This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: bcBW4gvFMUhfnoyMxI/G4bvAEMVZfmd3LdbPtmKX+UA= Subject key identifier: CB:86:F7:F0:42:2C:3E:52:39:D6:7F:B6:1A:3F:CF:1F:DE:7A:1F:AA Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B914000631CB253115AE173B58D567623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 10D6 Signing time: Tue 06 Jan 2026 03:00:49 +0000 Manifest this update: Tue 06 Jan 2026 03:00:49 +0000 Manifest next update: Wed 07 Jan 2026 03:00:49 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: PzLxkZIcecGfGXYZYE6cz7M680r02ihzonWdJY4yiRA=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:91:40:00:63:1c:b2:53:11:5a:e1:73:b5:8d:56:76:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 6 03:00:49 2026 GMT Not After : Jan 7 03:00:49 2026 GMT Subject: CN=cb86f7f0422c3e5239d67fb61a3fcf1fde7a1faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:f4:10:c7:9a:97:90:2e:f2:24:b6:6f:d4: e3:1d:82:be:79:21:94:74:a2:58:a3:b4:17:f7:92: bd:c4:85:8c:a9:c7:26:b7:9b:60:6d:d7:a3:8d:d0: 2f:ca:58:c2:28:1e:39:9b:29:a8:9c:cf:39:1d:58: 34:ac:ea:fc:d0:10:52:45:4b:dc:d8:e9:a5:9d:db: 3d:3d:13:a5:ad:5d:26:a4:8f:19:6c:77:0d:89:33: d8:92:68:21:60:fd:c4:d0:44:92:f3:14:fe:c3:04: fe:a9:b6:f5:ba:45:30:27:89:80:ce:28:dc:d1:89: 96:8d:04:d8:1a:3a:47:2d:3e:60:31:f1:81:5e:9c: 9a:27:44:7d:eb:20:2a:3f:39:ac:90:51:40:17:f5: 43:7c:3f:93:bd:50:e4:2c:66:e2:98:27:41:03:20: 20:c9:38:18:bc:a2:91:66:02:0b:f7:0c:1f:72:ee: 7b:71:71:1a:97:e9:b8:25:59:74:f6:37:8c:fd:a0: 9b:a9:de:94:42:1a:c5:62:9c:2d:61:fc:f5:ef:68: 26:4b:b1:c0:8e:6b:fb:bf:ae:0c:19:4a:84:e9:44: 89:c1:a0:e9:40:7e:e9:2b:8d:3b:0c:b3:49:07:97: 5a:fa:cf:e7:4f:14:3d:3e:9c:26:08:5a:93:b2:c9: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:86:F7:F0:42:2C:3E:52:39:D6:7F:B6:1A:3F:CF:1F:DE:7A:1F:AA X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:79:47:1f:83:0c:71:01:a2:00:7c:a5:49:53:7c:b6:74:34: 73:cb:ec:1a:a8:b3:ea:9b:dd:28:b1:4a:c2:0b:a6:a0:d5:75: 17:db:77:10:63:30:d5:23:59:1d:57:e1:73:77:33:6b:6a:16: fe:bd:b5:58:cd:f2:73:ad:72:b6:cd:b7:0a:3a:46:a8:e7:56: 25:2a:d2:4c:81:02:d9:2e:85:b6:49:5c:e6:d0:3f:c1:96:d2: 1a:2f:2c:62:78:e6:12:91:a1:87:18:2a:4a:50:59:71:4c:26: d3:7e:74:f9:b9:f8:c1:11:d1:91:0e:a1:1f:fb:c9:b0:48:2c: db:52:d2:96:48:12:5c:be:88:05:d3:fc:52:fb:96:ad:58:09: ae:11:14:0f:9a:bb:ff:a8:60:5b:ed:1a:5e:69:92:76:e5:ac: 9e:63:62:9f:8f:73:d6:ad:b1:01:65:31:9c:93:84:89:be:80: cd:e2:86:a6:9d:49:6a:52:6f:94:83:f8:95:ba:92:8a:94:ba: 96:0e:49:de:3b:b2:24:34:53:dd:21:ed:8d:8e:d4:6a:ab:bc: 47:1a:d4:b2:23:a7:30:6f:70:83:a1:7d:39:3e:2c:77:83:ea: ac:26:52:b5:a4:02:e3:b5:97:6e:53:d9:ed:74:75:72:a7:59: 19:cb:d2:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuRQABjHLJTEVrhc7WNVnYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTA2MDMwMDQ5WhcNMjYwMTA3MDMwMDQ5WjAzMTEwLwYDVQQD EyhjYjg2ZjdmMDQyMmMzZTUyMzlkNjdmYjYxYTNmY2YxZmRlN2ExZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jf0EMeal5Au8iS2b9TjHYK+eSGU dKJYo7QX95K9xIWMqccmt5tgbdejjdAvyljCKB45mymonM85HVg0rOr80BBSRUvc 2Omlnds9PROlrV0mpI8ZbHcNiTPYkmghYP3E0ESS8xT+wwT+qbb1ukUwJ4mAzijc 0YmWjQTYGjpHLT5gMfGBXpyaJ0R96yAqPzmskFFAF/VDfD+TvVDkLGbimCdBAyAg yTgYvKKRZgIL9wwfcu57cXEal+m4JVl09jeM/aCbqd6UQhrFYpwtYfz172gmS7HA jmv7v64MGUqE6USJwaDpQH7pK407DLNJB5da+s/nTxQ9PpwmCFqTsskBkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuG9/BCLD5SOdZ/tho/zx/eeh+qMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3lHH4MM cQGiAHylSVN8tnQ0c8vsGqiz6pvdKLFKwgumoNV1F9t3EGMw1SNZHVfhc3cza2oW /r21WM3yc61yts23CjpGqOdWJSrSTIEC2S6Ftklc5tA/wZbSGi8sYnjmEpGhhxgq SlBZcUwm0350+bn4wRHRkQ6hH/vJsEgs21LSlkgSXL6IBdP8UvuWrVgJrhEUD5q7 /6hgW+0aXmmSduWsnmNin49z1q2xAWUxnJOEib6AzeKGpp1JalJvlIP4lbqSipS6 lg5J3juyJDRT3SHtjY7Uaqu8RxrUsiOnMG9wg6F9OT4sd4PqrCZStaQC47WXblPZ 7XR1cqdZGcvSpg== -----END CERTIFICATE-----Generated at Tue Jan 6 05:40:23 2026 by rpki-client