This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json) Hash identifier: eyFw33vjFOjSNtRW+6Q6fkcS7phPg2Yc7wRGVwlUJK8= Subject key identifier: 84:23:19:F1:18:51:61:92:69:A3:6E:B0:D3:1A:EE:20:E8:E4:23:7C Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Certificate serial: 019BAD9394ACF5B16CD45D4662E87CC20DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft Manifest number: 0760 Signing time: Sun 11 Jan 2026 15:01:28 +0000 Manifest this update: Sun 11 Jan 2026 15:01:28 +0000 Manifest next update: Mon 12 Jan 2026 15:01:28 +0000 Files and hashes: 1: 6gLUsBkG-831LvTIKcOMB6anenc.roa (hash: 0P++i0Px+QNc8KIJpDVgXYAXiNKGP7NiivE2XFE/A70=) 2: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: 11Zg6H1FGXMPEtogB9dj9lGasVCb9kmx+gARDhm6yv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:94:ac:f5:b1:6c:d4:5d:46:62:e8:7c:c2:0d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Validity Not Before: Jan 11 15:01:28 2026 GMT Not After : Jan 12 15:01:28 2026 GMT Subject: CN=842319f11851619269a36eb0d31aee20e8e4237c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:93:af:f6:37:10:a2:26:73:b4:a6:c7:91: 2d:b5:01:92:5a:0d:e9:02:66:a4:5b:e7:d5:f0:40: f6:0e:1b:59:dc:b4:a7:34:4b:2b:a8:53:66:53:86: b9:9e:ca:64:7c:55:a8:c1:f1:36:ac:c4:bc:b5:7c: 47:3d:84:ca:bb:d5:69:a4:71:de:5b:b1:32:ec:54: 08:e2:b8:18:92:08:a8:88:43:52:9b:0f:d4:1b:cc: 95:bc:f0:50:94:91:08:2c:33:6f:22:c9:cf:85:fa: 49:37:2d:9c:72:a7:ea:51:56:8a:ad:9b:85:56:eb: 9d:de:3b:37:b3:a2:87:fc:0f:de:03:74:98:e4:17: d3:c9:37:48:3b:0a:35:f1:62:86:b0:fb:5f:b1:d6: 24:4d:46:8a:ff:02:58:41:08:85:0c:5f:a1:88:88: 00:43:ef:50:73:fc:b4:cc:a2:c3:84:5c:db:06:64: a9:cc:13:3d:47:60:0c:44:f4:e1:78:3b:3a:7e:89: 5f:f7:56:f0:a6:4c:a5:af:b0:a7:bd:0c:16:16:48: f8:f0:d6:5f:26:4a:b9:79:fe:24:a3:2c:d4:c1:34: 07:09:47:0c:94:6f:bf:2b:78:6c:a4:2a:6f:10:cf: b3:a2:10:04:56:88:a6:8e:5c:11:2a:79:c5:bb:5f: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:19:F1:18:51:61:92:69:A3:6E:B0:D3:1A:EE:20:E8:E4:23:7C X509v3 Authority Key Identifier: keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8e:4c:d1:57:31:2d:03:c4:74:09:cc:32:53:c6:ae:f9:40: 85:09:03:bc:23:5f:ff:23:cf:33:1a:55:02:83:fe:2a:17:c5: e8:91:da:6b:8f:e0:b1:ef:b7:f3:93:2f:8f:a4:45:12:32:cb: e4:0f:97:2e:ba:6c:d4:72:4f:a4:ba:3c:78:78:9e:27:3d:42: 25:54:91:30:b9:65:c3:d3:2f:34:2e:41:e6:ef:b7:55:93:b1: 2d:aa:16:4c:29:6a:34:15:8c:75:82:77:ce:f0:8b:d4:64:92: e0:7c:d6:71:b2:56:e5:3d:f1:11:44:8f:7b:92:3c:b7:70:68: 12:b9:03:88:45:e8:2f:68:ec:d5:4d:da:c0:38:46:b9:2f:e9: b7:09:82:70:e9:c5:ac:8b:82:69:87:40:bf:aa:a5:e6:96:70: 02:e2:5d:98:94:62:f2:40:97:3b:bf:a4:03:9a:51:5a:65:75: 5f:13:5a:01:56:c9:48:52:1d:cc:1a:03:c4:83:62:7b:d5:a2: d1:93:22:9e:54:7b:de:3a:13:3f:96:cd:33:be:3e:70:7f:f2: f9:64:59:5f:48:51:16:89:3a:12:d8:6e:df:8b:1b:57:6d:56: 88:d4:44:b7:18:33:48:4d:5e:22:6e:53:92:2e:de:96:e2:d8: 25:21:ca:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutk5Ss9bFs1F1GYuh8wg3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx OTJhYzcwHhcNMjYwMTExMTUwMTI4WhcNMjYwMTEyMTUwMTI4WjAzMTEwLwYDVQQD Eyg4NDIzMTlmMTE4NTE2MTkyNjlhMzZlYjBkMzFhZWUyMGU4ZTQyMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJSTr/Y3EKImc7Smx5EttQGSWg3p AmakW+fV8ED2DhtZ3LSnNEsrqFNmU4a5nspkfFWowfE2rMS8tXxHPYTKu9VppHHe W7Ey7FQI4rgYkgioiENSmw/UG8yVvPBQlJEILDNvIsnPhfpJNy2ccqfqUVaKrZuF Vuud3js3s6KH/A/eA3SY5BfTyTdIOwo18WKGsPtfsdYkTUaK/wJYQQiFDF+hiIgA Q+9Qc/y0zKLDhFzbBmSpzBM9R2AMRPTheDs6folf91bwpkylr7CnvQwWFkj48NZf Jkq5ef4koyzUwTQHCUcMlG+/K3hspCpvEM+zohAEVoimjlwRKnnFu1+kdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQjGfEYUWGSaaNusNMa7iDo5CN8MB8GA1UdIwQY MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5 LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArY5M0Vcx LQPEdAnMMlPGrvlAhQkDvCNf/yPPMxpVAoP+KhfF6JHaa4/gse+385Mvj6RFEjLL 5A+XLrps1HJPpLo8eHieJz1CJVSRMLllw9MvNC5B5u+3VZOxLaoWTClqNBWMdYJ3 zvCL1GSS4HzWcbJW5T3xEUSPe5I8t3BoErkDiEXoL2js1U3awDhGuS/ptwmCcOnF rIuCaYdAv6ql5pZwAuJdmJRi8kCXO7+kA5pRWmV1XxNaAVbJSFIdzBoDxINie9Wi 0ZMinlR73joTP5bNM74+cH/y+WRZX0hRFok6Ethu34sbV21WiNREtxgzSE1eIm5T ki7eluLYJSHKRg== -----END CERTIFICATE-----Generated at Sun Jan 11 18:52:09 2026 by rpki-client