This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json) Hash identifier: 568wMZu6t/S/sqr+5xqzAAM2B7WflnLA4da4Gfae4D4= Subject key identifier: 93:9A:B0:9A:90:BE:07:56:88:FA:54:13:9E:22:E5:5D:63:B2:22:52 Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Certificate serial: 019B3946009A15E98FBCEADBF7D6C2ABE18A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft Manifest number: 17A7 Signing time: Sat 20 Dec 2025 01:00:47 +0000 Manifest this update: Sat 20 Dec 2025 01:00:47 +0000 Manifest next update: Sun 21 Dec 2025 01:00:47 +0000 Files and hashes: 1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: ZFoIeb3ld+PAs5V7tpxQ0uJlE7RO/LYd5wDOGjqs4Rg=) 2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=) 3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=) 4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=) 5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=) 6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=) 7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=) 8: qvuGFKt-1_HJPs870oUBe_CLaIg.roa (hash: SFdkk9jZfyDBmDVWNujyzZ/7MM9kJxQh2emgCYl8kTA=) 9: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:00:9a:15:e9:8f:bc:ea:db:f7:d6:c2:ab:e1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Validity Not Before: Dec 20 01:00:47 2025 GMT Not After : Dec 21 01:00:47 2025 GMT Subject: CN=939ab09a90be075688fa54139e22e55d63b22252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:95:68:3b:62:4e:6d:45:ce:ac:cf:e5:96: 29:07:08:cd:f4:be:2e:fe:29:72:2b:56:41:52:0b: 38:fd:db:49:66:03:e3:c2:1f:bb:99:a8:c4:15:67: 40:af:8d:7f:1d:e3:92:e7:ca:cb:bc:ee:9d:2a:b1: 2e:fd:4d:8c:3f:d4:8b:b6:ad:fa:79:3a:1b:ab:36: d3:f9:63:ea:af:33:be:db:48:15:10:e1:75:d2:70: 6c:03:33:a1:a4:c3:69:1d:33:0e:ca:35:b2:cc:0e: 83:ce:28:b9:b1:28:9e:ef:9d:53:90:96:79:dd:28: cb:ab:78:3b:f0:8c:4f:7c:64:dc:c8:32:8b:5a:77: 16:db:a5:52:13:5e:6a:43:d8:c6:d8:2a:ab:4a:19: a0:ec:bd:8d:3b:e1:ac:f3:6c:49:ab:14:97:71:9d: 93:2d:0c:ed:da:3b:dc:5a:33:ab:e2:bb:b1:fc:f3: 7f:3e:83:d8:ab:de:2b:41:93:71:d2:81:d3:bb:d0: dc:07:72:bb:32:93:ff:8e:1c:28:28:b6:4d:37:d2: df:af:3b:66:28:d5:db:b5:fa:3c:25:b2:ff:b9:79: 09:60:3d:e5:ef:10:80:b5:2f:c4:10:ab:80:4a:61: 0b:04:83:bd:bb:df:77:1f:fa:ca:ce:88:aa:f5:21: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:B0:9A:90:BE:07:56:88:FA:54:13:9E:22:E5:5D:63:B2:22:52 X509v3 Authority Key Identifier: keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cb:ca:3d:7d:66:f9:d0:f0:b4:c4:ee:7d:72:85:52:fc:0f: 22:d4:f3:8b:73:46:61:11:84:07:06:64:3d:2f:88:c9:08:98: 76:dd:27:78:3f:c6:e2:60:d1:00:20:59:29:d9:62:ba:aa:f3: f7:fe:32:96:df:74:5a:8f:8c:07:ac:f9:32:27:15:c6:3b:1b: 1a:38:0e:27:b8:74:dd:ce:24:71:b4:f9:93:dd:7e:a2:8b:67: 29:52:56:a0:86:b7:69:a0:e8:13:cd:e8:98:82:71:71:ae:c3: 61:9e:da:83:6c:d7:85:c5:c6:a2:3d:cc:15:e9:a7:78:76:93: 6f:15:2a:26:17:11:28:4d:0f:d4:43:24:bd:0f:2e:8c:4d:07: 87:6a:18:fb:c9:59:2a:d3:46:53:a5:fe:26:e9:e6:90:8c:d1: 50:0a:d1:e8:f4:72:c8:41:a9:5b:db:7e:22:0b:b3:af:f5:1b: 2e:90:e3:4a:fe:32:a8:c2:00:3e:f5:57:ee:69:db:f1:06:51: b8:0b:63:37:18:65:09:94:fa:fb:4d:61:83:5f:7b:1e:38:17: da:08:a3:35:76:ec:c4:05:8d:cc:c7:8f:64:92:54:3b:2b:b0: 38:ca:da:82:64:da:83:a1:50:5e:2d:2b:33:55:aa:a9:c9:92: 24:69:18:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RgCaFemPvOrb99bCq+GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1 OGE0YzAwHhcNMjUxMjIwMDEwMDQ3WhcNMjUxMjIxMDEwMDQ3WjAzMTEwLwYDVQQD Eyg5MzlhYjA5YTkwYmUwNzU2ODhmYTU0MTM5ZTIyZTU1ZDYzYjIyMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtmVaDtiTm1FzqzP5ZYpBwjN9L4u /ilyK1ZBUgs4/dtJZgPjwh+7majEFWdAr41/HeOS58rLvO6dKrEu/U2MP9SLtq36 eTobqzbT+WPqrzO+20gVEOF10nBsAzOhpMNpHTMOyjWyzA6Dzii5sSie751TkJZ5 3SjLq3g78IxPfGTcyDKLWncW26VSE15qQ9jG2CqrShmg7L2NO+Gs82xJqxSXcZ2T LQzt2jvcWjOr4rux/PN/PoPYq94rQZNx0oHTu9DcB3K7MpP/jhwoKLZNN9Lfrztm KNXbtfo8JbL/uXkJYD3l7xCAtS/EEKuASmELBIO9u993H/rKzoiq9SHZBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOasJqQvgdWiPpUE54i5V1jsiJSMB8GA1UdIwQY MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt Y2U1NzE1MDY5NWE5LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5 LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasvKPX1m +dDwtMTufXKFUvwPItTzi3NGYRGEBwZkPS+IyQiYdt0neD/G4mDRACBZKdliuqrz 9/4ylt90Wo+MB6z5MicVxjsbGjgOJ7h03c4kcbT5k91+ootnKVJWoIa3aaDoE83o mIJxca7DYZ7ag2zXhcXGoj3MFemneHaTbxUqJhcRKE0P1EMkvQ8ujE0Hh2oY+8lZ KtNGU6X+JunmkIzRUArR6PRyyEGpW9t+Iguzr/UbLpDjSv4yqMIAPvVX7mnb8QZR uAtjNxhlCZT6+01hg197HjgX2gijNXbsxAWNzMePZJJUOyuwOMragmTag6FQXi0r M1WqqcmSJGkYAw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:04:17 2025 by rpki-client