This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json) Hash identifier: L5J85gr0m/mMXWwFBOV/KqV0HK3UCtuvC1OvDtYjg4k= Subject key identifier: B7:80:1B:54:81:72:5F:49:FF:AD:A6:4F:85:0A:D2:8E:B4:70:71:C8 Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13 Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213 Certificate serial: 019B3B6BA67CE366758F2ABC4D295C409C50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft Manifest number: 04CA Signing time: Sat 20 Dec 2025 11:01:09 +0000 Manifest this update: Sat 20 Dec 2025 11:01:09 +0000 Manifest next update: Sun 21 Dec 2025 11:01:09 +0000 Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: WGxQd519QYE7l6bsHhX5WZifK7UtEg92KiwcPm17sC0=) 2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:a6:7c:e3:66:75:8f:2a:bc:4d:29:5c:40:9c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213 Validity Not Before: Dec 20 11:01:09 2025 GMT Not After : Dec 21 11:01:09 2025 GMT Subject: CN=b7801b5481725f49ffada64f850ad28eb47071c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:d4:13:7f:b3:f9:bb:e3:40:c1:ee:81:79: 18:3d:23:8e:0d:ef:e0:a1:2a:e4:ff:b0:c5:b9:71: a3:91:d0:0f:43:14:4c:78:83:52:8e:cc:67:c6:2f: 7d:23:0b:ef:a4:47:ef:1a:28:a9:82:f2:ae:dd:34: dd:cd:60:e4:9d:1e:92:44:8a:af:91:ed:d8:e7:bc: 1f:76:b5:94:2e:6a:e2:32:5e:60:af:11:c4:46:ec: f5:c1:70:34:fe:f6:7f:66:40:56:d2:1f:02:ec:5f: 7b:17:a6:24:77:33:03:8c:79:a1:b3:8a:89:20:1d: d6:82:9b:07:f7:41:d1:eb:c4:4e:57:6e:9f:9a:76: 64:dc:b8:3e:5f:a7:8f:bb:83:34:f7:4a:5f:24:72: 4f:cd:55:c8:dd:a0:06:05:3f:c5:27:64:e7:ad:62: fa:37:9f:8e:29:3e:a1:67:7e:6c:06:e2:eb:99:a5: 91:a7:94:d0:30:f9:57:8f:b4:96:38:d6:94:d4:08: 5e:ce:81:80:dc:b0:d7:66:7f:08:2f:23:d3:33:d5: 8b:b9:bf:db:5c:50:47:a9:6b:ab:ac:31:68:e5:0b: d5:28:f9:2b:f2:00:21:9e:7a:3d:2f:56:39:f4:b3: 2d:cb:fa:b5:a5:d1:b4:68:b2:4b:11:13:3b:d5:4c: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:80:1B:54:81:72:5F:49:FF:AD:A6:4F:85:0A:D2:8E:B4:70:71:C8 X509v3 Authority Key Identifier: keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1b:ad:22:cc:6e:ea:33:7f:bd:fb:53:09:7c:11:fc:f0:1c: 70:7e:9d:63:26:27:fc:07:68:39:64:9f:e1:02:25:8c:17:f7: 01:61:8c:29:0b:88:ba:f3:3d:f0:45:1d:50:10:07:3c:97:57: 41:11:5d:42:d6:bb:48:ca:61:b7:9d:0c:5f:a9:97:4f:69:c0: a7:5e:48:8a:f1:84:f0:95:db:dd:b0:aa:ef:b5:31:4a:7c:e9: 48:83:87:bc:3e:af:38:a9:34:8d:76:05:7e:5f:31:b5:e2:50: be:e2:4d:de:ef:f4:26:fc:4d:3a:fd:b9:8b:e0:6b:95:f3:cd: 23:46:ea:5e:af:e5:55:f9:78:96:62:d0:1d:19:d1:a5:c4:e1: 2a:07:e5:e8:c1:de:a4:1f:46:1f:90:96:b4:34:24:8d:94:dd: f7:4f:9f:67:47:9a:bf:0d:ce:3b:bf:5b:1c:a2:9a:39:db:cc: 19:69:dd:1b:1e:f2:43:db:25:28:06:32:6e:ce:45:54:c7:62: 9b:4e:5e:bd:6a:86:60:52:5e:51:db:14:eb:54:de:0c:af:c0: a0:6c:a6:9a:89:56:05:f5:f2:2c:96:65:99:f2:4e:63:42:59: 86:ab:1a:96:e8:58:cb:af:6a:6b:fe:18:6e:6c:f9:74:01:21: 1d:e6:ca:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6Z842Z1jyq8TSlcQJxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjdiYjc1ODhiODJkNzBkOGNiNzNkNGU0NTE3N2Y2N2Vj ZWYyMTMwHhcNMjUxMjIwMTEwMTA5WhcNMjUxMjIxMTEwMTA5WjAzMTEwLwYDVQQD EyhiNzgwMWI1NDgxNzI1ZjQ5ZmZhZGE2NGY4NTBhZDI4ZWI0NzA3MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMrUE3+z+bvjQMHugXkYPSOODe/g oSrk/7DFuXGjkdAPQxRMeINSjsxnxi99IwvvpEfvGiipgvKu3TTdzWDknR6SRIqv ke3Y57wfdrWULmriMl5grxHERuz1wXA0/vZ/ZkBW0h8C7F97F6YkdzMDjHmhs4qJ IB3WgpsH90HR68ROV26fmnZk3Lg+X6ePu4M090pfJHJPzVXI3aAGBT/FJ2TnrWL6 N5+OKT6hZ35sBuLrmaWRp5TQMPlXj7SWONaU1AhezoGA3LDXZn8ILyPTM9WLub/b XFBHqWurrDFo5QvVKPkr8gAhnno9L1Y59LMty/q1pdG0aLJLERM71Uz93wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeAG1SBcl9J/62mT4UK0o60cHHIMB8GA1UdIwQY MBaAFO1nu3WIuC1w2Mtz1ORRd/Z+zvITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5Yjkt MWI2MGRmMjUyY2E3LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5YjktMWI2MGRmMjUyY2E3 LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxutIsxu 6jN/vftTCXwR/PAccH6dYyYn/AdoOWSf4QIljBf3AWGMKQuIuvM98EUdUBAHPJdX QRFdQta7SMpht50MX6mXT2nAp15IivGE8JXb3bCq77UxSnzpSIOHvD6vOKk0jXYF fl8xteJQvuJN3u/0JvxNOv25i+BrlfPNI0bqXq/lVfl4lmLQHRnRpcThKgfl6MHe pB9GH5CWtDQkjZTd90+fZ0eavw3OO79bHKKaOdvMGWndGx7yQ9slKAYybs5FVMdi m05evWqGYFJeUdsU61TeDK/AoGymmolWBfXyLJZlmfJOY0JZhqsaluhYy69qa/4Y bmz5dAEhHebKLw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:59 2025 by rpki-client