This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json) Hash identifier: Xz+RV33wAj2X8PjIfXOz7KS3eBlrqMgwsrJitH8uZzY= Subject key identifier: 0B:ED:D6:F3:98:82:24:F7:0C:8B:79:62:86:80:60:E1:34:88:55:A7 Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd Certificate serial: 019B5CE514489A283F7F5EED0043ADCBECDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft Manifest number: 11B9 Signing time: Fri 26 Dec 2025 23:01:15 +0000 Manifest this update: Fri 26 Dec 2025 23:01:15 +0000 Manifest next update: Sat 27 Dec 2025 23:01:15 +0000 Files and hashes: 1: 0YnoXFsLC3L8LFSSyo3TEM6ihxM.roa (hash: 1mt7G/fO9VBU7/suzQGIUYMupKdv6yImTUBwyXrv1sk=) 2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: k2hpRAXRrYAlkWLh2tDRjum/liFLu0AlE0/5QAT8PpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e5:14:48:9a:28:3f:7f:5e:ed:00:43:ad:cb:ec:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd Validity Not Before: Dec 26 23:01:15 2025 GMT Not After : Dec 27 23:01:15 2025 GMT Subject: CN=0bedd6f3988224f70c8b7962868060e1348855a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:d3:ee:19:44:49:46:e6:d8:14:1f:67:46: 45:3a:f8:62:13:c8:79:c5:cf:b5:0e:22:13:ba:cb: ab:11:84:08:d4:b5:38:cd:e4:ee:c2:81:da:d9:27: 6a:4d:db:a4:0a:2c:25:8f:76:a8:a2:4d:48:1d:b9: 91:a1:59:53:dc:bd:58:48:5e:a0:28:3e:d2:b6:4a: 3d:56:63:a3:f7:d7:d9:ce:cf:b3:c0:b8:65:7a:e7: f1:9e:2b:6f:d5:ef:5a:16:97:5b:c2:77:af:70:6e: a3:35:b0:74:a0:8c:99:85:a8:6b:22:d5:1c:5d:82: e9:20:92:fe:07:df:3a:b4:08:4b:25:a9:2f:28:44: 5e:35:82:ef:85:4c:e7:4e:ab:9d:bc:af:1c:e4:bf: a3:a1:ba:bd:1e:a1:7e:f4:53:2e:0d:78:40:76:27: 4b:83:27:87:0b:d4:8f:e0:10:bc:69:f8:f0:8e:5a: 55:3b:2b:f1:fc:e2:8a:5d:66:d6:dd:f9:71:81:ed: e1:a0:60:ab:c5:32:59:81:21:c9:f3:15:6a:7a:35: 1b:f0:5d:1a:f2:ad:f8:70:26:65:75:af:ab:ed:20: f2:a3:61:d2:b3:f1:6f:18:fe:ae:e6:c3:ed:e3:b4: 38:2d:66:c6:c3:34:37:e2:fa:13:77:f6:e5:9f:a5: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:ED:D6:F3:98:82:24:F7:0C:8B:79:62:86:80:60:E1:34:88:55:A7 X509v3 Authority Key Identifier: keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1c:c0:35:39:bd:9e:37:eb:42:5c:ce:37:08:23:b9:49:c9: 8e:61:41:38:5a:e8:f8:fe:2d:b4:7e:ea:5f:47:36:4f:1e:63: c7:8f:00:3a:3f:70:09:d1:16:75:88:06:05:8f:a9:26:8f:17: e5:40:92:39:67:24:b9:fb:27:7e:7a:38:18:d5:31:9d:64:47: 00:e9:e7:bc:16:b3:08:4d:73:51:85:0d:c8:97:8e:fd:f7:d5: d2:71:c8:cf:60:d9:18:40:57:30:0d:81:b6:c0:fc:3a:3a:68: c7:39:ee:ea:9a:76:42:4c:cb:e8:c7:e8:53:9f:09:b3:31:5b: 44:18:e9:b1:37:84:b4:7b:e4:90:b0:fc:1b:66:b3:8e:06:3f: 17:a6:62:bb:f1:a7:d8:87:d3:a6:36:27:28:fb:b3:20:1f:04: f6:c5:e4:65:d1:7a:92:be:03:52:40:ed:b4:18:87:38:35:f4: ed:9a:32:5f:8c:0d:70:20:bb:ec:93:56:77:13:cf:bd:23:06: d5:5e:a4:5e:74:47:61:2d:f6:7b:e9:ad:50:67:26:a4:71:48: e6:1b:be:bc:94:08:2b:ab:c3:7c:85:bb:39:0c:d6:b0:00:cc: b5:b6:0c:c4:3a:bb:89:f3:7a:09:e9:56:ea:31:da:80:42:a3: dc:45:c0:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5RRImig/f17tAEOty+zaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy ODFiZGQwHhcNMjUxMjI2MjMwMTE1WhcNMjUxMjI3MjMwMTE1WjAzMTEwLwYDVQQD EygwYmVkZDZmMzk4ODIyNGY3MGM4Yjc5NjI4NjgwNjBlMTM0ODg1NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm7T7hlESUbm2BQfZ0ZFOvhiE8h5 xc+1DiITusurEYQI1LU4zeTuwoHa2SdqTdukCiwlj3aook1IHbmRoVlT3L1YSF6g KD7Stko9VmOj99fZzs+zwLhleufxnitv1e9aFpdbwnevcG6jNbB0oIyZhahrItUc XYLpIJL+B986tAhLJakvKEReNYLvhUznTqudvK8c5L+jobq9HqF+9FMuDXhAdidL gyeHC9SP4BC8afjwjlpVOyvx/OKKXWbW3flxge3hoGCrxTJZgSHJ8xVqejUb8F0a 8q34cCZlda+r7SDyo2HSs/FvGP6u5sPt47Q4LWbGwzQ34voTd/bln6WS2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvt1vOYgiT3DIt5YoaAYOE0iFWnMB8GA1UdIwQY MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2 LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRzANTm9 njfrQlzONwgjuUnJjmFBOFro+P4ttH7qX0c2Tx5jx48AOj9wCdEWdYgGBY+pJo8X 5UCSOWckufsnfno4GNUxnWRHAOnnvBazCE1zUYUNyJeO/ffV0nHIz2DZGEBXMA2B tsD8Ojpoxznu6pp2QkzL6MfoU58JszFbRBjpsTeEtHvkkLD8G2azjgY/F6Ziu/Gn 2IfTpjYnKPuzIB8E9sXkZdF6kr4DUkDttBiHODX07ZoyX4wNcCC77JNWdxPPvSMG 1V6kXnRHYS32e+mtUGcmpHFI5hu+vJQIK6vDfIW7OQzWsADMtbYMxDq7ifN6CelW 6jHagEKj3EXAjg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:42 2025 by rpki-client