This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json) Hash identifier: irgQm8KbuqU1pdbmYhirv/HKLXSM95cU8iLtauMoS0I= Subject key identifier: 95:8D:5A:86:D9:F2:A6:CC:EE:74:2B:51:69:5A:FC:B5:CA:08:58:A6 Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Certificate serial: 019B0E933BB21118D1AFAEC0B4B74D10A389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 18:01:28 +0000 Manifest this update: Thu 11 Dec 2025 18:01:28 +0000 Manifest next update: Fri 12 Dec 2025 18:01:28 +0000 Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: jtbfgkgyF2Bd8bJ+XKuSlcXQ7C3LjW9Q+lAAhNZbUB0=) 2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=) 3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:3b:b2:11:18:d1:af:ae:c0:b4:b7:4d:10:a3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Validity Not Before: Dec 11 18:01:28 2025 GMT Not After : Dec 12 18:01:28 2025 GMT Subject: CN=958d5a86d9f2a6ccee742b51695afcb5ca0858a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:11:6c:21:d8:27:f6:47:f0:08:87:4d:8a: f7:7c:dc:e1:2e:e7:58:ee:0a:db:fc:44:b9:91:17: cd:28:6d:05:ec:37:29:8c:13:12:1d:3c:d2:34:fd: 88:cd:8f:c4:7d:ce:a9:07:79:d1:ab:02:2c:2b:52: a0:7c:da:ec:02:41:34:8b:db:e6:c8:14:8f:24:69: 88:65:85:0b:04:60:5b:1a:99:e6:96:c4:7b:34:bb: c2:9c:17:70:69:bd:4a:51:68:97:6c:ed:80:71:f8: 85:98:3d:e5:8a:b6:4b:21:67:9c:19:c8:16:ef:be: 30:77:0a:b2:21:2c:ac:af:df:16:2d:81:0b:12:e7: 6c:3a:7b:80:dc:47:f0:cf:2b:41:cb:1c:d2:ff:48: 53:f7:dd:47:00:6f:17:5f:6e:57:ac:83:fa:64:58: 7e:8b:ab:80:10:6a:59:79:92:02:62:13:24:8c:99: c8:2e:c0:14:ed:43:98:91:0a:09:8e:cb:76:a6:60: d4:e8:87:0e:54:ed:88:1f:07:7d:d8:26:4c:d2:68: c2:63:f0:c6:6c:75:68:78:90:91:07:98:88:7a:86: e2:92:b4:6d:3c:74:8e:62:4a:b2:f9:70:60:49:d4: 0e:dc:16:69:b8:69:12:cb:8a:b9:4f:ea:44:08:d2: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:5A:86:D9:F2:A6:CC:EE:74:2B:51:69:5A:FC:B5:CA:08:58:A6 X509v3 Authority Key Identifier: keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:58:88:ee:09:d0:3f:a6:e2:a9:46:7c:04:25:79:2d:bc:17: 1a:34:c7:d3:54:10:c9:9a:d3:cd:cd:57:dd:22:6d:69:1e:5c: 39:29:84:d3:ac:72:82:ce:a3:d4:23:3b:95:06:80:63:38:9b: 38:97:5f:42:df:6b:46:07:e7:13:86:d1:c8:f7:ad:84:09:8e: 62:15:e1:43:8c:fa:78:dc:87:9d:13:05:87:13:d1:3c:8b:e0: 54:63:dd:87:18:41:28:c6:e8:ac:b1:0c:46:a2:9b:62:92:fa: 9d:3f:97:24:05:f4:42:3a:7a:20:e0:26:23:80:84:81:6b:55: d4:24:bd:3c:f2:f9:56:35:f1:f6:d7:c6:fc:fc:cd:34:47:7a: 18:e8:6d:e5:83:0f:02:b7:e4:21:76:e7:44:07:8e:f7:5e:84: c3:21:ec:06:ad:57:51:53:42:05:56:1c:22:af:4e:1e:13:83: 13:e0:1b:11:c5:b5:12:85:23:d8:88:aa:cb:9c:34:17:54:ae: 3d:53:c4:19:a8:95:f6:e8:0e:65:17:29:32:4c:05:a0:e1:03: 8e:f6:51:3b:03:e9:63:ff:7f:19:55:a7:92:b5:cb:c6:dc:f3: aa:f0:da:df:f0:12:9a:84:3f:00:67:e6:6e:02:2e:10:f1:8e: 64:74:a1:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzuyERjRr67AtLdNEKOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw ZmRlZWQwHhcNMjUxMjExMTgwMTI4WhcNMjUxMjEyMTgwMTI4WjAzMTEwLwYDVQQD Eyg5NThkNWE4NmQ5ZjJhNmNjZWU3NDJiNTE2OTVhZmNiNWNhMDg1OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TkRbCHYJ/ZH8AiHTYr3fNzhLudY 7grb/ES5kRfNKG0F7DcpjBMSHTzSNP2IzY/Efc6pB3nRqwIsK1KgfNrsAkE0i9vm yBSPJGmIZYULBGBbGpnmlsR7NLvCnBdwab1KUWiXbO2AcfiFmD3lirZLIWecGcgW 774wdwqyISysr98WLYELEudsOnuA3EfwzytByxzS/0hT991HAG8XX25XrIP6ZFh+ i6uAEGpZeZICYhMkjJnILsAU7UOYkQoJjst2pmDU6IcOVO2IHwd92CZM0mjCY/DG bHVoeJCRB5iIeobikrRtPHSOYkqy+XBgSdQO3BZpuGkSy4q5T+pECNLahQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWNWobZ8qbM7nQrUWla/LXKCFimMB8GA1UdIwQY MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt MzgxNGM1N2ZlOWJiLzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFiI7gnQ P6biqUZ8BCV5LbwXGjTH01QQyZrTzc1X3SJtaR5cOSmE06xygs6j1CM7lQaAYzib OJdfQt9rRgfnE4bRyPethAmOYhXhQ4z6eNyHnRMFhxPRPIvgVGPdhxhBKMborLEM RqKbYpL6nT+XJAX0Qjp6IOAmI4CEgWtV1CS9PPL5VjXx9tfG/PzNNEd6GOht5YMP ArfkIXbnRAeO916EwyHsBq1XUVNCBVYcIq9OHhODE+AbEcW1EoUj2Iiqy5w0F1Su PVPEGaiV9ugOZRcpMkwFoOEDjvZROwPpY/9/GVWnkrXLxtzzqvDa3/ASmoQ/AGfm bgIuEPGOZHShzg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:21:12 2025 by rpki-client