This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: XmJb0I6+AxDeuvgmmk6iYeHsmqcknRCyEJk4WkUWRSo= Subject key identifier: 0C:60:2C:89:0F:3B:AB:46:44:3F:EC:1A:6B:05:23:C8:B7:C0:F1:66 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B07B581F9B8104A91B6DAAB8AD8685B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0DCF Signing time: Wed 10 Dec 2025 10:01:34 +0000 Manifest this update: Wed 10 Dec 2025 10:01:34 +0000 Manifest next update: Thu 11 Dec 2025 10:01:34 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: e/EHdyaRQvxwmmQOW4XoSCVBKyrGdZFGBfDAlKTWsnE=) 2: D2r7dT-bQwOpT4u2PCOrnBwATAQ.roa (hash: zFihphlv0kTjByMn1IEtdtasSsD/xCgw79RV8lzEyT0=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: OxqcGrIN2qmtT5lzHhqB0OFCoZ4.roa (hash: 8Tvlr2QGQVpqtwIDYNChtFC5s7qideRYQpxKqT56BmM=) 6: QFVD_vDix159B7sLQeUpWm_GLEw.roa (hash: kEJdjprDzoSb9cHEZeOFz4THLXOGjpr7w2NVDvWkdcI=) 7: Y-G-2eU8guxGK6-egpUuNnN5bxQ.roa (hash: JW4itdi7iIIqZg7XFpTOGoDZRoJgyjCRWVBtmPDf1+s=) 8: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 9: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 10: eRiR4NgIZ_-6ixM1jewwpaWhdtk.roa (hash: WXxK+4k/CLSD9EX98U8J2JMpmdRrgwBoAZnDHy+6A6Q=) 11: lgMUCDhR1-9UxWOilM3VFlqh9i0.roa (hash: kRXcOx3qW0+mwe0DhEieHWgQM2QhpB7m8VnyKuSNghE=) 12: oh6kvaZOSBmbjaVeITahmFGVQzc.roa (hash: GEqYSowE9KxizAEw7CElS5g7H7A2mx8ZxjHtCPJ9ECQ=) 13: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 14: tW9IFrprtjHgSmO1yq_ovXKLygM.roa (hash: cUYJx2WeqQgX3iPrT/0TOqbvPPoUtMmCsb4eRH/r/A0=) 15: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 16: wDP-TxG_3tEtjtln5hp2qEYuYG0.roa (hash: 1oFgLReN4K8BSbynL9ho2Edqc+OXkSzIdfiTc3/wAyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:81:f9:b8:10:4a:91:b6:da:ab:8a:d8:68:5b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Dec 10 10:01:34 2025 GMT Not After : Dec 11 10:01:34 2025 GMT Subject: CN=0c602c890f3bab46443fec1a6b0523c8b7c0f166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:16:43:e9:cf:ad:79:7b:7b:23:47:53:21: 63:d2:49:0e:d4:50:a5:26:aa:48:08:61:c2:e2:ff: 35:6b:c5:d2:0a:30:4f:42:40:9e:01:9a:a8:e2:89: a1:81:77:53:6d:9f:4b:f4:2f:53:7f:84:8c:bf:fb: 0d:b0:1d:64:d8:18:d8:56:e8:5f:76:40:ae:cb:ef: e6:32:e8:d1:92:5b:a0:e6:d4:06:a2:13:0f:e1:8f: 2f:6d:5b:e2:4e:0b:6b:4a:90:4e:02:4c:65:e2:ba: eb:3c:98:b6:df:5b:c2:1d:c7:45:a9:d4:06:07:ee: 4d:c6:aa:bd:47:14:e2:57:16:89:f5:da:27:1b:21: 08:38:a2:dc:5b:f0:98:7f:36:34:5e:d5:71:ff:46: 