This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json) Hash identifier: hw3305RZ6zeM9sSDY+mB0lqqLjq7Gcyn0JMuEjrS6fA= Subject key identifier: 01:12:18:23:A1:35:5E:FA:1E:66:5A:A1:B8:AB:42:C5:A0:B2:4B:A5 Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb Certificate serial: 019AF12E2CAD8F88EA3FB52EF0CB3CC295D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: Mo9dIPQLQfXASmWkg8vG9I6KnorTzfcAgwSk8hgmwx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2c:ad:8f:88:ea:3f:b5:2e:f0:cb:3c:c2:95:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=01121823a1355efa1e665aa1b8ab42c5a0b24ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:41:e8:b1:0e:5b:dd:30:4f:cd:6b:7e:5e: 2d:47:3e:ac:86:a2:77:23:c3:d7:2b:e8:0b:29:7c: cb:eb:ae:13:fe:56:37:55:bf:f8:8d:79:02:88:6c: ef:41:bb:15:43:0b:ec:c4:2c:ea:8b:21:f3:01:bc: 1e:0d:26:f9:6c:bb:b4:7e:72:d7:80:27:04:8e:94: 60:e1:eb:74:dc:52:50:ed:b1:d8:26:60:cb:2b:d2: 6c:cd:50:b7:7b:21:f7:98:fb:7e:c1:cc:ec:42:51: ec:68:51:6a:af:3d:bc:f2:cb:86:ab:8d:50:81:93: 57:08:fd:27:ab:64:c7:c1:af:74:0c:34:a0:78:1a: 2c:99:ca:69:3a:b0:a2:54:50:6b:2e:8c:0a:79:9c: 13:2b:83:0d:03:a5:82:0e:d0:e2:4c:a3:fa:72:6b: 8d:98:7b:80:ec:d0:b3:c8:04:4c:e0:1f:83:5e:0c: bd:7d:47:69:f8:5c:13:84:f5:81:03:df:e8:20:2b: eb:01:62:42:c8:c2:b1:3e:ba:96:1e:65:6d:84:d2: 78:fd:c2:bc:55:61:2f:60:04:45:81:ea:37:88:03: db:1d:e5:03:e9:21:d7:7b:1b:04:0b:47:79:3c:54: 68:47:b8:01:c7:e0:15:2c:32:24:15:b8:1f:44:30: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:18:23:A1:35:5E:FA:1E:66:5A:A1:B8:AB:42:C5:A0:B2:4B:A5 X509v3 Authority Key Identifier: keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:59:f7:99:8f:05:9e:75:98:5f:eb:84:85:61:02:20:ff:eb: a4:57:02:a9:b1:13:9b:56:46:99:ac:ed:f4:81:9d:11:34:c2: 80:13:8e:ef:33:43:3b:72:79:8c:32:15:c7:ae:d3:fd:7c:1e: 72:46:7b:0c:db:c7:0a:ab:35:2f:d9:54:99:0d:fc:67:2c:d2: 4a:34:4d:4b:dd:a8:8a:d3:1a:50:88:6b:2e:dc:56:04:d6:e5: bf:bd:58:9f:59:11:cc:0e:34:d8:5b:f0:ba:8c:ce:d1:1f:97: 12:57:ed:1f:63:d1:96:3b:03:27:2d:32:4f:f2:4e:da:3d:5e: 2e:d7:23:9a:29:94:5b:50:b0:0f:bc:5c:f5:1e:a5:29:17:b6: 9f:da:24:89:03:cd:fe:33:c6:dd:e2:0a:9e:26:42:56:60:69: d2:65:32:2a:7a:6b:bc:af:89:56:fd:aa:2b:51:43:d9:41:2d: 91:c2:1f:1e:85:af:25:1c:7f:a4:16:16:ca:ee:9b:ea:ca:ab: 6c:ed:6a:15:47:12:d2:15:de:d7:49:40:e7:13:3a:27:8f:13: 8b:e2:27:d0:01:99:80:77:82:c9:83:af:b6:be:68:2c:4b:e6: dd:70:4f:dd:98:da:ea:e0:c9:7c:56:e7:00:ef:52:c6:38:00: c5:f1:6c:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiytj4jqP7Uu8Ms8wpXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Yjk0ZGIxYjNkZWI0ODA1YWQyNjE1NTRiYWU2YmE1ZmE3 NDA4Y2IwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EygwMTEyMTgyM2ExMzU1ZWZhMWU2NjVhYTFiOGFiNDJjNWEwYjI0YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLhB6LEOW90wT81rfl4tRz6shqJ3 I8PXK+gLKXzL664T/lY3Vb/4jXkCiGzvQbsVQwvsxCzqiyHzAbweDSb5bLu0fnLX gCcEjpRg4et03FJQ7bHYJmDLK9JszVC3eyH3mPt+wczsQlHsaFFqrz288suGq41Q gZNXCP0nq2THwa90DDSgeBosmcppOrCiVFBrLowKeZwTK4MNA6WCDtDiTKP6cmuN mHuA7NCzyARM4B+DXgy9fUdp+FwThPWBA9/oICvrAWJCyMKxPrqWHmVthNJ4/cK8 VWEvYARFgeo3iAPbHeUD6SHXexsEC0d5PFRoR7gBx+AVLDIkFbgfRDA89wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAESGCOhNV76HmZaobirQsWgskulMB8GA1UdIwQY MBaAFEe5TbGz3rSAWtJhVUuua6X6dAjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdsTnNiUGV0SUJhMG1GVlM2NXJwZnAwQ01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzFmOGUtZTdjMC00MjY0LWJhZWEt MmMyOTRlYzgxMjk3LzEvUjdsTnNiUGV0SUJhMG1GVlM2NXJwZnAwQ01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84NzFmOGUtZTdjMC00MjY0LWJhZWEtMmMyOTRlYzgxMjk3 LzEvUjdsTnNiUGV0SUJhMG1GVlM2NXJwZnAwQ01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFn3mY8F nnWYX+uEhWECIP/rpFcCqbETm1ZGmazt9IGdETTCgBOO7zNDO3J5jDIVx67T/Xwe ckZ7DNvHCqs1L9lUmQ38ZyzSSjRNS92oitMaUIhrLtxWBNblv71Yn1kRzA402Fvw uozO0R+XElftH2PRljsDJy0yT/JO2j1eLtcjmimUW1CwD7xc9R6lKRe2n9okiQPN /jPG3eIKniZCVmBp0mUyKnprvK+JVv2qK1FD2UEtkcIfHoWvJRx/pBYWyu6b6sqr bO1qFUcS0hXe10lA5xM6J48Ti+In0AGZgHeCyYOvtr5oLEvm3XBP3Zja6uDJfFbn AO9SxjgAxfFssA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:58 2025 by rpki-client