This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft File: R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json) Hash identifier: kebNkKiZMTBUKBpVe0CuURHj5+Z3Ktg74t1zhSE/7K8= Subject key identifier: 3D:4B:D9:E3:8D:33:01:84:D3:28:E4:59:40:23:9D:B8:4A:43:7A:8D Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68 Certificate issuer: /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068 Certificate serial: 019B2F674C950A4779B5BC35E4D6E66C2640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:00:57 +0000 Manifest this update: Thu 18 Dec 2025 03:00:57 +0000 Manifest next update: Fri 19 Dec 2025 03:00:57 +0000 Files and hashes: 1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: fBi/1P0uadgbAdZppKosV14aOigWf+z35ScCvGCr93s=) 2: eUJqNeMrOG92tkRoE1eKe7bdKA0.roa (hash: ZH26TI2Lx95OhTyG7ufuoqyGvbD2mq8daN9NRoWVAZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:4c:95:0a:47:79:b5:bc:35:e4:d6:e6:6c:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068 Validity Not Before: Dec 18 03:00:57 2025 GMT Not After : Dec 19 03:00:57 2025 GMT Subject: CN=3d4bd9e38d330184d328e45940239db84a437a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:cf:ee:30:7c:4d:45:1b:26:7f:89:61:26: fa:6c:b1:8c:d4:77:b6:b0:4d:ff:dd:8b:0c:33:63: 91:33:40:33:98:c5:32:d1:83:d9:4e:d5:8f:c3:0b: be:88:5f:43:da:a1:5f:43:37:df:d2:74:96:fa:de: 52:11:28:56:f1:ac:89:2a:c6:e2:64:40:9e:3e:95: 33:c5:95:39:04:90:9e:b2:15:0b:d6:38:a7:80:ac: 03:1c:76:bc:69:20:d3:e2:73:a2:ec:71:e4:0b:59: a4:1d:cc:62:9d:be:c4:f0:b5:d4:31:ba:a9:d7:12: 57:4b:0a:7c:84:d6:d4:2a:93:c4:a6:fd:10:53:c6: e2:48:86:6f:76:0b:b0:b9:e3:34:6f:bf:74:b6:48: 56:69:23:d4:08:db:7b:ad:06:e6:c5:26:e8:7e:bb: 9b:74:2c:5d:b4:cd:60:35:fb:7a:15:52:f6:f5:ea: eb:ee:47:8a:41:6f:9e:ca:22:f9:28:ff:65:1b:b8: 73:aa:e6:ac:60:2d:1d:9f:ea:11:cd:d6:03:b9:2b: eb:9d:4b:3a:85:d2:91:63:28:9b:0d:65:e1:e0:bf: 39:5c:f2:05:b7:2e:2f:0e:a4:40:3c:07:88:6f:e1: 7b:c5:be:f9:24:19:5f:f7:6a:09:87:41:6e:87:c2: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4B:D9:E3:8D:33:01:84:D3:28:E4:59:40:23:9D:B8:4A:43:7A:8D X509v3 Authority Key Identifier: keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:42:09:1d:d7:4e:62:4c:ac:73:28:3a:07:8e:9a:1d:90:3f: b1:f2:2d:d6:53:f1:91:4a:01:fc:c5:7a:d5:88:85:ce:6c:91: 43:0b:26:f0:d0:1b:c5:32:72:56:d8:82:0b:ed:1e:cb:0a:a9: 80:65:7c:8a:0f:51:6c:00:ed:6c:43:ba:4f:f9:a3:aa:68:ad: 57:5b:60:0a:2e:9a:af:cb:e1:b3:5d:84:8c:e4:52:be:de:ec: 41:2f:57:37:cc:48:2c:1b:b6:97:3d:40:bd:10:82:b3:d4:c9: 3d:c9:75:fe:e6:15:01:95:c2:27:f6:87:ba:89:44:c3:57:14: 71:b3:a6:ba:d1:c7:e8:1b:66:f2:52:11:cd:da:89:b9:6d:0a: d2:e8:d5:4e:c8:84:0b:ea:91:4e:51:ce:a1:31:02:9c:29:38: 5a:61:eb:d0:8f:cb:18:13:ff:20:bd:c8:34:a6:38:df:a4:f1: 8d:ab:23:9a:7d:f5:a8:75:61:0c:09:d6:f1:56:3d:66:2f:42: 49:e6:36:82:77:f1:ee:cc:9f:00:08:1a:a6:0e:16:ef:78:3b: cb:00:37:aa:7d:6f:5c:e3:c5:0b:4d:34:69:a3:5b:cf:28:a6: 0e:98:db:b9:5a:23:a3:3c:44:0f:24:bd:3f:0a:f7:0b:6e:1a: 6f:e9:d5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ0yVCkd5tbw15NbmbCZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Yjc3MGVhYzhhNzM2M2Y0Y2I4YTg4YzJlMzZlMmQ2OTRi MzkwNjgwHhcNMjUxMjE4MDMwMDU3WhcNMjUxMjE5MDMwMDU3WjAzMTEwLwYDVQQD EygzZDRiZDllMzhkMzMwMTg0ZDMyOGU0NTk0MDIzOWRiODRhNDM3YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY3P7jB8TUUbJn+JYSb6bLGM1He2 sE3/3YsMM2ORM0AzmMUy0YPZTtWPwwu+iF9D2qFfQzff0nSW+t5SEShW8ayJKsbi ZECePpUzxZU5BJCeshUL1jingKwDHHa8aSDT4nOi7HHkC1mkHcxinb7E8LXUMbqp 1xJXSwp8hNbUKpPEpv0QU8biSIZvdguwueM0b790tkhWaSPUCNt7rQbmxSbofrub dCxdtM1gNft6FVL29err7keKQW+eyiL5KP9lG7hzquasYC0dn+oRzdYDuSvrnUs6 hdKRYyibDWXh4L85XPIFty4vDqRAPAeIb+F7xb75JBlf92oJh0Fuh8KlkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1L2eONMwGE0yjkWUAjnbhKQ3qNMB8GA1UdIwQY MBaAFEe3cOrIpzY/TLiojC424taUs5BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAt ZjdjNTM5ZmM2MDE4LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAtZjdjNTM5ZmM2MDE4 LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEIJHddO Ykyscyg6B46aHZA/sfIt1lPxkUoB/MV61YiFzmyRQwsm8NAbxTJyVtiCC+0eywqp gGV8ig9RbADtbEO6T/mjqmitV1tgCi6ar8vhs12EjORSvt7sQS9XN8xILBu2lz1A vRCCs9TJPcl1/uYVAZXCJ/aHuolEw1cUcbOmutHH6Btm8lIRzdqJuW0K0ujVTsiE C+qRTlHOoTECnCk4WmHr0I/LGBP/IL3INKY436Txjasjmn31qHVhDAnW8VY9Zi9C SeY2gnfx7syfAAgapg4W73g7ywA3qn1vXOPFC000aaNbzyimDpjbuVojozxEDyS9 Pwr3C24ab+nVUA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:12 2025 by rpki-client