This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json) Hash identifier: CosFcqjJXCnOxTcgRigjT2VlctOyndJpWQlynosfT8E= Subject key identifier: 65:1C:59:8C:A4:82:EC:EA:9E:14:98:74:B6:7A:EB:DD:FA:B7:05:E4 Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Certificate serial: 019B21ABB26AB851F92EC8C85A54BD05E27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft Manifest number: 07AB Signing time: Mon 15 Dec 2025 11:00:59 +0000 Manifest this update: Mon 15 Dec 2025 11:00:59 +0000 Manifest next update: Tue 16 Dec 2025 11:00:59 +0000 Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: tqEgk/QLYe1ArpVLWZGmqXhMySnifOjXU4YJcDmi6u4=) 2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=) 3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:b2:6a:b8:51:f9:2e:c8:c8:5a:54:bd:05:e2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Validity Not Before: Dec 15 11:00:59 2025 GMT Not After : Dec 16 11:00:59 2025 GMT Subject: CN=651c598ca482ecea9e149874b67aebddfab705e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:0c:46:6e:e6:65:02:a3:57:84:59:8f:1c: 5f:c6:a9:9f:46:88:93:d7:0f:9d:3e:6e:1a:f8:ed: 24:2c:38:eb:3f:e8:b0:e1:53:dc:05:51:b2:ff:ac: 55:50:8c:be:5c:39:d6:1d:33:e8:87:9a:79:d6:44: 6f:de:5b:e3:df:f7:87:b4:8a:65:8e:a0:08:36:be: 77:9d:43:90:be:8d:e8:cc:40:c9:c8:3c:60:2a:01: f1:81:7c:5b:ed:a8:af:c5:11:fb:40:85:3c:09:f9: d7:28:84:6c:2a:cf:e0:3d:8d:73:e5:b9:87:55:58: 47:24:df:23:4a:07:75:ac:88:b9:e1:3e:69:f1:ce: c3:f3:3a:70:96:99:9d:32:76:71:77:6a:ef:8f:a7: bf:f3:4a:bd:4f:88:eb:ab:64:87:f9:6d:1b:21:4b: 84:01:d8:2d:f2:04:00:18:32:fd:97:59:15:ba:da: 5c:50:d5:84:88:66:ec:d1:6e:49:9f:a5:fd:0b:97: 54:45:0b:a3:99:13:ed:95:dc:1f:77:de:e2:d9:a4: 5a:88:bf:a9:a7:16:d2:5a:6d:05:b9:fb:f0:d2:8d: 35:ae:76:58:23:92:3e:8e:b2:b2:1f:19:7b:76:89: 0a:0c:bf:47:62:1f:97:f8:78:e5:c6:e3:4b:76:9e: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:59:8C:A4:82:EC:EA:9E:14:98:74:B6:7A:EB:DD:FA:B7:05:E4 X509v3 Authority Key Identifier: keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:e6:e4:f3:31:1d:b7:08:42:78:68:78:bc:7d:6b:07:42: f9:43:48:f8:98:74:54:29:48:1d:07:0b:1f:a2:91:fe:c8:29: 01:35:59:02:18:9c:a2:2f:75:40:6f:71:12:0d:44:10:a6:fb: 2d:9a:88:f8:dc:16:56:43:66:72:ac:e4:6c:89:d9:9e:41:12: 56:9a:19:35:f9:bb:29:79:63:54:29:56:03:cf:a1:90:a3:e7: 1c:d8:98:91:11:7a:45:fa:f8:02:ea:c0:47:9a:b9:84:19:96: 46:35:9f:a8:44:e3:3d:07:7a:71:fd:27:25:32:a0:bc:e2:5e: 97:a8:30:c1:6a:5f:2e:fb:37:e4:a5:79:db:0e:a3:d4:f6:e4: 7f:7a:74:8e:03:d5:51:5c:68:42:af:47:c7:4b:f5:61:ad:c4: 81:99:9e:18:0f:ad:ef:08:06:7a:09:27:1f:6b:e6:7b:23:85: 3d:9c:fc:24:82:e8:a3:47:11:dd:42:01:2b:c5:c1:45:b0:f4: 59:48:8f:43:21:57:3b:c7:cd:a3:01:0f:20:d3:79:47:b4:a4: 84:5f:80:eb:c3:ae:b4:40:d4:cf:81:fc:f0:95:61:73:03:3c: d5:02:3a:40:18:b3:35:09:b8:3b:ca:b5:54:ca:8a:6a:fb:88: e4:77:9e:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq7JquFH5LsjIWlS9BeJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2 NzcyYjAwHhcNMjUxMjE1MTEwMDU5WhcNMjUxMjE2MTEwMDU5WjAzMTEwLwYDVQQD Eyg2NTFjNTk4Y2E0ODJlY2VhOWUxNDk4NzRiNjdhZWJkZGZhYjcwNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOoMRm7mZQKjV4RZjxxfxqmfRoiT 1w+dPm4a+O0kLDjrP+iw4VPcBVGy/6xVUIy+XDnWHTPoh5p51kRv3lvj3/eHtIpl jqAINr53nUOQvo3ozEDJyDxgKgHxgXxb7aivxRH7QIU8CfnXKIRsKs/gPY1z5bmH VVhHJN8jSgd1rIi54T5p8c7D8zpwlpmdMnZxd2rvj6e/80q9T4jrq2SH+W0bIUuE Adgt8gQAGDL9l1kVutpcUNWEiGbs0W5Jn6X9C5dURQujmRPtldwfd97i2aRaiL+p pxbSWm0Fufvw0o01rnZYI5I+jrKyHxl7dokKDL9HYh+X+HjlxuNLdp5T9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUcWYykguzqnhSYdLZ66936twXkMB8GA1UdIwQY MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0 LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLnm5PMx HbcIQnhoeLx9awdC+UNI+Jh0VClIHQcLH6KR/sgpATVZAhicoi91QG9xEg1EEKb7 LZqI+NwWVkNmcqzkbInZnkESVpoZNfm7KXljVClWA8+hkKPnHNiYkRF6Rfr4AurA R5q5hBmWRjWfqETjPQd6cf0nJTKgvOJel6gwwWpfLvs35KV52w6j1Pbkf3p0jgPV UVxoQq9Hx0v1Ya3EgZmeGA+t7wgGegknH2vmeyOFPZz8JILoo0cR3UIBK8XBRbD0 WUiPQyFXO8fNowEPINN5R7SkhF+A68OutEDUz4H88JVhcwM81QI6QBizNQm4O8q1 VMqKavuI5Hee5A== -----END CERTIFICATE-----Generated at Mon Dec 15 19:56:46 2025 by rpki-client