This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: CSoyoZzYco4KT702+w1GJBRCrrcfqDSDWRrdwl9Rg+c= Subject key identifier: 90:C8:C3:7D:30:7A:24:92:25:2B:3A:EA:59:FB:97:A0:E4:7F:25:2B Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B360EA808989C0FE586F5FE24D19CDC0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0DE7 Signing time: Fri 19 Dec 2025 10:01:28 +0000 Manifest this update: Fri 19 Dec 2025 10:01:28 +0000 Manifest next update: Sat 20 Dec 2025 10:01:28 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: N9i/bpYVvhcLsv6YD0VU9B5JKyrYnZHOg/abTDyr/EI=) 2: D2r7dT-bQwOpT4u2PCOrnBwATAQ.roa (hash: zFihphlv0kTjByMn1IEtdtasSsD/xCgw79RV8lzEyT0=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: OxqcGrIN2qmtT5lzHhqB0OFCoZ4.roa (hash: 8Tvlr2QGQVpqtwIDYNChtFC5s7qideRYQpxKqT56BmM=) 6: QFVD_vDix159B7sLQeUpWm_GLEw.roa (hash: kEJdjprDzoSb9cHEZeOFz4THLXOGjpr7w2NVDvWkdcI=) 7: Y-G-2eU8guxGK6-egpUuNnN5bxQ.roa (hash: JW4itdi7iIIqZg7XFpTOGoDZRoJgyjCRWVBtmPDf1+s=) 8: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 9: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 10: eRiR4NgIZ_-6ixM1jewwpaWhdtk.roa (hash: WXxK+4k/CLSD9EX98U8J2JMpmdRrgwBoAZnDHy+6A6Q=) 11: lgMUCDhR1-9UxWOilM3VFlqh9i0.roa (hash: kRXcOx3qW0+mwe0DhEieHWgQM2QhpB7m8VnyKuSNghE=) 12: oh6kvaZOSBmbjaVeITahmFGVQzc.roa (hash: GEqYSowE9KxizAEw7CElS5g7H7A2mx8ZxjHtCPJ9ECQ=) 13: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 14: tW9IFrprtjHgSmO1yq_ovXKLygM.roa (hash: cUYJx2WeqQgX3iPrT/0TOqbvPPoUtMmCsb4eRH/r/A0=) 15: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 16: wDP-TxG_3tEtjtln5hp2qEYuYG0.roa (hash: 1oFgLReN4K8BSbynL9ho2Edqc+OXkSzIdfiTc3/wAyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:a8:08:98:9c:0f:e5:86:f5:fe:24:d1:9c:dc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Dec 19 10:01:28 2025 GMT Not After : Dec 20 10:01:28 2025 GMT Subject: CN=90c8c37d307a2492252b3aea59fb97a0e47f252b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:fa:77:77:03:7b:d6:1b:f2:1f:31:15:ee: d4:d7:66:21:25:a9:7a:9c:ad:e2:de:14:c2:14:f9: 64:e9:32:aa:03:8c:c1:a8:83:c4:55:d1:37:a2:2b: c0:f4:54:69:78:d4:57:b8:bd:5a:57:cb:be:14:6b: b3:4d:a6:19:fe:6d:da:86:d0:54:91:5e:bd:32:99: 0f:a4:eb:cf:75:95:20:6e:3f:d3:db:18:7b:a5:df: c7:2b:19:2e:ba:ef:7d:72:e9:a1:87:70:20:58:0a: 63:4e:eb:33:72:c6:a7:d9:af:af:be:80:7f:ee:7c: 10:11:43:94:21:68:fa:d4:ea:d8:a4:84:63:ba:de: 54:a1:a2:fa:f3:72:a0:89:ff:f5:f2:09:41:16:af: 