This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json) Hash identifier: Zc0/KrgY+8c38rcheQPO/8J9Y4ekAEEY1M7EZRVialY= Subject key identifier: 6D:56:10:78:EF:0C:56:1E:C9:96:9A:8B:7C:57:BB:EF:4F:D4:2E:01 Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Certificate serial: 019B4091F751840A7E6E266F82A1B272F8E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft Manifest number: 07BB Signing time: Sun 21 Dec 2025 11:01:06 +0000 Manifest this update: Sun 21 Dec 2025 11:01:06 +0000 Manifest next update: Mon 22 Dec 2025 11:01:06 +0000 Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: dNzMP1jKbe8jnfjKfEMPUDiJ0CpvuLD13SLsjGJb2z8=) 2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=) 3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:f7:51:84:0a:7e:6e:26:6f:82:a1:b2:72:f8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Validity Not Before: Dec 21 11:01:06 2025 GMT Not After : Dec 22 11:01:06 2025 GMT Subject: CN=6d561078ef0c561ec9969a8b7c57bbef4fd42e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:00:69:c0:02:1f:53:3b:ea:f1:97:59:42: 8a:9a:ae:80:99:d2:f3:23:a1:c0:28:30:75:f8:8f: d2:97:cd:f4:93:ac:d1:a9:0b:be:c1:f9:61:81:18: 0e:a3:ce:be:5d:62:72:5a:e3:1b:ed:9c:f0:e8:d6: 0d:5c:03:bb:54:94:2e:5b:5b:84:82:90:3c:96:fe: b9:85:fb:f3:4e:0e:32:f6:e2:76:31:d2:16:35:28: 0b:6e:a9:ba:d8:c3:d3:64:9f:73:22:d8:bc:24:c5: 00:a5:e0:48:be:be:75:aa:ca:10:76:2e:52:cd:d8: 2e:2a:d9:3d:02:e9:24:6c:2d:12:54:a8:6d:04:9b: e8:62:63:5a:5b:31:7c:6e:c1:f8:65:44:05:c2:f0: b5:c2:4d:bb:ec:9b:90:0e:30:15:d1:ff:3f:da:67: 16:9c:e2:53:15:dc:fd:a9:64:5e:76:af:5b:23:6a: 59:80:82:84:29:38:4f:d9:12:85:b0:71:ba:ed:a6: fd:9e:9c:a6:1d:94:18:43:ef:7e:3e:48:33:45:8c: ab:a4:e4:d8:cc:4f:a6:0b:57:20:73:ca:0c:6c:92: b4:d7:55:3f:f3:7a:2d:5c:1f:be:a4:94:01:ba:18: fa:b0:dc:ab:a8:36:6f:15:0e:21:c9:4d:e3:4b:72: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:56:10:78:EF:0C:56:1E:C9:96:9A:8B:7C:57:BB:EF:4F:D4:2E:01 X509v3 Authority Key Identifier: keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4d:89:b0:e7:02:de:fd:96:4c:fc:84:99:38:ae:29:f6:fd: ac:eb:0d:c0:e1:76:ab:fc:da:05:a1:f9:1f:c3:d0:a3:4e:ce: bf:40:1b:09:ed:71:b6:36:9b:d2:91:b3:33:22:e1:58:ce:93: b8:8f:c3:0f:59:38:c0:8f:6d:37:59:01:24:11:43:b2:31:0e: c6:8d:79:82:03:4a:15:1b:30:19:1d:d8:74:4d:c4:8d:2f:bc: ff:ff:89:53:6d:2d:63:40:49:93:16:12:2b:cb:0f:47:b0:56: 7f:5a:79:1d:44:a2:c8:cb:61:f7:d0:6c:f4:14:a3:60:f4:b9: 3a:d0:20:9b:62:2c:41:e2:7e:79:7d:4b:47:e1:79:1a:46:d0: 52:b6:33:b6:b2:11:c4:28:5f:7a:d9:92:ab:27:72:10:5f:99: af:de:b3:b3:2f:84:5b:a3:0e:5d:ae:de:c8:f3:75:89:04:a5: 06:a6:0b:5c:a8:81:4f:cd:64:a3:bf:d4:6c:eb:56:21:d7:69: 11:40:c1:80:b4:86:d2:27:12:b1:cd:83:c3:19:58:8a:d8:cf: de:33:4e:97:1f:b2:59:e0:db:a3:0c:fd:2b:dd:bb:b2:00:4f: c2:5d:43:79:ce:e0:ee:4a:67:cb:4d:45:a7:c5:c9:80:d4:b2: f5:0c:84:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfdRhAp+biZvgqGycvjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2 NzcyYjAwHhcNMjUxMjIxMTEwMTA2WhcNMjUxMjIyMTEwMTA2WjAzMTEwLwYDVQQD Eyg2ZDU2MTA3OGVmMGM1NjFlYzk5NjlhOGI3YzU3YmJlZjRmZDQyZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdIAacACH1M76vGXWUKKmq6AmdLz I6HAKDB1+I/Sl830k6zRqQu+wflhgRgOo86+XWJyWuMb7Zzw6NYNXAO7VJQuW1uE gpA8lv65hfvzTg4y9uJ2MdIWNSgLbqm62MPTZJ9zIti8JMUApeBIvr51qsoQdi5S zdguKtk9AukkbC0SVKhtBJvoYmNaWzF8bsH4ZUQFwvC1wk277JuQDjAV0f8/2mcW nOJTFdz9qWRedq9bI2pZgIKEKThP2RKFsHG67ab9npymHZQYQ+9+PkgzRYyrpOTY zE+mC1cgc8oMbJK011U/83otXB++pJQBuhj6sNyrqDZvFQ4hyU3jS3JjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1WEHjvDFYeyZaai3xXu+9P1C4BMB8GA1UdIwQY MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0 LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE2JsOcC 3v2WTPyEmTiuKfb9rOsNwOF2q/zaBaH5H8PQo07Ov0AbCe1xtjab0pGzMyLhWM6T uI/DD1k4wI9tN1kBJBFDsjEOxo15ggNKFRswGR3YdE3EjS+8//+JU20tY0BJkxYS K8sPR7BWf1p5HUSiyMth99Bs9BSjYPS5OtAgm2IsQeJ+eX1LR+F5GkbQUrYztrIR xChfetmSqydyEF+Zr96zsy+EW6MOXa7eyPN1iQSlBqYLXKiBT81ko7/UbOtWIddp EUDBgLSG0icSsc2DwxlYitjP3jNOlx+yWeDbowz9K927sgBPwl1Dec7g7kpny01F p8XJgNSy9QyE7A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:49:44 2025 by rpki-client