This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: y0RGsyfCNyZtgLOj9Zq8cAGbYADH9y+9vfdAhEjUVDM= Subject key identifier: B1:A8:E9:71:96:EE:F9:8C:40:3A:DB:B4:5A:85:9D:2E:56:ED:55:37 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019A9D4726A0BF8FB3F534B9DBE81753492B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1057 Signing time: Wed 19 Nov 2025 18:01:17 +0000 Manifest this update: Wed 19 Nov 2025 18:01:17 +0000 Manifest next update: Thu 20 Nov 2025 18:01:17 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: LfRQKqvJ11B+VkmKUS7PHwLGwF4Uyh5z65U20RHEwjg=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 15:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:47:26:a0:bf:8f:b3:f5:34:b9:db:e8:17:53:49:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 19 18:01:17 2025 GMT Not After : Nov 20 18:01:17 2025 GMT Subject: CN=b1a8e97196eef98c403adbb45a859d2e56ed5537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:d4:9b:d6:33:29:ae:54:8d:10:57:79:e6: 9b:b0:d9:cd:75:fd:00:a0:ed:5f:e3:5b:d0:44:79: 30:70:d3:ae:49:c3:5e:24:55:f7:21:25:74:48:d9: cb:ee:45:d2:10:01:e2:60:0e:2d:e2:81:df:12:cf: 27:56:23:65:29:bc:0b:30:d4:54:40:2c:2c:cb:b2: e3:b4:a7:56:db:af:f9:da:3a:91:65:a5:3a:90:98: 3c:55:c7:45:12:1d:7b:6e:fa:55:56:3f:cd:15:85: 92:55:05:12:53:f3:49:95:5a:c1:e8:23:0e:4b:f8: 84:84:30:97:a7:52:38:84:74:48:c3:dc:d9:3d:88: e9:c8:54:d2:13:c5:1e:34:ac:1e:5d:3d:1f:43:2c: 95:48:2c:39:39:42:7e:93:91:b6:13:49:6a:60:88: 52:90:e3:ac:2c:87:bf:fe:ab:72:f1:3f:ca:93:26: 33:c4:e5:d1:e1:7a:9d:f6:64:ea:f1:fe:9f:22:36: 4d:f6:8c:28:ad:3a:ac:14:15:3c:30:bf:d3:78:87: c9:bb:fb:cb:9f:c5:06:43:d1:c0:8a:dd:40:5f:fb: 9f:69:26:89:9f:b3:11:f5:0e:88:ba:9b:df:f7:fc: ff:e8:13:e9:60:dd:3f:b6:fd:98:07:4d:ee:2f:10: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:E9:71:96:EE:F9:8C:40:3A:DB:B4:5A:85:9D:2E:56:ED:55:37 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:07:e4:83:4f:0f:10:56:05:19:0b:86:41:17:e1:d3:28:a3: 03:bb:c2:b5:81:66:3e:48:16:49:72:09:ad:06:a4:26:b4:19: 36:bd:22:a2:59:5e:41:58:c6:b6:d2:b6:02:15:7b:71:d2:95: eb:c5:f9:a5:5d:e4:d4:34:7e:ef:64:ca:82:f1:cd:c6:83:b5: 8f:c4:5c:78:67:8f:d8:9b:36:46:7f:9e:b0:00:a9:d4:96:f2: 79:f3:4c:b2:a8:8a:37:33:3e:84:df:44:71:01:1d:ad:be:09: 04:6c:76:1d:ef:72:46:09:4c:9c:5a:d4:eb:2d:9e:94:9b:d6: e0:6d:7b:e1:df:73:8c:16:42:25:c4:5d:9a:ff:de:05:5d:4f: 6f:af:81:78:cd:73:40:71:98:80:83:3d:07:2f:dc:94:1f:dc: e4:1d:c5:1a:5c:04:f2:87:17:6b:7c:fe:3d:af:10:19:92:ef: 1c:f1:1c:f9:aa:13:c2:cd:9c:c0:9b:22:65:9c:6a:cc:6b:c2: 6d:fa:57:1a:b3:7b:17:3a:79:d5:8a:3d:e3:85:ac:49:f8:a8: 19:1e:81:36:cf:5e:e2:c0:ce:4f:99:e7:39:cf:ac:08:e0:c7: 48:0c:e0:0e:e9:85:21:c5:cf:d8:52:ea:d0:c4:74:7c:57:35: 34:d7:89:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqdRyagv4+z9TS52+gXU0krMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTE5MTgwMTE3WhcNMjUxMTIwMTgwMTE3WjAzMTEwLwYDVQQD EyhiMWE4ZTk3MTk2ZWVmOThjNDAzYWRiYjQ1YTg1OWQyZTU2ZWQ1NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+bUm9YzKa5UjRBXeeabsNnNdf0A oO1f41vQRHkwcNOuScNeJFX3ISV0SNnL7kXSEAHiYA4t4oHfEs8nViNlKbwLMNRU QCwsy7LjtKdW26/52jqRZaU6kJg8VcdFEh17bvpVVj/NFYWSVQUSU/NJlVrB6CMO S/iEhDCXp1I4hHRIw9zZPYjpyFTSE8UeNKweXT0fQyyVSCw5OUJ+k5G2E0lqYIhS kOOsLIe//qty8T/KkyYzxOXR4Xqd9mTq8f6fIjZN9oworTqsFBU8ML/TeIfJu/vL n8UGQ9HAit1AX/ufaSaJn7MR9Q6Iupvf9/z/6BPpYN0/tv2YB03uLxDk/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGo6XGW7vmMQDrbtFqFnS5W7VU3MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwfkg08P EFYFGQuGQRfh0yijA7vCtYFmPkgWSXIJrQakJrQZNr0iolleQVjGttK2AhV7cdKV 68X5pV3k1DR+72TKgvHNxoO1j8RceGeP2Js2Rn+esACp1JbyefNMsqiKNzM+hN9E cQEdrb4JBGx2He9yRglMnFrU6y2elJvW4G174d9zjBZCJcRdmv/eBV1Pb6+BeM1z QHGYgIM9By/clB/c5B3FGlwE8ocXa3z+Pa8QGZLvHPEc+aoTws2cwJsiZZxqzGvC bfpXGrN7Fzp51Yo944WsSfioGR6BNs9e4sDOT5nnOc+sCODHSAzgDumFIcXP2FLq 0MR0fFc1NNeJyA== -----END CERTIFICATE-----Generated at Wed Nov 19 21:15:29 2025 by rpki-client