This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json) Hash identifier: kt+1DfM5jPe+eJGmFbtgnHhjadCPBpOAKraFLb9ZWs8= Subject key identifier: 21:63:75:A0:1A:A8:7A:B0:7D:A1:CC:D7:16:F4:37:AD:7F:5A:1F:C3 Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad Certificate serial: 019AF2401192C953D954CE0EDA6DF0D2DA07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: u7QuN16UDNiQFza3Ncj1KMGaQDBmCrTl+eoDMy7OybE=) 2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:11:92:c9:53:d9:54:ce:0e:da:6d:f0:d2:da:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=216375a01aa87ab07da1ccd716f437ad7f5a1fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:42:a0:a7:64:8a:f9:ec:bc:6e:2f:95:2e: 29:2b:b0:b1:95:63:4c:39:fe:04:1b:b8:c5:7b:16: 81:05:47:8d:62:70:83:70:35:5c:77:92:ba:e6:9f: 79:b3:66:c5:c3:ca:fc:b2:d2:20:46:a5:b3:de:3c: 19:42:e1:00:87:ed:3d:c2:86:25:d6:b6:5c:bd:c3: 96:45:df:67:56:ad:e5:0a:4d:e6:c2:1b:3a:8b:ef: 5e:0c:ae:47:88:97:06:ec:fc:ad:ca:b9:8e:b7:d2: 0b:8d:24:f8:22:bb:d5:cb:6c:4a:ec:76:34:4a:0a: 83:12:08:67:0b:09:69:9b:40:17:d5:75:fb:56:67: f4:2d:3b:10:5d:7c:ec:e4:4d:2d:36:63:24:24:4b: 51:e2:5b:51:06:eb:72:9d:9c:e8:1a:ee:09:ae:d8: 05:1e:c4:de:1b:a3:e3:a0:cd:f7:73:ca:04:5f:71: 5a:a1:d8:be:61:6a:83:3b:34:79:a2:6c:2a:04:ae: 14:98:f1:ea:ff:71:60:fd:3b:9f:bc:32:ed:c7:c9: 95:63:59:24:1c:87:b9:c2:15:26:d4:6f:8b:aa:d1: f4:b0:a9:b1:68:b6:66:2f:82:be:dd:16:ee:26:f9: 83:13:48:1c:2c:ea:c0:9b:97:2d:e1:ef:e0:3d:c3: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:63:75:A0:1A:A8:7A:B0:7D:A1:CC:D7:16:F4:37:AD:7F:5A:1F:C3 X509v3 Authority Key Identifier: keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:84:e8:17:ef:15:38:39:b4:fa:78:07:18:d4:54:22:27:c8: d8:3a:3b:97:fb:73:b0:47:2c:cc:19:2d:8e:da:cc:8d:6d:a3: 9b:0e:57:11:44:b6:7b:17:78:7f:58:35:d6:e7:64:a7:36:8c: 02:71:38:58:58:dd:8e:d8:5d:aa:2c:22:19:39:91:3d:60:23: 68:47:a0:40:2e:cb:85:4d:c7:14:a8:7c:83:fc:48:90:c5:1c: 08:3c:f8:9d:5d:cd:ed:b6:35:96:32:95:83:24:26:d9:47:e8: ec:a3:bf:5c:1f:03:72:45:e5:b1:6d:02:1c:79:58:39:90:fe: 3a:1f:75:ca:8c:9e:45:2a:a8:82:e9:25:07:16:11:54:e8:28: 70:b8:4b:54:78:5c:3d:41:41:16:9c:a9:c1:a9:b6:60:5a:0b: 69:fb:78:4a:18:0f:89:6d:d4:2d:0d:2f:00:bf:f0:f9:c7:3c: 0c:f0:da:ab:71:db:ab:bb:54:bc:a0:b6:75:b3:e0:41:01:b3: c2:1e:10:33:3b:f3:49:a7:58:62:88:09:f7:da:d3:15:c5:16: 66:69:a4:03:d3:44:7a:6f:ae:f3:aa:c7:8f:f2:13:8d:a1:00: 41:81:31:50:a9:2b:63:39:10:80:2f:e2:92:58:b4:da:66:06: 58:96:a1:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBGSyVPZVM4O2m3w0toHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh ODgzYWQwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD EygyMTYzNzVhMDFhYTg3YWIwN2RhMWNjZDcxNmY0MzdhZDdmNWExZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxtCoKdkivnsvG4vlS4pK7CxlWNM Of4EG7jFexaBBUeNYnCDcDVcd5K65p95s2bFw8r8stIgRqWz3jwZQuEAh+09woYl 1rZcvcOWRd9nVq3lCk3mwhs6i+9eDK5HiJcG7PytyrmOt9ILjST4IrvVy2xK7HY0 SgqDEghnCwlpm0AX1XX7Vmf0LTsQXXzs5E0tNmMkJEtR4ltRButynZzoGu4JrtgF HsTeG6PjoM33c8oEX3Faodi+YWqDOzR5omwqBK4UmPHq/3Fg/TufvDLtx8mVY1kk HIe5whUm1G+LqtH0sKmxaLZmL4K+3RbuJvmDE0gcLOrAm5ct4e/gPcPIpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFjdaAaqHqwfaHM1xb0N61/Wh/DMB8GA1UdIwQY MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoToF+8V ODm0+ngHGNRUIifI2Do7l/tzsEcszBktjtrMjW2jmw5XEUS2exd4f1g11udkpzaM AnE4WFjdjthdqiwiGTmRPWAjaEegQC7LhU3HFKh8g/xIkMUcCDz4nV3N7bY1ljKV gyQm2Ufo7KO/XB8DckXlsW0CHHlYOZD+Oh91yoyeRSqoguklBxYRVOgocLhLVHhc PUFBFpypwam2YFoLaft4ShgPiW3ULQ0vAL/w+cc8DPDaq3Hbq7tUvKC2dbPgQQGz wh4QMzvzSadYYogJ99rTFcUWZmmkA9NEem+u86rHj/ITjaEAQYExUKkrYzkQgC/i kli02mYGWJahNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:28 2025 by rpki-client