This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json) Hash identifier: Vyh3T5hqJizbzcx8RDZ48qZ2v9Q3CptikAxsu9HO6tA= Subject key identifier: 42:3C:7E:4F:3D:C2:DB:85:37:1E:00:88:E2:52:D2:DB:5D:EE:4F:EE Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56 Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56 Certificate serial: 019B25F68A6AAE6E22D8E17C75EE21A095A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 07:01:12 +0000 Manifest this update: Tue 16 Dec 2025 07:01:12 +0000 Manifest next update: Wed 17 Dec 2025 07:01:12 +0000 Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: Aq76VcX+Z96pJ7xU+Bkogu2/ey69W3MYHkr26mOsiCg=) 2: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (hash: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:8a:6a:ae:6e:22:d8:e1:7c:75:ee:21:a0:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56 Validity Not Before: Dec 16 07:01:12 2025 GMT Not After : Dec 17 07:01:12 2025 GMT Subject: CN=423c7e4f3dc2db85371e0088e252d2db5dee4fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:6f:7c:60:de:38:15:ce:4d:89:b3:ae:86: 17:36:e8:a9:16:48:3e:b9:4c:6c:5d:fc:5f:4d:67: cd:67:84:e6:b9:b0:1b:0e:d1:a7:a1:18:04:26:73: ef:40:3a:f1:a6:f7:75:f7:ad:5e:23:c8:b1:48:85: d0:81:93:de:ab:e3:10:69:0b:22:91:f4:a9:0b:2d: 54:bc:42:38:3f:8c:ae:4b:80:22:6d:4a:f0:f0:32: 35:28:d3:3c:b5:a5:90:c1:72:99:ec:8a:8e:ce:e8: 83:d2:7b:05:9a:be:d2:f8:5a:6e:87:c2:02:d5:90: 41:5d:f8:09:68:a8:d4:02:ac:1c:f6:be:84:49:83: f7:41:84:51:98:c3:4d:a6:e8:08:21:70:e9:a0:e6: fd:61:7e:2b:9d:b1:fe:cb:7a:9f:ab:8f:7d:e3:e4: 57:a9:79:73:f0:da:d4:41:57:bf:73:11:49:3b:e7: 47:e2:6e:d9:0c:41:b6:97:8b:48:32:de:5e:11:9c: 1d:f3:56:a3:fe:97:22:6d:e3:50:07:72:a8:51:c8: ae:2f:67:a5:24:7a:e3:96:92:9c:08:de:58:d2:16: 7a:22:f1:87:3a:05:66:0b:5a:1a:00:68:ff:77:94: 04:fd:05:c7:a5:d1:be:d9:d2:f1:54:2a:9c:5a:18: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:7E:4F:3D:C2:DB:85:37:1E:00:88:E2:52:D2:DB:5D:EE:4F:EE X509v3 Authority Key Identifier: keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:02:aa:61:a2:92:59:30:b1:1e:9d:59:0a:ef:5f:cb:b5:36: 5e:d8:06:97:b3:16:2e:cb:82:b9:76:22:79:45:18:b9:d5:d4: c1:60:fc:7c:3c:b1:fe:f0:66:74:09:20:a5:1c:e0:31:e1:b5: 0d:bf:b1:01:47:4f:aa:6a:98:2f:93:f2:d6:9a:5d:82:b9:36: e6:2c:64:10:7e:a4:4a:5b:8f:7f:3e:a8:4c:f3:1c:59:de:8a: 92:8b:7f:64:bd:dc:3a:92:55:12:f3:bc:c7:eb:66:fc:1b:ed: 43:ef:a9:5e:86:d4:0e:59:98:20:a8:c2:67:4f:71:d7:fd:a9: 1e:f4:21:da:61:4b:20:05:66:75:64:e5:8d:e9:f2:81:79:68: 64:2c:d6:a1:31:ad:9b:a5:d2:7f:7c:b0:9d:4e:c3:de:67:eb: 0e:4c:3f:8e:af:16:70:7e:64:be:7f:2a:cb:fe:48:54:77:63: a3:15:c0:62:e7:3b:c2:5f:76:37:8e:6e:c4:81:ae:ab:c0:c1: c5:af:6a:e3:02:e4:e7:17:59:c4:c1:46:27:d1:bc:1e:f7:cc: 42:47:51:9e:59:d5:ea:b8:8a:4e:fa:ff:f5:d2:dd:ab:99:47: 70:e0:66:de:d9:f1:96:ca:52:d9:4f:f3:05:40:83:fc:39:02: 1d:9e:57:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9opqrm4i2OF8de4hoJWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTFmYzZhMTU5NjU5MzRjNTMzOTNkNmVkMTg5ODRjNmJh NTZmNTYwHhcNMjUxMjE2MDcwMTEyWhcNMjUxMjE3MDcwMTEyWjAzMTEwLwYDVQQD Eyg0MjNjN2U0ZjNkYzJkYjg1MzcxZTAwODhlMjUyZDJkYjVkZWU0ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuBvfGDeOBXOTYmzroYXNuipFkg+ uUxsXfxfTWfNZ4TmubAbDtGnoRgEJnPvQDrxpvd1961eI8ixSIXQgZPeq+MQaQsi kfSpCy1UvEI4P4yuS4AibUrw8DI1KNM8taWQwXKZ7IqOzuiD0nsFmr7S+Fpuh8IC 1ZBBXfgJaKjUAqwc9r6ESYP3QYRRmMNNpugIIXDpoOb9YX4rnbH+y3qfq4994+RX qXlz8NrUQVe/cxFJO+dH4m7ZDEG2l4tIMt5eEZwd81aj/pcibeNQB3KoUciuL2el JHrjlpKcCN5Y0hZ6IvGHOgVmC1oaAGj/d5QE/QXHpdG+2dLxVCqcWhjD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI8fk89wtuFNx4AiOJS0ttd7k/uMB8GA1UdIwQY MBaAFO/h/GoVllk0xTOT1u0YmExrpW9WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82M2I1ZWMtYzJjOS00ZjY4LThkNDct NGQxOTkzN2UyZjIwLzEvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82M2I1ZWMtYzJjOS00ZjY4LThkNDctNGQxOTkzN2UyZjIw LzEvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwKqYaKS WTCxHp1ZCu9fy7U2XtgGl7MWLsuCuXYieUUYudXUwWD8fDyx/vBmdAkgpRzgMeG1 Db+xAUdPqmqYL5Py1ppdgrk25ixkEH6kSluPfz6oTPMcWd6Kkot/ZL3cOpJVEvO8 x+tm/BvtQ++pXobUDlmYIKjCZ09x1/2pHvQh2mFLIAVmdWTljenygXloZCzWoTGt m6XSf3ywnU7D3mfrDkw/jq8WcH5kvn8qy/5IVHdjoxXAYuc7wl92N45uxIGuq8DB xa9q4wLk5xdZxMFGJ9G8HvfMQkdRnlnV6riKTvr/9dLdq5lHcOBm3tnxlspS2U/z BUCD/DkCHZ5XiQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:15:28 2025 by rpki-client