This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: Rq65r7F42VsQtBXWQr9dv0kLYM48i/HS2/AUx1/BMRo= Subject key identifier: B0:CA:54:0B:80:0C:F3:42:D1:03:34:F6:34:9E:7D:02:6C:18:B5:F9 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B0D49817AF96A7FC8DC8D9C0E251D66BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1091 Signing time: Thu 11 Dec 2025 12:01:19 +0000 Manifest this update: Thu 11 Dec 2025 12:01:19 +0000 Manifest next update: Fri 12 Dec 2025 12:01:19 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 620NnDYVDy5eb0QHsbqskcS0ACA+KwSxIPOEMnXe49Y=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:81:7a:f9:6a:7f:c8:dc:8d:9c:0e:25:1d:66:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 11 12:01:19 2025 GMT Not After : Dec 12 12:01:19 2025 GMT Subject: CN=b0ca540b800cf342d10334f6349e7d026c18b5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:5c:17:bc:17:ca:ba:44:a7:d5:08:15:62: 81:09:0d:56:eb:7a:09:b6:89:43:a6:4b:b2:6c:bf: eb:d1:b9:0e:e2:c1:8e:f2:78:6d:b6:33:83:4f:55: b2:ab:c9:af:33:34:9f:47:78:0c:fd:9e:76:fb:8e: 1c:ec:5b:19:27:1c:1d:26:c5:a2:f2:91:f6:50:01: 40:11:1d:04:0a:b3:5e:10:ff:a5:8e:3b:3a:13:7f: c6:2d:3d:aa:a7:0a:9c:52:b1:d6:c3:5e:80:fe:8f: d7:b6:d2:b4:51:da:16:f1:1f:db:80:39:59:83:64: 5e:84:71:09:b2:4e:39:30:0c:78:1a:0c:a9:6b:79: 86:a8:75:a9:8e:ed:ff:32:6c:7a:ed:f9:ff:b4:72: 20:da:51:34:39:0d:e3:a5:27:f5:fa:c8:f3:60:5d: 3b:58:e4:8b:37:5a:60:52:bc:dc:29:23:e4:82:2a: 9f:6b:66:1f:50:1f:d6:8d:04:b7:0e:7e:71:22:63: f2:4f:c4:7c:64:b4:d0:5d:88:e8:57:9a:46:fb:a1: ba:0f:3b:95:a2:7d:5a:b2:88:5f:83:d0:9f:cf:a4: 04:18:8c:73:32:c0:43:f8:9b:f9:1d:48:9d:15:a0: 8b:c0:1b:0d:93:7d:e7:c0:05:e4:bb:88:f5:eb:69: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CA:54:0B:80:0C:F3:42:D1:03:34:F6:34:9E:7D:02:6C:18:B5:F9 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f2:ad:a4:79:d6:25:73:6e:cd:c7:44:a0:1c:98:1e:44:42: d4:30:ec:40:19:7c:6a:d5:83:91:19:9e:97:15:bb:28:4c:52: 3e:75:d6:0b:ec:96:88:52:3c:6e:ec:ea:fa:e1:23:4e:cb:88: 1b:26:af:2a:32:16:4c:15:2e:fd:c0:82:73:5c:ad:87:5d:eb: 81:1d:87:8d:72:d1:d3:4a:c5:62:62:95:e9:2b:35:ea:94:66: 31:47:2e:0f:b7:37:64:53:bf:5b:de:f5:75:be:01:a7:35:78: e4:26:ce:1e:54:06:33:17:25:a7:21:ab:b2:a4:96:d1:62:8e: 9e:c5:a3:7a:20:32:26:fc:9d:7f:62:f7:07:c1:b7:20:ed:e3: 7b:23:85:c7:88:c9:15:38:04:d8:d3:e8:27:12:ed:50:06:71: a4:ff:50:91:d1:19:6b:26:cb:2f:e3:77:b8:55:97:c1:d3:b8: c3:83:f4:60:e4:39:18:18:11:b3:54:b5:d6:8d:3f:38:ab:9a: 5f:6b:c7:e5:09:7f:b5:da:e9:09:2d:46:3c:b5:83:7d:fc:9e: 26:72:84:01:9f:af:43:26:b0:8a:af:1f:ef:b0:e7:9d:1b:34: 96:3f:6c:6e:db:86:21:86:19:ee:eb:ac:68:d4:a8:6e:cc:ab: 72:68:72:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSYF6+Wp/yNyNnA4lHWa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjExMTIwMTE5WhcNMjUxMjEyMTIwMTE5WjAzMTEwLwYDVQQD EyhiMGNhNTQwYjgwMGNmMzQyZDEwMzM0ZjYzNDllN2QwMjZjMThiNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRNcF7wXyrpEp9UIFWKBCQ1W63oJ tolDpkuybL/r0bkO4sGO8nhttjODT1Wyq8mvMzSfR3gM/Z52+44c7FsZJxwdJsWi 8pH2UAFAER0ECrNeEP+ljjs6E3/GLT2qpwqcUrHWw16A/o/XttK0UdoW8R/bgDlZ g2RehHEJsk45MAx4Ggypa3mGqHWpju3/Mmx67fn/tHIg2lE0OQ3jpSf1+sjzYF07 WOSLN1pgUrzcKSPkgiqfa2YfUB/WjQS3Dn5xImPyT8R8ZLTQXYjoV5pG+6G6DzuV on1asohfg9Cfz6QEGIxzMsBD+Jv5HUidFaCLwBsNk33nwAXku4j162mHtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDKVAuADPNC0QM09jSefQJsGLX5MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvKtpHnW JXNuzcdEoByYHkRC1DDsQBl8atWDkRmelxW7KExSPnXWC+yWiFI8buzq+uEjTsuI GyavKjIWTBUu/cCCc1yth13rgR2HjXLR00rFYmKV6Ss16pRmMUcuD7c3ZFO/W971 db4BpzV45CbOHlQGMxclpyGrsqSW0WKOnsWjeiAyJvydf2L3B8G3IO3jeyOFx4jJ FTgE2NPoJxLtUAZxpP9QkdEZaybLL+N3uFWXwdO4w4P0YOQ5GBgRs1S11o0/OKua X2vH5Ql/tdrpCS1GPLWDffyeJnKEAZ+vQyawiq8f77DnnRs0lj9sbtuGIYYZ7uus aNSobsyrcmhyUw== -----END CERTIFICATE-----Generated at Thu Dec 11 21:13:53 2025 by rpki-client