This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json) Hash identifier: sOsm0cjLicroCeHPszQkJe7UewSIX0Zwy7fVrnD2rsU= Subject key identifier: AC:A7:79:01:00:63:37:21:F7:E9:8E:0C:87:F0:30:59:33:C9:67:97 Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a Certificate serial: 019B31FACC0422569F37E42681584E1CCF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft Manifest number: 0EE8 Signing time: Thu 18 Dec 2025 15:01:18 +0000 Manifest this update: Thu 18 Dec 2025 15:01:18 +0000 Manifest next update: Fri 19 Dec 2025 15:01:18 +0000 Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: 35Xr9SWxHpbmnqa8OrE4H7jWbb/8Dnyq3HmaN39TvKM=) 2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:cc:04:22:56:9f:37:e4:26:81:58:4e:1c:cf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a Validity Not Before: Dec 18 15:01:18 2025 GMT Not After : Dec 19 15:01:18 2025 GMT Subject: CN=aca7790100633721f7e98e0c87f0305933c96797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:bc:68:db:d2:fc:0c:1b:eb:f3:d0:22:fe: f7:02:33:39:11:32:a7:be:08:3a:00:89:37:30:a0: 6d:4e:45:d1:bd:e6:3f:f2:32:71:bc:29:2a:f4:2b: c7:c0:ec:07:22:69:06:5d:53:58:e4:9e:b1:ec:5a: 32:5c:f8:d6:af:01:f5:5a:7b:6c:e3:b9:90:ed:a8: 7a:3f:8e:0e:90:87:db:6c:da:8c:87:6b:1a:e8:ec: 59:78:f5:ca:f8:2e:6a:b3:be:f8:e7:8d:31:e8:dd: 27:a3:57:de:91:30:11:a9:5a:1c:9a:5f:6e:68:29: 11:df:b0:fa:2d:60:07:41:d2:44:ea:b5:f1:2c:fd: aa:f9:37:19:c9:0d:93:a6:34:61:14:d8:68:9e:7a: 0e:12:ea:33:51:bd:11:02:94:6f:38:02:17:29:96: 5a:2e:66:5c:93:67:b3:57:ab:ee:3e:f3:fd:e2:1b: 5d:d0:e7:56:8a:b2:a6:b4:58:0c:21:35:07:7d:e5: 8d:b0:5c:5b:57:c4:1c:ff:3c:77:0e:f0:93:19:8d: fd:7b:7d:e0:14:da:f5:24:27:4c:fe:be:42:00:d2: a6:27:99:4a:9c:55:16:4f:d4:c6:c2:dc:1c:a1:67: 33:bb:e8:c7:28:38:b8:35:8b:ad:02:01:85:bf:6d: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:79:01:00:63:37:21:F7:E9:8E:0C:87:F0:30:59:33:C9:67:97 X509v3 Authority Key Identifier: keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a2:75:a2:c7:80:95:52:d9:61:fc:09:9d:64:fb:cd:40:e5: 07:62:0c:90:b4:c6:ce:b0:f2:ac:a1:1e:13:8d:2c:c4:48:c1: 66:ea:49:3d:56:d8:d3:58:66:6b:14:3d:56:70:68:d4:ac:8b: 68:a3:0a:4a:39:32:18:9a:c2:87:47:fd:29:30:1c:87:00:5c: 55:37:77:86:86:d1:37:86:34:d8:61:f3:98:73:aa:bf:d0:1b: cf:f7:2d:e3:fa:eb:0d:dc:3a:6a:c8:cd:60:68:0f:8a:e5:fb: 02:2c:51:f0:55:a3:e9:4c:4a:8c:bf:58:67:fb:74:73:97:af: 48:bd:c2:45:a8:60:72:0a:af:4d:2f:36:77:ee:5b:ae:ec:f9: 4e:43:7f:ad:d8:c4:27:8f:ad:80:79:2c:fc:ba:10:75:fd:74: 00:b3:f0:5d:6f:a5:15:9a:13:57:33:98:a5:5c:74:7a:5d:22: de:29:b6:d1:51:7b:d0:24:c0:e3:1d:70:a0:1e:29:6d:86:42: 9b:82:0c:07:98:9b:c9:b2:ff:9c:33:44:b4:e1:c4:be:5e:f9: 80:32:d5:e6:51:2f:57:7a:04:15:c8:bd:74:e1:a6:d3:e6:ff: 9c:4f:41:91:9c:d6:b8:84:51:e0:f8:df:16:47:b6:51:9e:fc: e4:cb:07:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+swEIlafN+QmgVhOHM8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz MDhmM2EwHhcNMjUxMjE4MTUwMTE4WhcNMjUxMjE5MTUwMTE4WjAzMTEwLwYDVQQD EyhhY2E3NzkwMTAwNjMzNzIxZjdlOThlMGM4N2YwMzA1OTMzYzk2Nzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOi8aNvS/Awb6/PQIv73AjM5ETKn vgg6AIk3MKBtTkXRveY/8jJxvCkq9CvHwOwHImkGXVNY5J6x7FoyXPjWrwH1Wnts 47mQ7ah6P44OkIfbbNqMh2sa6OxZePXK+C5qs774540x6N0no1fekTARqVocml9u aCkR37D6LWAHQdJE6rXxLP2q+TcZyQ2TpjRhFNhonnoOEuozUb0RApRvOAIXKZZa LmZck2ezV6vuPvP94htd0OdWirKmtFgMITUHfeWNsFxbV8Qc/zx3DvCTGY39e33g FNr1JCdM/r5CANKmJ5lKnFUWT9TGwtwcoWczu+jHKDi4NYutAgGFv22FjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyneQEAYzch9+mODIfwMFkzyWeXMB8GA1UdIwQY MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaJ1oseA lVLZYfwJnWT7zUDlB2IMkLTGzrDyrKEeE40sxEjBZupJPVbY01hmaxQ9VnBo1KyL aKMKSjkyGJrCh0f9KTAchwBcVTd3hobRN4Y02GHzmHOqv9Abz/ct4/rrDdw6asjN YGgPiuX7AixR8FWj6UxKjL9YZ/t0c5evSL3CRahgcgqvTS82d+5bruz5TkN/rdjE J4+tgHks/LoQdf10ALPwXW+lFZoTVzOYpVx0el0i3im20VF70CTA4x1woB4pbYZC m4IMB5ibybL/nDNEtOHEvl75gDLV5lEvV3oEFci9dOGm0+b/nE9BkZzWuIRR4Pjf Fke2UZ785MsHLA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:50 2025 by rpki-client