This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json) Hash identifier: Ocs2Nee1YA0+hs/bJhbf0u9o5Pp+0KcwsTCyiEk4JV8= Subject key identifier: F4:55:3A:A2:9B:05:6D:44:87:91:1C:AD:7B:4A:1E:65:C3:F6:2F:09 Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Certificate serial: 019BF507342E2D783DAF1406ED5CFDB0586D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft Manifest number: 0785 Signing time: Sun 25 Jan 2026 12:00:48 +0000 Manifest this update: Sun 25 Jan 2026 12:00:48 +0000 Manifest next update: Mon 26 Jan 2026 12:00:48 +0000 Files and hashes: 1: 6gLUsBkG-831LvTIKcOMB6anenc.roa (hash: 0P++i0Px+QNc8KIJpDVgXYAXiNKGP7NiivE2XFE/A70=) 2: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: HgdR+ZkEcE8pJi688UImJe6xvjGkrWw8njcQgabyQTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:34:2e:2d:78:3d:af:14:06:ed:5c:fd:b0:58:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Validity Not Before: Jan 25 12:00:48 2026 GMT Not After : Jan 26 12:00:48 2026 GMT Subject: CN=f4553aa29b056d4487911cad7b4a1e65c3f62f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:a0:18:8b:49:72:11:ef:11:0c:38:43:89: a7:bf:98:00:a1:2f:99:a8:45:2c:7a:73:e8:99:df: 14:10:e5:26:91:fb:80:c0:d7:dd:75:79:7f:cd:e4: 02:15:cc:4f:5d:25:68:12:f7:17:f1:01:7e:2d:53: c6:3e:6f:63:f1:f6:d4:f7:50:dc:31:f4:dc:d6:6f: 29:82:16:ef:0f:d7:6e:3f:dc:1f:d9:4a:6d:52:5b: f1:a6:b0:db:aa:8b:a0:ef:79:44:38:3f:5c:84:81: f2:92:b7:82:d7:23:c3:5e:32:f9:1c:f7:53:84:fa: 3f:7a:b0:79:54:84:b6:d1:eb:cc:3f:f5:07:83:0f: 7e:f8:c6:57:e1:35:d9:8e:3e:77:ef:c2:a2:a9:07: b5:5f:09:5b:94:ad:39:d9:3d:a9:4b:5a:a6:61:fb: cb:e8:95:76:89:d7:df:2f:54:32:f0:a2:16:e9:38: ed:90:05:d3:d0:be:4c:16:21:71:51:7f:26:5c:e2: 12:ee:82:dc:ca:83:0e:0a:82:50:17:74:50:0b:4a: d3:a1:36:9c:3c:64:b2:fe:6e:a8:dd:0c:7a:6e:20: ab:62:3d:2a:c0:59:b4:0f:7b:d4:02:d8:01:84:f6: a0:4f:98:8c:d6:6e:e7:d4:7a:e7:d7:42:02:12:b8: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:55:3A:A2:9B:05:6D:44:87:91:1C:AD:7B:4A:1E:65:C3:F6:2F:09 X509v3 Authority Key Identifier: keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bc:86:46:95:68:2c:5e:7f:14:59:2e:7b:59:c7:f8:1c:e2: a8:aa:02:6c:02:64:3c:2f:3f:7a:e8:53:15:f3:38:cd:42:76: 13:57:07:d8:95:0f:e4:eb:89:b7:10:8f:b0:4f:fd:c5:5e:2d: 09:9e:b3:45:d1:0b:14:a6:5f:49:81:0a:91:f1:66:57:59:ce: c0:7e:ae:11:d3:16:e7:f4:af:4b:62:12:4f:67:65:4d:be:2d: 0a:a1:99:af:83:dc:e9:34:4a:5e:5e:69:72:e5:e4:0a:72:00: e5:4f:54:44:ef:a2:93:79:22:65:15:8f:78:1c:06:63:f2:30: b6:4a:cc:2b:8a:00:07:2d:6a:a3:5a:f5:2a:ee:4e:8a:db:42: 4d:c4:7d:42:f3:6b:f1:cb:65:d0:2d:ab:88:d9:f7:db:8b:d5: 5f:38:df:be:aa:a3:7d:1a:bf:1f:95:cd:c0:af:5f:8a:62:d5: ca:d2:d0:11:1b:e3:06:c0:bc:ae:42:99:4c:97:d3:5a:35:0a: d3:e4:73:77:9c:9c:bf:b8:95:71:ac:73:98:df:b5:d3:86:15: 19:62:06:4b:25:d0:68:81:14:ad:0d:87:09:f6:2e:14:bc:b1: 2d:1e:f4:62:8a:06:c5:be:7a:d9:fd:3e:34:2d:ac:1e:71:ea: f4:64:9b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzQuLXg9rxQG7Vz9sFhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx OTJhYzcwHhcNMjYwMTI1MTIwMDQ4WhcNMjYwMTI2MTIwMDQ4WjAzMTEwLwYDVQQD EyhmNDU1M2FhMjliMDU2ZDQ0ODc5MTFjYWQ3YjRhMWU2NWMzZjYyZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGSgGItJchHvEQw4Q4mnv5gAoS+Z qEUsenPomd8UEOUmkfuAwNfddXl/zeQCFcxPXSVoEvcX8QF+LVPGPm9j8fbU91Dc MfTc1m8pghbvD9duP9wf2UptUlvxprDbqoug73lEOD9chIHykreC1yPDXjL5HPdT hPo/erB5VIS20evMP/UHgw9++MZX4TXZjj5378KiqQe1XwlblK052T2pS1qmYfvL 6JV2idffL1Qy8KIW6TjtkAXT0L5MFiFxUX8mXOIS7oLcyoMOCoJQF3RQC0rToTac PGSy/m6o3Qx6biCrYj0qwFm0D3vUAtgBhPagT5iM1m7n1Hrn10ICErggBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRVOqKbBW1Eh5EcrXtKHmXD9i8JMB8GA1UdIwQY MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5 LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbyGRpVo LF5/FFkue1nH+BziqKoCbAJkPC8/euhTFfM4zUJ2E1cH2JUP5OuJtxCPsE/9xV4t CZ6zRdELFKZfSYEKkfFmV1nOwH6uEdMW5/SvS2IST2dlTb4tCqGZr4Pc6TRKXl5p cuXkCnIA5U9URO+ik3kiZRWPeBwGY/IwtkrMK4oABy1qo1r1Ku5OittCTcR9QvNr 8ctl0C2riNn324vVXzjfvqqjfRq/H5XNwK9fimLVytLQERvjBsC8rkKZTJfTWjUK 0+Rzd5ycv7iVcaxzmN+104YVGWIGSyXQaIEUrQ2HCfYuFLyxLR70YooGxb562f0+ NC2sHnHq9GSbhw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:39 2026 by rpki-client