This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft File: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json) Hash identifier: bgdWjyoK8JDLC0dFpwaCV+THUqlmjhpreDSMYB9C60s= Subject key identifier: 0C:04:36:17:EF:C2:A9:31:2C:7B:C8:74:A5:DC:8B:F9:88:A0:BB:8F Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Certificate serial: 019B4DE0824D43981EE7A1FCB711BF2BC972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft Manifest number: 0ED7 Signing time: Wed 24 Dec 2025 01:01:57 +0000 Manifest this update: Wed 24 Dec 2025 01:01:57 +0000 Manifest next update: Thu 25 Dec 2025 01:01:57 +0000 Files and hashes: 1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: sg+WPj+vTMOOhmlJV+GcdQKB+5xievomgbR2Y8V4QAc=) 2: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (hash: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:82:4d:43:98:1e:e7:a1:fc:b7:11:bf:2b:c9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Validity Not Before: Dec 24 01:01:57 2025 GMT Not After : Dec 25 01:01:57 2025 GMT Subject: CN=0c043617efc2a9312c7bc874a5dc8bf988a0bb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:ce:b5:db:fa:68:6d:b1:b6:dc:de:96:ac: 28:32:41:29:7a:1c:bb:bc:40:3c:79:90:87:1c:4d: 76:33:f5:fa:fe:d3:3a:0c:81:82:09:11:46:8a:fc: 7e:18:50:71:c0:be:b7:15:ed:04:7a:54:23:69:53: c2:25:b9:5b:94:32:08:b3:9a:57:09:ed:52:52:66: 50:ba:70:ae:d1:c2:2f:51:7b:e4:0b:e5:0f:f7:25: 1b:c7:6f:0c:e1:26:aa:86:1c:45:c5:8e:19:53:74: 66:86:e0:77:a0:97:a3:8c:a8:9d:9e:10:4c:64:e7: 06:21:d5:55:8b:07:4a:30:55:2f:f4:47:98:66:aa: 27:e7:f5:45:85:00:72:cb:35:36:af:e9:0b:52:b7: 53:f3:03:47:be:26:33:c3:17:8d:c2:67:a2:93:39: 7f:bc:1e:61:dc:04:b5:30:52:12:18:16:4e:b7:fa: 86:ef:4c:1f:c5:49:04:79:25:c8:82:55:78:ac:08: 9b:07:aa:f4:f6:93:f3:2e:d7:37:5f:dc:23:9a:cf: 1b:63:a9:86:02:f1:30:d7:9d:34:79:f2:4d:ef:ca: a5:92:20:cb:72:39:6d:2d:8c:6b:0a:7e:37:76:6a: 67:d3:27:b4:5a:f3:1b:8a:c5:c0:e3:47:57:5b:8b: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:36:17:EF:C2:A9:31:2C:7B:C8:74:A5:DC:8B:F9:88:A0:BB:8F X509v3 Authority Key Identifier: keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:15:ea:c5:69:fd:c8:77:d4:09:a8:bc:2f:34:f8:33:33:0e: 8b:66:cf:f3:08:51:5a:a5:f0:e0:5c:a2:65:dd:81:a5:69:a4: 78:42:07:b2:37:f5:b6:30:1e:41:e2:39:99:ee:dd:73:4f:0d: e5:ac:54:7e:50:11:98:2d:ce:6e:1c:6b:ef:f0:f1:43:d2:86: 60:fa:46:c6:f5:f4:9c:18:1a:23:69:3a:4e:c8:7f:7a:dc:1b: 7b:38:71:cc:92:5c:f9:f2:5f:1a:06:ff:b4:4d:36:46:a4:a7: bc:e5:b1:12:89:cb:12:1f:89:4d:4a:77:13:f8:1d:c6:4d:ad: 6e:de:f9:dc:d8:62:e9:19:fa:ff:f6:e9:4d:98:49:aa:03:e7: 91:86:6e:ed:cb:e2:67:13:39:e7:8d:44:d0:ca:cc:c8:48:dc: 9a:30:69:17:ef:dd:3c:96:ad:01:18:74:46:0e:3e:25:3e:da: 33:95:63:dc:5b:d1:44:25:0c:eb:02:5b:f7:f7:f8:75:a3:59: 13:c3:42:19:ad:10:1d:2c:52:55:bb:bb:0b:90:58:8c:b5:55: ed:43:aa:3e:6d:51:ed:a9:0f:e6:8b:e4:b5:50:9c:8e:61:a3: d5:45:53:68:d1:bf:ff:08:cc:0b:af:a6:8e:76:23:51:e4:78: a2:1a:84:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4IJNQ5ge56H8txG/K8lyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTE1MzQxZDJhZmM2YTg1N2E1ODQxOTlmYzdmYjA3YzE3 MDFmYzYwHhcNMjUxMjI0MDEwMTU3WhcNMjUxMjI1MDEwMTU3WjAzMTEwLwYDVQQD EygwYzA0MzYxN2VmYzJhOTMxMmM3YmM4NzRhNWRjOGJmOTg4YTBiYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wTOtdv6aG2xttzelqwoMkEpehy7 vEA8eZCHHE12M/X6/tM6DIGCCRFGivx+GFBxwL63Fe0EelQjaVPCJblblDIIs5pX Ce1SUmZQunCu0cIvUXvkC+UP9yUbx28M4SaqhhxFxY4ZU3RmhuB3oJejjKidnhBM ZOcGIdVViwdKMFUv9EeYZqon5/VFhQByyzU2r+kLUrdT8wNHviYzwxeNwmeikzl/ vB5h3AS1MFISGBZOt/qG70wfxUkEeSXIglV4rAibB6r09pPzLtc3X9wjms8bY6mG AvEw1500efJN78qlkiDLcjltLYxrCn43dmpn0ye0WvMbisXA40dXW4t/HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwENhfvwqkxLHvIdKXci/mIoLuPMB8GA1UdIwQY MBaAFO/hU0HSr8aoV6WEGZ/H+wfBcB/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYt NjViMDczM2ZlZGQzLzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYtNjViMDczM2ZlZGQz LzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchXqxWn9 yHfUCai8LzT4MzMOi2bP8whRWqXw4FyiZd2BpWmkeEIHsjf1tjAeQeI5me7dc08N 5axUflARmC3Obhxr7/DxQ9KGYPpGxvX0nBgaI2k6Tsh/etwbezhxzJJc+fJfGgb/ tE02RqSnvOWxEonLEh+JTUp3E/gdxk2tbt753Nhi6Rn6//bpTZhJqgPnkYZu7cvi ZxM5541E0MrMyEjcmjBpF+/dPJatARh0Rg4+JT7aM5Vj3FvRRCUM6wJb9/f4daNZ E8NCGa0QHSxSVbu7C5BYjLVV7UOqPm1R7akP5ovktVCcjmGj1UVTaNG//wjMC6+m jnYjUeR4ohqE/g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:03:56 2025 by rpki-client