This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: NyhTaqqJONcdA27PS98eLJTMbb89+KctYEgVWj5yt14= Subject key identifier: 2B:98:95:E3:79:12:21:4F:FA:15:7E:A5:9E:04:59:2E:08:A5:E5:09 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B3D912388A6E0483A3B4BA7C73D75E8E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10AA Signing time: Sat 20 Dec 2025 21:01:20 +0000 Manifest this update: Sat 20 Dec 2025 21:01:20 +0000 Manifest next update: Sun 21 Dec 2025 21:01:20 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: /4lQ5LvBihVGqpva6f9h3p4GAc4s3Sv6epRX/FTMSJo=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:23:88:a6:e0:48:3a:3b:4b:a7:c7:3d:75:e8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Dec 20 21:01:20 2025 GMT Not After : Dec 21 21:01:20 2025 GMT Subject: CN=2b9895e37912214ffa157ea59e04592e08a5e509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:a3:b7:41:dc:1a:5c:c2:3d:86:67:fe:91: 52:82:82:d9:78:c6:82:7a:f9:46:99:e3:4a:05:b7: e8:1e:fe:98:c5:f5:5b:c6:76:77:d9:d6:3a:b1:11: c2:a5:32:1b:4c:dd:48:5d:5f:d4:1d:0c:fb:db:7c: be:d4:c8:b8:a1:af:34:cb:64:fe:b3:24:ca:a7:8b: d9:e6:e7:82:4c:60:21:58:15:f2:7a:0f:71:87:3c: 6b:cf:63:88:dc:2f:c2:ae:60:16:98:0e:80:bc:af: 89:47:60:fb:a6:7e:ba:f8:6d:8e:87:86:27:79:15: b4:a8:d4:93:76:81:b3:ae:67:6e:e1:34:4e:db:b5: eb:af:d0:9d:ae:60:0b:b1:0b:7e:31:b2:21:80:18: 38:1f:ae:e2:3e:0e:38:28:d0:4a:98:85:1c:0a:bc: 99:bb:8c:d6:b0:3a:92:5b:9e:6a:7f:38:80:e7:dc: 9e:ec:67:51:66:b9:b4:e0:af:ae:b5:a9:6b:f3:cd: a3:43:64:84:43:de:53:82:4d:ba:40:ad:1f:9d:8a: 81:64:79:80:b6:05:35:52:34:aa:0d:f8:dc:0e:23: fa:22:1c:cb:31:cc:04:22:61:59:9a:b3:3f:32:8e: 01:d0:54:cf:81:28:21:25:fd:46:af:45:a2:ab:c4: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:98:95:E3:79:12:21:4F:FA:15:7E:A5:9E:04:59:2E:08:A5:E5:09 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:65:a8:99:59:5b:33:78:e6:16:ab:80:63:cc:45:aa:21:52: 52:dc:d7:b4:1d:47:4e:ad:16:cb:46:9b:34:9c:83:03:ae:48: 12:56:af:19:20:ad:f8:f8:05:87:d2:44:1c:b3:00:d5:12:f0: 46:d3:84:5d:d2:6f:ad:6c:a5:0c:87:69:15:49:9f:54:c6:98: 22:37:49:cc:1a:50:80:4b:2d:53:a0:08:78:38:ce:70:c0:85: f3:22:18:e2:4a:a5:f5:1f:46:db:02:c8:e0:db:05:20:58:7b: 1a:28:12:cc:70:ce:6d:77:bc:48:9b:c3:48:60:c9:24:9c:c7: cf:a1:a0:2a:c3:3b:d1:3c:ac:73:46:4c:dd:37:ec:b8:9e:5d: a7:ef:bc:d6:4e:3b:ad:a5:78:f2:66:5f:05:a5:34:91:2c:7c: 2f:c3:ef:d0:51:03:cc:b8:35:2a:f6:9a:6e:4f:a7:07:78:dd: 61:ee:6e:e1:eb:85:db:bf:d4:d1:8f:dc:03:3c:93:01:0c:2b: cf:b0:30:13:50:94:bc:4c:12:95:67:49:66:04:43:8f:c7:50: 90:47:f1:c9:23:1d:5a:d8:8d:45:88:9c:75:52:0a:a9:44:a7: 8e:76:87:b4:2d:0c:6a:a2:fd:06:b4:d6:e0:71:ef:45:64:0b: 78:4a:7f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kSOIpuBIOjtLp8c9dejjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMjIwMjEwMTIwWhcNMjUxMjIxMjEwMTIwWjAzMTEwLwYDVQQD EygyYjk4OTVlMzc5MTIyMTRmZmExNTdlYTU5ZTA0NTkyZTA4YTVlNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfGjt0HcGlzCPYZn/pFSgoLZeMaC evlGmeNKBbfoHv6YxfVbxnZ32dY6sRHCpTIbTN1IXV/UHQz723y+1Mi4oa80y2T+ syTKp4vZ5ueCTGAhWBXyeg9xhzxrz2OI3C/CrmAWmA6AvK+JR2D7pn66+G2Oh4Yn eRW0qNSTdoGzrmdu4TRO27Xrr9CdrmALsQt+MbIhgBg4H67iPg44KNBKmIUcCryZ u4zWsDqSW55qfziA59ye7GdRZrm04K+utalr882jQ2SEQ95Tgk26QK0fnYqBZHmA tgU1UjSqDfjcDiP6IhzLMcwEImFZmrM/Mo4B0FTPgSghJf1Gr0Wiq8QrhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuYleN5EiFP+hV+pZ4EWS4IpeUJMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGWomVlb M3jmFquAY8xFqiFSUtzXtB1HTq0Wy0abNJyDA65IElavGSCt+PgFh9JEHLMA1RLw RtOEXdJvrWylDIdpFUmfVMaYIjdJzBpQgEstU6AIeDjOcMCF8yIY4kql9R9G2wLI 4NsFIFh7GigSzHDObXe8SJvDSGDJJJzHz6GgKsM70Tysc0ZM3TfsuJ5dp++81k47 raV48mZfBaU0kSx8L8Pv0FEDzLg1Kvaabk+nB3jdYe5u4euF27/U0Y/cAzyTAQwr z7AwE1CUvEwSlWdJZgRDj8dQkEfxySMdWtiNRYicdVIKqUSnjnaHtC0MaqL9BrTW 4HHvRWQLeEp/JQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:29 2025 by rpki-client