This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft File: 7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json) Hash identifier: 0+jNxroNO+R8yVlgtyRO9uhuetNNwS5RAb7qmt3P1uY= Subject key identifier: 12:BA:73:93:50:11:3A:61:A3:3D:83:49:83:AD:15:C3:69:AF:53:BC Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Certificate serial: 019B3EA3482E8D3B607CA72F8D2D9F8C0D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft Manifest number: 1795 Signing time: Sun 21 Dec 2025 02:00:46 +0000 Manifest this update: Sun 21 Dec 2025 02:00:46 +0000 Manifest next update: Mon 22 Dec 2025 02:00:46 +0000 Files and hashes: 1: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: cHzFFPahhWsbmsd0BauP65M9scJwsmWx/eelY00IWTo=) 2: HLvhD2MuHgkhYXDg-SuIbLYOHgk.roa (hash: yEbv0Qvw7CzFL55jFQMv8xIMnfPjOGOXgDPO0YO14o8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:48:2e:8d:3b:60:7c:a7:2f:8d:2d:9f:8c:0d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Validity Not Before: Dec 21 02:00:46 2025 GMT Not After : Dec 22 02:00:46 2025 GMT Subject: CN=12ba739350113a61a33d834983ad15c369af53bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:66:36:6c:65:93:0c:1f:ec:b8:a3:6f:be: 76:93:06:24:b5:7e:dc:11:c3:91:23:a0:e0:9f:8e: a7:70:71:f7:cf:cc:23:52:46:a6:07:65:92:52:bc: 2c:44:61:95:b8:96:ab:3e:ea:12:ca:76:3b:78:b3: da:3c:04:84:31:ca:f0:24:b2:50:1b:92:9c:89:b3: 13:47:11:bc:2f:68:21:2f:2e:da:1c:6b:9d:ee:3d: a0:f5:63:a8:ad:9e:6d:36:f3:41:57:e8:63:a9:73: 97:a0:cf:9d:2f:4c:c2:e1:aa:54:e5:99:5d:1a:e2: 81:07:9b:21:83:09:7a:ce:4c:5a:b4:f6:43:c2:c4: 42:5a:10:9f:36:6c:83:2b:8e:4f:71:13:fd:53:5e: c7:45:35:03:ab:0c:af:17:b2:b0:99:ea:4f:13:6e: 5c:ba:01:cd:66:46:76:65:30:bd:58:3e:2b:4c:f8: 8f:28:f6:79:ab:1a:85:86:ab:27:4c:9e:50:b8:be: b2:71:58:cd:ab:ca:37:56:5f:57:55:3f:58:89:ff: e9:60:69:a2:93:09:f7:ad:3f:2d:0b:b4:2d:42:17: e1:42:0b:cf:6b:73:6c:1a:46:17:74:41:4b:8f:19: 9c:5c:90:08:ad:1f:6c:69:58:e4:0e:ea:b9:16:7b: ba:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:73:93:50:11:3A:61:A3:3D:83:49:83:AD:15:C3:69:AF:53:BC X509v3 Authority Key Identifier: keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:10:8d:bb:89:c6:82:83:ae:dd:91:6a:3f:74:de:5a:ee:ea: b7:b3:b9:a3:c2:4f:c2:66:d8:2b:54:c2:bd:80:fc:4f:71:1d: d4:da:18:88:1c:72:ac:2e:fa:16:e2:98:8d:fc:75:73:6a:a1: 11:5e:ac:ff:c6:08:2f:c1:94:d9:f3:73:04:2b:28:55:91:ba: 7a:05:6c:0b:86:e7:c3:81:78:94:b0:cf:9e:44:83:6b:d2:e0: 66:8d:73:ac:4e:27:da:82:b6:50:09:70:6a:2a:bf:d0:e4:30: ee:3f:38:5d:1d:e2:4f:d3:b1:68:1a:ab:92:6c:87:1d:f5:1f: 96:34:05:da:ae:93:50:d4:f9:19:61:27:9b:18:35:26:58:48: 79:ec:d0:8e:ff:1f:55:fa:e2:db:c8:3b:d1:7a:b5:5b:9d:af: b7:dc:0f:9e:c4:9b:d9:ec:67:1f:b5:fa:7a:7b:7e:b6:74:b1: b2:b5:fb:a9:07:9d:9b:63:0d:2d:a4:55:ca:3f:ff:86:c9:6f: 0b:5b:71:29:1d:19:37:0f:10:b0:48:de:a4:02:c7:9b:98:5a: ac:28:bd:4e:d4:3c:32:f8:20:4c:9a:11:79:da:64:56:eb:4a: 2d:1f:e3:91:39:43:2d:12:4e:0d:2a:eb:ad:dc:cb:b3:bb:6b: 7c:85:32:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0gujTtgfKcvjS2fjA1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNWFkYTBkYzkwMGExM2M4M2I3MGFjM2Y1ODdmYjhjMmUx ZGYwMzAwHhcNMjUxMjIxMDIwMDQ2WhcNMjUxMjIyMDIwMDQ2WjAzMTEwLwYDVQQD EygxMmJhNzM5MzUwMTEzYTYxYTMzZDgzNDk4M2FkMTVjMzY5YWY1M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu9mNmxlkwwf7Lijb752kwYktX7c EcORI6Dgn46ncHH3z8wjUkamB2WSUrwsRGGVuJarPuoSynY7eLPaPASEMcrwJLJQ G5KcibMTRxG8L2ghLy7aHGud7j2g9WOorZ5tNvNBV+hjqXOXoM+dL0zC4apU5Zld GuKBB5shgwl6zkxatPZDwsRCWhCfNmyDK45PcRP9U17HRTUDqwyvF7KwmepPE25c ugHNZkZ2ZTC9WD4rTPiPKPZ5qxqFhqsnTJ5QuL6ycVjNq8o3Vl9XVT9Yif/pYGmi kwn3rT8tC7QtQhfhQgvPa3NsGkYXdEFLjxmcXJAIrR9saVjkDuq5Fnu6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK6c5NQETphoz2DSYOtFcNpr1O8MB8GA1UdIwQY MBaAFOxa2g3JAKE8g7cKw/WH+4wuHfAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEt Y2ZlZmVhZWU4NjVlLzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEtY2ZlZmVhZWU4NjVl LzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxCNu4nG goOu3ZFqP3TeWu7qt7O5o8JPwmbYK1TCvYD8T3Ed1NoYiBxyrC76FuKYjfx1c2qh EV6s/8YIL8GU2fNzBCsoVZG6egVsC4bnw4F4lLDPnkSDa9LgZo1zrE4n2oK2UAlw aiq/0OQw7j84XR3iT9OxaBqrkmyHHfUfljQF2q6TUNT5GWEnmxg1JlhIeezQjv8f Vfri28g70Xq1W52vt9wPnsSb2exnH7X6ent+tnSxsrX7qQedm2MNLaRVyj//hslv C1txKR0ZNw8QsEjepALHm5harCi9TtQ8MvggTJoRedpkVutKLR/jkTlDLRJODSrr rdzLs7trfIUyWA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:05 2025 by rpki-client