This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft File: _7JidnKHfQ9t6bxOfhhu7dE1YRA.mft (raw, json) Hash identifier: Ce1ci6k9GqWwTNv/J8aujptrDa/9A3wbPO9hkacg8XA= Subject key identifier: 73:0E:13:53:88:F0:DA:C5:01:F1:94:1B:47:D5:D6:84:14:01:BC:61 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019B09D9F4EDBB32E8640155CA4AE482C524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft Manifest number: 0550 Signing time: Wed 10 Dec 2025 20:00:37 +0000 Manifest this update: Wed 10 Dec 2025 20:00:37 +0000 Manifest next update: Thu 11 Dec 2025 20:00:37 +0000 Files and hashes: 1: 7KsAM7VeKjBy5UduS8f_1K2mOzI.roa (hash: dk/c5Z5K7GpW72fi6w6GOURMB6HE85VOO0UOd/bbWt0=) 2: PwrSsxL-Egr1Rf-yWM6dF8KNicg.roa (hash: ZF0noI6Bm7SJE3lO11+fxPjlvi4dxC50P26QEAuQDds=) 3: _7JidnKHfQ9t6bxOfhhu7dE1YRA.crl (hash: kqa42syzhUrLnMnxKodcPbd6PAmO4KYLMJvBjOdljqs=) 4: ca3uBchX87aQb2BMcNTeitnNyWg.roa (hash: xEcjhfiSS5Il6V8TFlEtmg3MeQv6IP4QBvRRpLZDmF4=) 5: oy0RBpjxSP0ql4h1ibz07-__E2o.roa (hash: 6Cxc3dZHUVoSuUtM1kMTedY7LGErQxmK7dXJEhw/5Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:d9:f4:ed:bb:32:e8:64:01:55:ca:4a:e4:82:c5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Dec 10 20:00:37 2025 GMT Not After : Dec 11 20:00:37 2025 GMT Subject: CN=730e135388f0dac501f1941b47d5d6841401bc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:a5:43:2e:01:57:94:d6:4d:df:74:85:7a: 7e:f1:a5:50:28:a5:a6:15:59:03:57:ea:8f:5b:8f: 6e:83:e5:57:5f:4e:b8:27:3e:33:a0:3c:c5:57:b8: 95:6c:1f:e4:d3:2c:b3:cf:21:db:eb:5c:35:d0:b9: 1f:db:86:65:a5:ec:4b:ae:59:66:ed:74:b3:f8:53: df:29:57:f1:f9:0c:94:9e:cc:f5:fb:a9:1a:ed:a9: 29:b8:1e:f4:b4:0a:f1:24:b8:cd:23:a1:07:39:f7: 25:fb:b9:c9:00:bd:df:df:72:b8:8c:77:76:ad:46: 39:2c:59:8c:17:34:4d:3a:12:52:44:ca:cb:65:5c: 3a:c3:f8:2d:9b:54:00:e3:ea:03:d8:07:9f:93:b8: b5:f7:d8:73:4f:fb:d8:71:c7:9d:d2:62:6c:fb:28: 12:d1:08:25:df:c8:5f:78:72:52:60:bc:5b:95:7a: 5c:2f:70:58:9f:7d:6c:6f:2c:24:18:8c:d9:56:e6: 05:79:da:b8:b3:04:0a:2b:1b:47:fe:63:fc:28:29: 49:e0:60:f2:23:ae:c0:72:ab:3c:52:6c:9a:b2:e5: bf:46:8f:9f:1c:4d:1a:23:fe:b6:13:eb:ac:61:dc: c3:35:57:bb:45:e4:ce:15:db:6a:59:cd:3b:2c:a0: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:13:53:88:F0:DA:C5:01:F1:94:1B:47:D5:D6:84:14:01:BC:61 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d6:56:cb:78:8c:47:60:94:19:9e:bd:00:61:fa:52:e4:37: 52:25:3e:07:b3:32:13:b4:a9:7d:6b:2f:2f:2b:2d:0e:15:9d: 49:8a:8d:a6:a5:35:df:8c:98:48:3b:e8:ed:6d:90:50:e4:86: db:a4:de:54:d4:09:cd:87:8b:e0:0d:8c:6d:32:0b:08:9c:0e: a9:09:a9:8e:e5:0c:ba:60:b1:df:18:27:af:71:f9:b8:01:a8: 4f:0a:a5:01:4f:6c:ff:76:ba:e0:c1:bd:94:df:e7:fb:a4:e1: 9f:16:05:85:6a:e1:95:c6:34:07:b3:80:80:d0:89:2c:f3:98: c5:3a:27:d8:f3:c0:6b:d2:e9:cd:f8:53:d9:d8:ab:22:71:24: 3f:ac:72:62:e2:57:f7:ff:10:c0:b5:4f:8e:ff:d6:91:60:8c: d2:d9:f4:4e:78:bc:c3:85:4f:bd:2d:47:8f:3d:ce:03:8f:b7: f1:60:40:21:08:a4:48:e9:ba:c1:78:96:25:66:81:a1:6c:8f: 6c:3b:15:5c:57:22:b5:61:cc:12:ea:6c:f0:83:6b:15:ac:8d: 0c:8f:a1:c0:3b:88:f7:51:21:28:bb:f6:2a:cd:7d:0f:8f:91: e3:08:91:b4:b4:12:13:ff:8d:b1:34:b6:6e:07:99:48:7b:6a: 5a:53:6a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJ2fTtuzLoZAFVykrkgsUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjUxMjEwMjAwMDM3WhcNMjUxMjExMjAwMDM3WjAzMTEwLwYDVQQD Eyg3MzBlMTM1Mzg4ZjBkYWM1MDFmMTk0MWI0N2Q1ZDY4NDE0MDFiYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtSlQy4BV5TWTd90hXp+8aVQKKWm FVkDV+qPW49ug+VXX064Jz4zoDzFV7iVbB/k0yyzzyHb61w10Lkf24ZlpexLrllm 7XSz+FPfKVfx+QyUnsz1+6ka7akpuB70tArxJLjNI6EHOfcl+7nJAL3f33K4jHd2 rUY5LFmMFzRNOhJSRMrLZVw6w/gtm1QA4+oD2Aefk7i199hzT/vYcced0mJs+ygS 0Qgl38hfeHJSYLxblXpcL3BYn31sbywkGIzZVuYFedq4swQKKxtH/mP8KClJ4GDy I67Acqs8UmyasuW/Ro+fHE0aI/62E+usYdzDNVe7ReTOFdtqWc07LKCdTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMOE1OI8NrFAfGUG0fV1oQUAbxhMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNZWy3iM R2CUGZ69AGH6UuQ3UiU+B7MyE7SpfWsvLystDhWdSYqNpqU134yYSDvo7W2QUOSG 26TeVNQJzYeL4A2MbTILCJwOqQmpjuUMumCx3xgnr3H5uAGoTwqlAU9s/3a64MG9 lN/n+6ThnxYFhWrhlcY0B7OAgNCJLPOYxTon2PPAa9LpzfhT2dirInEkP6xyYuJX 9/8QwLVPjv/WkWCM0tn0Tni8w4VPvS1Hjz3OA4+38WBAIQikSOm6wXiWJWaBoWyP bDsVXFcitWHMEups8INrFayNDI+hwDuI91EhKLv2Ks19D4+R4wiRtLQSE/+NsTS2 bgeZSHtqWlNqbA== -----END CERTIFICATE-----Generated at Thu Dec 11 04:27:03 2025 by rpki-client