This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json) Hash identifier: 6488JuCRv8xuUFvF6aYtwJgzDciYTGTUCXkvoDpomso= Subject key identifier: D9:0A:89:AE:6C:A6:74:DF:7B:76:48:5D:EA:1C:08:C5:F0:70:05:91 Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2 Certificate serial: 019B0FA5A2F4CE1C96E1D980602F10F51DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft Manifest number: 0628 Signing time: Thu 11 Dec 2025 23:01:11 +0000 Manifest this update: Thu 11 Dec 2025 23:01:11 +0000 Manifest next update: Fri 12 Dec 2025 23:01:11 +0000 Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: dXkE0ud2erULeaJx3EqvkMeXWucHMjPl0Rf9PcbJG80=) 2: U8r0tQi-zyaqXWj1BP7VR1CSQio.roa (hash: 2sAYuzHl5HIba+FILh2Jc5dn+E3yhGsj+/+0I47tVzI=) 3: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:a2:f4:ce:1c:96:e1:d9:80:60:2f:10:f5:1d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2 Validity Not Before: Dec 11 23:01:11 2025 GMT Not After : Dec 12 23:01:11 2025 GMT Subject: CN=d90a89ae6ca674df7b76485dea1c08c5f0700591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:81:ba:ef:e1:8a:f4:ed:37:49:7a:57:db: f6:8a:f9:dd:be:e7:64:62:a2:d0:2d:a2:a4:99:91: a9:89:c4:19:97:bd:5f:c7:fe:e5:c1:b4:2a:0a:b9: d5:b2:c3:5a:7d:07:fd:74:08:24:4f:2f:75:09:b4: d2:63:cf:a9:6e:7f:fe:40:11:6d:d4:52:20:29:05: d5:4a:d0:20:d0:16:dd:8e:44:3a:23:73:05:cc:29: b6:85:7a:e4:e0:63:4b:3a:d9:40:7d:79:f0:ee:71: bf:93:a5:0f:43:22:4b:d4:c3:69:06:5d:e8:d9:22: ed:13:2e:aa:c0:f1:b9:33:41:b6:73:23:e9:48:fd: e9:c2:38:2d:6e:00:33:21:70:de:72:d8:42:46:ae: 46:18:b2:f7:77:3c:3c:8f:22:ba:7b:70:af:b5:c1: cc:c8:40:26:fd:5f:35:59:f3:ae:37:35:e3:6a:45: e8:2b:d6:bd:e6:35:cd:54:67:c3:08:7f:c5:bd:f7: 0e:de:85:c1:8c:92:e6:22:87:35:03:09:fd:46:fb: c6:9f:40:03:2d:f4:fc:be:1f:ed:b0:c8:c1:c6:f3: e5:78:bc:43:52:fc:70:9b:3a:eb:f2:20:02:02:08: da:3a:d6:85:8a:be:35:27:fc:4b:09:3b:25:69:d4: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0A:89:AE:6C:A6:74:DF:7B:76:48:5D:EA:1C:08:C5:F0:70:05:91 X509v3 Authority Key Identifier: keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a8:42:65:bb:b1:bb:fb:49:7e:a7:75:95:d1:2f:f9:a9:cf: 94:4a:f2:fa:48:49:0b:43:ac:c8:35:1e:70:2e:a8:bc:47:b7: 36:90:c4:2a:54:f4:60:1e:47:08:be:bf:b4:d4:c0:e8:32:40: 70:1a:fb:5e:c9:13:a5:b8:03:d8:eb:15:0f:04:e3:c3:ac:30: f1:54:8d:af:0e:3f:e0:0e:9e:6b:d5:a5:36:81:2e:61:d1:98: 5d:06:70:62:fd:7e:33:46:2d:20:c6:67:8e:5b:e2:51:16:22: 61:99:e1:c3:20:c1:af:16:26:5b:9d:e5:3a:4e:b3:36:81:83: 77:5e:7e:a0:8f:e3:d0:ee:49:b9:81:58:e3:29:b1:d4:ee:6e: b2:6a:72:6a:cc:12:c5:57:a3:c1:1f:71:71:ec:06:0d:06:45: ca:67:c6:89:36:c9:23:93:12:75:81:36:47:98:cf:f9:d0:3c: a8:9a:dd:e7:ad:10:53:f7:c6:dc:68:e7:6e:13:b4:43:94:24: f3:f2:0d:e6:ba:a9:bc:41:3e:e1:ac:1b:21:8a:09:65:fb:5d: 46:da:ff:5b:c9:98:ec:ef:f4:dc:b2:7a:ca:46:da:f3:6f:c1: 64:65:d7:e8:e7:5a:b7:40:7d:9b:ce:55:a4:47:c3:43:1d:1c: 7b:63:6a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpaL0zhyW4dmAYC8Q9R2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh ZjUxZDIwHhcNMjUxMjExMjMwMTExWhcNMjUxMjEyMjMwMTExWjAzMTEwLwYDVQQD EyhkOTBhODlhZTZjYTY3NGRmN2I3NjQ4NWRlYTFjMDhjNWYwNzAwNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOyBuu/hivTtN0l6V9v2ivndvudk YqLQLaKkmZGpicQZl71fx/7lwbQqCrnVssNafQf9dAgkTy91CbTSY8+pbn/+QBFt 1FIgKQXVStAg0BbdjkQ6I3MFzCm2hXrk4GNLOtlAfXnw7nG/k6UPQyJL1MNpBl3o 2SLtEy6qwPG5M0G2cyPpSP3pwjgtbgAzIXDecthCRq5GGLL3dzw8jyK6e3CvtcHM yEAm/V81WfOuNzXjakXoK9a95jXNVGfDCH/FvfcO3oXBjJLmIoc1Awn9RvvGn0AD LfT8vh/tsMjBxvPleLxDUvxwmzrr8iACAgjaOtaFir41J/xLCTsladQP9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkKia5spnTfe3ZIXeocCMXwcAWRMB8GA1UdIwQY MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1 LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALahCZbux u/tJfqd1ldEv+anPlEry+khJC0OsyDUecC6ovEe3NpDEKlT0YB5HCL6/tNTA6DJA cBr7XskTpbgD2OsVDwTjw6ww8VSNrw4/4A6ea9WlNoEuYdGYXQZwYv1+M0YtIMZn jlviURYiYZnhwyDBrxYmW53lOk6zNoGDd15+oI/j0O5JuYFY4ymx1O5usmpyaswS xVejwR9xcewGDQZFymfGiTbJI5MSdYE2R5jP+dA8qJrd560QU/fG3GjnbhO0Q5Qk 8/IN5rqpvEE+4awbIYoJZftdRtr/W8mY7O/03LJ6ykba82/BZGXX6Odat0B9m85V pEfDQx0ce2NqUg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:08:49 2025 by rpki-client