This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json) Hash identifier: VMWBi6Jmr9pgKSiJS6iZJfOFBhD/By5t/i3OgFD/wSk= Subject key identifier: 0F:DD:E7:94:EF:6B:9D:E3:8A:67:A3:BD:66:FD:C2:E2:82:5A:88:DB Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4 Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4 Certificate serial: 019AF12CC59226DE3B7805D2BDC8FE9D7651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft Manifest number: 1279 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=) 2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: Y8XM2EBYtF8UODEaFB+SZRgjBz4UZTPB7CU39o17FPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c5:92:26:de:3b:78:05:d2:bd:c8:fe:9d:76:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=0fdde794ef6b9de38a67a3bd66fdc2e2825a88db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:f2:9b:33:88:b6:61:1b:32:4b:46:71:30: e8:60:cd:2a:2d:6b:84:ba:f2:1d:3f:ed:15:22:d1: 37:0c:62:86:13:17:be:f0:f0:92:5a:54:82:27:49: c6:96:7e:fd:70:33:fe:45:9a:dd:7c:da:c6:04:15: 6c:fa:ea:ca:18:55:ad:6f:d4:2c:c0:f3:1d:b5:e6: 8c:5f:f3:ce:88:95:d6:09:1d:fb:f0:67:c8:86:4e: e7:34:49:31:45:82:cf:7d:41:57:22:8a:2c:6c:01: 4b:6b:59:e4:4d:9c:10:ca:2b:aa:3f:82:c5:11:b6: cb:d8:0c:85:ee:ee:ed:88:4b:78:79:71:ad:5c:16: a4:0c:5f:5a:77:fe:87:20:a6:86:2d:5f:1d:73:95: 07:52:4a:b7:d5:3d:54:1e:1b:b7:d5:01:f1:18:26: 8d:b8:81:8e:5e:07:20:a2:0e:4f:41:81:ba:0b:05: 92:ac:00:12:32:58:03:26:66:9f:5c:92:40:81:3b: 36:27:69:6e:69:86:7a:96:9b:7a:a2:57:c2:d2:fd: 75:54:f8:d6:c7:84:a0:80:8d:7f:43:fc:0e:ee:70: fa:82:71:6d:7c:8b:7d:ec:e9:7d:89:0b:51:1a:36: 31:38:d5:c8:15:d1:de:af:16:2e:dd:5e:50:b3:f9: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DD:E7:94:EF:6B:9D:E3:8A:67:A3:BD:66:FD:C2:E2:82:5A:88:DB X509v3 Authority Key Identifier: keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:80:30:8e:8a:cb:e6:52:f2:d8:8b:17:34:1f:85:93:84:4b: 8d:f0:e4:8e:4b:fb:1a:26:76:50:f8:ee:94:f0:55:99:65:6f: 0c:d4:c6:ed:92:14:75:56:63:8c:c2:3a:7a:30:48:68:95:e1: 71:bb:ff:95:8c:d8:18:a6:99:20:6c:eb:5e:eb:44:92:64:99: 06:4b:bb:04:9a:09:45:47:75:f9:3c:c5:4c:1e:e2:46:be:83: 19:36:7f:1f:4f:0a:07:d1:de:3d:40:a8:26:da:ab:b6:6a:f7: 9b:b3:fb:84:7a:56:6b:c8:40:1f:4d:10:f8:d8:43:ac:5b:54: 1b:ec:14:e5:45:95:51:90:ac:79:8e:0b:99:f0:ca:50:d2:7a: ed:9f:f1:1b:c2:70:dc:3a:e8:2d:64:63:87:c0:cd:c0:17:4f: d8:c4:76:09:ad:c1:12:6c:e0:ae:1d:a0:3f:74:04:f2:41:03: 98:02:df:d8:e3:0a:1b:50:07:a9:67:4e:05:8f:cc:0a:5f:0a: 8b:cc:d9:fc:b0:5f:4f:cb:8d:db:70:df:a3:61:8d:27:78:a8: d2:fd:6d:a7:e2:e0:95:09:bf:79:bc:01:4f:75:6b:73:f0:84: 57:fb:0c:91:de:4a:10:4e:d9:20:d4:18:16:30:68:d6:51:2b: 92:6d:03:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMWSJt47eAXSvcj+nXZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGVjMzk0MjgxM2QzZjM1MzZjMTI3ZTFhODIxYmZiZWY2 ZGIyYTQwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD EygwZmRkZTc5NGVmNmI5ZGUzOGE2N2EzYmQ2NmZkYzJlMjgyNWE4OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowHymzOItmEbMktGcTDoYM0qLWuE uvIdP+0VItE3DGKGExe+8PCSWlSCJ0nGln79cDP+RZrdfNrGBBVs+urKGFWtb9Qs wPMdteaMX/POiJXWCR378GfIhk7nNEkxRYLPfUFXIoosbAFLa1nkTZwQyiuqP4LF EbbL2AyF7u7tiEt4eXGtXBakDF9ad/6HIKaGLV8dc5UHUkq31T1UHhu31QHxGCaN uIGOXgcgog5PQYG6CwWSrAASMlgDJmafXJJAgTs2J2luaYZ6lpt6olfC0v11VPjW x4SggI1/Q/wO7nD6gnFtfIt97Ol9iQtRGjYxONXIFdHerxYu3V5Qs/nCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/d55Tva53jimejvWb9wuKCWojbMB8GA1UdIwQY MBaAFIOOw5QoE9PzU2wSfhqCG/vvbbKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUt Yjg1MzU2N2RhMGVhLzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUtYjg1MzU2N2RhMGVh LzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4AwjorL 5lLy2IsXNB+Fk4RLjfDkjkv7GiZ2UPjulPBVmWVvDNTG7ZIUdVZjjMI6ejBIaJXh cbv/lYzYGKaZIGzrXutEkmSZBku7BJoJRUd1+TzFTB7iRr6DGTZ/H08KB9HePUCo Jtqrtmr3m7P7hHpWa8hAH00Q+NhDrFtUG+wU5UWVUZCseY4LmfDKUNJ67Z/xG8Jw 3DroLWRjh8DNwBdP2MR2Ca3BEmzgrh2gP3QE8kEDmALf2OMKG1AHqWdOBY/MCl8K i8zZ/LBfT8uN23Dfo2GNJ3io0v1tp+LglQm/ebwBT3Vrc/CEV/sMkd5KEE7ZINQY FjBo1lErkm0DWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:31 2025 by rpki-client