This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json) Hash identifier: 8L4iz+i3xn4ZzYZD8UKjiHLa6RHZgNjDM2H1aFFylow= Subject key identifier: FA:F8:5D:2A:4D:3E:21:83:8B:BC:83:7C:F2:6C:81:03:45:2D:8B:D7 Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89 Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89 Certificate serial: 019B33444DD021F191A2134891AD67810DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft Manifest number: 12F3 Signing time: Thu 18 Dec 2025 21:01:12 +0000 Manifest this update: Thu 18 Dec 2025 21:01:12 +0000 Manifest next update: Fri 19 Dec 2025 21:01:12 +0000 Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: Y+t8i3urcQ6Bpf29sGGVooPgt5fzLkF+FOBobmUQaXc=) 2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:4d:d0:21:f1:91:a2:13:48:91:ad:67:81:0d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89 Validity Not Before: Dec 18 21:01:12 2025 GMT Not After : Dec 19 21:01:12 2025 GMT Subject: CN=faf85d2a4d3e21838bbc837cf26c8103452d8bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:a8:7c:8e:85:b0:ee:33:fe:b8:ca:5c:15: fb:55:dc:69:20:7d:08:ae:f5:4b:c2:90:d5:c1:5b: dd:6a:2a:eb:bb:0e:e5:d1:8b:d9:6d:5e:53:e3:5f: 68:7b:04:b1:04:bc:0f:6d:a5:79:11:d4:e2:39:69: 29:88:3c:ef:98:5a:db:67:db:2e:f7:cc:aa:71:4b: 01:b4:61:43:0a:ce:66:ce:af:0e:1c:25:c2:ea:92: 53:02:2b:6f:fc:02:ca:52:22:c7:d5:19:15:0f:2b: c4:80:86:46:79:1c:0f:29:c9:2c:26:76:7e:68:1a: 43:24:a8:0e:bb:0f:5a:fb:79:3e:2e:e9:b8:49:3b: 51:51:38:a1:2c:49:8b:63:16:d8:3b:05:12:c2:56: 91:f9:d9:68:a6:25:aa:f5:5e:a1:99:b5:71:6c:5e: 49:c4:10:aa:b0:de:bc:2a:cc:cd:c2:8a:c7:5e:72: c3:47:b7:fd:18:29:02:c4:5c:5b:d8:d6:9a:e7:0b: 78:a6:32:b3:ed:fb:a3:d5:80:35:19:75:bf:00:2f: 68:fd:a7:0d:37:99:3d:a0:02:ee:99:fb:54:44:f8: a8:2b:68:78:66:c6:c7:63:2c:38:41:c5:47:58:d7: f6:44:b5:76:27:ae:6c:09:42:13:b1:d7:f0:bf:59: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F8:5D:2A:4D:3E:21:83:8B:BC:83:7C:F2:6C:81:03:45:2D:8B:D7 X509v3 Authority Key Identifier: keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:09:2d:b4:8e:96:6a:eb:5f:54:b2:bb:e9:4f:8f:c2:f6:62: b1:2c:97:67:11:00:92:e8:04:a8:7c:dd:97:76:2f:b7:ab:69: b9:01:7b:a5:db:8d:19:d6:69:4e:13:c2:fa:d8:30:b0:1f:e8: 3b:d6:e3:0e:4a:0b:4d:d9:b7:ce:ac:d6:ba:81:f6:20:67:64: 5b:ee:eb:fc:14:40:55:c4:bc:35:ca:a0:28:44:52:b0:d1:78: b3:d3:27:1b:c2:db:ad:8c:49:0b:17:4f:f2:85:f3:e6:c6:ee: 59:6a:35:8c:6b:9d:87:db:18:93:17:ae:d4:4d:a7:61:bf:5b: 8f:d7:55:62:43:39:11:59:9b:15:63:85:1d:c1:56:94:9c:8c: 19:19:64:81:53:73:97:5f:b5:94:3a:c8:f4:65:60:3a:c0:fc: a9:58:d3:e5:e8:4e:c8:7d:49:02:d6:25:e5:14:34:ac:53:61: 40:af:bf:c7:c4:c4:91:ca:1f:1b:ac:e4:c7:1e:7b:a2:46:89: f1:b8:9c:6b:77:d4:71:66:ee:fd:e8:e5:fd:40:e7:6a:78:4d: 6b:45:b5:29:ed:5f:37:fd:df:4a:17:58:af:a8:40:20:4e:30: 4d:55:10:7a:02:09:04:ea:37:ee:ab:cc:e6:20:c0:e1:8c:f3: 12:85:8a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRE3QIfGRohNIka1ngQ3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGVkMWEwMTUzNzYyYTkyMmU1NWUwZjk0OGNkMWE1NDEx YzdhODkwHhcNMjUxMjE4MjEwMTEyWhcNMjUxMjE5MjEwMTEyWjAzMTEwLwYDVQQD EyhmYWY4NWQyYTRkM2UyMTgzOGJiYzgzN2NmMjZjODEwMzQ1MmQ4YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxqofI6FsO4z/rjKXBX7VdxpIH0I rvVLwpDVwVvdairruw7l0YvZbV5T419oewSxBLwPbaV5EdTiOWkpiDzvmFrbZ9su 98yqcUsBtGFDCs5mzq8OHCXC6pJTAitv/ALKUiLH1RkVDyvEgIZGeRwPKcksJnZ+ aBpDJKgOuw9a+3k+Lum4STtRUTihLEmLYxbYOwUSwlaR+dlopiWq9V6hmbVxbF5J xBCqsN68KszNworHXnLDR7f9GCkCxFxb2Naa5wt4pjKz7fuj1YA1GXW/AC9o/acN N5k9oALumftURPioK2h4ZsbHYyw4QcVHWNf2RLV2J65sCUITsdfwv1nJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPr4XSpNPiGDi7yDfPJsgQNFLYvXMB8GA1UdIwQY MBaAFAeO0aAVN2KpIuVeD5SM0aVBHHqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2Mjgt YjYyZGI3NzJiYmZhLzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2MjgtYjYyZGI3NzJiYmZh LzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAkttI6W autfVLK76U+PwvZisSyXZxEAkugEqHzdl3Yvt6tpuQF7pduNGdZpThPC+tgwsB/o O9bjDkoLTdm3zqzWuoH2IGdkW+7r/BRAVcS8NcqgKERSsNF4s9MnG8LbrYxJCxdP 8oXz5sbuWWo1jGudh9sYkxeu1E2nYb9bj9dVYkM5EVmbFWOFHcFWlJyMGRlkgVNz l1+1lDrI9GVgOsD8qVjT5ehOyH1JAtYl5RQ0rFNhQK+/x8TEkcofG6zkxx57okaJ 8bica3fUcWbu/ejl/UDnanhNa0W1Ke1fN/3fShdYr6hAIE4wTVUQegIJBOo37qvM 5iDA4YzzEoWKSw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:45:52 2025 by rpki-client