This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json) Hash identifier: LlDjuh54NQsFQ6G9m3ENc3ywNuoULmT4TORqnftjwNQ= Subject key identifier: A1:96:B1:3A:E0:44:48:3F:68:40:9C:1D:D0:14:B1:1F:E3:04:88:60 Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019B06D9318E416A203E3812DE8BBBD8136E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft Manifest number: 1788 Signing time: Wed 10 Dec 2025 06:00:55 +0000 Manifest this update: Wed 10 Dec 2025 06:00:55 +0000 Manifest next update: Thu 11 Dec 2025 06:00:55 +0000 Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: c0iMCvjV6lc4tJDDlIX4EU/DF/ZepaSGte7nYkFYD5s=) 2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=) 3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=) 4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=) 5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=) 6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=) 7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=) 8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:31:8e:41:6a:20:3e:38:12:de:8b:bb:d8:13:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Dec 10 06:00:55 2025 GMT Not After : Dec 11 06:00:55 2025 GMT Subject: CN=a196b13ae044483f68409c1dd014b11fe3048860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f4:8d:d6:34:66:ca:7e:36:a7:e7:b4:e6:81: 1b:2b:59:f6:08:0c:91:28:e5:be:10:c7:dd:0f:af: de:57:b8:e4:45:9c:6a:1e:3f:10:74:d8:28:66:02: 53:64:0c:95:08:25:07:a9:6b:49:0e:80:98:9c:76: e8:3b:ef:3c:05:a0:a6:ea:e2:6e:35:d8:df:84:2a: 9a:09:66:d1:ee:8c:6f:73:5d:6c:14:6d:10:5f:13: 8e:f0:6e:cc:98:19:cc:4d:a6:b0:87:7d:bc:a0:fa: ce:bb:f3:ec:75:9b:02:ea:25:8f:2c:16:0a:68:6b: 90:6b:6f:49:e0:1f:b2:e6:0c:b0:b3:69:8a:6e:c7: f0:68:17:6f:89:77:82:a2:01:cb:01:ae:62:03:85: 1f:f0:e8:15:e4:83:d4:81:02:c7:b8:dd:5d:d7:e3: ab:04:d4:f6:5e:c1:01:b4:4e:9d:70:b6:41:fc:c2: 8e:b0:48:0a:99:e9:d2:fb:39:fe:1b:2f:98:30:b4: 29:90:49:f4:0d:5c:7a:34:d3:39:a6:92:c5:90:8c: 85:e4:c7:df:2a:f9:31:09:c9:d4:36:f6:04:27:94: 2c:eb:d1:9b:3c:76:72:9c:ec:cd:69:b4:bc:31:18: 9a:eb:3d:63:37:b8:cf:03:c7:cb:08:74:a6:89:4d: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:B1:3A:E0:44:48:3F:68:40:9C:1D:D0:14:B1:1F:E3:04:88:60 X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1d:f2:4e:40:ab:8d:03:62:d0:53:24:7e:a5:ee:62:97:ef: fc:12:15:d0:a7:41:86:66:1b:af:06:84:13:94:c9:bc:12:c7: 82:85:96:cc:e0:7f:78:ce:ad:2d:b5:29:ce:85:ac:ee:e5:63: 40:80:9d:08:c4:38:34:b3:d5:98:a2:47:21:e9:ba:32:c3:e3: f0:b7:a5:74:0a:ef:0e:9d:a5:08:49:bf:e9:de:40:74:27:6a: 3b:1e:ae:42:83:59:a7:33:77:df:1c:41:04:52:55:ab:4e:8c: 93:a3:bf:51:a1:81:00:23:f8:5a:93:7f:e6:98:24:8a:ba:45: 89:0b:6d:a5:34:95:05:9c:62:aa:58:3d:11:16:de:7f:6b:f6: cc:f8:19:ea:c2:4b:b0:a0:36:aa:34:be:f2:7b:b3:37:1f:65: f2:d2:8e:d7:fd:53:7e:1d:4c:ba:bc:6c:2e:f5:f6:41:21:be: 3a:85:2e:01:c3:bb:83:58:bb:58:a1:39:3d:7d:34:61:7d:c6: 6b:21:bd:b2:d1:d3:de:f7:f8:41:80:de:86:94:5d:2b:31:8f: cd:c9:a5:a0:c9:db:ed:4e:f5:90:69:9a:be:59:a0:05:3e:d9: cb:1b:94:43:0e:d2:76:7f:8e:12:0f:25:d8:87:29:25:ce:43: 45:62:2b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2TGOQWogPjgS3ou72BNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjUxMjEwMDYwMDU1WhcNMjUxMjExMDYwMDU1WjAzMTEwLwYDVQQD EyhhMTk2YjEzYWUwNDQ0ODNmNjg0MDljMWRkMDE0YjExZmUzMDQ4ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPSN1jRmyn42p+e05oEbK1n2CAyR KOW+EMfdD6/eV7jkRZxqHj8QdNgoZgJTZAyVCCUHqWtJDoCYnHboO+88BaCm6uJu NdjfhCqaCWbR7oxvc11sFG0QXxOO8G7MmBnMTaawh328oPrOu/PsdZsC6iWPLBYK aGuQa29J4B+y5gyws2mKbsfwaBdviXeCogHLAa5iA4Uf8OgV5IPUgQLHuN1d1+Or BNT2XsEBtE6dcLZB/MKOsEgKmenS+zn+Gy+YMLQpkEn0DVx6NNM5ppLFkIyF5Mff KvkxCcnUNvYEJ5Qs69GbPHZynOzNabS8MRia6z1jN7jPA8fLCHSmiU2i6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGWsTrgREg/aECcHdAUsR/jBIhgMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJh3yTkCr jQNi0FMkfqXuYpfv/BIV0KdBhmYbrwaEE5TJvBLHgoWWzOB/eM6tLbUpzoWs7uVj QICdCMQ4NLPVmKJHIem6MsPj8LeldArvDp2lCEm/6d5AdCdqOx6uQoNZpzN33xxB BFJVq06Mk6O/UaGBACP4WpN/5pgkirpFiQttpTSVBZxiqlg9ERbef2v2zPgZ6sJL sKA2qjS+8nuzNx9l8tKO1/1Tfh1MurxsLvX2QSG+OoUuAcO7g1i7WKE5PX00YX3G ayG9stHT3vf4QYDehpRdKzGPzcmloMnb7U71kGmavlmgBT7ZyxuUQw7Sdn+OEg8l 2IcpJc5DRWIrYw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:50:54 2025 by rpki-client