This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft File: R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json) Hash identifier: hTNE39PAxw+9ghf5ivseRIKlnkWiKI1E+memC0rEHbw= Subject key identifier: 7E:7E:AB:33:87:FF:F0:12:09:93:67:AC:18:43:A0:E6:30:4F:E7:3A Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68 Certificate issuer: /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068 Certificate serial: 019B503C09E2E322FC5E34D8D4C2170D7AB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 12:01:10 +0000 Manifest this update: Wed 24 Dec 2025 12:01:10 +0000 Manifest next update: Thu 25 Dec 2025 12:01:10 +0000 Files and hashes: 1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: s//vufORZ467xHgcYtOML2sm+qpTEboXxQtP2si744g=) 2: eUJqNeMrOG92tkRoE1eKe7bdKA0.roa (hash: ZH26TI2Lx95OhTyG7ufuoqyGvbD2mq8daN9NRoWVAZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:09:e2:e3:22:fc:5e:34:d8:d4:c2:17:0d:7a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068 Validity Not Before: Dec 24 12:01:10 2025 GMT Not After : Dec 25 12:01:10 2025 GMT Subject: CN=7e7eab3387fff012099367ac1843a0e6304fe73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:f6:67:80:7e:c1:bc:aa:b5:e8:08:0c:43: 10:2c:d7:64:ae:56:7d:1c:28:48:c3:a5:10:67:fa: c3:f5:87:2a:27:4e:21:1d:dd:4f:53:23:4a:39:1c: 58:83:9e:d3:3d:00:2f:9f:90:77:96:fd:67:d2:a9: ee:32:04:29:69:06:17:08:cc:82:f5:40:9a:cb:5f: e7:76:f6:60:33:38:65:4c:39:ef:ac:44:34:ea:9e: b1:83:41:e3:f5:27:02:54:e4:b0:ac:65:c5:56:29: 67:96:24:76:8a:6a:bf:f6:c6:79:95:3e:07:37:e9: 99:22:9c:89:f6:6a:a1:8d:e8:e0:e7:6c:6d:e4:43: 9b:be:1b:fa:25:b2:e3:20:e3:63:e6:13:34:cb:f1: 4e:00:b5:a5:aa:ff:6f:a5:8c:03:65:da:5f:9d:48: 4b:7d:03:e1:65:12:ef:a2:36:02:81:4b:a2:20:dd: ac:14:85:b9:82:ec:ef:32:aa:80:9e:39:5a:68:5a: cb:02:73:f1:22:0e:d2:ac:63:88:c6:73:9b:3a:ae: 55:d6:ac:59:e4:33:33:2a:05:05:21:fd:a0:ce:82: fe:aa:cf:15:6e:2d:17:33:88:d1:c0:fc:98:c2:d3: 38:13:3b:79:61:cb:15:c1:7d:ef:b4:8f:69:74:23: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7E:AB:33:87:FF:F0:12:09:93:67:AC:18:43:A0:E6:30:4F:E7:3A X509v3 Authority Key Identifier: keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f0:2b:85:52:2a:94:07:c5:92:1d:40:a6:7a:e2:88:76:cd: c7:dc:af:03:82:3e:90:9b:99:69:37:77:6c:ec:97:68:73:98: 83:d5:00:c5:d1:1b:85:3e:d3:ce:29:36:88:3e:19:fe:99:ad: e1:3b:9b:1c:f0:14:55:4f:3f:24:ed:bd:8a:cb:97:f7:c6:55: 6b:1b:16:3c:6f:85:f3:ed:9b:0b:01:d5:a4:31:94:f8:3e:3e: 4f:14:84:a7:52:64:c6:22:2d:01:fa:88:28:b8:3a:98:df:7f: 15:b6:ba:24:48:bf:ca:be:a3:8f:95:ad:46:08:69:20:32:8d: 78:39:80:1a:b6:37:44:22:74:19:c9:4e:84:09:4e:e7:e2:2f: e2:3e:ab:10:60:46:49:a5:94:4e:41:11:1a:f8:fc:1b:4e:ef: cc:8c:cf:5f:32:ca:02:28:23:11:65:dd:34:18:77:ba:a9:ca: 21:5e:8b:9c:89:d5:96:ce:11:ee:21:4f:22:b8:04:e6:b4:f9: a3:f2:4b:38:e0:2b:d0:9a:2a:42:bf:4e:21:8e:fa:53:6a:0a: a5:77:5b:43:3b:85:d1:1d:ea:3b:6e:52:90:14:55:c8:8b:11: 30:95:f5:50:d7:cd:09:37:be:42:37:06:02:9b:98:f9:59:5f: d1:31:f0:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPAni4yL8XjTY1MIXDXqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Yjc3MGVhYzhhNzM2M2Y0Y2I4YTg4YzJlMzZlMmQ2OTRi MzkwNjgwHhcNMjUxMjI0MTIwMTEwWhcNMjUxMjI1MTIwMTEwWjAzMTEwLwYDVQQD Eyg3ZTdlYWIzMzg3ZmZmMDEyMDk5MzY3YWMxODQzYTBlNjMwNGZlNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnL2Z4B+wbyqtegIDEMQLNdkrlZ9 HChIw6UQZ/rD9YcqJ04hHd1PUyNKORxYg57TPQAvn5B3lv1n0qnuMgQpaQYXCMyC 9UCay1/ndvZgMzhlTDnvrEQ06p6xg0Hj9ScCVOSwrGXFVilnliR2imq/9sZ5lT4H N+mZIpyJ9mqhjejg52xt5EObvhv6JbLjIONj5hM0y/FOALWlqv9vpYwDZdpfnUhL fQPhZRLvojYCgUuiIN2sFIW5guzvMqqAnjlaaFrLAnPxIg7SrGOIxnObOq5V1qxZ 5DMzKgUFIf2gzoL+qs8Vbi0XM4jRwPyYwtM4Ezt5YcsVwX3vtI9pdCPhuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5+qzOH//ASCZNnrBhDoOYwT+c6MB8GA1UdIwQY MBaAFEe3cOrIpzY/TLiojC424taUs5BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAt ZjdjNTM5ZmM2MDE4LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAtZjdjNTM5ZmM2MDE4 LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfArhVIq lAfFkh1ApnriiHbNx9yvA4I+kJuZaTd3bOyXaHOYg9UAxdEbhT7Tzik2iD4Z/pmt 4TubHPAUVU8/JO29isuX98ZVaxsWPG+F8+2bCwHVpDGU+D4+TxSEp1JkxiItAfqI KLg6mN9/Fba6JEi/yr6jj5WtRghpIDKNeDmAGrY3RCJ0GclOhAlO5+Iv4j6rEGBG SaWUTkERGvj8G07vzIzPXzLKAigjEWXdNBh3uqnKIV6LnInVls4R7iFPIrgE5rT5 o/JLOOAr0JoqQr9OIY76U2oKpXdbQzuF0R3qO25SkBRVyIsRMJX1UNfNCTe+QjcG ApuY+Vlf0THwGQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:47 2025 by rpki-client