This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json) Hash identifier: FhpTw7a2ShPTZOss8iwg9iTz+b3iG9hk/bn9tRhSe4s= Subject key identifier: 14:9C:E7:90:5C:E2:3A:13:3F:45:00:D1:0A:3F:96:55:9B:25:45:07 Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f Certificate serial: 019B59E36091E24977A189200D2E47515416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft Manifest number: 121D Signing time: Fri 26 Dec 2025 09:00:31 +0000 Manifest this update: Fri 26 Dec 2025 09:00:31 +0000 Manifest next update: Sat 27 Dec 2025 09:00:31 +0000 Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: wGPD2jhXNeFGs7zZuLbdQ9mD4fd5HGnuUvfDPpix0kA=) 2: prmNkNLNXxPUBZ53bykbtYiFoko.roa (hash: hBOLiexHlZdG3wt6SL4MOVEN8AgHHkXNkc6zKLyvdD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:60:91:e2:49:77:a1:89:20:0d:2e:47:51:54:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f Validity Not Before: Dec 26 09:00:31 2025 GMT Not After : Dec 27 09:00:31 2025 GMT Subject: CN=149ce7905ce23a133f4500d10a3f96559b254507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:77:4a:e7:f6:25:f1:72:8c:80:e0:65:60: 9c:51:71:59:91:e0:69:b1:ec:ef:bd:c7:50:25:c3: 5b:44:a5:90:99:ba:15:65:67:e0:10:8a:6a:1c:24: d4:cf:ff:49:41:52:ca:dc:1e:66:1c:9e:a8:bd:6c: 2c:56:4a:43:8c:3f:d1:8a:63:c5:04:ae:fe:3b:27: 68:4e:d2:57:a3:38:93:ae:11:ee:f4:74:bf:a8:dc: 06:63:14:90:50:ec:53:43:a4:5b:cb:be:aa:ac:2d: d8:58:54:0b:de:cc:98:e1:c1:68:2f:c9:5c:28:83: d4:7a:4b:2b:0f:24:12:6b:a5:26:8d:09:b2:de:49: 3c:f8:09:f3:cb:1b:06:c4:13:91:01:09:5e:78:6d: 1c:fc:30:ae:14:24:52:b2:05:10:9a:16:04:8b:5a: 3d:ea:21:14:52:bf:fc:b6:bd:b8:37:9e:01:df:c7: c8:fd:3f:28:57:07:b1:da:bc:77:1b:5b:ad:9c:9d: 65:20:2c:b3:06:2e:9c:8a:4e:df:b2:90:20:43:4f: b5:ff:b5:3e:ac:34:86:fb:45:e6:93:32:86:75:22: e5:6c:76:9f:9a:28:ca:4d:73:c1:90:e4:d8:e8:a9: a2:cf:2f:e5:33:f4:0e:8f:7e:89:6e:ea:ad:53:2c: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9C:E7:90:5C:E2:3A:13:3F:45:00:D1:0A:3F:96:55:9B:25:45:07 X509v3 Authority Key Identifier: keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:41:3e:6b:84:1c:2e:7d:d3:23:cc:8f:83:cd:6c:15:0b: 71:52:3e:40:e8:76:3c:82:fd:27:c6:4c:ba:56:ca:e8:e6:c9: bd:fe:4f:70:8e:e6:fd:13:aa:d7:7b:a7:6a:27:25:2c:44:48: 94:db:99:b0:59:bd:5c:1d:fe:38:72:cc:36:98:32:a1:f5:d3: 5a:10:bb:bc:95:e5:b9:b4:e2:59:f0:86:a4:87:c2:8e:ba:03: 85:47:67:bf:bd:52:34:8b:70:1b:a9:29:c2:cd:9e:6e:ea:ff: ed:0a:c0:e2:7c:a6:08:70:67:44:7b:f4:4d:d2:19:51:e7:07: 87:bf:e6:b2:f6:1b:d5:5f:b0:d8:2e:56:81:0d:8a:cb:4a:c1: 80:a0:db:dc:86:e8:6d:04:69:85:18:89:65:ba:a9:f1:6b:d2: 40:dd:a9:a0:df:70:b6:3f:05:0e:8b:4c:64:34:01:b7:fd:a3: a8:f6:dd:84:4b:d7:94:b7:d1:d9:49:68:7a:af:73:92:86:b3: 3e:61:f7:1b:f6:19:27:ad:e4:ff:30:61:88:74:1e:6f:e6:dd: 56:58:4c:97:fe:79:17:21:7f:6e:2e:34:4d:c6:37:08:5b:88: 2a:37:36:f2:20:18:b8:08:d2:df:64:16:ab:24:0f:b7:c7:18: 72:d4:ae:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42CR4kl3oYkgDS5HUVQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YjgwY2FhOTdjMTMxNDdkNjgwYzgwOTc2ZjhhNGIxNWNh ZGUwNGYwHhcNMjUxMjI2MDkwMDMxWhcNMjUxMjI3MDkwMDMxWjAzMTEwLwYDVQQD EygxNDljZTc5MDVjZTIzYTEzM2Y0NTAwZDEwYTNmOTY1NTliMjU0NTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwut3Suf2JfFyjIDgZWCcUXFZkeBp sezvvcdQJcNbRKWQmboVZWfgEIpqHCTUz/9JQVLK3B5mHJ6ovWwsVkpDjD/RimPF BK7+OydoTtJXoziTrhHu9HS/qNwGYxSQUOxTQ6Rby76qrC3YWFQL3syY4cFoL8lc KIPUeksrDyQSa6UmjQmy3kk8+AnzyxsGxBORAQleeG0c/DCuFCRSsgUQmhYEi1o9 6iEUUr/8tr24N54B38fI/T8oVwex2rx3G1utnJ1lICyzBi6cik7fspAgQ0+1/7U+ rDSG+0XmkzKGdSLlbHafmijKTXPBkOTY6Kmizy/lM/QOj36JbuqtUyyPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSc55Bc4joTP0UA0Qo/llWbJUUHMB8GA1UdIwQY MBaAFEe4DKqXwTFH1oDICXb4pLFcreBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAt MTBlMjRlOWQwZmE3LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAtMTBlMjRlOWQwZmE3 LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGztBPmuE HC590yPMj4PNbBULcVI+QOh2PIL9J8ZMulbK6ObJvf5PcI7m/ROq13unaiclLERI lNuZsFm9XB3+OHLMNpgyofXTWhC7vJXlubTiWfCGpIfCjroDhUdnv71SNItwG6kp ws2ebur/7QrA4nymCHBnRHv0TdIZUecHh7/msvYb1V+w2C5WgQ2Ky0rBgKDb3Ibo bQRphRiJZbqp8WvSQN2poN9wtj8FDotMZDQBt/2jqPbdhEvXlLfR2Uloeq9zkoaz PmH3G/YZJ63k/zBhiHQeb+bdVlhMl/55FyF/bi40TcY3CFuIKjc28iAYuAjS32QW qyQPt8cYctSuww== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client