This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 0EUwo5MidCgiylpneUEnHjvIjjVk5YFx2+GZYco3Rmw= Subject key identifier: F3:E5:B1:B0:3D:41:78:C3:77:01:55:69:5D:B7:41:BA:45:8B:12:A3 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019ABA3ECEA05BDC946C0D36615DEC4540C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1066 Signing time: Tue 25 Nov 2025 09:01:09 +0000 Manifest this update: Tue 25 Nov 2025 09:01:09 +0000 Manifest next update: Wed 26 Nov 2025 09:01:09 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: u87bgqpn3Hj3y9RFngnTUAYlrv0XvVVQSBOm/sQUJ2A=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:3e:ce:a0:5b:dc:94:6c:0d:36:61:5d:ec:45:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 25 09:01:09 2025 GMT Not After : Nov 26 09:01:09 2025 GMT Subject: CN=f3e5b1b03d4178c3770155695db741ba458b12a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:3c:5c:9a:5c:c7:8f:3d:9d:bb:f7:5d:4e: 92:2f:97:45:20:44:af:fa:76:30:ed:8d:02:e8:07: 12:90:3f:d9:76:6e:f1:54:e3:92:fc:d0:61:7e:65: 7b:dd:90:ca:28:cd:74:f6:3a:7f:7a:21:66:b4:43: e7:fd:07:fb:36:1b:89:ef:74:4d:3a:9f:04:8a:51: 83:12:ba:24:cd:21:45:96:63:e3:8e:52:17:ad:95: 8c:ce:fc:9a:f0:04:97:f4:4d:f6:46:96:ea:0b:8f: 72:42:59:4d:b1:7b:0d:5b:93:4c:f2:db:21:a0:79: 55:64:03:d8:26:88:f9:ed:04:e5:35:57:5d:31:c9: 9f:a2:18:0c:cf:e2:6a:53:49:17:53:88:df:bb:f5: c4:0e:bb:73:3f:f0:4f:81:9c:1f:93:25:77:2d:02: eb:12:29:a3:78:d0:24:33:c5:7a:56:96:6c:67:30: 4f:cf:8d:40:01:0d:5d:e3:68:0e:c9:14:d7:0c:8f: 27:79:8d:cd:01:b0:1f:36:e5:a8:0b:69:b6:94:5f: 28:6e:f0:bd:68:72:8f:31:8c:81:b7:8e:05:b4:33: 94:a4:b1:b0:09:62:85:13:c9:47:41:dc:8e:ba:79: 93:33:99:d5:ec:e4:3f:9e:ea:ab:74:e7:39:e4:df: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:B1:B0:3D:41:78:C3:77:01:55:69:5D:B7:41:BA:45:8B:12:A3 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0c:da:a1:a3:64:7f:b5:81:36:16:1c:2a:fd:a9:43:f2:15: 98:28:62:ba:a6:00:59:f9:c0:48:3d:18:69:31:13:55:5d:c6: 40:cc:2d:be:38:f9:5b:13:8e:97:03:54:f5:5d:3b:70:c0:60: 7e:31:e8:75:ba:69:6f:5e:3e:8e:87:a4:5d:5d:e1:0e:10:dd: 63:be:65:6e:25:88:a4:e9:6b:06:4a:56:61:d7:15:67:0b:37: 88:ed:7c:ba:5d:3e:51:b0:b1:90:8d:7b:d2:a6:c6:77:e7:db: 44:7c:aa:1c:d6:0a:8d:45:03:83:d2:c6:d1:f7:d6:9e:25:ef: b6:2b:af:35:b7:4a:1c:b7:55:bc:d4:8d:f1:7d:f8:50:33:9e: 6f:ce:77:06:64:2e:4d:d8:25:f3:c9:7b:60:f2:80:b6:20:9d: 74:95:5f:c7:98:e2:5d:8d:79:61:c6:d7:3e:20:b4:05:6d:79: 94:cf:64:8b:d1:d2:f1:65:00:ff:39:a5:4b:a9:28:43:50:7c: 03:c3:a2:88:21:df:ed:db:53:97:1a:51:df:8d:b9:db:e8:53: 90:4b:12:07:ff:2c:c8:4b:cc:5a:60:17:29:f5:d9:ca:00:b0: d4:f1:96:68:73:11:f7:8a:81:f3:fc:57:14:28:92:2b:a1:78: 02:79:19:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6Ps6gW9yUbA02YV3sRUDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTI1MDkwMTA5WhcNMjUxMTI2MDkwMTA5WjAzMTEwLwYDVQQD EyhmM2U1YjFiMDNkNDE3OGMzNzcwMTU1Njk1ZGI3NDFiYTQ1OGIxMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrM8XJpcx489nbv3XU6SL5dFIESv +nYw7Y0C6AcSkD/Zdm7xVOOS/NBhfmV73ZDKKM109jp/eiFmtEPn/Qf7NhuJ73RN Op8EilGDErokzSFFlmPjjlIXrZWMzvya8ASX9E32RpbqC49yQllNsXsNW5NM8tsh oHlVZAPYJoj57QTlNVddMcmfohgMz+JqU0kXU4jfu/XEDrtzP/BPgZwfkyV3LQLr EimjeNAkM8V6VpZsZzBPz41AAQ1d42gOyRTXDI8neY3NAbAfNuWoC2m2lF8obvC9 aHKPMYyBt44FtDOUpLGwCWKFE8lHQdyOunmTM5nV7OQ/nuqrdOc55N/j/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPlsbA9QXjDdwFVaV23QbpFixKjMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwzaoaNk f7WBNhYcKv2pQ/IVmChiuqYAWfnASD0YaTETVV3GQMwtvjj5WxOOlwNU9V07cMBg fjHodbppb14+joekXV3hDhDdY75lbiWIpOlrBkpWYdcVZws3iO18ul0+UbCxkI17 0qbGd+fbRHyqHNYKjUUDg9LG0ffWniXvtiuvNbdKHLdVvNSN8X34UDOeb853BmQu Tdgl88l7YPKAtiCddJVfx5jiXY15YcbXPiC0BW15lM9ki9HS8WUA/zmlS6koQ1B8 A8OiiCHf7dtTlxpR34252+hTkEsSB/8syEvMWmAXKfXZygCw1PGWaHMR94qB8/xX FCiSK6F4AnkZtw== -----END CERTIFICATE-----Generated at Tue Nov 25 10:43:03 2025 by rpki-client