This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json) Hash identifier: JCLLbrHs6dsSQ774BjufLWEz2prE53ysZqsgi/ZgZYI= Subject key identifier: E3:5B:8E:29:79:D4:32:34:A5:12:02:8A:1D:A6:0C:30:1C:E2:02:DE Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Certificate serial: 019B390FA0A6F90D2FAD0017B5F909E8DF46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 00:01:23 +0000 Manifest this update: Sat 20 Dec 2025 00:01:23 +0000 Manifest next update: Sun 21 Dec 2025 00:01:23 +0000 Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: P469JBNCki8OyijxMidNmk05JV/sbxx7C1INfkz3y4k=) 2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:a0:a6:f9:0d:2f:ad:00:17:b5:f9:09:e8:df:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Validity Not Before: Dec 20 00:01:23 2025 GMT Not After : Dec 21 00:01:23 2025 GMT Subject: CN=e35b8e2979d43234a512028a1da60c301ce202de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:be:49:cf:33:53:68:3c:86:51:36:11:80: 6a:0b:77:93:34:43:5a:94:a2:0b:bd:e8:cb:19:d8: a6:f8:ef:37:a7:47:77:d6:e2:7d:b8:3e:28:a2:fe: 74:41:db:4e:b3:d9:58:ca:a8:71:38:65:10:a9:d2: 77:3c:a2:91:24:78:f7:07:71:0b:3a:b1:e5:03:9e: a7:f7:84:a9:ac:49:9a:87:d5:a1:98:1c:01:7e:fa: a2:a7:ab:5a:e2:8c:89:19:db:d0:f8:53:58:47:e5: f4:01:d2:30:2f:d7:4b:b4:31:e5:ff:e0:dd:02:bc: 94:23:d0:06:7b:c8:3e:2b:18:5d:4a:80:30:d5:58: 05:1d:f8:a9:29:82:0d:bd:e3:7c:7d:46:b7:70:bb: d7:e6:51:1e:93:e8:2c:0e:e2:9b:64:68:90:cc:76: 65:6a:ff:06:d3:77:af:ba:40:7f:da:d5:59:9d:41: f5:86:02:f2:e9:2d:56:98:38:96:e0:c6:76:ad:b9: 29:f0:3f:57:65:53:af:88:90:8b:49:12:8e:c7:7f: c0:5d:2d:1b:30:3d:e8:9e:b8:53:ab:d4:29:df:13: 13:ce:79:1f:ff:ba:cc:59:e4:c2:2f:9b:4b:c1:bb: c5:d9:1e:90:33:4e:97:e9:30:95:78:4e:77:a5:ef: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5B:8E:29:79:D4:32:34:A5:12:02:8A:1D:A6:0C:30:1C:E2:02:DE X509v3 Authority Key Identifier: keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ae:83:12:c5:71:33:9c:f8:16:d3:b8:ae:cf:da:e2:b9:b8: 87:b7:58:39:55:3f:42:fa:d6:64:87:5d:b6:c9:be:be:de:df: c7:e4:c6:52:d8:31:90:df:13:65:3a:e4:5a:1e:24:3e:de:a4: 12:7e:8f:b9:e1:32:ca:c6:6a:b9:e3:63:cf:04:ae:43:8c:62: 0e:6f:ad:96:a6:11:14:d5:3b:4f:37:18:ac:9f:71:ea:94:65: 28:b9:b0:62:e4:d2:3d:f7:80:4b:59:5a:2b:15:d2:0d:19:53: 03:b7:3a:29:4a:c3:33:50:ce:e7:bb:b5:09:a9:a1:1d:46:1c: 55:51:63:b5:3e:27:4b:c4:c8:ae:60:e8:1e:8c:2a:71:84:e7: ae:09:cf:e4:0f:48:1e:1b:66:8e:ec:49:8b:56:b9:34:6a:44: 90:03:6b:12:df:7a:97:04:dd:19:d1:74:58:1f:4c:92:96:63: 97:35:42:e8:52:2b:b4:03:cf:ae:71:92:32:d3:b7:96:c7:c8: e0:3d:92:1d:04:59:ca:d3:09:0e:4b:bd:91:ad:c0:6f:c6:32: a6:9c:b4:2b:6b:35:8f:fa:94:c8:f5:f1:90:7a:53:36:4c:e7: 58:1c:09:7e:88:11:17:73:3b:51:e9:68:b3:cf:5a:17:37:3b: 3c:6d:09:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6Cm+Q0vrQAXtfkJ6N9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4 MjFiZTYwHhcNMjUxMjIwMDAwMTIzWhcNMjUxMjIxMDAwMTIzWjAzMTEwLwYDVQQD EyhlMzViOGUyOTc5ZDQzMjM0YTUxMjAyOGExZGE2MGMzMDFjZTIwMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQu+Sc8zU2g8hlE2EYBqC3eTNENa lKILvejLGdim+O83p0d31uJ9uD4oov50QdtOs9lYyqhxOGUQqdJ3PKKRJHj3B3EL OrHlA56n94SprEmah9WhmBwBfvqip6ta4oyJGdvQ+FNYR+X0AdIwL9dLtDHl/+Dd AryUI9AGe8g+KxhdSoAw1VgFHfipKYINveN8fUa3cLvX5lEek+gsDuKbZGiQzHZl av8G03evukB/2tVZnUH1hgLy6S1WmDiW4MZ2rbkp8D9XZVOviJCLSRKOx3/AXS0b MD3onrhTq9Qp3xMTznkf/7rMWeTCL5tLwbvF2R6QM06X6TCVeE53pe9+NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONbjil51DI0pRICih2mDDAc4gLeMB8GA1UdIwQY MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt NTlhMGM1ZmY2NTA1LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1 LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK6DEsVx M5z4FtO4rs/a4rm4h7dYOVU/QvrWZIddtsm+vt7fx+TGUtgxkN8TZTrkWh4kPt6k En6PueEyysZqueNjzwSuQ4xiDm+tlqYRFNU7TzcYrJ9x6pRlKLmwYuTSPfeAS1la KxXSDRlTA7c6KUrDM1DO57u1CamhHUYcVVFjtT4nS8TIrmDoHowqcYTnrgnP5A9I HhtmjuxJi1a5NGpEkANrEt96lwTdGdF0WB9MkpZjlzVC6FIrtAPPrnGSMtO3lsfI 4D2SHQRZytMJDku9ka3Ab8Yyppy0K2s1j/qUyPXxkHpTNkznWBwJfogRF3M7Uelo s89aFzc7PG0JZw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:55:10 2025 by rpki-client