This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json) Hash identifier: diwWTT79390vQoemcUh+9w4lPDhuWHMAMU8eMLL88Qk= Subject key identifier: E0:B8:58:43:5A:92:E9:4C:4F:F7:46:19:F1:E8:EB:93:70:4F:A8:94 Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Certificate serial: 019B0F6E18D2B685A5759ADF3E7E92AD978C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft Manifest number: 177B Signing time: Thu 11 Dec 2025 22:00:32 +0000 Manifest this update: Thu 11 Dec 2025 22:00:32 +0000 Manifest next update: Fri 12 Dec 2025 22:00:32 +0000 Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: EmcuAUhVZXmg3hkdMmAVV/ESCrxzGeZLKnDOv9MXz8Y=) 2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=) 3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:18:d2:b6:85:a5:75:9a:df:3e:7e:92:ad:97:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Validity Not Before: Dec 11 22:00:32 2025 GMT Not After : Dec 12 22:00:32 2025 GMT Subject: CN=e0b858435a92e94c4ff74619f1e8eb93704fa894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:85:eb:10:90:c7:5e:a2:a2:61:a0:fd:55: 00:25:dc:ad:d5:86:8c:7c:8e:78:14:8d:68:5a:f7: 79:65:5d:a0:8a:f2:7a:d2:3b:a9:c7:5d:1f:a9:f6: 82:d4:a0:ef:d0:e5:b8:d0:a6:67:aa:da:6a:69:39: 06:b0:b8:63:93:88:89:d0:ec:ce:77:3a:0e:87:a9: 9b:e0:27:3e:4f:2b:66:23:94:3b:80:88:26:91:df: 40:37:f5:04:93:be:92:80:c4:d7:95:ec:c6:b5:b2: 53:e0:f7:f3:60:25:27:22:de:c9:fb:ee:3c:0d:98: ab:4e:cf:6b:c4:77:c8:8f:0a:d1:a3:d3:5c:a7:f0: ff:3b:6e:a1:31:c7:8e:fb:d6:46:2e:26:e4:9f:ec: 2d:97:1e:59:71:14:6a:e1:64:88:d6:74:db:0f:5f: 49:16:ad:f3:96:4f:b7:c6:24:3c:27:48:de:7c:6e: 89:63:44:69:d6:56:cc:94:ab:60:53:83:f4:b9:a2: 1e:82:7c:31:33:96:32:22:26:7e:7f:b3:a8:d1:1e: 6d:34:3f:32:db:c4:a2:ef:96:17:34:20:74:51:08: 72:e2:b9:cc:33:9d:7e:e9:3d:7f:db:27:e7:10:5a: d3:17:92:14:ab:cf:38:be:e4:46:e6:f8:76:cd:be: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B8:58:43:5A:92:E9:4C:4F:F7:46:19:F1:E8:EB:93:70:4F:A8:94 X509v3 Authority Key Identifier: keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:69:a8:39:a8:e1:a9:a1:1a:78:cf:2f:26:27:1a:96:e0:cc: 42:8f:52:e0:c6:e9:ce:7e:0e:33:60:fe:87:b5:26:51:e2:e4: 50:c2:6e:d4:e4:9e:15:c8:d7:4a:43:19:98:39:74:9f:8a:06: a4:1b:ef:44:1d:04:60:00:ea:b1:6f:28:62:29:3b:98:c2:54: 06:8c:85:3c:d3:2e:93:6e:3a:c5:4e:ff:d0:2f:3d:04:2b:9e: 08:2e:5e:db:9e:5e:30:cd:36:49:56:1e:9f:8e:1f:8f:17:53: 67:30:85:91:00:0e:18:ca:3a:08:9a:21:3d:a2:fd:19:45:34: 7d:7b:82:f2:2c:6f:fb:97:18:e5:fc:e0:0c:83:b5:ac:c8:94: 35:3a:6c:c8:2c:f2:4b:e7:ed:d7:12:b6:63:66:36:4e:d4:59: 3f:1d:7b:13:4d:e4:b9:b3:d0:17:ac:23:96:51:43:18:93:2a: a0:43:2a:c2:33:8f:fc:5d:61:6f:80:6c:35:36:40:12:4f:05: 6e:5b:09:67:b9:64:91:15:b1:10:8d:53:14:7a:26:49:96:8b: c2:fc:1b:74:77:67:b1:85:52:67:f7:c8:f7:c4:20:ee:f0:15: 57:0a:74:f3:3d:88:5b:aa:75:56:8f:88:b1:0f:cb:86:2f:4d: 42:09:2e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbhjStoWldZrfPn6SrZeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3 MjEwZTUwHhcNMjUxMjExMjIwMDMyWhcNMjUxMjEyMjIwMDMyWjAzMTEwLwYDVQQD EyhlMGI4NTg0MzVhOTJlOTRjNGZmNzQ2MTlmMWU4ZWI5MzcwNGZhODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiiF6xCQx16iomGg/VUAJdyt1YaM fI54FI1oWvd5ZV2givJ60jupx10fqfaC1KDv0OW40KZnqtpqaTkGsLhjk4iJ0OzO dzoOh6mb4Cc+TytmI5Q7gIgmkd9AN/UEk76SgMTXlezGtbJT4PfzYCUnIt7J++48 DZirTs9rxHfIjwrRo9Ncp/D/O26hMceO+9ZGLibkn+wtlx5ZcRRq4WSI1nTbD19J Fq3zlk+3xiQ8J0jefG6JY0Rp1lbMlKtgU4P0uaIegnwxM5YyIiZ+f7Oo0R5tND8y 28Si75YXNCB0UQhy4rnMM51+6T1/2yfnEFrTF5IUq884vuRG5vh2zb674wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOC4WENakulMT/dGGfHo65NwT6iUMB8GA1UdIwQY MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGmoOajh qaEaeM8vJicaluDMQo9S4Mbpzn4OM2D+h7UmUeLkUMJu1OSeFcjXSkMZmDl0n4oG pBvvRB0EYADqsW8oYik7mMJUBoyFPNMuk246xU7/0C89BCueCC5e255eMM02SVYe n44fjxdTZzCFkQAOGMo6CJohPaL9GUU0fXuC8ixv+5cY5fzgDIO1rMiUNTpsyCzy S+ft1xK2Y2Y2TtRZPx17E03kubPQF6wjllFDGJMqoEMqwjOP/F1hb4BsNTZAEk8F blsJZ7lkkRWxEI1TFHomSZaLwvwbdHdnsYVSZ/fI98Qg7vAVVwp08z2IW6p1Vo+I sQ/Lhi9NQgkuLg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:38 2025 by rpki-client