This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json) Hash identifier: J2YYmMSc0rph1xMmCn6U/2juUaoFqQEbVLpAUPYZn9s= Subject key identifier: 4F:8C:96:92:18:2C:67:91:2D:44:D9:6B:30:4D:D2:71:25:3E:79:EE Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Certificate serial: 019AFB79DFCFC0FF66CBDF7A4FE866728FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft Manifest number: 1787 Signing time: Mon 08 Dec 2025 01:00:59 +0000 Manifest this update: Mon 08 Dec 2025 01:00:59 +0000 Manifest next update: Tue 09 Dec 2025 01:00:59 +0000 Files and hashes: 1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: yFDgp5b4ymVM3F2iiOaC2srQVfCp2VwrplJWG+/o88Q=) 2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=) 3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=) 4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=) 5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=) 6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=) 7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=) 8: qvuGFKt-1_HJPs870oUBe_CLaIg.roa (hash: SFdkk9jZfyDBmDVWNujyzZ/7MM9kJxQh2emgCYl8kTA=) 9: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:79:df:cf:c0:ff:66:cb:df:7a:4f:e8:66:72:8f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Validity Not Before: Dec 8 01:00:59 2025 GMT Not After : Dec 9 01:00:59 2025 GMT Subject: CN=4f8c9692182c67912d44d96b304dd271253e79ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:2a:d3:b1:f9:37:d0:48:dc:5a:df:e1:c1: 2f:5a:f3:07:06:4d:38:8c:bb:84:b0:25:24:18:54: 9f:af:19:54:15:db:f0:c9:1c:56:da:a5:4a:99:3d: 02:da:10:b4:81:6f:a2:23:5c:d4:2e:6d:a2:a2:49: 48:e2:0c:ec:52:c2:9f:82:fb:c5:6c:35:b8:33:08: eb:34:82:5b:a8:a5:f1:1a:01:a6:0f:4c:d4:de:db: f6:1f:f5:85:ad:9d:d8:d7:78:5c:be:c8:f8:9f:7d: a7:ef:17:ea:14:f4:4c:81:d8:d8:8e:09:bb:cd:86: 56:cb:78:39:46:59:98:3d:b8:d5:4c:ca:b0:5a:56: 3f:7d:72:63:ad:53:d6:37:3a:63:66:00:a8:9d:30: b4:d8:2b:0d:b7:04:1f:88:76:5f:8e:6e:49:14:72: d5:6b:72:c9:53:d4:37:32:bd:3d:33:bb:04:96:a4: c2:cd:cf:fd:53:85:2c:1d:a3:c6:f5:02:22:73:50: be:fe:be:e5:0e:4c:41:7f:04:ea:20:9b:46:22:a2: c7:ac:cd:19:d4:c8:07:d6:9a:c0:bf:54:d5:54:7b: 2a:46:ac:16:2b:81:39:03:1e:d7:c6:c3:00:b7:3e: d6:f0:29:2b:b3:5b:49:3b:94:dc:0b:ab:96:47:d2: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:96:92:18:2C:67:91:2D:44:D9:6B:30:4D:D2:71:25:3E:79:EE X509v3 Authority Key Identifier: keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f6:85:6f:02:8a:9e:ba:cb:13:91:32:51:c3:4b:42:33:be: f0:4e:4e:65:e9:a5:4e:7a:34:b2:eb:60:81:b4:99:ff:cf:23: a7:78:7e:89:79:a5:d8:31:84:15:9a:23:22:4e:1e:f5:43:78: 07:12:b9:69:16:08:8a:59:c6:f3:8c:f4:dd:ec:7a:87:1a:54: 6b:cb:dd:65:81:27:ab:6c:44:ed:87:37:19:21:77:c7:e0:05: 0f:be:33:7e:e4:6e:be:62:98:dc:c3:c7:c0:e9:f0:24:fa:2e: 63:a4:9b:29:37:9b:61:d6:7e:b3:97:0a:1c:82:dd:b8:3c:45: 72:6e:73:d5:06:59:77:56:d7:98:a1:14:7a:af:cd:ee:5d:65: ff:3e:13:ae:f9:b1:f3:68:1a:9b:83:4d:7d:c0:23:19:66:f4: f7:23:37:27:1e:4e:53:77:4d:6c:f7:56:10:25:0f:c3:28:cc: b0:48:4f:74:09:a7:6d:58:c6:62:1a:4d:6b:34:5c:43:c1:b7: 9a:33:2a:3a:89:c9:ca:75:7b:2d:61:14:12:b2:69:63:95:a3: a7:97:40:fb:61:6a:74:ea:d5:3f:7b:dd:55:64:6b:47:c0:9e: ec:d8:b1:0c:53:c5:d0:e7:b2:37:52:4f:95:a7:5c:b1:23:e8: 1e:15:f1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7ed/PwP9my996T+hmco/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1 OGE0YzAwHhcNMjUxMjA4MDEwMDU5WhcNMjUxMjA5MDEwMDU5WjAzMTEwLwYDVQQD Eyg0ZjhjOTY5MjE4MmM2NzkxMmQ0NGQ5NmIzMDRkZDI3MTI1M2U3OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDgq07H5N9BI3Frf4cEvWvMHBk04 jLuEsCUkGFSfrxlUFdvwyRxW2qVKmT0C2hC0gW+iI1zULm2ioklI4gzsUsKfgvvF bDW4MwjrNIJbqKXxGgGmD0zU3tv2H/WFrZ3Y13hcvsj4n32n7xfqFPRMgdjYjgm7 zYZWy3g5RlmYPbjVTMqwWlY/fXJjrVPWNzpjZgConTC02CsNtwQfiHZfjm5JFHLV a3LJU9Q3Mr09M7sElqTCzc/9U4UsHaPG9QIic1C+/r7lDkxBfwTqIJtGIqLHrM0Z 1MgH1prAv1TVVHsqRqwWK4E5Ax7XxsMAtz7W8Ckrs1tJO5TcC6uWR9LDrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+MlpIYLGeRLUTZazBN0nElPnnuMB8GA1UdIwQY MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt Y2U1NzE1MDY5NWE5LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5 LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvaFbwKK nrrLE5EyUcNLQjO+8E5OZemlTno0sutggbSZ/88jp3h+iXml2DGEFZojIk4e9UN4 BxK5aRYIilnG84z03ex6hxpUa8vdZYEnq2xE7Yc3GSF3x+AFD74zfuRuvmKY3MPH wOnwJPouY6SbKTebYdZ+s5cKHILduDxFcm5z1QZZd1bXmKEUeq/N7l1l/z4Trvmx 82gam4NNfcAjGWb09yM3Jx5OU3dNbPdWECUPwyjMsEhPdAmnbVjGYhpNazRcQ8G3 mjMqOonJynV7LWEUErJpY5Wjp5dA+2FqdOrVP3vdVWRrR8Ce7NixDFPF0OeyN1JP ladcsSPoHhXxEw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:55:19 2025 by rpki-client