This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft File: 7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json) Hash identifier: b4NUZGNqiyEsOXYHASh1iOpJKztGreE39bOlTPpbS9U= Subject key identifier: 2C:84:AC:AA:16:0A:A1:2D:A4:D2:AA:36:0A:44:9D:A7:32:4F:FA:05 Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Certificate serial: 019B1A96EFED8F3C31AD3849BE00E750FE09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft Manifest number: 1134 Signing time: Sun 14 Dec 2025 02:00:57 +0000 Manifest this update: Sun 14 Dec 2025 02:00:57 +0000 Manifest next update: Mon 15 Dec 2025 02:00:57 +0000 Files and hashes: 1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=) 2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: BfiWXsuTgHOPC4A6cYGBUiccMNOC9EJ7m65LJRGaomk=) 3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=) 4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:ef:ed:8f:3c:31:ad:38:49:be:00:e7:50:fe:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Validity Not Before: Dec 14 02:00:57 2025 GMT Not After : Dec 15 02:00:57 2025 GMT Subject: CN=2c84acaa160aa12da4d2aa360a449da7324ffa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:9d:f2:51:91:57:e1:4d:e2:e6:59:d1:a2: da:5d:16:b1:10:03:32:d4:e4:66:66:d6:d2:cf:07: 14:a7:75:30:7e:94:62:7c:38:bc:66:bb:ea:d8:86: e0:17:97:43:e5:d2:62:a6:55:b1:af:c6:e7:ca:0c: 1f:b2:85:c1:ba:e0:94:de:f4:88:09:e9:62:c1:8c: b0:f4:88:35:bb:f7:c1:2d:5e:59:0a:09:a9:c8:9a: ef:e1:c0:60:63:c9:92:8c:71:31:56:08:f0:b3:bc: f9:0c:7f:1e:07:0a:b1:61:ac:be:b6:57:b5:98:b2: e8:8a:80:fd:3d:29:45:de:bf:e6:49:e5:23:96:10: 48:68:85:6d:fb:1f:b2:9f:5a:6b:11:af:3b:61:c9: 54:b7:9a:6c:fe:67:d2:5e:e1:a5:92:37:3d:1d:d6: e9:1b:04:5f:52:a9:d4:f9:a7:c0:a6:ce:0e:3f:59: 57:97:41:75:2c:d0:c0:9c:6d:e5:2f:78:b7:ba:dc: 7d:aa:9c:f9:84:2a:42:df:00:cd:00:2b:70:c3:68: b2:a9:db:c6:5a:b0:88:19:fa:1f:fe:d1:5f:fb:27: bd:23:14:6e:53:1a:ba:9b:6d:c4:c2:6b:3a:1a:24: 64:1d:84:dc:54:e1:19:43:5f:17:db:ec:2d:7e:57: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:84:AC:AA:16:0A:A1:2D:A4:D2:AA:36:0A:44:9D:A7:32:4F:FA:05 X509v3 Authority Key Identifier: keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3f:00:75:42:41:76:af:91:b8:3d:c0:87:ec:a5:0b:da:67: 82:67:7e:a9:d2:8c:70:3f:5d:b7:ff:bf:71:f4:c5:aa:c9:67: 2d:e2:ab:b9:45:93:9f:a1:8c:75:e9:86:64:fa:2a:cf:8f:12: 5c:c6:ee:a0:ed:f4:2e:01:88:2a:28:17:02:45:4c:df:9e:38: 89:df:38:12:d5:4e:f9:5f:51:22:82:71:4c:b2:53:49:37:13: 6f:e4:85:95:c5:9e:6a:06:84:11:c9:77:51:d6:91:5a:8f:44: 30:c8:a1:54:32:44:b6:46:2a:9c:a2:62:04:b4:45:ea:73:90: 79:37:40:35:db:ad:ef:29:41:cc:e5:a4:18:56:aa:d2:1b:ce: 53:67:49:1c:48:75:b1:e7:bd:c4:3d:54:ca:e6:0f:b1:61:77: d6:aa:ec:d0:8c:40:1e:a6:71:ca:56:2e:c9:3d:fa:31:34:40: 79:35:00:a6:4e:59:c7:b9:52:3d:24:60:63:43:95:0b:36:d2: 4d:d1:b5:b2:90:7a:02:d6:59:4e:ee:6d:86:e0:4e:4e:31:27: 60:06:b2:cb:02:fc:7a:13:e3:8c:62:af:5c:a4:58:59:17:98: 3b:6a:b7:86:c7:47:3b:65:53:04:22:e1:4d:48:9a:59:0f:0a: 9d:ab:b2:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalu/tjzwxrThJvgDnUP4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDU5ODY4OTdkMDI0ZTQ4YzdjZDI1ZTE4OTFjNDIwOGZm M2JiYjIwHhcNMjUxMjE0MDIwMDU3WhcNMjUxMjE1MDIwMDU3WjAzMTEwLwYDVQQD EygyYzg0YWNhYTE2MGFhMTJkYTRkMmFhMzYwYTQ0OWRhNzMyNGZmYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUWd8lGRV+FN4uZZ0aLaXRaxEAMy 1ORmZtbSzwcUp3UwfpRifDi8Zrvq2IbgF5dD5dJiplWxr8bnygwfsoXBuuCU3vSI CeliwYyw9Ig1u/fBLV5ZCgmpyJrv4cBgY8mSjHExVgjws7z5DH8eBwqxYay+tle1 mLLoioD9PSlF3r/mSeUjlhBIaIVt+x+yn1prEa87YclUt5ps/mfSXuGlkjc9Hdbp GwRfUqnU+afAps4OP1lXl0F1LNDAnG3lL3i3utx9qpz5hCpC3wDNACtww2iyqdvG WrCIGfof/tFf+ye9IxRuUxq6m23Ewms6GiRkHYTcVOEZQ18X2+wtflcBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyErKoWCqEtpNKqNgpEnacyT/oFMB8GA1UdIwQY MBaAFOwFmGiX0CTkjHzSXhiRxCCP87uyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQt NzY2ZDFmMzI0MzNjLzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQtNzY2ZDFmMzI0MzNj LzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj8AdUJB dq+RuD3Ah+ylC9pngmd+qdKMcD9dt/+/cfTFqslnLeKruUWTn6GMdemGZPoqz48S XMbuoO30LgGIKigXAkVM3544id84EtVO+V9RIoJxTLJTSTcTb+SFlcWeagaEEcl3 UdaRWo9EMMihVDJEtkYqnKJiBLRF6nOQeTdANdut7ylBzOWkGFaq0hvOU2dJHEh1 see9xD1UyuYPsWF31qrs0IxAHqZxylYuyT36MTRAeTUApk5Zx7lSPSRgY0OVCzbS TdG1spB6AtZZTu5thuBOTjEnYAayywL8ehPjjGKvXKRYWReYO2q3hsdHO2VTBCLh TUiaWQ8KnauyHw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:39 2025 by rpki-client