This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json) Hash identifier: zVbQsyRJx5Tnyi/oegIu5FUbPeOikwggFuMSeVRZxXw= Subject key identifier: 0E:A2:8A:3D:A6:86:8A:B4:E8:4B:F6:0D:4D:18:EF:20:A6:CB:02:6D Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Certificate serial: 019AF35298884F2B0E91F57A93EAB0FBD518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft Manifest number: 06FF Signing time: Sat 06 Dec 2025 11:01:07 +0000 Manifest this update: Sat 06 Dec 2025 11:01:07 +0000 Manifest next update: Sun 07 Dec 2025 11:01:07 +0000 Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: E0hKmsFyp8uaGJhHSdk8RF4CgBvG6quQw9C1SfNS3CU=) 2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:98:88:4f:2b:0e:91:f5:7a:93:ea:b0:fb:d5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Validity Not Before: Dec 6 11:01:07 2025 GMT Not After : Dec 7 11:01:07 2025 GMT Subject: CN=0ea28a3da6868ab4e84bf60d4d18ef20a6cb026d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:3c:a9:23:dd:65:32:ff:50:20:80:1f:b4: f4:ba:34:e9:53:50:99:93:b5:81:26:a2:3a:c7:ab: bf:26:21:a2:16:35:72:b2:ba:5c:4f:bf:7e:0d:61: 0c:f7:91:fc:cd:2b:6f:e4:2e:2c:0f:dd:84:c2:d1: 0a:42:df:5c:45:1d:35:eb:2b:cf:a1:e4:e4:b7:65: e8:73:13:a5:d7:6e:6d:39:95:6a:cc:33:65:5c:a1: 47:05:37:82:b6:34:27:58:71:54:e2:20:5e:37:8f: df:1b:0b:21:27:0c:c0:60:54:d8:06:1e:48:18:8a: c8:ce:7e:92:eb:05:c3:89:33:96:90:74:38:94:2e: 45:a5:05:52:e1:45:bf:86:09:18:2a:d7:38:ec:2f: 58:2c:dd:7e:55:d9:88:55:65:74:1d:89:07:07:32: 4e:c4:7d:52:7f:fe:4f:95:29:e8:5f:37:00:3d:68: 0c:68:59:51:0a:22:98:18:eb:86:5e:b1:c6:38:8b: 54:48:47:1c:26:03:3d:54:fb:ea:30:f9:ad:ae:fb: 30:31:11:27:9d:5c:be:e3:70:c8:48:30:f8:e9:6e: 10:71:f3:9a:89:ea:ac:cf:15:34:ca:2f:8d:75:44: be:19:32:d5:74:53:3d:3b:ab:5c:06:60:a8:e1:3c: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A2:8A:3D:A6:86:8A:B4:E8:4B:F6:0D:4D:18:EF:20:A6:CB:02:6D X509v3 Authority Key Identifier: keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:65:42:85:0f:bb:27:dc:21:8e:88:c8:ce:30:ab:64:2f:71: f0:5b:b1:51:8c:ee:4b:36:cb:1c:79:f2:a2:b0:1f:b1:d4:ed: 1f:6d:64:e7:15:e5:a8:ae:ff:01:fe:8f:e9:f7:4d:b0:5e:21: b5:d2:cd:f5:93:4f:95:74:fc:9c:4f:00:41:cc:00:7b:43:47: 2b:c4:25:e4:ec:23:10:44:e3:12:f7:94:a2:b4:c2:16:ef:a5: b7:47:82:a1:3e:a1:f4:9a:74:83:1d:f7:8d:b8:50:2c:55:ed: 7e:26:1e:05:51:e2:be:c4:7d:4f:96:33:6c:b0:38:36:57:0f: bf:77:2f:81:57:35:1a:e9:0f:e6:b6:47:fe:e2:98:29:58:c7: a5:c8:a3:38:27:95:7a:a5:e5:00:5a:5b:55:45:d3:d0:7c:89: 25:63:a0:12:ac:7a:fc:03:05:69:38:0d:c6:24:a4:aa:ba:19: 43:b3:ca:89:28:70:b4:fe:e2:38:ce:9c:22:73:f4:47:55:2e: bc:a1:a9:a2:a5:e3:44:62:d1:8d:1e:98:b8:37:34:e2:a6:68: 1c:46:01:63:de:d8:a3:2b:8a:d7:83:63:3a:6c:a8:f3:06:13: fd:fe:80:e0:ba:02:ec:e6:ff:1c:75:a6:24:86:48:ee:43:f8: 82:62:12:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpiITysOkfV6k+qw+9UYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx OTJhYzcwHhcNMjUxMjA2MTEwMTA3WhcNMjUxMjA3MTEwMTA3WjAzMTEwLwYDVQQD EygwZWEyOGEzZGE2ODY4YWI0ZTg0YmY2MGQ0ZDE4ZWYyMGE2Y2IwMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSo8qSPdZTL/UCCAH7T0ujTpU1CZ k7WBJqI6x6u/JiGiFjVysrpcT79+DWEM95H8zStv5C4sD92EwtEKQt9cRR016yvP oeTkt2XocxOl125tOZVqzDNlXKFHBTeCtjQnWHFU4iBeN4/fGwshJwzAYFTYBh5I GIrIzn6S6wXDiTOWkHQ4lC5FpQVS4UW/hgkYKtc47C9YLN1+VdmIVWV0HYkHBzJO xH1Sf/5PlSnoXzcAPWgMaFlRCiKYGOuGXrHGOItUSEccJgM9VPvqMPmtrvswMREn nVy+43DISDD46W4QcfOaieqszxU0yi+NdUS+GTLVdFM9O6tcBmCo4TyR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6iij2mhoq06Ev2DU0Y7yCmywJtMB8GA1UdIwQY MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5 LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWVChQ+7 J9whjojIzjCrZC9x8FuxUYzuSzbLHHnyorAfsdTtH21k5xXlqK7/Af6P6fdNsF4h tdLN9ZNPlXT8nE8AQcwAe0NHK8Ql5OwjEETjEveUorTCFu+lt0eCoT6h9Jp0gx33 jbhQLFXtfiYeBVHivsR9T5YzbLA4NlcPv3cvgVc1GukP5rZH/uKYKVjHpcijOCeV eqXlAFpbVUXT0HyJJWOgEqx6/AMFaTgNxiSkqroZQ7PKiShwtP7iOM6cInP0R1Uu vKGpoqXjRGLRjR6YuDc04qZoHEYBY97YoyuK14NjOmyo8wYT/f6A4LoC7Ob/HHWm JIZI7kP4gmIS0A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:32 2025 by rpki-client