This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft File: 7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json) Hash identifier: CmfXGzLJWgpdkU9ORbVJcWHS8gsykZXQNj7CC+XTbH4= Subject key identifier: 84:86:E4:9C:05:6F:6A:65:D1:8A:D0:36:6A:DA:6B:6E:AC:56:25:6D Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Certificate serial: 019B3DC822058C7FF1AAF02ADDF50768D674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 22:01:24 +0000 Manifest this update: Sat 20 Dec 2025 22:01:24 +0000 Manifest next update: Sun 21 Dec 2025 22:01:24 +0000 Files and hashes: 1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: 5oA+qf8MA973rQf594/KWDd97BRwvgZshjsCBDBMbQY=) 2: CcwLvjGeQXyXQnaJpj6YyosTcMg.roa (hash: 1bzw8ev+Aeq3rTfFEXQzj88XSRZ9dYDMAOUCxZdm2PE=) 3: G3AgkSKzlQVVbdRD6eEypeJ5E5M.roa (hash: 31Wbft135lAj6RvQzASMjBguHP4eX2M1a4vm+r9VPa8=) 4: R24mqQHNUjq7_Kn2gm9-w4hGPdA.roa (hash: S6qdx3rNwuFJf5Eug9pguS9TdH8X/hG/PtUDluCZHpM=) 5: hztSFe2fWRlmTU4tssnBu-y0WeI.roa (hash: k2WLaKga1DftX/wOd3XsZqhZBsK4rGShhnxmdanGvCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:22:05:8c:7f:f1:aa:f0:2a:dd:f5:07:68:d6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Validity Not Before: Dec 20 22:01:24 2025 GMT Not After : Dec 21 22:01:24 2025 GMT Subject: CN=8486e49c056f6a65d18ad0366ada6b6eac56256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:7a:bb:93:e4:5c:2b:37:be:f5:5a:cf:e6: 78:1a:e7:d1:9b:44:22:dc:27:6b:c8:f2:3b:d0:2a: ff:c8:2a:d4:2c:eb:01:5f:06:ad:02:b4:92:42:4a: a4:91:bd:94:44:d2:2f:18:c6:2e:8a:94:79:a1:dd: ac:41:cf:36:a6:28:94:e3:d2:b2:dc:62:dd:a7:5d: c0:73:1c:a4:f5:ff:ce:94:59:4c:06:fb:e0:f0:2b: 5c:06:2e:ab:fc:61:4d:76:92:b7:43:b3:e7:58:dc: 9f:d6:1a:c2:05:a0:24:27:9c:b9:ec:ec:1e:c9:01: 25:bf:97:8c:e3:ef:5d:c6:bc:08:49:b0:3d:d7:8f: 49:28:e7:4d:cb:0f:d5:9b:23:ad:69:79:6f:15:26: 15:eb:2c:6d:78:4c:34:75:1a:56:bc:e1:42:98:c6: 4a:01:c2:3f:15:4d:40:0d:6d:d4:2b:c7:57:46:aa: 6b:e5:ab:bb:21:50:3a:ce:47:89:1b:f9:3f:fb:a6: 82:89:5d:01:44:f4:84:69:86:95:e2:05:11:9f:0c: 49:71:f4:d2:a1:db:b1:0e:36:14:e6:cf:3d:ca:54: 18:15:9c:ab:7f:66:42:6e:84:aa:29:74:f7:b6:44: 21:d7:9d:82:01:8a:bf:75:ee:69:46:e7:ec:df:4d: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:E4:9C:05:6F:6A:65:D1:8A:D0:36:6A:DA:6B:6E:AC:56:25:6D X509v3 Authority Key Identifier: keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:a3:d6:ea:09:bb:32:bb:02:43:03:49:1e:c7:e5:33:f7: f8:de:02:90:72:df:3e:64:29:ab:0e:5f:17:90:3a:f5:83:2c: 38:31:b6:29:01:55:43:c8:67:61:87:36:16:fa:21:d6:f9:ad: f4:fb:3f:dd:4c:ab:4a:66:74:9a:47:99:1d:2f:5d:26:8d:60: 94:27:26:42:ff:5f:c4:85:6d:4f:30:e5:5d:a6:bd:d0:7b:99: 62:a2:7d:ac:15:57:1c:c7:c8:16:6f:07:18:13:73:3e:70:47: a9:ac:4f:d3:16:13:cc:f1:da:a8:16:9b:e7:8d:7f:7c:14:de: de:fa:95:a3:b6:02:fd:c2:16:fa:30:cf:cf:ac:ac:d0:f4:58: 45:47:1a:49:5e:07:f8:2e:22:28:a8:3d:ac:86:22:77:d9:b1: 96:59:1c:4f:b1:c7:de:83:b1:40:98:af:57:49:16:40:6b:1f: 43:77:56:ef:1f:00:c9:4c:ec:0b:63:e1:11:63:fc:44:41:31: 9f:fd:59:1b:a8:c1:ef:bb:b2:a9:36:db:80:66:c4:b8:06:57: 8d:2a:bc:78:07:4a:0e:14:cb:72:da:4e:ba:93:81:8c:33:47: de:a5:cc:42:64:fe:db:a7:e3:f3:11:b3:5d:91:ba:6c:c3:60: cf:bf:c8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yCIFjH/xqvAq3fUHaNZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh ODJlZDUwHhcNMjUxMjIwMjIwMTI0WhcNMjUxMjIxMjIwMTI0WjAzMTEwLwYDVQQD Eyg4NDg2ZTQ5YzA1NmY2YTY1ZDE4YWQwMzY2YWRhNmI2ZWFjNTYyNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23p6u5PkXCs3vvVaz+Z4GufRm0Qi 3CdryPI70Cr/yCrULOsBXwatArSSQkqkkb2URNIvGMYuipR5od2sQc82piiU49Ky 3GLdp13Acxyk9f/OlFlMBvvg8CtcBi6r/GFNdpK3Q7PnWNyf1hrCBaAkJ5y57Owe yQElv5eM4+9dxrwISbA9149JKOdNyw/VmyOtaXlvFSYV6yxteEw0dRpWvOFCmMZK AcI/FU1ADW3UK8dXRqpr5au7IVA6zkeJG/k/+6aCiV0BRPSEaYaV4gURnwxJcfTS oduxDjYU5s89ylQYFZyrf2ZCboSqKXT3tkQh152CAYq/de5pRufs301HFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISG5JwFb2pl0YrQNmraa26sViVtMB8GA1UdIwQY MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt NWEzN2FmNDM5MDRjLzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs2j1uoJ uzK7AkMDSR7H5TP3+N4CkHLfPmQpqw5fF5A69YMsODG2KQFVQ8hnYYc2Fvoh1vmt 9Ps/3UyrSmZ0mkeZHS9dJo1glCcmQv9fxIVtTzDlXaa90HuZYqJ9rBVXHMfIFm8H GBNzPnBHqaxP0xYTzPHaqBab541/fBTe3vqVo7YC/cIW+jDPz6ys0PRYRUcaSV4H +C4iKKg9rIYid9mxllkcT7HH3oOxQJivV0kWQGsfQ3dW7x8AyUzsC2PhEWP8REEx n/1ZG6jB77uyqTbbgGbEuAZXjSq8eAdKDhTLctpOupOBjDNH3qXMQmT+26fj8xGz XZG6bMNgz7/IGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:05 2025 by rpki-client