This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json) Hash identifier: XSD1KtXjoYWPVAIgQ+bu5oc5DbGp9gd2GXSSfqW/Iuw= Subject key identifier: CB:81:37:7D:AD:BB:D3:1B:88:C8:90:E8:89:E8:14:35:AE:54:9B:94 Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9 Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9 Certificate serial: 019B4BF25A6C739859C855FD015AC5E5A591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft Manifest number: 14DA Signing time: Tue 23 Dec 2025 16:02:12 +0000 Manifest this update: Tue 23 Dec 2025 16:02:12 +0000 Manifest next update: Wed 24 Dec 2025 16:02:12 +0000 Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: ZDG+8Lj/C0duzLoPiCJ3iSGkkvVj7P7YHRSNT3O+xLk=) 2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=) 3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:5a:6c:73:98:59:c8:55:fd:01:5a:c5:e5:a5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9 Validity Not Before: Dec 23 16:02:12 2025 GMT Not After : Dec 24 16:02:12 2025 GMT Subject: CN=cb81377dadbbd31b88c890e889e81435ae549b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:a4:c4:a2:f9:83:2d:4c:ad:36:87:49:fc: 4a:28:49:23:16:07:55:d9:a7:66:1c:44:fb:47:e1: 5f:ae:4b:e6:b0:b7:aa:3e:83:c7:d6:10:53:58:06: 65:13:10:63:fc:cd:61:77:53:e6:5b:aa:a6:4d:2d: 0f:86:e5:0b:b8:cc:a7:82:07:16:28:e6:62:10:26: e9:55:fa:8d:be:92:66:25:8e:62:fd:14:08:55:01: 82:bc:62:87:d2:f0:80:6c:78:e1:1e:3b:e3:60:cb: 92:f3:0a:c8:a6:d3:e7:7b:2a:0a:73:16:6d:a3:21: aa:48:42:37:33:82:a0:70:48:82:fb:f4:9c:2f:bb: 55:eb:18:5c:2b:0a:9c:a1:4d:2e:e9:5c:b9:b5:cc: 65:be:33:18:f3:b5:83:f1:77:15:21:11:23:0b:ab: 8a:d3:14:21:2b:cd:6b:fd:17:48:78:1d:d1:ae:90: d9:cf:e9:1f:29:b7:9d:1c:6b:dd:fe:4b:3f:14:f0: 00:3d:19:07:48:18:3e:46:ea:8c:dd:57:b7:2d:b1: f3:88:59:71:5b:79:e3:d3:88:04:bc:4d:ad:cf:74: 8c:20:48:ff:41:75:31:d6:d9:0a:b6:69:a6:86:e1: 74:29:48:62:ed:55:14:90:e7:26:b3:01:73:c5:bc: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:81:37:7D:AD:BB:D3:1B:88:C8:90:E8:89:E8:14:35:AE:54:9B:94 X509v3 Authority Key Identifier: keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:19:f8:1e:b4:0c:02:2d:78:74:cd:10:1c:d2:59:53:c8:59: da:8d:ea:7f:98:26:1a:85:0d:19:fc:f9:5d:8e:1f:6e:81:d3: 35:64:8c:05:48:61:5d:12:28:f3:a2:a9:41:fa:66:2c:db:89: ce:57:c8:df:7b:37:7b:18:42:b6:6b:21:1c:78:2e:a3:ff:47: b7:c8:6f:ff:59:1f:bd:55:5e:b0:f1:43:bd:af:96:a9:2d:ec: 41:1e:00:5c:46:a7:09:ce:3e:d5:0b:aa:06:73:c9:6b:e8:d0: b3:22:c0:be:b9:56:aa:18:1c:9d:e0:8c:fd:96:af:32:d2:d2: 96:d2:a7:fb:53:79:b1:d1:48:37:14:b3:31:90:6c:ba:f9:14: 68:67:79:00:9e:dd:4b:36:6b:16:77:b4:d3:30:b7:65:7c:0b: f7:51:92:a6:28:05:4c:32:f6:6e:95:47:ad:4f:34:2c:2c:8a: 8f:cd:62:1d:70:9d:7f:48:8a:d8:a7:1b:02:26:11:15:b7:3c: cf:70:5e:86:43:78:e2:b8:7f:9d:ee:51:19:7f:6f:87:55:e3: 8e:70:2e:0e:2e:1c:04:66:03:e4:ea:cf:fb:43:5d:e6:a8:a6: 58:90:57:1b:e6:fc:b1:65:d3:63:91:11:52:a2:88:da:85:36: ea:cc:de:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8lpsc5hZyFX9AVrF5aWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1 ODlkYjkwHhcNMjUxMjIzMTYwMjEyWhcNMjUxMjI0MTYwMjEyWjAzMTEwLwYDVQQD EyhjYjgxMzc3ZGFkYmJkMzFiODhjODkwZTg4OWU4MTQzNWFlNTQ5Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8+kxKL5gy1MrTaHSfxKKEkjFgdV 2admHET7R+FfrkvmsLeqPoPH1hBTWAZlExBj/M1hd1PmW6qmTS0PhuULuMynggcW KOZiECbpVfqNvpJmJY5i/RQIVQGCvGKH0vCAbHjhHjvjYMuS8wrIptPneyoKcxZt oyGqSEI3M4KgcEiC+/ScL7tV6xhcKwqcoU0u6Vy5tcxlvjMY87WD8XcVIREjC6uK 0xQhK81r/RdIeB3RrpDZz+kfKbedHGvd/ks/FPAAPRkHSBg+RuqM3Ve3LbHziFlx W3nj04gEvE2tz3SMIEj/QXUx1tkKtmmmhuF0KUhi7VUUkOcmswFzxbxGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuBN32tu9MbiMiQ6InoFDWuVJuUMB8GA1UdIwQY MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3 LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBn4HrQM Ai14dM0QHNJZU8hZ2o3qf5gmGoUNGfz5XY4fboHTNWSMBUhhXRIo86KpQfpmLNuJ zlfI33s3exhCtmshHHguo/9Ht8hv/1kfvVVesPFDva+WqS3sQR4AXEanCc4+1Quq BnPJa+jQsyLAvrlWqhgcneCM/ZavMtLSltKn+1N5sdFINxSzMZBsuvkUaGd5AJ7d SzZrFne00zC3ZXwL91GSpigFTDL2bpVHrU80LCyKj81iHXCdf0iK2KcbAiYRFbc8 z3BehkN44rh/ne5RGX9vh1XjjnAuDi4cBGYD5OrP+0Nd5qimWJBXG+b8sWXTY5ER UqKI2oU26szeRw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:25:03 2025 by rpki-client