This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: xjMCOxvF1x6ChAM7rqMTsygBlQx+w7GLFSXvD2tOLtE= Subject key identifier: D1:45:51:02:5B:68:3C:2F:96:36:99:16:E3:81:3C:DE:8A:59:1B:60 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019AFBE7D44D6218E350E35A99628D3C7F24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1088 Signing time: Mon 08 Dec 2025 03:01:05 +0000 Manifest this update: Mon 08 Dec 2025 03:01:05 +0000 Manifest next update: Tue 09 Dec 2025 03:01:05 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: DZp92gCB/fewMa0HQA9wywDcLFXWIS4udogfQt7YVrQ=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:d4:4d:62:18:e3:50:e3:5a:99:62:8d:3c:7f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 8 03:01:05 2025 GMT Not After : Dec 9 03:01:05 2025 GMT Subject: CN=d14551025b683c2f96369916e3813cde8a591b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:09:65:f8:35:2e:04:b5:b9:c5:27:94:b5: 69:74:45:de:88:57:91:73:d2:5f:34:e9:62:98:2c: fc:98:aa:31:28:11:c1:37:72:fb:12:f8:cd:48:e5: 02:03:41:62:72:c9:cf:d9:7d:70:b2:2e:a2:f2:10: ff:e0:3e:28:e8:5d:d5:1e:a2:fc:4c:80:11:f0:91: a6:1d:f9:16:3e:84:43:9b:e6:1f:e8:8d:3a:ce:c1: 08:c3:f4:fc:f8:97:2e:fb:d6:56:5a:50:40:f6:f4: c9:16:3e:4f:1c:a6:76:a3:2a:20:a8:39:31:37:af: 6a:a1:85:d6:ac:1f:cc:c4:5e:64:54:28:8a:d0:39: 99:4c:6c:dc:ae:d6:0c:68:2b:55:20:04:3a:71:d8: 16:b8:a2:72:9e:ca:c7:a3:96:7b:da:44:77:34:5d: fe:4e:9f:63:64:bb:1c:d7:86:32:24:c8:9b:38:62: 4b:07:53:0e:52:f4:48:73:c0:46:47:2e:e8:a0:62: 00:8b:61:ef:33:8e:b1:e7:29:90:c5:71:9e:ce:84: b1:a8:0b:68:dc:35:21:8b:6b:0f:04:df:75:45:0b: 39:0f:ec:b3:91:ee:9f:7e:ce:c3:8e:04:36:be:58: 6c:78:88:bb:0a:6e:ae:3a:0f:00:0f:21:1c:93:fb: 08:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:51:02:5B:68:3C:2F:96:36:99:16:E3:81:3C:DE:8A:59:1B:60 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8a:17:85:6f:6f:55:97:67:57:9c:a1:cb:0f:92:fc:13:eb: aa:2b:cb:69:e7:34:c8:de:44:a2:fe:cf:b7:4c:c2:ce:21:f5: cb:27:a5:5d:c1:34:ff:bf:b7:d4:cc:cc:61:1d:94:00:be:b6: c9:f6:c9:46:49:fa:e9:b8:28:16:46:8b:54:d7:15:7e:ce:3c: 5e:85:9c:b2:47:25:f5:99:27:e1:9d:f5:bf:b5:ed:ad:9b:01: 53:e6:61:ca:c0:2e:0c:46:6b:58:01:35:76:97:7c:b2:f2:59: 09:f0:d4:b4:08:81:c3:00:52:2e:b0:42:69:95:08:a8:15:1d: 13:0f:47:b7:04:5a:0b:cd:68:f8:3f:fc:e4:12:99:af:5b:07: ef:fe:90:5a:a6:fc:10:58:4f:ca:76:d4:c7:1b:71:a3:76:0a: 0a:23:49:7a:e0:5a:81:ac:52:e4:f1:70:20:c8:54:ca:94:75: 5e:23:1d:69:b3:fd:76:b3:97:b6:c3:eb:6c:2e:ef:57:c5:38: 78:7b:27:79:79:3c:9c:06:c3:f1:5c:aa:ef:e8:ea:16:63:95: 32:82:2c:b2:d0:90:a7:61:86:68:5e:32:f6:97:67:f0:94:97: 42:34:61:59:27:58:df:51:76:1a:f4:6b:1f:69:8c:78:f9:ad: 35:a5:05:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr759RNYhjjUONamWKNPH8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjA4MDMwMTA1WhcNMjUxMjA5MDMwMTA1WjAzMTEwLwYDVQQD EyhkMTQ1NTEwMjViNjgzYzJmOTYzNjk5MTZlMzgxM2NkZThhNTkxYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ0JZfg1LgS1ucUnlLVpdEXeiFeR c9JfNOlimCz8mKoxKBHBN3L7EvjNSOUCA0FicsnP2X1wsi6i8hD/4D4o6F3VHqL8 TIAR8JGmHfkWPoRDm+Yf6I06zsEIw/T8+Jcu+9ZWWlBA9vTJFj5PHKZ2oyogqDkx N69qoYXWrB/MxF5kVCiK0DmZTGzcrtYMaCtVIAQ6cdgWuKJynsrHo5Z72kR3NF3+ Tp9jZLsc14YyJMibOGJLB1MOUvRIc8BGRy7ooGIAi2HvM46x5ymQxXGezoSxqAto 3DUhi2sPBN91RQs5D+yzke6ffs7DjgQ2vlhseIi7Cm6uOg8ADyEck/sI4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFFUQJbaDwvljaZFuOBPN6KWRtgMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYoXhW9v VZdnV5yhyw+S/BPrqivLaec0yN5Eov7Pt0zCziH1yyelXcE0/7+31MzMYR2UAL62 yfbJRkn66bgoFkaLVNcVfs48XoWcskcl9Zkn4Z31v7XtrZsBU+ZhysAuDEZrWAE1 dpd8svJZCfDUtAiBwwBSLrBCaZUIqBUdEw9HtwRaC81o+D/85BKZr1sH7/6QWqb8 EFhPynbUxxtxo3YKCiNJeuBagaxS5PFwIMhUypR1XiMdabP9drOXtsPrbC7vV8U4 eHsneXk8nAbD8Vyq7+jqFmOVMoIsstCQp2GGaF4y9pdn8JSXQjRhWSdY31F2GvRr H2mMePmtNaUFoA== -----END CERTIFICATE-----Generated at Mon Dec 8 05:59:41 2025 by rpki-client