This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json) Hash identifier: lTVGgc9QE7d726BHeNOpNiuKpO2MBmgKy3E2SULBZS0= Subject key identifier: C3:DC:A3:0B:0A:81:F4:02:FD:BF:E1:20:6A:01:15:AD:D6:A1:81:6A Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2 Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2 Certificate serial: 019AF3F7BF3AE70E6FBDB25775D4434567FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft Manifest number: 0C69 Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: yOP/YOYPI8ZfEDd82TA+utd/2/nIIHMaU3cpwjm1iy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:bf:3a:e7:0e:6f:bd:b2:57:75:d4:43:45:67:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2 Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=c3dca30b0a81f402fdbfe1206a0115add6a1816a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:82:78:ce:1a:d4:0b:5b:6e:38:8a:57:d6: db:fc:ea:4e:72:48:85:59:16:74:84:4b:bb:17:ca: a2:2a:2a:2e:cb:90:39:9f:0a:89:73:f6:9b:26:42: c2:79:44:10:36:af:d0:26:ad:15:d0:21:19:3a:61: 48:bb:f2:57:d2:b0:74:45:06:18:f9:a4:a4:f0:3d: e5:64:4d:5a:14:a1:02:09:90:1d:e5:76:d6:13:25: 0c:65:bb:54:8b:b9:e7:4d:37:dc:3c:5e:4f:ee:6e: a7:04:51:f1:b5:c4:1b:aa:13:98:b9:80:49:09:c3: a4:18:e6:02:39:45:88:0a:41:da:33:98:ef:46:82: 7e:4b:a0:2f:02:20:82:c2:5f:df:80:e7:01:3c:7d: d9:1a:a9:70:41:19:3e:95:04:7f:1f:ca:1f:51:2b: 65:a1:96:ab:ba:fc:c0:b5:05:00:0f:48:3f:0d:f3: 78:e4:37:1a:39:5c:e1:fc:97:5a:b1:82:03:67:bd: db:f5:9d:90:f6:b9:5e:77:04:44:f1:fb:5e:3c:5d: ee:59:9a:f3:3e:ef:96:a9:d8:a2:72:58:a1:6e:dc: 1c:9f:8a:be:5b:b0:ba:b7:b4:9f:50:7d:73:19:71: 9e:02:5b:0d:cb:e9:9e:4d:c1:ac:ed:da:43:08:75: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:A3:0B:0A:81:F4:02:FD:BF:E1:20:6A:01:15:AD:D6:A1:81:6A X509v3 Authority Key Identifier: keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:86:3c:7b:22:6b:d1:f5:66:27:dc:0d:06:16:61:04:06:28: 3b:e2:22:87:e5:4e:ee:3f:e1:17:3a:8c:f9:3a:78:6d:15:75: 1d:8b:56:6d:e0:63:0f:70:0b:04:52:5a:03:8e:b4:55:a5:b7: 3b:8a:dc:79:ee:75:71:43:49:56:8a:18:57:a1:74:48:2a:7a: cd:07:1f:b7:f6:1d:ee:a1:83:ae:a8:e4:33:d2:8c:27:63:83: 28:c3:50:d1:bd:b5:80:a3:8c:c6:8c:61:38:9d:69:b7:66:f7: 91:42:f6:fe:f8:3b:8b:04:5c:85:41:30:e0:81:73:53:20:5a: a3:fb:13:e8:9e:ad:6f:8c:8e:0a:3e:0f:05:44:47:46:9a:21: 99:b0:33:44:2b:ae:6d:2b:d2:8b:c4:db:ba:c3:bb:17:bb:d9: b7:4e:ce:ef:3f:78:e7:95:84:f0:3a:bd:a1:bf:66:30:0a:8a: ac:c3:ef:58:59:60:b3:7d:ca:7b:71:bb:da:ac:bb:1f:01:bf: 79:85:66:ff:0f:1e:14:7e:70:ba:21:87:5f:b4:17:27:f1:5b: 47:81:a8:cd:d2:01:be:c9:25:b8:42:0e:94:29:ba:45:09:05: 62:0c:39:c0:78:51:8d:c3:d0:f2:64:c0:5a:fa:3f:4f:83:4e: 38:81:35:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97865w5vvbJXddRDRWf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGVmZjFiYTJkMmY3NTkyYTQ0ZDIxMzNkMjA3YjI5M2Uy NDFhYzIwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD EyhjM2RjYTMwYjBhODFmNDAyZmRiZmUxMjA2YTAxMTVhZGQ2YTE4MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeWCeM4a1AtbbjiKV9bb/OpOckiF WRZ0hEu7F8qiKiouy5A5nwqJc/abJkLCeUQQNq/QJq0V0CEZOmFIu/JX0rB0RQYY +aSk8D3lZE1aFKECCZAd5XbWEyUMZbtUi7nnTTfcPF5P7m6nBFHxtcQbqhOYuYBJ CcOkGOYCOUWICkHaM5jvRoJ+S6AvAiCCwl/fgOcBPH3ZGqlwQRk+lQR/H8ofUStl oZaruvzAtQUAD0g/DfN45DcaOVzh/JdasYIDZ73b9Z2Q9rledwRE8ftePF3uWZrz Pu+Wqdiiclihbtwcn4q+W7C6t7SfUH1zGXGeAlsNy+meTcGs7dpDCHX3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPcowsKgfQC/b/hIGoBFa3WoYFqMB8GA1UdIwQY MBaAFEYO/xui0vdZKkTSEz0geyk+JBrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQt YTNiMTc5OGU0MTMxLzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQtYTNiMTc5OGU0MTMx LzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYY8eyJr 0fVmJ9wNBhZhBAYoO+Iih+VO7j/hFzqM+Tp4bRV1HYtWbeBjD3ALBFJaA460VaW3 O4rcee51cUNJVooYV6F0SCp6zQcft/Yd7qGDrqjkM9KMJ2ODKMNQ0b21gKOMxoxh OJ1pt2b3kUL2/vg7iwRchUEw4IFzUyBao/sT6J6tb4yOCj4PBURHRpohmbAzRCuu bSvSi8TbusO7F7vZt07O7z9455WE8Dq9ob9mMAqKrMPvWFlgs33Ke3G72qy7HwG/ eYVm/w8eFH5wuiGHX7QXJ/FbR4GozdIBvskluEIOlCm6RQkFYgw5wHhRjcPQ8mTA Wvo/T4NOOIE1og== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:53 2025 by rpki-client