This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json) Hash identifier: Qpatus9tsDqkWpevAj8f7KVAoNZNXtyAFCioyIWw20E= Subject key identifier: 4A:3C:FC:12:61:70:7A:B0:10:BB:2B:A1:3F:A1:4F:C6:1F:73:31:25 Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Certificate serial: 019B326849DFB923700AE8E8D2C1E4B6266E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 17:00:53 +0000 Manifest this update: Thu 18 Dec 2025 17:00:53 +0000 Manifest next update: Fri 19 Dec 2025 17:00:53 +0000 Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=) 2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=) 3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: nxxYPJoABCwNywVbFlEclb1UErwlyBi3/hV1Ix7q8M8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:49:df:b9:23:70:0a:e8:e8:d2:c1:e4:b6:26:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Validity Not Before: Dec 18 17:00:53 2025 GMT Not After : Dec 19 17:00:53 2025 GMT Subject: CN=4a3cfc1261707ab010bb2ba13fa14fc61f733125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:29:d2:a9:e2:e1:8e:39:fa:55:3b:11:7c:bd: f2:01:94:4e:56:e5:1e:76:08:8f:72:00:1a:a0:ea: c0:2c:cd:9a:87:66:2d:5c:cf:1b:72:21:4e:25:10: f7:a7:54:9f:6a:ab:02:83:d8:03:e2:be:54:7c:fa: 83:88:1b:f2:ac:6f:a6:fc:48:58:98:a3:b2:47:da: 09:08:cc:a1:3d:79:fc:eb:17:d6:20:e2:13:2c:8a: 18:d4:c1:52:0d:96:3a:0e:30:6c:e1:a7:20:6a:11: 94:90:b4:f0:53:d4:51:24:ff:21:80:96:26:09:37: 5e:43:ff:a9:01:eb:a0:1e:ca:f5:57:32:a2:d2:00: 58:16:0e:63:59:3d:09:37:7f:73:45:f6:a9:2d:b6: 81:b1:d7:60:c2:48:64:75:f8:b3:d2:5a:47:9e:5d: 8a:b1:8f:61:9e:5a:df:c8:a2:4f:10:03:40:f8:77: ed:82:d8:53:ce:65:e4:12:91:af:7b:c1:d0:05:62: 96:a5:d4:af:a5:98:f8:9e:7b:df:cc:ea:c2:d9:aa: 8e:bb:5b:6e:b2:a7:31:8e:64:83:de:d8:ae:f5:95: d2:db:86:bb:09:20:95:d5:71:ba:db:21:93:e7:03: c1:f1:26:42:ee:17:08:9a:69:94:17:6d:6a:c2:4d: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:FC:12:61:70:7A:B0:10:BB:2B:A1:3F:A1:4F:C6:1F:73:31:25 X509v3 Authority Key Identifier: keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:eb:e3:1c:12:f0:86:92:14:50:82:f7:a1:16:98:38:d9:33: f3:f2:0d:54:ca:f8:5c:c2:91:35:1a:a8:b6:40:c1:14:87:bb: 8a:bd:d3:96:95:49:e2:a2:e2:8d:1f:d3:be:a5:ad:7a:66:d9: 49:d6:11:c4:18:71:b2:83:ec:6c:d7:c7:9b:75:70:64:06:83: c3:06:05:ef:e8:4d:4a:9b:1b:2e:8b:e4:9f:ae:be:ea:74:48: 3a:00:97:4d:39:2b:d6:14:f2:af:5c:7c:42:56:61:cc:f9:6e: 62:b6:7d:84:16:45:48:e2:91:20:d1:42:e6:81:24:20:47:3a: 4b:12:7a:a0:45:ca:89:6b:25:13:3a:b6:2f:2a:fd:e5:a1:72: 32:26:06:ea:37:d2:f9:09:52:f9:5b:0f:c3:e5:b5:43:c6:c0: ad:f3:e9:85:54:85:7f:2b:fb:94:12:38:21:07:41:2f:fe:fe: f8:4d:98:17:58:3e:d1:cb:59:a9:db:45:49:67:09:7a:c9:be: 89:bb:d5:e4:05:6f:2a:f7:87:a3:e9:c7:af:49:fd:de:92:90: 67:d5:d0:5a:1c:ee:f7:a4:27:93:b2:37:9b:a7:1b:91:96:d2: 74:3c:01:1d:91:cb:f6:04:f3:8d:06:61:ff:6a:96:cd:08:8f: 15:5e:f2:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaEnfuSNwCujo0sHktiZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh OWM2NTcwHhcNMjUxMjE4MTcwMDUzWhcNMjUxMjE5MTcwMDUzWjAzMTEwLwYDVQQD Eyg0YTNjZmMxMjYxNzA3YWIwMTBiYjJiYTEzZmExNGZjNjFmNzMzMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SnSqeLhjjn6VTsRfL3yAZROVuUe dgiPcgAaoOrALM2ah2YtXM8bciFOJRD3p1SfaqsCg9gD4r5UfPqDiBvyrG+m/EhY mKOyR9oJCMyhPXn86xfWIOITLIoY1MFSDZY6DjBs4acgahGUkLTwU9RRJP8hgJYm CTdeQ/+pAeugHsr1VzKi0gBYFg5jWT0JN39zRfapLbaBsddgwkhkdfiz0lpHnl2K sY9hnlrfyKJPEANA+HftgthTzmXkEpGve8HQBWKWpdSvpZj4nnvfzOrC2aqOu1tu sqcxjmSD3tiu9ZXS24a7CSCV1XG62yGT5wPB8SZC7hcImmmUF21qwk2L5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo8/BJhcHqwELsroT+hT8YfczElMB8GA1UdIwQY MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt ZTBmNWQ4NmUzN2EzLzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuvjHBLw hpIUUIL3oRaYONkz8/INVMr4XMKRNRqotkDBFIe7ir3TlpVJ4qLijR/TvqWtembZ SdYRxBhxsoPsbNfHm3VwZAaDwwYF7+hNSpsbLovkn66+6nRIOgCXTTkr1hTyr1x8 QlZhzPluYrZ9hBZFSOKRINFC5oEkIEc6SxJ6oEXKiWslEzq2Lyr95aFyMiYG6jfS +QlS+VsPw+W1Q8bArfPphVSFfyv7lBI4IQdBL/7++E2YF1g+0ctZqdtFSWcJesm+ ibvV5AVvKveHo+nHr0n93pKQZ9XQWhzu96Qnk7I3m6cbkZbSdDwBHZHL9gTzjQZh /2qWzQiPFV7yvQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:18:03 2025 by rpki-client