This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft File: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json) Hash identifier: Kr8s8e0T1BpXqSlBQtOivmF2ljdjK+N1S08kCkZKC0E= Subject key identifier: BB:F3:F0:C1:93:A7:A8:39:B0:98:96:C8:3E:31:B2:3E:2A:56:E6:BD Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Certificate serial: 019B3E6DF8FD30DB10CCDD440375C6E25143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft Manifest number: 0ECF Signing time: Sun 21 Dec 2025 01:02:32 +0000 Manifest this update: Sun 21 Dec 2025 01:02:32 +0000 Manifest next update: Mon 22 Dec 2025 01:02:32 +0000 Files and hashes: 1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: V882NeQ9cEkVP6MIN2oPLEVaFhJJ91L2UzISis6rAkc=) 2: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (hash: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:f8:fd:30:db:10:cc:dd:44:03:75:c6:e2:51:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Validity Not Before: Dec 21 01:02:32 2025 GMT Not After : Dec 22 01:02:32 2025 GMT Subject: CN=bbf3f0c193a7a839b09896c83e31b23e2a56e6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:67:8c:c7:cd:2b:7a:9d:04:73:db:fe:45:d7: 84:8e:ff:1b:63:f6:ab:9e:42:14:97:94:5d:c3:39: e4:df:b1:a2:7b:5d:7c:b1:be:ac:ea:5e:64:ad:0d: 4e:61:f6:b9:9f:1d:00:c0:61:68:8e:69:7a:fd:e6: e3:6f:39:f1:2b:4e:53:13:68:64:cb:31:01:17:37: f6:30:98:4c:8a:75:74:0e:a7:5d:c5:9f:37:65:cf: 3d:76:28:ba:7e:6b:99:86:f4:cc:ab:16:7d:91:74: 8a:37:fe:ad:05:da:47:ce:2e:8f:0a:8e:52:12:94: 3a:88:34:41:e0:79:ac:77:ca:14:f7:91:c6:f4:fa: 9a:39:10:c1:66:cb:fc:f7:bc:8b:4a:06:fe:2b:43: 09:3d:4e:24:f8:0b:f7:6e:cc:07:e5:5e:09:5f:cd: c3:c6:00:72:a9:19:e7:22:ec:db:73:5f:95:c1:28: 2e:98:9c:7d:36:dc:66:19:38:57:95:9c:d0:06:2c: ce:2a:94:ce:ec:1b:83:5e:23:f0:00:aa:00:40:53: 80:79:71:0c:ba:48:8d:2d:e2:61:b7:8b:1b:1c:d9: e1:69:c9:04:f8:32:82:7c:0f:d7:8d:a4:25:97:5a: fc:de:5e:45:ce:d2:67:d2:b7:d4:2a:5d:33:40:17: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F3:F0:C1:93:A7:A8:39:B0:98:96:C8:3E:31:B2:3E:2A:56:E6:BD X509v3 Authority Key Identifier: keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:86:3b:fd:aa:32:52:06:10:00:16:6a:1f:61:fa:f3:00:17: 39:0e:1c:4f:75:cf:17:f7:ac:0a:39:8f:ac:d1:e4:0e:87:42: 22:3d:98:04:ba:fc:41:ea:c4:ff:d9:00:5d:e9:0b:c0:f5:ce: a6:37:f2:e3:b5:2f:fb:5b:a4:23:d3:fc:90:7a:03:36:b2:d2: 1e:f8:50:77:75:7f:7e:18:36:ed:96:7b:53:b9:f7:a0:4e:ea: 96:ab:bc:9b:f7:68:2f:f3:bd:5c:16:a7:5c:fe:6d:30:4c:ec: e6:a5:38:3c:44:74:a5:3e:82:94:20:00:03:75:de:0c:08:bb: c2:18:62:bd:ab:85:22:35:65:46:b0:6c:02:52:1d:ce:48:4e: f7:a7:7c:5c:56:c4:62:e8:70:b2:07:9b:3e:a8:99:cd:01:a4: f5:9d:73:83:0f:48:2f:0e:f5:1b:2d:63:3d:99:fa:74:f9:e6: c8:8c:8d:75:2e:61:68:72:be:4e:49:31:eb:08:23:ab:be:ef: 34:7f:1f:9b:63:56:6c:a2:f5:3f:c6:73:c4:77:13:ca:77:26: 71:0a:0d:23:8b:29:ec:53:4c:65:ba:01:36:3b:f3:20:f0:c4: ee:8f:1a:c7:48:42:18:a7:2b:b4:40:ce:7a:e4:60:18:9e:ba: a7:8f:7e:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfj9MNsQzN1EA3XG4lFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTE1MzQxZDJhZmM2YTg1N2E1ODQxOTlmYzdmYjA3YzE3 MDFmYzYwHhcNMjUxMjIxMDEwMjMyWhcNMjUxMjIyMDEwMjMyWjAzMTEwLwYDVQQD EyhiYmYzZjBjMTkzYTdhODM5YjA5ODk2YzgzZTMxYjIzZTJhNTZlNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6meMx80rep0Ec9v+RdeEjv8bY/ar nkIUl5Rdwznk37Gie118sb6s6l5krQ1OYfa5nx0AwGFojml6/ebjbznxK05TE2hk yzEBFzf2MJhMinV0DqddxZ83Zc89dii6fmuZhvTMqxZ9kXSKN/6tBdpHzi6PCo5S EpQ6iDRB4Hmsd8oU95HG9PqaORDBZsv897yLSgb+K0MJPU4k+Av3bswH5V4JX83D xgByqRnnIuzbc1+VwSgumJx9NtxmGThXlZzQBizOKpTO7BuDXiPwAKoAQFOAeXEM ukiNLeJht4sbHNnhackE+DKCfA/XjaQll1r83l5FztJn0rfUKl0zQBftJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvz8MGTp6g5sJiWyD4xsj4qVua9MB8GA1UdIwQY MBaAFO/hU0HSr8aoV6WEGZ/H+wfBcB/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYt NjViMDczM2ZlZGQzLzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84MWU5NDUtNzY5Ni00MTZmLWFmMmYtNjViMDczM2ZlZGQz LzEvNy1GVFFkS3Z4cWhYcFlRWm44ZjdCOEZ3SDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4Y7/aoy UgYQABZqH2H68wAXOQ4cT3XPF/esCjmPrNHkDodCIj2YBLr8QerE/9kAXekLwPXO pjfy47Uv+1ukI9P8kHoDNrLSHvhQd3V/fhg27ZZ7U7n3oE7qlqu8m/doL/O9XBan XP5tMEzs5qU4PER0pT6ClCAAA3XeDAi7whhivauFIjVlRrBsAlIdzkhO96d8XFbE YuhwsgebPqiZzQGk9Z1zgw9ILw71Gy1jPZn6dPnmyIyNdS5haHK+Tkkx6wgjq77v NH8fm2NWbKL1P8ZzxHcTyncmcQoNI4sp7FNMZboBNjvzIPDE7o8ax0hCGKcrtEDO euRgGJ66p49++g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:01 2025 by rpki-client