This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json) Hash identifier: /S1rNJJA+psGORGwujLv8eqqNKk23aBWDKIc6SRdE2Q= Subject key identifier: 50:C0:52:E6:78:0C:9B:C0:BF:CC:D8:A3:E3:DA:54:5F:48:74:B1:66 Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a Certificate serial: 019B5A88C8F2652D78159624F3501FEF0001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft Manifest number: 0EFD Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: GM4RW0VJHziH9kU55PGY0SjbpeWe5WkaHYXaMLsUKvA=) 2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c8:f2:65:2d:78:15:96:24:f3:50:1f:ef:00:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=50c052e6780c9bc0bfccd8a3e3da545f4874b166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:13:f3:e2:86:24:00:a0:bd:f9:98:7f:c1: 66:0b:44:f4:94:b5:fe:12:e4:41:23:76:d8:43:e6: e7:11:8d:13:07:18:d9:e5:4c:26:43:fe:6f:c5:c6: bb:3d:c4:1e:e4:60:84:7f:c3:32:49:da:a6:64:04: 93:1e:6d:7b:b1:75:0b:c4:f5:b4:47:bb:9a:c2:d5: 35:0b:00:de:e3:e9:6a:21:05:2e:73:c7:8b:35:22: 25:ae:20:0c:fd:ac:58:39:af:ae:b8:a9:7d:85:5b: 66:8e:73:74:80:0d:e4:74:df:67:02:3f:94:d2:34: c1:df:62:8a:11:59:f5:41:f9:3b:25:7b:fa:07:76: 69:7b:bf:fe:d0:62:4c:2f:08:72:99:e6:6e:86:e4: 7f:86:5d:95:84:06:43:9a:1a:f0:aa:06:2b:83:4a: 47:4f:19:7f:5a:d0:0d:a0:57:8b:73:1f:93:c1:2d: 77:9e:60:e7:7f:2e:d1:28:f2:65:70:dd:94:5d:95: c2:8c:30:b1:23:ef:c4:08:f3:f2:3f:a5:5c:14:f8: 29:65:8b:63:20:c3:92:b9:22:80:94:97:b8:fa:9d: 8f:f4:4c:e6:e0:76:ca:cd:62:a7:64:7e:b0:2d:16: 54:7d:79:1d:8e:a3:61:2a:c3:d6:b1:b6:4c:59:3c: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:52:E6:78:0C:9B:C0:BF:CC:D8:A3:E3:DA:54:5F:48:74:B1:66 X509v3 Authority Key Identifier: keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ef:2d:91:1f:de:b7:f7:31:6e:c5:ab:a7:75:02:ba:14:00: 09:73:b9:1b:90:ea:c2:1e:73:c5:d2:a0:42:1b:34:b9:46:c6: 6c:a9:48:d6:1f:dc:dd:0f:3d:65:01:84:e9:05:3d:da:2b:a0: 76:dc:6d:47:a7:96:c0:3c:87:a2:64:79:38:1b:ec:bf:ba:53: 32:f6:db:c5:a0:a1:83:96:76:6b:1d:26:93:e3:8b:c8:1b:c8: e9:7c:d6:f9:c4:77:57:f1:de:21:ef:c4:f5:23:e0:5e:39:fc: f5:07:78:73:9d:68:1b:29:5e:62:e5:36:49:48:9c:e9:11:80: 7d:c4:f6:0b:79:40:24:ad:6f:9e:5d:dd:90:57:c8:57:8d:b6: e6:d4:44:ce:fd:c9:50:f6:4b:38:04:b5:59:45:7e:0c:24:28: 03:7d:01:c4:0b:28:1b:21:6b:cf:28:ef:a4:4f:89:d7:c6:27: e1:d1:35:c2:dd:4c:cb:47:47:9c:ab:22:8d:e6:29:de:ad:4f: 7e:27:ac:af:73:f3:a7:79:7c:40:ab:74:87:ce:70:21:8e:7b: ee:0a:8b:e5:f7:cc:85:26:4e:bf:45:82:51:97:91:bc:1d:62: 34:c6:af:cf:20:2f:04:81:bd:58:f0:f3:1c:87:56:e6:b5:92: d9:dc:d5:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMjyZS14FZYk81Af7wABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz MDhmM2EwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD Eyg1MGMwNTJlNjc4MGM5YmMwYmZjY2Q4YTNlM2RhNTQ1ZjQ4NzRiMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsosT8+KGJACgvfmYf8FmC0T0lLX+ EuRBI3bYQ+bnEY0TBxjZ5UwmQ/5vxca7PcQe5GCEf8MySdqmZASTHm17sXULxPW0 R7uawtU1CwDe4+lqIQUuc8eLNSIlriAM/axYOa+uuKl9hVtmjnN0gA3kdN9nAj+U 0jTB32KKEVn1Qfk7JXv6B3Zpe7/+0GJMLwhymeZuhuR/hl2VhAZDmhrwqgYrg0pH Txl/WtANoFeLcx+TwS13nmDnfy7RKPJlcN2UXZXCjDCxI+/ECPPyP6VcFPgpZYtj IMOSuSKAlJe4+p2P9Ezm4HbKzWKnZH6wLRZUfXkdjqNhKsPWsbZMWTzhvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDAUuZ4DJvAv8zYo+PaVF9IdLFmMB8GA1UdIwQY MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKO8tkR/e t/cxbsWrp3UCuhQACXO5G5Dqwh5zxdKgQhs0uUbGbKlI1h/c3Q89ZQGE6QU92iug dtxtR6eWwDyHomR5OBvsv7pTMvbbxaChg5Z2ax0mk+OLyBvI6XzW+cR3V/HeIe/E 9SPgXjn89Qd4c51oGyleYuU2SUic6RGAfcT2C3lAJK1vnl3dkFfIV4225tREzv3J UPZLOAS1WUV+DCQoA30BxAsoGyFrzyjvpE+J18Yn4dE1wt1My0dHnKsijeYp3q1P fiesr3Pzp3l8QKt0h85wIY577gqL5ffMhSZOv0WCUZeRvB1iNMavzyAvBIG9WPDz HIdW5rWS2dzVaA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:17 2025 by rpki-client