This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: Ta4aJj5JI5UewQQtw9S/A8G/RiHSM+ZaNt4cPe+SjcQ= Subject key identifier: D5:5B:A8:6E:D3:4A:E6:C7:42:3D:22:28:E4:1E:F6:F4:52:D3:F5:11 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B28529C7A996D967DB8183CE8358B448D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 109F Signing time: Tue 16 Dec 2025 18:01:01 +0000 Manifest this update: Tue 16 Dec 2025 18:01:01 +0000 Manifest next update: Wed 17 Dec 2025 18:01:01 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: epNTjecw2RBeDN0LNIJGNL/7soctVtAqPoxs3rBKYyU=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:9c:7a:99:6d:96:7d:b8:18:3c:e8:35:8b:44:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 16 18:01:01 2025 GMT Not After : Dec 17 18:01:01 2025 GMT Subject: CN=d55ba86ed34ae6c7423d2228e41ef6f452d3f511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:2d:41:96:1c:cd:85:7c:f3:d9:1d:6e:1d: f8:8d:23:71:ed:ef:30:e8:9d:a5:e4:4d:36:2b:43: 91:5e:5a:3d:e3:eb:41:54:69:fc:1f:8c:97:3d:31: 11:e6:f3:0e:e0:7e:b7:b1:1e:14:87:26:25:b5:9a: 44:40:5b:f5:8c:f2:46:da:e6:62:4a:b6:c3:ea:fe: 2a:e2:1f:58:7b:68:c6:fa:c6:f3:f4:5a:25:60:91: 95:60:24:4e:b8:c4:92:80:90:92:56:b1:49:36:a3: 32:81:03:a5:5d:9a:f7:c0:ca:60:e0:66:96:65:89: f0:42:11:43:10:ac:40:66:8d:02:52:05:ef:a9:1b: d1:c8:29:c5:8e:e3:65:85:5c:08:16:38:d0:8e:04: 9a:de:48:b5:88:5b:ef:fa:34:09:a2:8d:2f:f7:b7: 10:4e:d3:2a:b4:cb:a3:be:6b:5f:e5:2a:6f:ac:59: 39:0e:d2:82:58:22:b3:19:e5:67:44:00:e7:1e:6d: 5e:87:af:b5:c3:c0:4c:1d:ab:90:a2:4b:64:20:2e: a5:06:12:bb:c6:44:e3:c6:b5:59:b9:bf:2d:db:1c: d7:8c:0e:d0:5d:2b:33:b5:7c:0b:f9:59:41:13:e7: d9:f0:26:b1:fa:e5:36:da:db:69:b9:dc:fa:c8:5b: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:A8:6E:D3:4A:E6:C7:42:3D:22:28:E4:1E:F6:F4:52:D3:F5:11 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:d1:fc:78:dc:b0:3b:9b:63:7a:bd:fc:bf:e5:93:05:0d: 1e:ff:1a:71:94:53:d5:aa:11:08:bd:bb:52:50:31:f8:c0:96: 84:31:b0:1b:0a:70:c0:99:33:17:45:f3:8d:99:ce:42:b1:68: 77:d5:c7:8f:ca:e8:a6:31:13:aa:83:24:89:ad:7d:e4:1c:af: b0:5c:ec:b3:3c:fb:6e:98:2e:47:6b:f8:bc:8d:c2:43:94:3b: 2b:83:7e:1b:72:6a:a9:f9:b6:35:49:0f:a6:53:ef:83:16:41: 1b:70:79:6b:b9:a8:d5:f4:e0:33:7a:5c:d2:db:04:f0:c3:83: ad:0f:9c:15:81:3b:59:b2:09:35:08:db:94:da:76:d5:3d:71: 62:5e:57:f8:8a:db:ac:ae:64:a6:d9:0b:3e:12:4e:66:66:f8: d8:da:6a:f6:74:56:70:f3:2a:4f:6f:f4:69:26:2a:1d:69:4e: d6:5c:2d:9f:07:70:b3:f7:d5:66:f5:31:61:44:4f:39:4f:9b: 31:73:d0:8d:3e:97:28:57:9d:1d:2f:67:6f:58:01:f4:74:e6: bf:13:5c:c5:10:a5:52:e8:98:e6:82:c2:35:0f:ba:82:5f:8c: bf:87:3c:b6:7f:df:f8:c8:19:0d:86:dc:bf:1a:28:dd:9b:25: 4d:90:ca:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUpx6mW2WfbgYPOg1i0SNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjE2MTgwMTAxWhcNMjUxMjE3MTgwMTAxWjAzMTEwLwYDVQQD EyhkNTViYTg2ZWQzNGFlNmM3NDIzZDIyMjhlNDFlZjZmNDUyZDNmNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSktQZYczYV889kdbh34jSNx7e8w 6J2l5E02K0ORXlo94+tBVGn8H4yXPTER5vMO4H63sR4UhyYltZpEQFv1jPJG2uZi SrbD6v4q4h9Ye2jG+sbz9FolYJGVYCROuMSSgJCSVrFJNqMygQOlXZr3wMpg4GaW ZYnwQhFDEKxAZo0CUgXvqRvRyCnFjuNlhVwIFjjQjgSa3ki1iFvv+jQJoo0v97cQ TtMqtMujvmtf5SpvrFk5DtKCWCKzGeVnRADnHm1eh6+1w8BMHauQoktkIC6lBhK7 xkTjxrVZub8t2xzXjA7QXSsztXwL+VlBE+fZ8Cax+uU22ttpudz6yFvckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVbqG7TSubHQj0iKOQe9vRS0/URMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpvR/Hjc sDubY3q9/L/lkwUNHv8acZRT1aoRCL27UlAx+MCWhDGwGwpwwJkzF0XzjZnOQrFo d9XHj8ropjETqoMkia195ByvsFzsszz7bpguR2v4vI3CQ5Q7K4N+G3Jqqfm2NUkP plPvgxZBG3B5a7mo1fTgM3pc0tsE8MODrQ+cFYE7WbIJNQjblNp21T1xYl5X+Irb rK5kptkLPhJOZmb42Npq9nRWcPMqT2/0aSYqHWlO1lwtnwdws/fVZvUxYURPOU+b MXPQjT6XKFedHS9nb1gB9HTmvxNcxRClUuiY5oLCNQ+6gl+Mv4c8tn/f+MgZDYbc vxoo3ZslTZDKaw== -----END CERTIFICATE-----Generated at Wed Dec 17 00:31:30 2025 by rpki-client