This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json) Hash identifier: JWoVYBVpWGv/VT4i79qwGpL3lZUjtbCyq0aZeINaHaE= Subject key identifier: 32:97:A5:8A:5D:0B:6B:EF:01:B2:75:AD:5A:CA:17:E2:3C:FD:43:50 Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c Certificate serial: 019B3AFDC7AAA5A9593B1A3EEB3330783C10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft Manifest number: 0545 Signing time: Sat 20 Dec 2025 09:01:08 +0000 Manifest this update: Sat 20 Dec 2025 09:01:08 +0000 Manifest next update: Sun 21 Dec 2025 09:01:08 +0000 Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=) 2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: lJZux3Pv2dyh8iDkiQmPdCeoJsUjaBXnTxOVX6VFfzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:c7:aa:a5:a9:59:3b:1a:3e:eb:33:30:78:3c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c Validity Not Before: Dec 20 09:01:08 2025 GMT Not After : Dec 21 09:01:08 2025 GMT Subject: CN=3297a58a5d0b6bef01b275ad5aca17e23cfd4350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:d8:66:e9:21:2a:b4:c2:82:a3:92:1b:06: e0:90:60:65:c1:38:50:7c:4a:b6:3e:a5:18:bf:dc: d8:19:20:c9:b9:ef:a7:4a:54:c3:ef:64:73:35:40: 95:4b:42:b7:2d:89:0d:81:2c:bf:34:9f:22:c8:c8: 48:cb:e1:62:78:13:bd:5d:ef:08:bd:14:d1:27:5f: 6b:57:fa:2a:6f:1b:7a:d3:c2:a3:5a:e2:06:53:12: 23:9d:ca:04:11:a5:fd:41:00:2b:4b:a0:4a:ea:8a: 27:e8:c2:bb:8f:43:ea:5d:24:bd:60:05:e6:f2:b1: 40:c2:29:56:3f:72:c6:c9:23:5c:41:ab:20:14:c2: 23:03:80:51:96:fb:8b:1f:49:e9:68:e4:07:b7:b6: cf:a2:41:57:58:29:9e:5d:22:a9:d4:5f:27:44:f9: 34:9f:22:2a:32:4c:e1:6a:50:7b:98:15:0c:ce:0c: fb:b5:57:51:c5:b8:90:d4:df:48:26:5a:16:2f:86: 4e:8e:71:3d:6e:34:95:bc:f5:2f:e3:58:04:f4:79: c5:eb:e2:61:8b:c3:a5:b9:93:20:5b:44:e0:ae:cd: 83:28:29:b3:52:52:0c:dc:7a:cf:e8:49:eb:e2:01: e3:e2:1d:50:36:0c:70:e0:8c:17:54:95:82:e9:ee: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:97:A5:8A:5D:0B:6B:EF:01:B2:75:AD:5A:CA:17:E2:3C:FD:43:50 X509v3 Authority Key Identifier: keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8e:0e:a0:78:4f:fc:88:b1:8f:fa:30:69:55:ed:7b:6c:d4: b7:bb:61:35:f9:68:e5:26:09:5f:da:8d:75:9a:92:28:04:47: fc:2b:27:3f:16:1b:f8:dd:13:9e:6a:3e:1b:23:4f:12:84:bd: 08:ae:c0:ef:28:9f:6e:1a:49:89:c1:c3:ab:9c:5b:e9:72:cc: 9e:5a:6b:a6:25:57:fb:e4:ee:8c:dd:14:81:db:99:a7:79:c0: 45:6a:24:ce:19:30:4b:4c:11:88:dc:63:89:52:0f:93:02:5a: 5c:f2:f1:27:b5:bb:8b:9b:d3:9e:9e:59:35:9c:da:9e:8a:79: fa:a6:52:07:98:bc:64:23:74:2c:86:56:4d:20:06:5b:9c:2c: f2:6d:01:f1:d9:ef:b6:e2:9a:c7:b3:49:e0:70:6c:bb:f3:60: 5f:3a:40:62:34:e6:e7:b5:fd:15:9a:5c:c0:b6:cb:88:e3:bf: c5:79:96:54:15:38:55:b4:b1:9d:b5:cd:7b:d1:2a:a3:79:93: 5f:6a:5d:30:4b:e4:5a:e0:c2:75:fa:1d:23:77:88:b0:cf:c9: db:2d:19:c9:2e:4c:3a:27:27:cd:8c:23:92:3b:3f:1e:98:1c: 3c:d3:c7:5a:a1:c0:22:aa:94:c8:c4:e7:4a:2c:a9:a8:2c:cc: 66:1a:27:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ceqpalZOxo+6zMweDwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOTAwYTU1NTE4YjY3OWVkYzc4ZmFhOTg4M2VjNmU2MDM1 YWU3MWMwHhcNMjUxMjIwMDkwMTA4WhcNMjUxMjIxMDkwMTA4WjAzMTEwLwYDVQQD EygzMjk3YTU4YTVkMGI2YmVmMDFiMjc1YWQ1YWNhMTdlMjNjZmQ0MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKPYZukhKrTCgqOSGwbgkGBlwThQ fEq2PqUYv9zYGSDJue+nSlTD72RzNUCVS0K3LYkNgSy/NJ8iyMhIy+FieBO9Xe8I vRTRJ19rV/oqbxt608KjWuIGUxIjncoEEaX9QQArS6BK6oon6MK7j0PqXSS9YAXm 8rFAwilWP3LGySNcQasgFMIjA4BRlvuLH0npaOQHt7bPokFXWCmeXSKp1F8nRPk0 nyIqMkzhalB7mBUMzgz7tVdRxbiQ1N9IJloWL4ZOjnE9bjSVvPUv41gE9HnF6+Jh i8OluZMgW0Tgrs2DKCmzUlIM3HrP6Enr4gHj4h1QNgxw4IwXVJWC6e7ZgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKXpYpdC2vvAbJ1rVrKF+I8/UNQMB8GA1UdIwQY MBaAFO2QClVRi2ee3Hj6qYg+xuYDWuccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmIt MGY3MzY2MWQ1ZjM1LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmItMGY3MzY2MWQ1ZjM1 LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko4OoHhP /Iixj/owaVXte2zUt7thNflo5SYJX9qNdZqSKARH/CsnPxYb+N0Tnmo+GyNPEoS9 CK7A7yifbhpJicHDq5xb6XLMnlprpiVX++TujN0UgduZp3nARWokzhkwS0wRiNxj iVIPkwJaXPLxJ7W7i5vTnp5ZNZzanop5+qZSB5i8ZCN0LIZWTSAGW5ws8m0B8dnv tuKax7NJ4HBsu/NgXzpAYjTm57X9FZpcwLbLiOO/xXmWVBU4VbSxnbXNe9Eqo3mT X2pdMEvkWuDCdfodI3eIsM/J2y0ZyS5MOicnzYwjkjs/HpgcPNPHWqHAIqqUyMTn SiypqCzMZhonBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:39 2025 by rpki-client