT7jWWawE1cvyjqhexF6TMBNqclu09ttBm0 b1qdLoU5WiV9BtrZtmfEaWHlWSNQoUNGtR6V5V0ZomBAGIN8aeZKEYkJr6cLxIYX rlrM04zUugCq6ndHBytjblpcbym2V3feOx0oEKEmJu2AmYak6xbMfwbCM/+wmVFz DttRUqZzLFrBMuQaudlD8rKTz1biuwUaUo840cMD7uKAwg6Y+drvvMV5/iUgNcrD IFpUmJcfDj8ROqbcbaKoWllIMTbb7mX11aKpI8svAk+J4NkNs5+NienJZ2DrhIsQ m9RdchLpfuOj4A== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:33 2025 by rpki-client