This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json) Hash identifier: yjUND9zniQeLlx4yiVYf3b/miANpr+JjyCzlCUN3EQ8= Subject key identifier: 5C:DA:31:97:86:B6:0E:2F:8C:2F:3B:6E:FE:C4:00:96:1E:B0:D9:E3 Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Certificate serial: 019AF19B9550193F0AD679295D8B2057283F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: qgKjhL5sHkpKxuKeh6L9crYwsEAVAXvOQdUCMqpB6so=) 2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:95:50:19:3f:0a:d6:79:29:5d:8b:20:57:28:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=5cda319786b60e2f8c2f3b6efec400961eb0d9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:dc:fb:27:f4:c6:62:de:4e:be:bb:ab:6a: 13:cb:cf:f4:8f:89:67:0b:ba:f4:70:70:72:88:5a: 66:24:d9:d8:9e:57:3d:5b:01:14:2f:69:70:06:4b: 87:db:75:57:51:5e:e7:ca:35:2e:57:f9:0e:f3:af: e7:11:8d:d5:e3:12:45:0c:64:fe:35:86:67:58:36: c2:10:c3:71:36:5d:c5:52:4b:be:32:0a:a7:57:57: 69:d9:8a:35:5f:a8:50:d1:d4:66:c1:b8:8f:11:08: d8:a6:df:38:a1:3d:e2:b8:e1:ec:a5:ac:68:f1:3a: c5:83:4c:0b:f2:60:0e:82:72:21:f3:8d:97:de:62: 50:cd:e2:6a:db:df:2c:5f:1f:cc:2b:de:51:79:ef: 0b:f7:4d:74:82:64:18:57:fd:f9:ca:6b:97:48:47: 73:d0:94:36:da:4a:86:a6:ff:4e:87:cf:34:e3:7b: 6a:ff:e2:be:ad:66:f5:fa:34:b7:d6:e5:bb:d6:d6: 0c:17:b6:00:04:32:74:39:61:b5:d4:1d:b9:46:2f: 7e:c1:63:20:b8:13:cf:91:55:d0:92:87:be:78:57: f6:b1:d1:87:3f:3d:7c:96:fc:42:9b:03:4f:8f:f0: 0b:8e:73:9a:ee:f9:6a:31:c7:2b:f6:7f:3e:50:27: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DA:31:97:86:B6:0E:2F:8C:2F:3B:6E:FE:C4:00:96:1E:B0:D9:E3 X509v3 Authority Key Identifier: keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d5:e3:5c:7c:a9:13:c4:91:f8:68:18:47:2d:17:31:93:b6: ce:f5:e5:d5:f1:94:aa:9b:3a:9f:26:e5:25:72:8b:c0:95:7e: 6d:8d:2f:42:15:ae:c1:8c:17:be:f1:6b:90:c3:46:9b:5c:3a: 29:12:66:60:8c:c9:0f:ec:de:dd:3d:e2:7e:47:e4:46:41:c3: b4:ec:0b:8a:1b:8a:b0:73:9f:4f:b5:5c:6b:42:ac:e8:9d:ed: ed:1e:a0:88:bd:0d:15:b3:61:14:99:d7:e0:43:47:45:50:db: a2:6d:cf:22:88:65:64:a4:13:50:34:14:ae:23:43:10:a7:59: 91:d8:9c:e6:ae:26:a8:e4:3e:bd:8e:d6:4c:54:b5:89:c6:19: 59:df:17:96:a0:44:cd:a0:88:79:59:f7:a6:39:1c:fc:06:04: ee:3b:4d:24:aa:33:f7:84:b5:28:ee:a8:65:59:e4:c1:ba:09: fc:3a:c5:c1:fc:fb:82:a4:47:ff:76:75:30:ff:1c:d2:fd:af: f3:75:89:f7:16:1f:a3:ba:05:85:02:23:ce:5a:fb:8f:b6:45: 2b:d7:2e:f8:b9:e3:f0:8d:1a:1e:05:bf:5d:f2:6f:8a:07:c1: 6b:ac:b6:c9:2e:fd:dc:af:ba:e3:06:8a:7f:49:df:fb:01:bb: 1e:29:cf:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5VQGT8K1nkpXYsgVyg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4 MjFiZTYwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg1Y2RhMzE5Nzg2YjYwZTJmOGMyZjNiNmVmZWM0MDA5NjFlYjBkOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43zc+yf0xmLeTr67q2oTy8/0j4ln C7r0cHByiFpmJNnYnlc9WwEUL2lwBkuH23VXUV7nyjUuV/kO86/nEY3V4xJFDGT+ NYZnWDbCEMNxNl3FUku+MgqnV1dp2Yo1X6hQ0dRmwbiPEQjYpt84oT3iuOHspaxo 8TrFg0wL8mAOgnIh842X3mJQzeJq298sXx/MK95Ree8L9010gmQYV/35ymuXSEdz 0JQ22kqGpv9Oh88043tq/+K+rWb1+jS31uW71tYMF7YABDJ0OWG11B25Ri9+wWMg uBPPkVXQkoe+eFf2sdGHPz18lvxCmwNPj/ALjnOa7vlqMccr9n8+UCdhKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzaMZeGtg4vjC87bv7EAJYesNnjMB8GA1UdIwQY MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt NTlhMGM1ZmY2NTA1LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1 LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNXjXHyp E8SR+GgYRy0XMZO2zvXl1fGUqps6nyblJXKLwJV+bY0vQhWuwYwXvvFrkMNGm1w6 KRJmYIzJD+ze3T3ifkfkRkHDtOwLihuKsHOfT7Vca0Ks6J3t7R6giL0NFbNhFJnX 4ENHRVDbom3PIohlZKQTUDQUriNDEKdZkdic5q4mqOQ+vY7WTFS1icYZWd8XlqBE zaCIeVn3pjkc/AYE7jtNJKoz94S1KO6oZVnkwboJ/DrFwfz7gqRH/3Z1MP8c0v2v 83WJ9xYfo7oFhQIjzlr7j7ZFK9cu+Lnj8I0aHgW/XfJvigfBa6y2yS793K+64waK f0nf+wG7HinPZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:36 2025 by rpki-client