This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json) Hash identifier: 3+DdZVxjrkZtl4VUPSZF8ExNjNdbC+uyrPtnQRv6RcA= Subject key identifier: 04:04:29:34:63:F5:B7:73:93:03:61:F0:5E:2B:BE:C8:65:55:79:FA Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Certificate serial: 019B23D0F30ADF021C804A75E71518AF0D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft Manifest number: 1564 Signing time: Mon 15 Dec 2025 21:00:54 +0000 Manifest this update: Mon 15 Dec 2025 21:00:54 +0000 Manifest next update: Tue 16 Dec 2025 21:00:54 +0000 Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=) 2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: 7T10nbzVmUfaqd5QM+Zb5MDJ29Ejiqsm9v2WJUAieFI=) 3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=) 4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:f3:0a:df:02:1c:80:4a:75:e7:15:18:af:0d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Validity Not Before: Dec 15 21:00:54 2025 GMT Not After : Dec 16 21:00:54 2025 GMT Subject: CN=0404293463f5b773930361f05e2bbec8655579fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:47:2a:27:da:19:23:3b:27:40:0a:c3:c2: d8:f3:35:86:d8:2b:e7:5d:ae:84:cd:7c:54:65:0f: 6d:6c:86:19:10:33:7f:19:a8:8d:54:ee:c3:19:e8: 4c:31:d7:46:ed:77:f7:7c:e1:18:58:1c:9a:13:18: ac:b9:99:b5:88:10:77:ea:e1:e0:e7:da:aa:17:f5: 73:56:f4:36:3c:a1:2f:0a:71:3c:f1:3d:d6:2e:f9: 22:4b:06:82:6d:c2:12:6a:08:c4:5f:fc:5e:1a:3d: 71:06:65:26:0b:19:8e:e8:6a:50:37:b0:e3:1b:b8: 53:a7:e3:9a:d5:4c:86:2e:4c:6e:98:17:c7:27:cb: 12:30:03:a2:7b:8c:74:10:11:cb:f9:87:ed:de:b2: 7c:4f:39:80:6f:87:3f:b8:01:05:5b:ae:a7:e3:ea: 94:35:1b:82:45:86:de:cd:41:13:21:02:ff:3a:ca: 22:e0:f6:ae:11:2a:01:9f:7c:01:f7:b1:f3:c7:01: 5f:41:d6:3c:92:a6:08:e2:e0:73:39:5b:5e:4c:11: e6:f9:21:7c:2e:fe:93:84:e4:9d:4d:59:84:eb:7e: 3d:bb:7d:dc:70:40:f4:cc:87:8f:af:19:fa:47:c4: 6a:81:59:6e:19:f7:eb:af:fa:c5:80:4b:8b:c1:16: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:04:29:34:63:F5:B7:73:93:03:61:F0:5E:2B:BE:C8:65:55:79:FA X509v3 Authority Key Identifier: keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:72:e2:6f:0d:33:b4:3d:84:bd:12:e3:5e:c5:81:65:95:8f: e1:f7:d0:b0:bd:47:95:1f:97:68:1c:3c:ba:d2:48:27:2a:fc: 14:0f:68:b3:72:91:57:65:e5:08:3c:18:6d:4a:0c:f8:8b:56: a9:4a:92:6b:84:d8:ad:2b:72:ea:e6:82:e6:6f:af:22:63:ab: 5c:bc:96:73:7d:e6:11:9d:97:de:24:16:f5:a2:8b:ec:1b:15: 08:3c:37:b5:fe:55:0f:2b:69:3b:ad:9d:2a:d0:60:aa:01:c2: 9e:b2:7b:8e:84:48:06:d9:3b:36:60:ea:5f:00:72:16:82:b6: e1:ce:4a:59:b4:2c:a3:ef:45:75:15:8b:96:c9:6e:7e:ec:62: 1b:10:e9:f0:85:c4:e2:db:ce:0b:0f:54:dd:ef:db:db:2f:a6: 7f:97:27:25:70:5b:4c:bf:03:e8:2b:b9:0f:ef:04:7d:2f:10: 84:31:ae:34:ce:92:0e:fb:5e:5c:3c:14:ef:69:d9:1e:85:1e: bb:ec:e9:16:63:58:0e:36:2e:40:b8:4f:07:14:d4:57:08:e5: 9d:3e:98:8f:7c:c7:d9:40:c4:5b:8e:77:0f:54:ed:49:89:a4: 32:7a:e2:8f:1e:1a:71:a2:68:ce:02:39:30:9f:8e:d2:fb:18: ac:a7:11:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0PMK3wIcgEp15xUYrw0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz YmExMDAwHhcNMjUxMjE1MjEwMDU0WhcNMjUxMjE2MjEwMDU0WjAzMTEwLwYDVQQD EygwNDA0MjkzNDYzZjViNzczOTMwMzYxZjA1ZTJiYmVjODY1NTU3OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyONHKifaGSM7J0AKw8LY8zWG2Cvn Xa6EzXxUZQ9tbIYZEDN/GaiNVO7DGehMMddG7Xf3fOEYWByaExisuZm1iBB36uHg 59qqF/VzVvQ2PKEvCnE88T3WLvkiSwaCbcISagjEX/xeGj1xBmUmCxmO6GpQN7Dj G7hTp+Oa1UyGLkxumBfHJ8sSMAOie4x0EBHL+Yft3rJ8TzmAb4c/uAEFW66n4+qU NRuCRYbezUETIQL/Osoi4PauESoBn3wB97HzxwFfQdY8kqYI4uBzOVteTBHm+SF8 Lv6ThOSdTVmE6349u33ccED0zIePrxn6R8RqgVluGffrr/rFgEuLwRbrawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQEKTRj9bdzkwNh8F4rvshlVXn6MB8GA1UdIwQY MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3 LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnLibw0z tD2EvRLjXsWBZZWP4ffQsL1HlR+XaBw8utJIJyr8FA9os3KRV2XlCDwYbUoM+ItW qUqSa4TYrSty6uaC5m+vImOrXLyWc33mEZ2X3iQW9aKL7BsVCDw3tf5VDytpO62d KtBgqgHCnrJ7joRIBtk7NmDqXwByFoK24c5KWbQso+9FdRWLlslufuxiGxDp8IXE 4tvOCw9U3e/b2y+mf5cnJXBbTL8D6Cu5D+8EfS8QhDGuNM6SDvteXDwU72nZHoUe u+zpFmNYDjYuQLhPBxTUVwjlnT6Yj3zH2UDEW453D1TtSYmkMnrijx4acaJozgI5 MJ+O0vsYrKcRPQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:01:14 2025 by rpki-client