This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: WfI4OKp10LnSqYWPostmvYwzPGW+M7EJUNPjUr/pMeo= Subject key identifier: 14:22:E2:1D:8B:6A:A5:9C:5F:3F:70:05:BA:52:58:75:FB:1A:1C:7A Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B98F9D3B88DF150FD86842556A712FCF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10DA Signing time: Wed 07 Jan 2026 15:01:07 +0000 Manifest this update: Wed 07 Jan 2026 15:01:07 +0000 Manifest next update: Thu 08 Jan 2026 15:01:07 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: mcZOaIZPS8UehHfc5APqlPIozQpAYzvIa9WbEnlndKk=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:f9:d3:b8:8d:f1:50:fd:86:84:25:56:a7:12:fc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 7 15:01:07 2026 GMT Not After : Jan 8 15:01:07 2026 GMT Subject: CN=1422e21d8b6aa59c5f3f7005ba525875fb1a1c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:5d:82:8a:d9:9b:7e:74:5f:33:59:2a:93: ff:af:a6:10:27:ad:dc:fd:56:d5:a6:bd:d2:b8:76: 82:71:0c:63:94:aa:82:76:02:39:9a:d2:52:47:68: d0:dd:0c:92:d5:e6:a5:1d:5c:2a:24:3f:60:f5:7c: 5a:ff:ff:be:07:96:20:54:b1:be:34:4a:60:0a:f0: 4c:64:04:7c:70:1f:dd:c6:14:f6:d9:6d:44:d5:f2: de:04:a8:07:1f:5a:3c:3d:dc:77:cc:f9:33:b4:a7: 0c:06:08:3f:04:32:8c:d2:e8:42:23:05:54:55:73: 59:db:3e:39:e4:b4:52:b1:97:f3:ea:50:95:0c:5a: da:a5:8d:90:e1:0c:3f:8b:86:6e:78:aa:ec:97:92: d9:54:f3:c5:c7:8b:7f:e8:a1:6e:dd:59:00:4c:c9: 42:4a:65:a3:27:da:e4:94:7a:7f:38:c5:65:6e:ab: 40:b4:22:56:a0:ff:45:50:41:25:44:6e:48:52:cf: f5:aa:18:20:c1:dd:7d:f6:03:0d:f2:5b:20:4b:48: b7:15:3c:53:38:11:1c:de:9d:c3:0f:fa:87:16:51: 87:ea:f5:09:19:a0:9f:6b:17:c7:ad:91:26:95:6b: 1a:e1:49:20:83:a6:ab:d0:61:0c:81:2e:b7:fd:80: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:E2:1D:8B:6A:A5:9C:5F:3F:70:05:BA:52:58:75:FB:1A:1C:7A X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:90:b8:4f:c6:34:1e:3c:fa:7f:1a:0a:39:d8:31:ad:b0:b9: 78:31:54:c6:ae:e2:c9:69:fb:2d:d1:f0:e8:ae:e7:bd:4d:68: 64:a5:77:77:41:ff:7d:60:d6:18:1b:79:7e:96:ec:61:a5:99: 96:2a:0a:6a:4c:fa:17:1f:61:2d:0d:5a:dd:25:09:73:27:75: d2:3e:44:3b:9a:f5:ab:ad:7c:20:d3:93:c3:3b:93:a8:18:a6: 92:61:25:1b:b9:38:9c:cc:60:59:13:f5:61:50:f1:8b:1c:cb: cb:79:bb:8f:16:dd:eb:d8:be:51:68:66:63:12:68:11:c1:96: a0:05:c0:5e:28:d9:ab:05:b6:20:bb:2e:5f:07:bc:7b:ca:b6: fc:46:d3:b6:c7:9d:64:2c:39:8e:ab:31:ae:19:6c:85:fd:d5: 6b:2e:16:f0:88:f6:31:38:5c:2f:67:08:15:e8:27:c6:2f:6c: 6e:20:83:1d:9e:a1:35:99:c1:0a:5d:b8:b6:7f:28:e8:fb:d6: 6c:57:3e:a4:41:8f:c2:f4:a4:82:be:1b:37:6e:24:d6:6c:82: 17:69:24:18:32:17:9c:5c:2f:da:51:bc:f3:09:40:00:3a:36: 9a:5a:81:c8:48:f5:f2:24:61:55:08:73:6a:95:69:97:74:e9: 69:bb:d0:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuY+dO4jfFQ/YaEJVanEvz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTA3MTUwMTA3WhcNMjYwMTA4MTUwMTA3WjAzMTEwLwYDVQQD EygxNDIyZTIxZDhiNmFhNTljNWYzZjcwMDViYTUyNTg3NWZiMWExYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2pdgorZm350XzNZKpP/r6YQJ63c /VbVpr3SuHaCcQxjlKqCdgI5mtJSR2jQ3QyS1ealHVwqJD9g9Xxa//++B5YgVLG+ NEpgCvBMZAR8cB/dxhT22W1E1fLeBKgHH1o8Pdx3zPkztKcMBgg/BDKM0uhCIwVU VXNZ2z455LRSsZfz6lCVDFrapY2Q4Qw/i4ZueKrsl5LZVPPFx4t/6KFu3VkATMlC SmWjJ9rklHp/OMVlbqtAtCJWoP9FUEElRG5IUs/1qhggwd199gMN8lsgS0i3FTxT OBEc3p3DD/qHFlGH6vUJGaCfaxfHrZEmlWsa4Ukgg6ar0GEMgS63/YBkkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQi4h2LaqWcXz9wBbpSWHX7Ghx6MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJC4T8Y0 Hjz6fxoKOdgxrbC5eDFUxq7iyWn7LdHw6K7nvU1oZKV3d0H/fWDWGBt5fpbsYaWZ lioKakz6Fx9hLQ1a3SUJcyd10j5EO5r1q618INOTwzuTqBimkmElG7k4nMxgWRP1 YVDxixzLy3m7jxbd69i+UWhmYxJoEcGWoAXAXijZqwW2ILsuXwe8e8q2/EbTtsed ZCw5jqsxrhlshf3Vay4W8Ij2MThcL2cIFegnxi9sbiCDHZ6hNZnBCl24tn8o6PvW bFc+pEGPwvSkgr4bN24k1myCF2kkGDIXnFwv2lG88wlAADo2mlqByEj18iRhVQhz apVpl3TpabvQ/A== -----END CERTIFICATE-----Generated at Wed Jan 7 19:53:42 2026 by rpki-client