This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json) Hash identifier: MVo+jzOtDnHuOdlaNEz5vi6K9yseflatbRnlMgaCdSY= Subject key identifier: 37:56:B5:7A:4B:E3:7C:53:96:9C:10:28:82:CE:A4:41:16:D7:6B:84 Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2 Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2 Certificate serial: 019B0E2629BFE6A598A82357E19DC3F95F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:02:20 +0000 Manifest this update: Thu 11 Dec 2025 16:02:20 +0000 Manifest next update: Fri 12 Dec 2025 16:02:20 +0000 Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=) 2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=) 3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: I1M7XFlF3up6S54w/rD6vloG3BkfJyH6bnV3KTe7xh0=) 4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=) 5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=) 6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=) 7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=) 8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:29:bf:e6:a5:98:a8:23:57:e1:9d:c3:f9:5f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2 Validity Not Before: Dec 11 16:02:20 2025 GMT Not After : Dec 12 16:02:20 2025 GMT Subject: CN=3756b57a4be37c53969c102882cea44116d76b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:e1:fa:b3:8a:74:f5:5d:99:ad:30:be:93: c4:35:85:7a:65:28:4b:db:c9:96:5b:4b:f7:da:86: d6:8e:c4:de:a8:73:09:23:dd:f2:e3:02:8f:c8:81: e0:10:6f:01:00:e4:0f:da:4d:9a:94:7d:4a:d2:b0: 71:06:b8:2f:3c:2c:04:ae:ee:33:ae:e1:4a:b5:2d: 66:67:41:1f:2f:75:d4:8b:9f:2e:e4:d5:d1:4a:13: c0:29:cb:e1:c6:f3:4b:63:26:ae:e7:c9:df:51:da: 7c:c3:82:c1:19:97:78:1c:52:e1:4d:5e:1f:e4:37: bc:2d:ce:c7:19:70:66:38:5d:c0:42:f4:24:16:6e: 30:a4:b2:1c:ae:ac:67:bf:6b:69:5e:76:ed:2f:98: 52:85:5a:e3:b1:c9:23:6e:64:c5:63:0d:ae:33:68: c6:bd:f3:45:32:88:f2:69:b4:0b:a2:66:f3:77:ac: a0:ce:05:df:ee:2d:b1:af:90:f9:08:cc:a4:12:3a: 9b:ac:69:90:04:63:de:01:bf:e8:df:85:3e:8c:ff: 07:b0:17:58:3c:7a:80:5b:de:6d:9f:a5:57:b0:d3: bc:da:56:f1:b7:48:a2:e1:7e:50:08:e0:bd:2c:51: 28:37:b3:f9:fe:58:37:fc:d2:7a:76:7a:d9:a2:df: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:B5:7A:4B:E3:7C:53:96:9C:10:28:82:CE:A4:41:16:D7:6B:84 X509v3 Authority Key Identifier: keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e6:c1:0d:da:19:6f:2b:38:9e:7a:b6:72:6f:80:b3:06:5c: ca:96:44:4c:21:f9:f8:26:f4:17:ab:27:1d:d1:4c:de:06:56: d8:6a:af:2d:7b:43:b7:1f:94:7d:22:9c:90:f4:31:34:94:3b: a4:31:d7:53:14:0c:2f:44:a1:8c:5c:11:2b:d6:a9:02:a1:5d: ee:32:55:4b:9f:83:81:21:eb:30:3b:8d:af:8a:08:af:7a:0e: 1f:95:2d:78:90:33:13:73:87:39:ff:83:74:f8:a4:81:07:a8: ef:31:34:cb:5a:11:01:e2:ff:1b:a7:c4:6c:ea:f8:28:7b:3b: bd:18:ed:c2:c8:ed:4f:e1:84:21:5e:9b:b4:11:a6:5b:10:6c: 51:d5:ca:78:02:1c:5d:7c:b9:89:19:0b:9c:d4:79:4d:47:17: 1d:89:94:77:ab:8e:a1:69:4f:42:c8:0c:27:3a:a5:7c:30:74: b9:d8:3f:5f:07:1e:10:5a:a1:00:6d:b8:1e:85:e7:29:cb:69: 29:b2:52:75:d7:4b:50:bc:fb:98:2b:3d:ea:87:63:2e:04:be: 5d:96:7a:18:af:d8:ab:fc:e5:21:4c:e1:ca:9e:e2:1d:32:32: 87:a5:a6:b1:2e:81:4e:74:8f:12:d8:25:a5:bd:e7:56:80:2d: ea:b7:cb:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJim/5qWYqCNX4Z3D+V8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0 NDY0YTIwHhcNMjUxMjExMTYwMjIwWhcNMjUxMjEyMTYwMjIwWjAzMTEwLwYDVQQD EygzNzU2YjU3YTRiZTM3YzUzOTY5YzEwMjg4MmNlYTQ0MTE2ZDc2Yjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvALh+rOKdPVdma0wvpPENYV6ZShL 28mWW0v32obWjsTeqHMJI93y4wKPyIHgEG8BAOQP2k2alH1K0rBxBrgvPCwEru4z ruFKtS1mZ0EfL3XUi58u5NXRShPAKcvhxvNLYyau58nfUdp8w4LBGZd4HFLhTV4f 5De8Lc7HGXBmOF3AQvQkFm4wpLIcrqxnv2tpXnbtL5hShVrjsckjbmTFYw2uM2jG vfNFMojyabQLombzd6ygzgXf7i2xr5D5CMykEjqbrGmQBGPeAb/o34U+jP8HsBdY PHqAW95tn6VXsNO82lbxt0ii4X5QCOC9LFEoN7P5/lg3/NJ6dnrZot9UBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdWtXpL43xTlpwQKILOpEEW12uEMB8GA1UdIwQY MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt ZTI5NTg5ZTg5NjRhLzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPebBDdoZ bys4nnq2cm+AswZcypZETCH5+Cb0F6snHdFM3gZW2GqvLXtDtx+UfSKckPQxNJQ7 pDHXUxQML0ShjFwRK9apAqFd7jJVS5+DgSHrMDuNr4oIr3oOH5UteJAzE3OHOf+D dPikgQeo7zE0y1oRAeL/G6fEbOr4KHs7vRjtwsjtT+GEIV6btBGmWxBsUdXKeAIc XXy5iRkLnNR5TUcXHYmUd6uOoWlPQsgMJzqlfDB0udg/XwceEFqhAG24HoXnKctp KbJSdddLULz7mCs96odjLgS+XZZ6GK/Yq/zlIUzhyp7iHTIyh6WmsS6BTnSPEtgl pb3nVoAt6rfL6Q== -----END CERTIFICATE-----Generated at Thu Dec 11 22:19:03 2025 by rpki-client