This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft File: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json) Hash identifier: 6hHtBAf8JFEhK+S/ira1cBzJkp83H+asAJPH0Hvc8eM= Subject key identifier: B4:72:00:B9:26:2F:98:17:72:69:7F:42:3F:85:D2:F7:BF:53:41:21 Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Certificate serial: 019B3F1139E90E45F86F1ED45C26B8A1ECA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft Manifest number: 0687 Signing time: Sun 21 Dec 2025 04:00:52 +0000 Manifest this update: Sun 21 Dec 2025 04:00:52 +0000 Manifest next update: Mon 22 Dec 2025 04:00:52 +0000 Files and hashes: 1: 00tdIzHocd6TrMlmwl0fE9GtEYA.roa (hash: oq1BzbGnWJoT/ZcE/ggd3PS4E29zXCy8zLCqvn+wWU8=) 2: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: vLghatz4cfa7dlm9a2gXiHwntQcsqJS/VdgN9QAB4Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:39:e9:0e:45:f8:6f:1e:d4:5c:26:b8:a1:ec:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Validity Not Before: Dec 21 04:00:52 2025 GMT Not After : Dec 22 04:00:52 2025 GMT Subject: CN=b47200b9262f981772697f423f85d2f7bf534121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:7c:49:27:b7:84:36:30:d6:8e:27:09:04: 83:cd:45:56:fa:dc:cb:36:b0:df:88:8e:e4:bc:25: a2:21:ec:dc:0d:1a:e4:0f:d7:61:80:6e:df:37:5b: 35:db:a6:91:a4:e2:5e:de:cc:d7:6c:a4:4c:c5:72: f4:7c:94:a7:ff:07:2d:74:87:24:d9:95:c0:85:fb: 91:db:5f:2e:de:db:59:fc:d6:62:b1:4a:62:c4:cc: b9:75:3c:70:56:da:97:93:a5:ed:a2:65:f2:f1:b8: bc:f0:7b:d9:f9:f5:64:92:0a:3e:29:fc:5c:31:6b: 02:f6:45:44:51:f1:9e:eb:36:e2:67:13:02:02:1e: 30:e4:78:5c:f7:a0:cc:8f:e3:e4:92:f1:54:ef:01: 15:27:71:48:9f:1b:09:2c:27:29:68:77:b7:d3:94: 4a:93:64:e4:e5:d1:8d:1c:c8:c7:20:5a:21:dc:2c: 09:bc:63:c4:95:57:a7:a7:bc:59:2f:e5:22:e8:8d: 8c:68:34:cc:ed:4f:b3:0e:0b:2d:32:35:70:10:61: 9e:1e:0c:62:9f:93:08:87:b1:2e:cf:68:a7:63:46: a9:f5:85:62:fd:3d:b9:3c:f7:35:2e:91:21:9d:bb: e1:e0:60:25:e0:54:ac:8c:52:e9:c6:38:23:77:5a: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:72:00:B9:26:2F:98:17:72:69:7F:42:3F:85:D2:F7:BF:53:41:21 X509v3 Authority Key Identifier: keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:ab:f9:9e:13:93:10:1f:0d:11:cf:b5:72:04:55:ee:1a: 58:7c:c6:44:e7:82:bb:30:61:14:8a:ff:7a:cf:27:64:da:e1: 0d:0a:e3:59:20:63:41:8c:3d:ae:b1:92:58:7a:1b:80:5c:99: d7:cc:86:22:1a:56:d9:2a:07:99:25:7b:40:a2:4a:8c:b1:b3: 83:5f:1e:aa:4f:a9:13:b6:ce:99:43:22:f6:31:ed:e6:49:5b: 7b:ec:7a:40:23:e0:42:a7:6a:6c:e6:b7:3b:fb:bc:f0:59:dd: 28:2a:f9:10:dc:e2:1a:57:56:28:88:35:d0:43:5f:16:8f:97: 31:b1:0c:31:7d:57:1f:cf:9a:23:65:49:9c:d1:bb:eb:8f:0d: 14:bb:b9:4f:35:1e:c1:21:2c:d3:26:92:cc:29:56:1d:80:6e: e5:f1:1d:b0:bb:ca:d0:a2:b5:1f:b8:d4:22:f5:22:02:b6:dc: c9:95:25:36:eb:a8:75:f5:7f:a0:b4:16:a7:13:96:7c:e5:18: dc:38:c4:32:4e:59:ac:5c:1e:d7:62:01:80:28:d2:71:ca:2b: b4:56:70:58:8b:c7:c0:dd:25:15:c4:c1:dd:b2:19:62:46:07: bc:d3:b1:17:06:31:fd:64:1e:26:01:7b:a5:1e:5d:7b:e6:35: a9:df:f9:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETnpDkX4bx7UXCa4oeyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVmMjQ2YmZjMWVhOGZjMzg2Yzg2ZGQ0OWZiYWE4ZDg4 YzQ4ODEwHhcNMjUxMjIxMDQwMDUyWhcNMjUxMjIyMDQwMDUyWjAzMTEwLwYDVQQD EyhiNDcyMDBiOTI2MmY5ODE3NzI2OTdmNDIzZjg1ZDJmN2JmNTM0MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL58SSe3hDYw1o4nCQSDzUVW+tzL NrDfiI7kvCWiIezcDRrkD9dhgG7fN1s126aRpOJe3szXbKRMxXL0fJSn/wctdIck 2ZXAhfuR218u3ttZ/NZisUpixMy5dTxwVtqXk6XtomXy8bi88HvZ+fVkkgo+Kfxc MWsC9kVEUfGe6zbiZxMCAh4w5Hhc96DMj+PkkvFU7wEVJ3FInxsJLCcpaHe305RK k2Tk5dGNHMjHIFoh3CwJvGPElVenp7xZL+Ui6I2MaDTM7U+zDgstMjVwEGGeHgxi n5MIh7Euz2inY0ap9YVi/T25PPc1LpEhnbvh4GAl4FSsjFLpxjgjd1qj4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRyALkmL5gXcml/Qj+F0ve/U0EhMB8GA1UdIwQY MBaAFOxl8ka/weqPw4bIbdSfuqjYjEiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt NzgxMjgwZmQyNDEyLzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy LzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtCr+Z4T kxAfDRHPtXIEVe4aWHzGROeCuzBhFIr/es8nZNrhDQrjWSBjQYw9rrGSWHobgFyZ 18yGIhpW2SoHmSV7QKJKjLGzg18eqk+pE7bOmUMi9jHt5klbe+x6QCPgQqdqbOa3 O/u88FndKCr5ENziGldWKIg10ENfFo+XMbEMMX1XH8+aI2VJnNG7648NFLu5TzUe wSEs0yaSzClWHYBu5fEdsLvK0KK1H7jUIvUiArbcyZUlNuuodfV/oLQWpxOWfOUY 3DjEMk5ZrFwe12IBgCjSccortFZwWIvHwN0lFcTB3bIZYkYHvNOxFwYx/WQeJgF7 pR5de+Y1qd/54A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:56 2025 by rpki-client