This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json) Hash identifier: YVmcrge90rkOAd/nNWjn0CIWK8tE8FYJJxAHtDnMjhc= Subject key identifier: CE:F6:7C:70:E2:1E:0D:B7:DA:DC:49:1A:29:95:0E:01:3C:35:BD:1D Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2 Certificate serial: 019B3DFEC3C2A04E96AB8CAA693743D2DD9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft Manifest number: 0640 Signing time: Sat 20 Dec 2025 23:01:04 +0000 Manifest this update: Sat 20 Dec 2025 23:01:04 +0000 Manifest next update: Sun 21 Dec 2025 23:01:04 +0000 Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: c42/UtWGFgitRh6qdspQ55luWYNUPEX3BOSpqefkBmg=) 2: U8r0tQi-zyaqXWj1BP7VR1CSQio.roa (hash: 2sAYuzHl5HIba+FILh2Jc5dn+E3yhGsj+/+0I47tVzI=) 3: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c3:c2:a0:4e:96:ab:8c:aa:69:37:43:d2:dd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2 Validity Not Before: Dec 20 23:01:04 2025 GMT Not After : Dec 21 23:01:04 2025 GMT Subject: CN=cef67c70e21e0db7dadc491a29950e013c35bd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:5a:c8:0f:34:f2:04:51:07:d9:7d:80:a6: 00:56:c0:3a:5c:52:ff:43:35:f9:e0:07:91:b6:c6: da:de:d7:1a:ff:3f:9e:2f:1f:b7:02:02:a9:66:06: 2c:67:e1:bd:31:45:25:9f:54:94:46:67:a1:df:ef: 3b:a9:48:4b:af:34:0c:fe:e4:9e:f0:74:13:16:42: 3f:b9:bc:7c:6f:9a:e5:91:bb:ec:39:50:a2:ed:2d: 53:30:3d:14:37:29:6c:22:12:d8:5c:d8:f5:b7:91: ae:dc:11:50:ca:f6:83:77:1f:c8:08:e3:fa:8f:39: 0d:6a:ce:59:93:44:9f:6b:d8:88:3f:f4:20:77:69: d7:7f:e2:2c:05:98:e6:62:45:17:b5:c7:93:7e:da: 04:f1:c8:f3:c0:ca:82:c6:3e:22:8e:04:0f:79:bb: 87:bb:dd:c3:70:33:a0:99:28:3a:12:0c:05:e0:9d: 64:15:bf:79:6c:1b:e2:98:32:4d:60:34:bd:99:1b: d2:65:d0:f4:3a:52:93:d5:98:c5:e1:84:e6:0a:e7: 13:a6:76:5c:32:63:2c:b9:92:b8:5c:df:9d:70:52: fc:c5:51:37:5f:08:da:be:9b:e3:45:fb:68:fa:ca: 6e:71:cb:ed:2b:88:13:0a:fc:04:87:5f:28:78:27: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:7C:70:E2:1E:0D:B7:DA:DC:49:1A:29:95:0E:01:3C:35:BD:1D X509v3 Authority Key Identifier: keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6a:34:02:12:b8:30:fe:a7:62:73:ad:23:1e:b2:19:ac:78: 77:7b:a0:26:ae:4d:af:83:78:9c:20:45:48:fb:2a:78:e5:3f: 7b:dc:42:f4:d1:93:27:d6:ad:30:fd:0d:26:4e:03:72:5b:1f: aa:56:df:02:8d:27:94:fe:6d:ff:2f:65:ab:8a:3d:e4:b8:16: ab:8f:4a:6b:95:4f:6f:54:99:37:ce:c5:57:79:b6:70:7d:cc: 73:7e:34:b9:b1:0e:99:71:21:0a:f3:27:db:63:b1:30:05:51: df:03:b2:cb:2b:44:22:26:aa:fd:7e:bb:99:a8:6d:18:a0:da: bc:27:58:3b:16:2e:2e:d4:da:d9:1a:02:e9:27:ae:4b:05:93: b3:3b:ba:58:4e:3f:83:6b:d0:79:e2:41:9f:f0:df:dc:16:a5: 7c:9f:59:af:a4:76:20:94:5b:8f:c1:83:66:5b:1a:2c:53:0a: 19:31:40:b3:19:56:b1:d7:db:ec:cc:d6:c4:04:2d:7d:29:e2: 3b:69:67:e4:6e:f4:0e:98:0a:72:e4:fe:e7:23:2a:fa:07:80: d7:fd:8b:37:a1:e0:e8:2c:d2:13:30:6c:1d:52:d0:69:a3:8c: 18:b2:8a:5f:73:e2:f3:47:b9:4c:2a:3e:b0:d6:f5:82:d1:c2: 00:cb:48:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/sPCoE6Wq4yqaTdD0t2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh ZjUxZDIwHhcNMjUxMjIwMjMwMTA0WhcNMjUxMjIxMjMwMTA0WjAzMTEwLwYDVQQD EyhjZWY2N2M3MGUyMWUwZGI3ZGFkYzQ5MWEyOTk1MGUwMTNjMzViZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+xayA808gRRB9l9gKYAVsA6XFL/ QzX54AeRtsba3tca/z+eLx+3AgKpZgYsZ+G9MUUln1SURmeh3+87qUhLrzQM/uSe 8HQTFkI/ubx8b5rlkbvsOVCi7S1TMD0UNylsIhLYXNj1t5Gu3BFQyvaDdx/ICOP6 jzkNas5Zk0Sfa9iIP/Qgd2nXf+IsBZjmYkUXtceTftoE8cjzwMqCxj4ijgQPebuH u93DcDOgmSg6EgwF4J1kFb95bBvimDJNYDS9mRvSZdD0OlKT1ZjF4YTmCucTpnZc MmMsuZK4XN+dcFL8xVE3XwjavpvjRfto+spuccvtK4gTCvwEh18oeCedZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM72fHDiHg232txJGimVDgE8Nb0dMB8GA1UdIwQY MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1 LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2o0AhK4 MP6nYnOtIx6yGax4d3ugJq5Nr4N4nCBFSPsqeOU/e9xC9NGTJ9atMP0NJk4Dclsf qlbfAo0nlP5t/y9lq4o95LgWq49Ka5VPb1SZN87FV3m2cH3Mc340ubEOmXEhCvMn 22OxMAVR3wOyyytEIiaq/X67mahtGKDavCdYOxYuLtTa2RoC6SeuSwWTszu6WE4/ g2vQeeJBn/Df3BalfJ9Zr6R2IJRbj8GDZlsaLFMKGTFAsxlWsdfb7MzWxAQtfSni O2ln5G70DpgKcuT+5yMq+geA1/2LN6Hg6CzSEzBsHVLQaaOMGLKKX3Pi80e5TCo+ sNb1gtHCAMtIew== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:53 2025 by rpki-client