This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json) Hash identifier: 3ph2bbBkhuyCbcmB2Tv6qiL8ZRRkSSEN7M2AVwZYPNg= Subject key identifier: B2:37:4C:BA:5A:FE:53:FA:2E:93:34:20:ED:1F:0D:3B:30:A3:29:74 Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f Certificate serial: 019AF577FACF20D16725D3AC1DCE0A32D75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft Manifest number: 11E9 Signing time: Sat 06 Dec 2025 21:01:12 +0000 Manifest this update: Sat 06 Dec 2025 21:01:12 +0000 Manifest next update: Sun 07 Dec 2025 21:01:12 +0000 Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: Q73RCkZ3XOtdqn70P30RaRmVza7zG7Z2OkDqJNVLM5M=) 2: prmNkNLNXxPUBZ53bykbtYiFoko.roa (hash: hBOLiexHlZdG3wt6SL4MOVEN8AgHHkXNkc6zKLyvdD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fa:cf:20:d1:67:25:d3:ac:1d:ce:0a:32:d7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f Validity Not Before: Dec 6 21:01:12 2025 GMT Not After : Dec 7 21:01:12 2025 GMT Subject: CN=b2374cba5afe53fa2e933420ed1f0d3b30a32974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:2a:cc:43:c9:36:e5:82:28:60:58:36:67: 62:ff:cc:c8:77:ad:98:d6:02:40:cb:c5:3f:e4:cd: 21:99:f5:1b:8f:5e:69:ff:61:0f:1f:66:21:d8:0f: 00:db:72:9c:92:7a:3b:f8:7e:1f:21:8c:2f:9c:e9: 6d:e8:3a:b2:f6:ff:ff:ef:07:60:10:21:14:5d:be: bf:ca:c3:1c:54:49:ac:99:f0:0e:c3:35:7c:43:9f: 0f:6c:96:bf:be:89:08:22:ae:94:4e:55:d8:92:80: 81:2b:85:9c:93:c3:f0:38:f7:61:fd:c3:75:ac:17: 21:24:be:12:64:36:c6:20:8a:ab:fa:d1:eb:67:1f: f3:5d:18:93:95:a7:d0:47:c6:b9:29:5c:a3:f0:c9: 69:23:cc:24:47:86:76:89:b3:3b:75:cd:23:04:5d: 14:63:10:14:0f:6e:d8:50:ab:89:b7:f8:90:d3:c8: 36:40:f0:f8:b5:84:fd:2a:a0:64:8d:be:ab:31:28: df:ed:9f:a0:7c:90:42:06:bd:a9:3f:4f:68:ce:7b: 45:b1:74:ff:64:d7:31:ae:2d:7a:e6:d3:e4:50:b6: ef:49:88:fb:e6:66:27:13:59:d1:68:65:35:90:8a: 77:62:c6:65:a5:a4:09:7a:63:90:10:27:49:c1:90: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:37:4C:BA:5A:FE:53:FA:2E:93:34:20:ED:1F:0D:3B:30:A3:29:74 X509v3 Authority Key Identifier: keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:92:6a:c9:41:4f:d1:e7:3e:5a:3a:9c:36:25:a0:14:4f: 31:f7:01:f2:af:a0:bc:8f:a2:3f:17:13:e5:91:f9:59:1a:2b: 0b:90:d2:5a:48:2c:ce:99:a4:c6:a3:ef:71:09:af:f4:64:79: fd:d5:9d:35:0b:dc:d3:53:8e:19:a1:3f:6b:69:9f:69:78:12: 59:7a:bd:2d:3f:d6:d0:49:bc:64:be:f4:52:0f:19:49:33:c5: 64:09:a6:09:b1:ec:0a:5a:c3:a1:aa:25:36:8c:06:de:31:bd: ca:82:e7:d1:e7:57:28:e3:a5:d4:30:98:f8:aa:c3:93:29:bf: 23:96:31:e8:1d:3c:d1:b1:2d:b0:43:de:14:c7:12:0e:8a:96: d4:ac:5a:14:28:b5:bd:c2:1d:9e:5d:c2:45:e9:3a:0d:f4:8e: a8:9a:01:a1:8a:65:94:f7:b2:95:46:ab:f5:f6:de:cf:d3:99: 63:a7:8c:8e:b2:fb:1d:2a:3a:4a:3f:11:00:6b:e7:b7:40:40: 9f:45:57:2c:61:8d:bb:c5:10:e3:0f:3f:b6:b4:63:bc:94:39: 4d:5b:f1:18:4c:5b:d1:56:35:00:a1:cc:34:dc:2e:0a:d8:e9: 63:bf:56:83:47:2a:2b:9c:4d:7b:b6:f2:58:1a:5c:c5:8d:f4: ca:d9:b8:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/rPINFnJdOsHc4KMtddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YjgwY2FhOTdjMTMxNDdkNjgwYzgwOTc2ZjhhNGIxNWNh ZGUwNGYwHhcNMjUxMjA2MjEwMTEyWhcNMjUxMjA3MjEwMTEyWjAzMTEwLwYDVQQD EyhiMjM3NGNiYTVhZmU1M2ZhMmU5MzM0MjBlZDFmMGQzYjMwYTMyOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3wqzEPJNuWCKGBYNmdi/8zId62Y 1gJAy8U/5M0hmfUbj15p/2EPH2Yh2A8A23Kckno7+H4fIYwvnOlt6Dqy9v//7wdg ECEUXb6/ysMcVEmsmfAOwzV8Q58PbJa/vokIIq6UTlXYkoCBK4Wck8PwOPdh/cN1 rBchJL4SZDbGIIqr+tHrZx/zXRiTlafQR8a5KVyj8MlpI8wkR4Z2ibM7dc0jBF0U YxAUD27YUKuJt/iQ08g2QPD4tYT9KqBkjb6rMSjf7Z+gfJBCBr2pP09ozntFsXT/ ZNcxri165tPkULbvSYj75mYnE1nRaGU1kIp3YsZlpaQJemOQECdJwZDg/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI3TLpa/lP6LpM0IO0fDTswoyl0MB8GA1UdIwQY MBaAFEe4DKqXwTFH1oDICXb4pLFcreBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAt MTBlMjRlOWQwZmE3LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAtMTBlMjRlOWQwZmE3 LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUOSaslB T9HnPlo6nDYloBRPMfcB8q+gvI+iPxcT5ZH5WRorC5DSWkgszpmkxqPvcQmv9GR5 /dWdNQvc01OOGaE/a2mfaXgSWXq9LT/W0Em8ZL70Ug8ZSTPFZAmmCbHsClrDoaol NowG3jG9yoLn0edXKOOl1DCY+KrDkym/I5Yx6B080bEtsEPeFMcSDoqW1KxaFCi1 vcIdnl3CRek6DfSOqJoBoYpllPeylUar9fbez9OZY6eMjrL7HSo6Sj8RAGvnt0BA n0VXLGGNu8UQ4w8/trRjvJQ5TVvxGExb0VY1AKHMNNwuCtjpY79Wg0cqK5xNe7by WBpcxY30ytm40g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:58:05 2025 by rpki-client