This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json) Hash identifier: gdf+jT/oIDlDkdzl8N1uU9fxsaLq8Mh8IH0QtvIKILw= Subject key identifier: 1D:6A:F6:AC:60:6A:C9:9B:CF:54:8D:61:19:F8:B8:0F:FF:6E:5B:6D Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac Certificate serial: 019B3456D9CE6F70FC1306FA2017ABE39792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft Manifest number: 0428 Signing time: Fri 19 Dec 2025 02:01:05 +0000 Manifest this update: Fri 19 Dec 2025 02:01:05 +0000 Manifest next update: Sat 20 Dec 2025 02:01:05 +0000 Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: qFXiW0QTUIvwmUoKJ3wLIF+LBv5IYYmZ3+Swj6aEjFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:d9:ce:6f:70:fc:13:06:fa:20:17:ab:e3:97:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac Validity Not Before: Dec 19 02:01:05 2025 GMT Not After : Dec 20 02:01:05 2025 GMT Subject: CN=1d6af6ac606ac99bcf548d6119f8b80fff6e5b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:f9:92:8f:a9:b9:94:64:a1:ef:74:1e:32: 73:a0:1f:b8:5f:7e:28:ee:f1:26:a7:4f:81:c5:5b: f1:b6:6f:ae:23:0c:63:8c:70:25:8e:e2:60:ed:3b: 68:24:10:7c:42:ce:8a:8a:58:12:ca:01:83:ee:18: 1b:f7:31:c4:d5:db:03:3f:eb:a5:45:4e:6c:e0:e4: 3e:cb:64:c1:d6:52:62:7e:70:da:2b:2a:95:69:8c: 5b:76:a5:23:76:7e:1e:2d:36:c3:fe:b3:c3:3a:a2: 32:6c:88:a3:fa:14:a9:b8:cb:43:3e:a5:89:17:59: 93:94:c2:59:31:51:cf:d3:bf:29:c9:41:8d:de:93: 6f:a6:4e:20:74:3f:a8:54:e4:16:44:1a:59:31:3a: 10:f7:0b:31:44:7c:db:ee:4a:f6:8f:d5:fa:dd:32: 1a:46:57:15:25:9e:e4:a7:71:9f:f3:77:08:14:db: bb:40:96:89:db:9b:a6:78:d4:5a:80:cd:e1:4a:9b: c8:59:52:24:80:2e:32:2e:cd:ad:f4:58:7a:a4:69: be:7e:4c:8b:bb:10:43:e0:43:07:d6:1b:af:59:69: 70:cb:52:0b:02:3a:f5:11:e9:e7:68:58:f3:6f:23: 75:11:b9:61:25:f8:9c:ef:09:4c:aa:ff:e7:c9:55: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6A:F6:AC:60:6A:C9:9B:CF:54:8D:61:19:F8:B8:0F:FF:6E:5B:6D X509v3 Authority Key Identifier: keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:20:b4:ba:41:30:96:25:70:e5:59:db:a2:63:d8:ba:67:78: 8b:4d:01:82:85:cc:b4:76:89:33:21:55:3f:e4:e3:35:92:ed: 23:75:5c:5e:70:ba:af:b2:4b:5f:01:2e:7c:23:79:a1:e7:ff: 28:4f:86:35:99:95:7b:8c:55:3c:93:0c:60:5d:ff:ee:f3:f2: d8:bb:13:27:f6:1c:3e:18:b7:58:9e:7c:5d:d9:4a:ca:68:1c: bc:df:42:7c:7e:d2:2d:73:b6:8c:c2:2e:43:2c:93:ff:32:f8: 93:e9:bc:d9:d8:e0:1f:59:ea:9f:ed:bd:4f:cb:46:25:73:9e: 70:03:62:f2:41:b5:70:78:cf:6a:14:db:4a:b0:c3:eb:68:ca: 05:f3:bf:c9:41:e4:fd:ad:5c:bc:df:f8:1a:fa:6f:18:f0:78: 63:35:7a:bb:db:04:dd:ca:65:65:e7:c8:70:d8:ce:9d:c6:1b: df:01:93:a9:1f:cf:ab:06:35:86:54:44:cc:1a:7c:d2:9a:a1: 58:8a:79:7b:60:4b:d9:f3:eb:24:70:eb:1c:23:84:de:e6:04: db:50:8c:57:b1:6e:79:10:f4:8a:01:c3:8f:95:e4:e1:2d:70: 3b:4e:9a:fa:9c:11:c8:2c:48:84:ce:b5:96:30:05:88:8b:39: 4d:a3:cb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VtnOb3D8Ewb6IBer45eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YjcxODcyZWQ2NDVjOTY2NmQ1NTExYWJjNzhmMDdjNGQz YWI4YWMwHhcNMjUxMjE5MDIwMTA1WhcNMjUxMjIwMDIwMTA1WjAzMTEwLwYDVQQD EygxZDZhZjZhYzYwNmFjOTliY2Y1NDhkNjExOWY4YjgwZmZmNmU1YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojH5ko+puZRkoe90HjJzoB+4X34o 7vEmp0+BxVvxtm+uIwxjjHAljuJg7TtoJBB8Qs6KilgSygGD7hgb9zHE1dsDP+ul RU5s4OQ+y2TB1lJifnDaKyqVaYxbdqUjdn4eLTbD/rPDOqIybIij+hSpuMtDPqWJ F1mTlMJZMVHP078pyUGN3pNvpk4gdD+oVOQWRBpZMToQ9wsxRHzb7kr2j9X63TIa RlcVJZ7kp3Gf83cIFNu7QJaJ25umeNRagM3hSpvIWVIkgC4yLs2t9Fh6pGm+fkyL uxBD4EMH1huvWWlwy1ILAjr1EennaFjzbyN1EblhJfic7wlMqv/nyVXxpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1q9qxgasmbz1SNYRn4uA//blttMB8GA1UdIwQY MBaAFEe3GHLtZFyWZtVRGrx48HxNOrisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEt ZWM4NGRkNWM2OWJmLzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEtZWM4NGRkNWM2OWJm LzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCC0ukEw liVw5VnbomPYumd4i00BgoXMtHaJMyFVP+TjNZLtI3VcXnC6r7JLXwEufCN5oef/ KE+GNZmVe4xVPJMMYF3/7vPy2LsTJ/YcPhi3WJ58XdlKymgcvN9CfH7SLXO2jMIu QyyT/zL4k+m82djgH1nqn+29T8tGJXOecANi8kG1cHjPahTbSrDD62jKBfO/yUHk /a1cvN/4GvpvGPB4YzV6u9sE3cplZefIcNjOncYb3wGTqR/PqwY1hlREzBp80pqh WIp5e2BL2fPrJHDrHCOE3uYE21CMV7FueRD0igHDj5Xk4S1wO06a+pwRyCxIhM61 ljAFiIs5TaPLSQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:50 2025 by rpki-client