This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json) Hash identifier: bUaDwsICHUbYfSNbr9AGNR0ShWV2rpcDZ5Rwn+IBSNU= Subject key identifier: 8B:24:76:41:54:53:48:A1:4A:5B:2A:F4:38:DF:A1:56:91:94:4C:15 Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd Certificate serial: 019B21071B1E296D00BBCF2D739861427B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft Manifest number: 119A Signing time: Mon 15 Dec 2025 08:01:12 +0000 Manifest this update: Mon 15 Dec 2025 08:01:12 +0000 Manifest next update: Tue 16 Dec 2025 08:01:12 +0000 Files and hashes: 1: 0YnoXFsLC3L8LFSSyo3TEM6ihxM.roa (hash: 1mt7G/fO9VBU7/suzQGIUYMupKdv6yImTUBwyXrv1sk=) 2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: 945WSI/AgkUX8B4jMljw4eeQDlS/Xatq+LgCwrjgcSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:1b:1e:29:6d:00:bb:cf:2d:73:98:61:42:7b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd Validity Not Before: Dec 15 08:01:12 2025 GMT Not After : Dec 16 08:01:12 2025 GMT Subject: CN=8b247641545348a14a5b2af438dfa15691944c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:b3:4d:eb:bf:b7:c8:b1:3a:a1:bf:a5:3f: 48:d2:db:1e:d9:86:f3:0d:a5:ed:17:67:6a:b3:67: 40:d6:f4:cc:3e:c9:c3:4b:97:8b:af:80:80:ef:2a: 09:bc:3b:87:df:ad:c8:18:fc:ad:f5:0f:18:f7:a6: 62:a7:f2:32:62:b0:10:70:f1:2e:21:7b:df:4f:03: bd:72:f2:47:31:68:08:63:ee:db:21:ca:3b:78:9d: c4:6b:69:dc:7a:c4:98:51:c1:fa:91:85:e1:9d:88: 2a:ff:86:e7:a2:c1:f3:ed:2a:42:70:b8:cd:51:ef: fc:17:38:bf:8e:c9:03:03:b8:33:90:07:4f:14:8c: d0:79:75:43:d9:f2:bb:8d:ff:17:e5:e5:26:3c:b6: 86:4c:7c:a4:bd:30:05:67:3d:4c:ce:ff:e6:a4:f3: 8e:92:7a:73:7c:cd:4a:6e:42:7e:99:78:18:30:61: 86:56:85:43:12:06:30:bb:ce:d8:73:01:e6:39:c6: cb:49:dd:e2:a4:ae:69:b5:03:99:df:26:14:33:f1: 56:20:55:1a:0c:25:8d:0d:26:e9:69:16:81:79:2f: 17:06:1d:b8:ea:d6:5b:f8:f9:fd:84:e9:e8:f8:d5: 0c:e6:e9:ae:9a:9c:20:70:aa:1b:82:2d:29:1f:14: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:24:76:41:54:53:48:A1:4A:5B:2A:F4:38:DF:A1:56:91:94:4C:15 X509v3 Authority Key Identifier: keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:47:49:c0:c1:47:9e:95:50:33:96:44:7e:ea:42:bc:38:2c: d6:5d:07:2c:e1:a2:f3:db:e3:82:60:fd:e7:69:98:9e:83:96: 66:21:0f:e0:e6:28:a4:85:ee:88:30:45:b1:be:73:38:53:dd: 78:db:2f:c3:1b:bc:1a:8f:5f:91:e4:69:36:32:31:99:69:32: 93:2e:3d:26:64:18:2b:52:f8:5b:ed:e1:6a:cb:ad:04:94:51: 1c:53:eb:21:70:0a:bc:c1:4d:26:cb:e0:63:34:1e:df:a2:d8: 21:34:a0:cc:e0:21:5f:a4:15:2f:59:39:2c:dc:a2:87:22:0f: e2:66:d3:1f:f9:b7:20:ab:44:06:79:9f:f6:5e:66:b8:55:d3: 44:9b:a4:c6:36:de:20:5d:13:0f:b4:3b:a0:1f:b8:d1:16:3f: 03:03:4a:f8:2b:41:26:35:c9:86:27:e6:50:b7:72:67:f2:21: 75:e5:02:9a:4a:e6:27:f2:37:cb:c2:6f:00:8b:93:e1:6b:e4: b4:37:37:39:bc:9a:9b:1f:58:56:04:26:23:84:57:d2:c8:60: 9a:3a:a4:9e:15:d8:3b:5b:ec:71:15:e8:43:c4:98:52:a4:d3: 44:3d:c7:62:23:9a:98:d4:64:02:7e:d6:88:a9:d8:5d:48:08: 6c:2b:22:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBxseKW0Au88tc5hhQnuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy ODFiZGQwHhcNMjUxMjE1MDgwMTEyWhcNMjUxMjE2MDgwMTEyWjAzMTEwLwYDVQQD Eyg4YjI0NzY0MTU0NTM0OGExNGE1YjJhZjQzOGRmYTE1NjkxOTQ0YzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4euzTeu/t8ixOqG/pT9I0tse2Ybz DaXtF2dqs2dA1vTMPsnDS5eLr4CA7yoJvDuH363IGPyt9Q8Y96Zip/IyYrAQcPEu IXvfTwO9cvJHMWgIY+7bIco7eJ3Ea2ncesSYUcH6kYXhnYgq/4bnosHz7SpCcLjN Ue/8Fzi/jskDA7gzkAdPFIzQeXVD2fK7jf8X5eUmPLaGTHykvTAFZz1Mzv/mpPOO knpzfM1KbkJ+mXgYMGGGVoVDEgYwu87YcwHmOcbLSd3ipK5ptQOZ3yYUM/FWIFUa DCWNDSbpaRaBeS8XBh246tZb+Pn9hOno+NUM5umumpwgcKobgi0pHxTOYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIskdkFUU0ihSlsq9DjfoVaRlEwVMB8GA1UdIwQY MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2 LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0dJwMFH npVQM5ZEfupCvDgs1l0HLOGi89vjgmD952mYnoOWZiEP4OYopIXuiDBFsb5zOFPd eNsvwxu8Go9fkeRpNjIxmWkyky49JmQYK1L4W+3hasutBJRRHFPrIXAKvMFNJsvg YzQe36LYITSgzOAhX6QVL1k5LNyihyIP4mbTH/m3IKtEBnmf9l5muFXTRJukxjbe IF0TD7Q7oB+40RY/AwNK+CtBJjXJhifmULdyZ/IhdeUCmkrmJ/I3y8JvAIuT4Wvk tDc3Obyamx9YVgQmI4RX0shgmjqknhXYO1vscRXoQ8SYUqTTRD3HYiOamNRkAn7W iKnYXUgIbCsiCA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:08:25 2025 by rpki-client