This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: +5N+Bocjai2JK3PKdn/0NhPOBElDu+5XAO9ppAh0yZs= Subject key identifier: DF:B7:6C:EE:D3:F8:04:1A:05:8B:42:0F:B2:37:AF:3F:D2:52:B9:1C Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019A9F356813F87D26D2DC8FA750577C19CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1058 Signing time: Thu 20 Nov 2025 03:01:08 +0000 Manifest this update: Thu 20 Nov 2025 03:01:08 +0000 Manifest next update: Fri 21 Nov 2025 03:01:08 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: k7qKZqrFTAMaa+91PRebLMyMh2SoS3o99uiKIIqIrJA=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:35:68:13:f8:7d:26:d2:dc:8f:a7:50:57:7c:19:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 20 03:01:08 2025 GMT Not After : Nov 21 03:01:08 2025 GMT Subject: CN=dfb76ceed3f8041a058b420fb237af3fd252b91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:42:67:19:92:25:5c:7a:d3:08:b3:cb:78: 05:e1:a4:b8:af:d6:c4:bf:44:52:63:8b:59:1e:d4: ac:c4:46:b7:7d:3c:3b:92:b3:83:39:b4:e6:3d:4e: 08:3b:e5:a3:64:88:87:98:88:85:cf:f0:13:5d:90: 14:c0:6b:ce:0b:2f:99:50:97:d4:43:02:cf:b1:be: 9a:0a:41:95:c3:60:80:b8:e3:18:e6:5c:1d:f6:1d: 5d:6b:a5:31:1d:f1:cc:b6:80:ac:6c:ed:bb:68:15: c4:d4:91:c0:26:19:e7:a0:a7:ad:50:e4:d8:f8:96: 9b:a5:83:89:5d:e2:d7:e8:f8:25:1c:12:a8:a8:a8: 75:96:19:f5:ce:09:d8:9e:e1:80:25:df:81:05:66: 7d:14:fe:a8:51:7d:28:72:d0:3d:7c:eb:40:9d:10: 38:86:13:f4:d4:ca:8e:02:c5:4f:b7:a0:41:8c:09: 4d:4a:84:d8:44:ea:38:51:b7:fc:a4:a8:6d:30:82: 50:4a:50:41:b2:db:7e:fb:7b:55:b0:e7:67:2c:b9: a1:27:80:21:04:e3:99:2b:a4:69:25:5c:a1:00:c8: b4:eb:da:f0:8c:7c:94:9e:49:de:c5:a5:39:d0:41: c3:da:f1:e0:7f:95:2e:6b:b7:ff:f9:c7:2d:3b:d0: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B7:6C:EE:D3:F8:04:1A:05:8B:42:0F:B2:37:AF:3F:D2:52:B9:1C X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f4:d1:49:a3:48:76:36:7f:67:91:17:39:bb:c9:64:f2:6a: 9e:28:6c:ee:f8:b1:23:26:74:fc:a4:1a:ed:7c:bf:e3:65:c3: cf:cf:2f:77:ab:cb:a6:3b:11:67:8a:c6:ab:0b:91:9a:3b:67: a3:7f:40:0a:3a:46:d5:d4:08:54:0b:24:25:f0:52:c6:ae:9b: ad:48:51:e8:f0:51:37:34:8c:90:41:42:45:9a:f2:4e:f6:5c: e1:a2:8d:84:44:c2:06:6f:bd:0c:11:e2:1d:4e:77:e6:61:43: 09:6a:90:20:f5:88:f7:96:e4:a7:95:6e:36:de:02:84:1a:a2: 88:ef:f5:02:a9:10:2e:08:5d:dc:42:e1:c1:9d:4e:c1:6d:1c: 9d:09:59:82:59:14:44:01:c7:4b:b4:86:39:94:a3:d8:d0:44: 90:dd:fc:3f:24:ff:e8:ea:c5:d4:46:32:11:51:f2:ee:20:a7: cf:8e:a8:86:10:cc:be:b5:ff:7a:b6:38:f7:d1:e6:d0:c5:b6: 78:21:dd:cb:14:93:69:46:b5:79:b3:cc:ca:c3:c2:12:d3:bb: ee:9d:98:0b:fb:00:ae:78:3d:b9:35:4b:2f:86:89:d2:be:af: 4b:39:0c:52:09:7d:9f:54:79:b7:3d:35:77:7a:f6:e0:6e:db: c7:cd:86:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqfNWgT+H0m0tyPp1BXfBnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTIwMDMwMTA4WhcNMjUxMTIxMDMwMTA4WjAzMTEwLwYDVQQD EyhkZmI3NmNlZWQzZjgwNDFhMDU4YjQyMGZiMjM3YWYzZmQyNTJiOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpNCZxmSJVx60wizy3gF4aS4r9bE v0RSY4tZHtSsxEa3fTw7krODObTmPU4IO+WjZIiHmIiFz/ATXZAUwGvOCy+ZUJfU QwLPsb6aCkGVw2CAuOMY5lwd9h1da6UxHfHMtoCsbO27aBXE1JHAJhnnoKetUOTY +JabpYOJXeLX6PglHBKoqKh1lhn1zgnYnuGAJd+BBWZ9FP6oUX0octA9fOtAnRA4 hhP01MqOAsVPt6BBjAlNSoTYROo4Ubf8pKhtMIJQSlBBstt++3tVsOdnLLmhJ4Ah BOOZK6RpJVyhAMi069rwjHyUnknexaU50EHD2vHgf5Uua7f/+cctO9BMAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+3bO7T+AQaBYtCD7I3rz/SUrkcMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfTRSaNI djZ/Z5EXObvJZPJqnihs7vixIyZ0/KQa7Xy/42XDz88vd6vLpjsRZ4rGqwuRmjtn o39ACjpG1dQIVAskJfBSxq6brUhR6PBRNzSMkEFCRZryTvZc4aKNhETCBm+9DBHi HU535mFDCWqQIPWI95bkp5VuNt4ChBqiiO/1AqkQLghd3ELhwZ1OwW0cnQlZglkU RAHHS7SGOZSj2NBEkN38PyT/6OrF1EYyEVHy7iCnz46ohhDMvrX/erY499Hm0MW2 eCHdyxSTaUa1ebPMysPCEtO77p2YC/sArng9uTVLL4aJ0r6vSzkMUgl9n1R5tz01 d3r24G7bx82GIg== -----END CERTIFICATE-----Generated at Thu Nov 20 09:56:45 2025 by rpki-client