This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft File: D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json) Hash identifier: zYDpv6bS9E81JtyaojgCdI/B/bq9Wap5LouVqhiSUjw= Subject key identifier: CA:9A:0C:D6:A2:86:A3:46:06:19:6F:69:82:2B:A8:F1:91:10:0E:6C Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B3D909512286E4ECD306FD76D2AB11E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft Manifest number: 0EB7 Signing time: Sat 20 Dec 2025 21:00:44 +0000 Manifest this update: Sat 20 Dec 2025 21:00:44 +0000 Manifest next update: Sun 21 Dec 2025 21:00:44 +0000 Files and hashes: 1: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=) 2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: bjdOyWcxio2CIJJdz/25qrrDInaX+icGUEUD48ZjL/0=) 3: E3-oQ4BmjuAUAxuY3lI4bGAJJn0.roa (hash: QkhM3KqaZ6ST7G4nJ7m93zJ83x4l2g7lj5o1mYVsrgc=) 4: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=) 5: PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa (hash: tdD/J8H0M27lW/hpYh2V2pKuEbxFXSmLFYYHtZ17IpE=) 6: gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa (hash: zVtlbSj16lTrnOVx6GM9u2ecIQWNTuwNYnRaanJM7XY=) 7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:95:12:28:6e:4e:cd:30:6f:d7:6d:2a:b1:1e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Dec 20 21:00:44 2025 GMT Not After : Dec 21 21:00:44 2025 GMT Subject: CN=ca9a0cd6a286a34606196f69822ba8f191100e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:a6:ae:33:00:7c:f1:89:f3:b6:d8:8e:11: 1e:ec:7b:f4:2c:c8:97:1d:8c:b2:21:ca:d6:46:4e: a4:d4:56:56:cf:19:0b:ea:73:0e:a9:c3:a6:b8:34: af:1e:10:00:2f:a5:5d:d7:5a:80:12:30:05:e7:49: 74:c1:59:82:14:9e:70:51:d0:9c:98:b9:12:49:ac: 5e:b1:2e:e5:a4:8c:33:c8:90:c1:72:59:46:3b:81: 5b:5b:14:e1:f5:30:58:41:a5:82:44:70:b1:7d:be: 4e:a4:75:9c:bb:4f:47:ef:a5:76:c8:05:b6:83:54: 91:cb:96:c9:27:c9:5e:a6:bb:28:a2:8d:c2:1e:81: bd:d0:cf:24:f8:fa:a9:ad:23:1a:9d:72:79:37:92: d9:19:04:a0:32:b4:ba:d0:35:55:5b:4d:bd:b1:63: 45:6f:16:01:53:36:9e:c2:82:72:ee:ec:7b:ef:5d: d0:2f:44:1b:e3:4b:a3:bb:4b:d9:a6:e0:fb:6b:83: dc:71:77:9f:15:38:5d:90:5e:ca:6d:4b:4a:68:0a: 33:d3:04:ad:b2:90:54:e3:06:34:c4:73:23:74:e6: 13:9d:d3:55:e4:9e:38:20:53:75:04:a1:a3:cc:e7: 7f:6a:8c:1c:97:40:9a:8f:bc:09:52:f7:ac:c6:b7: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:0C:D6:A2:86:A3:46:06:19:6F:69:82:2B:A8:F1:91:10:0E:6C X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:48:51:4e:ea:4d:71:42:52:64:b4:34:a0:3c:3b:2a:46:65: 60:4a:c2:74:fd:07:c0:39:d1:ea:a2:6a:d1:40:3b:99:0f:ca: 47:26:81:07:27:7f:28:97:3e:c5:0b:00:60:cb:49:5a:43:4e: b0:b4:bc:06:46:a4:2f:66:4c:98:94:9d:e5:2a:8f:47:16:95: 02:52:97:4c:62:4d:6c:ad:ce:8d:62:a6:a4:e8:27:6a:76:93: bf:9b:aa:1e:d8:ed:46:1e:a4:e7:0a:77:74:a3:16:3c:b4:f1: df:4a:a2:7c:7e:d5:fc:a9:8e:ce:20:3c:bf:ed:a2:5a:5f:e5: cc:b2:ed:d8:11:fa:f6:bc:76:3d:c3:e7:4a:2d:07:11:ec:b3: 31:4d:ad:a2:ab:ca:d3:20:1c:b5:8e:98:e1:80:77:2d:93:ef: 24:48:25:52:8a:ba:6a:48:4f:81:5a:71:75:8e:ed:c6:db:d1: 76:d4:4e:54:4e:f9:3f:b0:11:b5:21:21:a9:d5:af:0e:0f:5b: 2e:8b:d4:55:d4:80:b4:3c:0d:fa:1d:ee:8b:4f:d1:d1:56:e5: 91:13:9e:99:78:07:5a:23:3d:d8:13:f4:28:bd:08:c5:c5:ce: 08:0a:7c:de:16:06:b3:fe:cf:04:b3:44:6b:7a:9a:0d:09:7a: 8c:5c:e4:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJUSKG5OzTBv120qsR5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjUxMjIwMjEwMDQ0WhcNMjUxMjIxMjEwMDQ0WjAzMTEwLwYDVQQD EyhjYTlhMGNkNmEyODZhMzQ2MDYxOTZmNjk4MjJiYThmMTkxMTAwZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6qmrjMAfPGJ87bYjhEe7Hv0LMiX HYyyIcrWRk6k1FZWzxkL6nMOqcOmuDSvHhAAL6Vd11qAEjAF50l0wVmCFJ5wUdCc mLkSSaxesS7lpIwzyJDBcllGO4FbWxTh9TBYQaWCRHCxfb5OpHWcu09H76V2yAW2 g1SRy5bJJ8leprsooo3CHoG90M8k+PqprSManXJ5N5LZGQSgMrS60DVVW029sWNF bxYBUzaewoJy7ux7713QL0Qb40uju0vZpuD7a4PccXefFThdkF7KbUtKaAoz0wSt spBU4wY0xHMjdOYTndNV5J44IFN1BKGjzOd/aowcl0Caj7wJUvesxrejLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqaDNaihqNGBhlvaYIrqPGREA5sMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0hRTupN cUJSZLQ0oDw7KkZlYErCdP0HwDnR6qJq0UA7mQ/KRyaBByd/KJc+xQsAYMtJWkNO sLS8BkakL2ZMmJSd5SqPRxaVAlKXTGJNbK3OjWKmpOgnanaTv5uqHtjtRh6k5wp3 dKMWPLTx30qifH7V/KmOziA8v+2iWl/lzLLt2BH69rx2PcPnSi0HEeyzMU2toqvK 0yActY6Y4YB3LZPvJEglUoq6akhPgVpxdY7txtvRdtROVE75P7ARtSEhqdWvDg9b LovUVdSAtDwN+h3ui0/R0VblkROemXgHWiM92BP0KL0IxcXOCAp83hYGs/7PBLNE a3qaDQl6jFzkyg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:46:08 2025 by rpki-client