37:8a:7b:51:68:6d:8e:40:bf:94:d9:6f:73:29:55: ae:f8:a0:b6:41:df:a6:cc:f7:b6:39:96:29:d1:07: 74:24:8b:35:36:d9:aa:0c:00:2b:c4:04:f6:0d:b2: 44:70:37:f8:28:83:96:2d:c4:29:0c:21:51:a8:36: 11:f7:64:8a:5a:19:87:56:2a:27:08:e7:54:31:44: 2d:b7:af:62:af:bd:8e:ee:70:59:47:43:33:5a:2e: 6b:58:ed:af:01:76:80:c2:48:02:0d:45:16:5e:ef: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:60:2C:89:0F:3B:AB:46:44:3F:EC:1A:6B:05:23:C8:B7:C0:F1:66 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ce:29:02:8b:08:f0:36:7e:e3:a5:1a:b6:b3:eb:d2:d5:aa: 1e:bc:fd:b0:93:e0:ac:93:1e:14:6e:40:96:2b:ca:dc:7b:5b: cd:03:ff:bb:4e:19:3e:94:45:37:e8:bd:2a:54:c6:3f:b1:62: e3:7a:02:4a:7d:0c:ce:cb:ac:a1:3a:5f:69:29:f5:ac:09:af: dd:b5:56:d9:e2:a9:c8:64:7d:64:67:98:18:ca:7c:89:8e:f3: 15:6d:7c:7c:9a:fc:10:fb:36:20:45:d5:b1:ac:dc:dd:27:8f: d0:9c:d7:c8:da:13:e8:7b:70:70:2f:72:d4:4c:10:9a:d9:a9: 8c:7a:2a:f5:66:50:0c:4d:98:07:17:3c:e0:49:43:55:dc:84: b2:df:89:b5:a7:6a:65:a5:ee:0f:e8:f5:29:15:a2:d6:24:a3: 5e:50:70:cb:35:2b:96:a7:c8:e7:8a:b9:68:95:29:82:ba:bf: 62:12:4c:3f:62:bd:82:b8:65:81:a1:13:8b:e8:6e:b8:4f:22: c6:90:7d:fe:d0:67:34:19:53:ff:38:8b:a2:22:89:b3:43:f4: 78:e8:33:f0:fc:a5:ae:d1:79:80:fb:62:1d:3f:1e:e5:68:26: 1e:d7:d9:4d:a5:44:c9:f9:1e:c9:24:bf:14:47:a6:f5:21:67: 86:c7:91:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtYH5uBBKkbbaq4rYaFtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMjEwMTAwMTM0WhcNMjUxMjExMTAwMTM0WjAzMTEwLwYDVQQD EygwYzYwMmM4OTBmM2JhYjQ2NDQzZmVjMWE2YjA1MjNjOGI3YzBmMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzQWQ+nPrXl7eyNHUyFj0kkO1FCl JqpICGHC4v81a8XSCjBPQkCeAZqo4omhgXdTbZ9L9C9Tf4SMv/sNsB1k2BjYVuhf dkCuy+/mMujRklug5tQGohMP4Y8vbVviTgtrSpBOAkxl4rrrPJi231vCHcdFqdQG B+5Nxqq9RxTiVxaJ9donGyEIOKLcW/CYfzY0XtVx/0Y3intRaG2OQL+U2W9zKVWu +KC2Qd+mzPe2OZYp0Qd0JIs1NtmqDAArxAT2DbJEcDf4KIOWLcQpDCFRqDYR92SK WhmHVionCOdUMUQtt69ir72O7nBZR0MzWi5rWO2vAXaAwkgCDUUWXu+V5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxgLIkPO6tGRD/sGmsFI8i3wPFmMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV84pAosI 8DZ+46UatrPr0tWqHrz9sJPgrJMeFG5AlivK3HtbzQP/u04ZPpRFN+i9KlTGP7Fi 43oCSn0MzsusoTpfaSn1rAmv3bVW2eKpyGR9ZGeYGMp8iY7zFW18fJr8EPs2IEXV sazc3SeP0JzXyNoT6HtwcC9y1EwQmtmpjHoq9WZQDE2YBxc84ElDVdyEst+Jtadq ZaXuD+j1KRWi1iSjXlBwyzUrlqfI54q5aJUpgrq/YhJMP2K9grhlgaETi+huuE8i xpB9/tBnNBlT/ziLoiKJs0P0eOgz8PylrtF5gPtiHT8e5WgmHtfZTaVEyfkeySS/ FEem9SFnhseRYg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:41:23 2025 by rpki-client