54:90:87:45:ca:11:9d:5d:e9:81:2e:57:c6:0e:81: 59:5b:ca:00:b3:56:8d:d3:09:ac:84:cc:f9:26:fc: 87:c6:37:61:d4:f1:2a:f8:9e:83:5c:31:ed:21:b7: 64:3a:21:c2:6b:74:56:fc:0d:33:d9:c1:6e:f1:3f: b8:8f:4b:f0:fa:da:9c:2b:3d:47:a9:c8:ab:60:8d: e4:8f:67:9a:05:3e:44:3b:41:51:04:aa:fa:2d:23: 22:c1:d5:82:aa:d6:50:12:07:b0:16:b9:e7:b0:9b: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C8:C3:7D:30:7A:24:92:25:2B:3A:EA:59:FB:97:A0:E4:7F:25:2B X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:04:55:5a:19:cf:96:1d:2a:52:6f:15:bf:01:83:45:e9:60: f6:35:79:1a:6b:02:1c:af:bd:99:69:0b:54:58:18:31:d6:82: 23:25:d1:8c:2f:10:0a:72:28:df:76:f0:13:31:c8:bc:c5:df: 86:da:6a:c0:94:e1:c1:b6:24:26:dd:17:85:27:c8:ca:93:b5: 7a:74:a8:e5:8e:d9:89:88:66:f1:cb:ff:4f:4b:ff:a9:8b:7a: 96:a8:14:4a:76:4b:00:a4:ea:c7:24:55:a4:b2:0b:a7:5b:fa: a9:af:18:3b:01:98:fd:1c:e8:3d:b6:69:50:44:e0:ac:d0:2e: 0d:96:01:af:81:75:67:04:bb:61:d3:60:f0:b2:7e:b3:43:b6: 50:c3:1a:37:f2:bb:11:96:fb:be:a1:f7:0f:95:e8:c2:08:98: ad:0e:fc:1f:a1:14:71:9f:9b:9a:ac:01:5b:e9:c7:0c:79:71: c4:fb:e4:cd:de:6e:d8:22:08:97:6f:1a:98:4e:25:b8:6b:b6: 61:09:23:59:aa:56:6a:63:08:a8:65:57:7f:ab:45:8a:9d:dc: d0:57:12:c5:c9:35:fa:7a:75:4f:bd:e1:3a:d1:06:65:ea:80: 86:32:b6:0b:1d:2d:a2:df:17:4c:cf:92:c5:1a:08:1f:1b:f4: 7c:18:3d:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DqgImJwP5Yb1/iTRnNwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMjE5MTAwMTI4WhcNMjUxMjIwMTAwMTI4WjAzMTEwLwYDVQQD Eyg5MGM4YzM3ZDMwN2EyNDkyMjUyYjNhZWE1OWZiOTdhMGU0N2YyNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/T6d3cDe9Yb8h8xFe7U12YhJal6 nK3i3hTCFPlk6TKqA4zBqIPEVdE3oivA9FRpeNRXuL1aV8u+FGuzTaYZ/m3ahtBU kV69MpkPpOvPdZUgbj/T2xh7pd/HKxkuuu99cumhh3AgWApjTuszcsan2a+vvoB/ 7nwQEUOUIWj61OrYpIRjut5UoaL683Kgif/18glBFq9UkIdFyhGdXemBLlfGDoFZ W8oAs1aN0wmshMz5JvyHxjdh1PEq+J6DXDHtIbdkOiHCa3RW/A0z2cFu8T+4j0vw +tqcKz1HqcirYI3kj2eaBT5EO0FRBKr6LSMiwdWCqtZQEgewFrnnsJsdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDIw30weiSSJSs66ln7l6DkfyUrMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQRVWhnP lh0qUm8VvwGDRelg9jV5GmsCHK+9mWkLVFgYMdaCIyXRjC8QCnIo33bwEzHIvMXf htpqwJThwbYkJt0XhSfIypO1enSo5Y7ZiYhm8cv/T0v/qYt6lqgUSnZLAKTqxyRV pLILp1v6qa8YOwGY/RzoPbZpUETgrNAuDZYBr4F1ZwS7YdNg8LJ+s0O2UMMaN/K7 EZb7vqH3D5XowgiYrQ78H6EUcZ+bmqwBW+nHDHlxxPvkzd5u2CIIl28amE4luGu2 YQkjWapWamMIqGVXf6tFip3c0FcSxck1+np1T73hOtEGZeqAhjK2Cx0tot8XTM+S xRoIHxv0fBg90g== -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:13 2025 by rpki-client