This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json) Hash identifier: CwJbBI2mCAA6gmYDNhSxyjYiFCgAsFhyIwScRd2pjFY= Subject key identifier: CB:32:E3:99:C9:2A:A3:0B:49:74:BD:0D:60:53:E9:3F:5E:24:57:15 Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9 Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9 Certificate serial: 019B2EFA9D4DF58C06EED365809DABF88BFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft Manifest number: 14CB Signing time: Thu 18 Dec 2025 01:02:14 +0000 Manifest this update: Thu 18 Dec 2025 01:02:14 +0000 Manifest next update: Fri 19 Dec 2025 01:02:14 +0000 Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: v3xWs1E6gR6Nt2Ey5Dvxk9uYNnB1VyxTqrvhfSLzwO8=) 2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=) 3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:9d:4d:f5:8c:06:ee:d3:65:80:9d:ab:f8:8b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9 Validity Not Before: Dec 18 01:02:14 2025 GMT Not After : Dec 19 01:02:14 2025 GMT Subject: CN=cb32e399c92aa30b4974bd0d6053e93f5e245715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:6a:51:4d:28:8d:c6:cf:da:b2:35:92:d2: 4c:78:8a:1f:84:ba:44:e4:21:ab:e2:e3:ff:31:0d: fc:ea:f8:aa:c1:b3:ca:cc:6e:74:8a:68:85:18:78: 7f:6b:2b:c8:68:c7:34:75:85:f3:14:d8:8c:8e:82: d5:fb:74:00:9f:10:de:90:fe:97:a2:0c:95:82:0c: d4:78:7e:f6:09:59:57:6a:69:a4:40:79:39:df:27: e5:34:15:31:c2:47:da:e9:7b:5c:e6:d4:3c:13:ad: 7b:a9:fe:49:ab:a3:83:dc:f4:29:e4:4d:e5:d7:b6: 69:4e:98:6b:70:3d:af:63:ec:96:01:a1:16:19:87: 04:d9:8b:64:78:d1:ee:0b:bd:56:b7:9c:ee:90:ed: 79:3c:9b:fd:f2:52:90:3f:81:9a:02:98:06:71:2e: f4:05:af:d1:21:b4:98:8e:76:ef:16:1c:5b:3c:21: fb:50:db:c2:5e:9d:dc:b8:86:25:41:fe:fe:45:94: 2c:5b:35:74:95:d4:d6:7a:4a:31:90:e8:01:99:06: ff:a0:44:9e:e8:86:16:a9:36:98:87:ea:67:54:80: dc:2a:f8:25:c2:09:82:e4:5b:0c:f5:2b:4d:d4:97: ef:fb:28:5f:3e:01:f4:b2:02:e7:06:3a:04:a0:a5: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:E3:99:C9:2A:A3:0B:49:74:BD:0D:60:53:E9:3F:5E:24:57:15 X509v3 Authority Key Identifier: keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ec:c4:19:67:0e:cd:a0:9b:65:85:96:3c:6d:20:c9:7c:8d: c6:1f:be:0a:91:df:79:e1:67:c1:07:44:b7:32:22:19:32:62: 74:ef:28:d8:17:90:31:e1:c8:0f:1a:44:74:69:7b:3a:a7:f8: 0d:ac:94:39:21:7e:cb:fd:ae:e6:76:fc:88:91:05:5e:0c:b4: 8d:3f:4e:ef:0d:4f:f6:e5:4a:46:aa:a2:48:d3:ff:13:75:27: 9f:57:84:12:c9:e7:c9:b4:e7:ae:e2:d5:f6:8d:75:e2:c9:c3: c3:20:c4:c4:b1:a1:7d:15:a2:c9:85:78:02:c3:a7:14:29:90: 82:81:03:99:2e:bd:0b:f4:ba:9c:28:0a:85:43:30:9c:ee:bb: 30:ac:3c:a8:9d:93:5d:d0:ce:08:f9:38:6e:cd:36:fc:e7:2b: 4a:88:e8:db:4e:ea:d6:f3:d6:cb:35:86:f3:45:3a:55:bd:86: 23:32:08:95:08:c5:f1:2a:37:38:b3:c2:60:22:03:e2:c6:66: cc:86:29:0f:6c:82:24:38:39:62:fe:d9:94:ff:01:90:20:a6: 81:25:50:c3:1b:3d:52:e9:4c:7e:97:eb:15:1b:10:a4:ef:12: 8c:0e:9f:47:a6:69:b0:6d:e0:2d:22:77:f3:bb:f0:59:b5:73: 22:df:d0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+p1N9YwG7tNlgJ2r+Iv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1 ODlkYjkwHhcNMjUxMjE4MDEwMjE0WhcNMjUxMjE5MDEwMjE0WjAzMTEwLwYDVQQD EyhjYjMyZTM5OWM5MmFhMzBiNDk3NGJkMGQ2MDUzZTkzZjVlMjQ1NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYVqUU0ojcbP2rI1ktJMeIofhLpE 5CGr4uP/MQ386viqwbPKzG50imiFGHh/ayvIaMc0dYXzFNiMjoLV+3QAnxDekP6X ogyVggzUeH72CVlXammkQHk53yflNBUxwkfa6Xtc5tQ8E617qf5Jq6OD3PQp5E3l 17ZpTphrcD2vY+yWAaEWGYcE2YtkeNHuC71Wt5zukO15PJv98lKQP4GaApgGcS70 Ba/RIbSYjnbvFhxbPCH7UNvCXp3cuIYlQf7+RZQsWzV0ldTWekoxkOgBmQb/oESe 6IYWqTaYh+pnVIDcKvglwgmC5FsM9StN1Jfv+yhfPgH0sgLnBjoEoKWzFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsy45nJKqMLSXS9DWBT6T9eJFcVMB8GA1UdIwQY MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3 LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjezEGWcO zaCbZYWWPG0gyXyNxh++CpHfeeFnwQdEtzIiGTJidO8o2BeQMeHIDxpEdGl7Oqf4 DayUOSF+y/2u5nb8iJEFXgy0jT9O7w1P9uVKRqqiSNP/E3Unn1eEEsnnybTnruLV 9o114snDwyDExLGhfRWiyYV4AsOnFCmQgoEDmS69C/S6nCgKhUMwnO67MKw8qJ2T XdDOCPk4bs02/OcrSojo207q1vPWyzWG80U6Vb2GIzIIlQjF8So3OLPCYCID4sZm zIYpD2yCJDg5Yv7ZlP8BkCCmgSVQwxs9UulMfpfrFRsQpO8SjA6fR6ZpsG3gLSJ3 87vwWbVzIt/QHA== -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:53 2025 by rpki-client