This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft File: D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json) Hash identifier: H64YAR5Eet4mYtvtS+3VjmYOLhwqz+Qlnpv9NU5PpV0= Subject key identifier: F0:5B:DD:C0:04:C8:9B:69:59:E2:0E:35:1C:D8:ED:89:82:34:B2:77 Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B39B448F857D1693F0981F7538E737735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft Manifest number: 0EB5 Signing time: Sat 20 Dec 2025 03:01:14 +0000 Manifest this update: Sat 20 Dec 2025 03:01:14 +0000 Manifest next update: Sun 21 Dec 2025 03:01:14 +0000 Files and hashes: 1: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=) 2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: Z9Btj1Lw5JHXaA6liDe4rBH/c6l7L23WNErweW1gqFI=) 3: E3-oQ4BmjuAUAxuY3lI4bGAJJn0.roa (hash: QkhM3KqaZ6ST7G4nJ7m93zJ83x4l2g7lj5o1mYVsrgc=) 4: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=) 5: PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa (hash: tdD/J8H0M27lW/hpYh2V2pKuEbxFXSmLFYYHtZ17IpE=) 6: gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa (hash: zVtlbSj16lTrnOVx6GM9u2ecIQWNTuwNYnRaanJM7XY=) 7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:48:f8:57:d1:69:3f:09:81:f7:53:8e:73:77:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Dec 20 03:01:14 2025 GMT Not After : Dec 21 03:01:14 2025 GMT Subject: CN=f05bddc004c89b6959e20e351cd8ed898234b277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:3b:50:96:94:1f:7b:cb:72:0b:c2:15:00: 24:2e:92:dc:6f:74:42:4f:fc:72:3c:eb:55:a1:23: 35:8c:6c:8a:76:af:f4:a6:49:da:40:cf:22:cb:22: d7:05:ba:08:ed:69:d2:57:fe:2b:bc:aa:28:2a:50: c1:ea:dc:de:78:ed:4b:02:5c:0a:3d:9f:34:4c:b5: 39:b3:e5:f9:4e:94:a3:ae:c8:27:d2:bf:d6:4d:03: 8d:c4:ce:c8:df:1b:6e:c1:bf:d0:2d:42:02:9d:de: b2:39:a3:0a:26:12:21:77:98:4f:05:12:64:18:44: 41:a4:b2:9a:13:86:db:d9:4c:2c:55:e9:24:2b:2d: 6d:f8:ad:5d:b9:68:24:9d:37:96:b3:32:a8:e3:0d: 6a:34:a6:20:a6:60:6c:dc:1c:31:e6:51:33:c8:cc: 3c:61:db:46:3d:a8:64:2a:69:a1:cc:28:66:15:7d: 08:23:96:7b:29:72:9f:df:40:ef:a4:64:4b:46:e4: f9:50:a0:cd:74:38:b0:dc:36:42:4f:6f:be:b1:4f: 88:0b:c3:8a:11:7a:e8:f5:3c:ee:cb:15:1a:92:d0: bf:a5:00:4d:11:aa:df:a4:84:a6:46:3b:68:47:2f: fa:e6:67:d3:7b:ad:c5:b8:4d:5e:e5:4a:49:a7:fe: 92:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:DD:C0:04:C8:9B:69:59:E2:0E:35:1C:D8:ED:89:82:34:B2:77 X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:2b:8c:c0:ad:cf:c0:04:2a:e0:1d:87:36:4c:c8:c1:03:2a: f5:b9:2e:60:6a:ff:9c:bb:ee:14:34:5c:45:2d:40:81:fd:81: dd:42:3c:ab:94:34:90:7e:07:1b:71:fc:8b:3f:6f:74:b4:b1: d1:a7:b7:01:53:ba:03:00:4e:65:98:36:2f:f2:af:83:2f:6d: c6:4c:4f:e5:6d:97:e5:30:77:7b:7f:4d:32:d1:28:0d:74:44: 43:f2:70:82:15:ba:c2:d6:20:fb:52:69:65:62:56:9c:a8:2c: 24:b5:40:ca:16:8f:2c:bc:d0:e1:22:5c:79:1c:27:c2:8d:76: 4a:23:43:ae:2d:64:db:d0:ce:d6:18:74:64:8c:f6:ac:aa:1e: 3e:eb:21:cb:d4:b2:fa:c5:3b:dd:b4:6a:ed:ac:7e:9d:7a:46: 74:10:2e:48:08:7b:83:b9:dc:90:03:21:86:a8:49:cf:66:61: 3d:ec:98:ca:20:fb:2d:f5:1e:a1:36:6a:63:c3:a0:34:69:4c: e4:66:66:ba:9c:ea:9b:b7:20:2c:f8:d3:97:05:20:b4:2f:cd: 27:77:9a:8d:ea:83:02:d8:32:3b:41:c9:ac:61:eb:93:68:04: f7:50:24:2d:a0:97:a9:80:e2:b6:88:48:5f:dc:62:0d:b8:7f: 13:61:7d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tEj4V9FpPwmB91OOc3c1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjUxMjIwMDMwMTE0WhcNMjUxMjIxMDMwMTE0WjAzMTEwLwYDVQQD EyhmMDViZGRjMDA0Yzg5YjY5NTllMjBlMzUxY2Q4ZWQ4OTgyMzRiMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu07UJaUH3vLcgvCFQAkLpLcb3RC T/xyPOtVoSM1jGyKdq/0pknaQM8iyyLXBboI7WnSV/4rvKooKlDB6tzeeO1LAlwK PZ80TLU5s+X5TpSjrsgn0r/WTQONxM7I3xtuwb/QLUICnd6yOaMKJhIhd5hPBRJk GERBpLKaE4bb2UwsVekkKy1t+K1duWgknTeWszKo4w1qNKYgpmBs3Bwx5lEzyMw8 YdtGPahkKmmhzChmFX0II5Z7KXKf30DvpGRLRuT5UKDNdDiw3DZCT2++sU+IC8OK EXro9TzuyxUaktC/pQBNEarfpISmRjtoRy/65mfTe63FuE1e5UpJp/6S3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBb3cAEyJtpWeIONRzY7YmCNLJ3MB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiuMwK3P wAQq4B2HNkzIwQMq9bkuYGr/nLvuFDRcRS1Agf2B3UI8q5Q0kH4HG3H8iz9vdLSx 0ae3AVO6AwBOZZg2L/Kvgy9txkxP5W2X5TB3e39NMtEoDXREQ/JwghW6wtYg+1Jp ZWJWnKgsJLVAyhaPLLzQ4SJceRwnwo12SiNDri1k29DO1hh0ZIz2rKoePushy9Sy +sU73bRq7ax+nXpGdBAuSAh7g7nckAMhhqhJz2ZhPeyYyiD7LfUeoTZqY8OgNGlM 5GZmupzqm7cgLPjTlwUgtC/NJ3eajeqDAtgyO0HJrGHrk2gE91AkLaCXqYDitohI X9xiDbh/E2F9ew== -----END CERTIFICATE-----Generated at Sat Dec 20 12:24:44 2025 by rpki-client