This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: 2Ik2aQq/c3B19UvM+LxUKKyfyACzmD1v6Q+jTIaMpuI= Subject key identifier: 30:89:38:66:DB:37:1E:78:9F:90:7F:85:C0:DE:F4:87:AD:8E:32:BC Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 1CC1C4A596636F65BAEF59E2D5F540E661ECDED9 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 04C6 Signing time: Sat 06 Dec 2025 10:39:04 +0000 Manifest this update: Sat 06 Dec 2025 10:34:04 +0000 Manifest next update: Sun 07 Dec 2025 10:47:04 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: L+V0l0AyfEtq4OxzvdczexGCvT2Pf0KsavPYDt2XsVg=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c1:c4:a5:96:63:6f:65:ba:ef:59:e2:d5:f5:40:e6:61:ec:de:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Dec 6 10:34:04 2025 GMT Not After : Dec 7 10:47:04 2025 GMT Subject: CN=30893866DB371E789F907F85C0DEF487AD8E32BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:95:2a:aa:b3:a6:8c:75:4a:e2:c0:80:8a: c9:cb:ba:3d:e5:3a:52:f4:35:15:06:79:46:00:69: f6:72:f4:d8:d7:50:8a:53:32:58:6d:f2:6d:8c:55: 4d:78:71:a8:c2:25:bb:00:07:ff:99:e2:8c:20:90: 6d:1e:43:6c:ee:90:0f:17:82:60:22:6b:d6:d2:22: fa:cd:ec:67:13:0b:c6:c1:40:f9:32:04:37:3e:aa: e2:f7:0b:c1:66:05:92:45:23:5f:77:e7:43:aa:b6: c4:9a:d5:12:81:cb:86:63:37:f2:30:b1:5d:08:44: 51:5b:f2:80:dd:25:52:44:be:34:64:03:78:da:a8: 7e:c7:a7:99:0c:a4:33:36:fa:bd:2d:a7:0d:f6:ca: 86:4f:68:6f:50:81:f9:be:d1:d4:d9:20:28:9d:66: 98:42:ce:32:ba:9d:ba:62:45:13:d8:4d:83:ea:4d: 27:52:4a:cf:3e:c3:ac:c8:2b:19:73:52:ca:cf:3d: 39:2c:25:fd:e7:09:67:4e:b1:f4:92:06:79:f1:05: 4b:a5:02:82:8f:fc:8f:db:07:b3:17:ef:dd:45:97: ca:6d:aa:7a:17:9b:33:a8:43:7e:9b:b2:a1:53:fc: 5e:30:fe:73:81:49:1d:77:ca:e8:c1:81:d6:ef:36: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:38:66:DB:37:1E:78:9F:90:7F:85:C0:DE:F4:87:AD:8E:32:BC X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:03:33:0c:db:b5:ef:69:db:54:aa:14:3d:a4:41:f8:f4: 15:51:cf:1d:d2:98:e1:cb:f0:6b:86:32:50:1f:6b:a7:58:3d: 8d:1a:cd:b7:4c:1f:e7:18:de:aa:72:62:d2:52:0e:75:3b:0f: a6:50:af:cc:79:35:b9:5e:9c:35:02:0a:32:2f:7b:ac:de:69: 26:37:34:96:aa:33:75:a5:b0:59:9b:96:39:9c:4f:2d:a7:fa: 37:a1:e1:a5:24:87:f1:0e:4c:75:52:1f:f7:2c:a1:ee:ae:c4: 62:45:d5:84:c8:28:34:b8:70:a1:f3:1e:95:3b:56:07:43:85: f5:64:a2:00:84:1e:f7:d1:94:35:17:9a:03:b1:0a:43:fe:c7: 01:1e:5b:c5:5a:7e:31:4b:32:56:72:dd:2d:57:89:b3:23:df: 8a:23:69:09:0a:59:eb:e0:cc:6a:5b:98:66:88:48:74:be:dc: d1:a9:b8:bd:d7:c3:68:85:30:14:4b:5b:1d:35:33:a7:16:a1: 2c:ab:62:04:1d:00:8d:72:d5:92:69:6b:18:54:24:f5:a5:dd: 71:6b:e0:25:2e:e0:ab:5e:c4:4e:d2:c4:b0:f3:0f:55:72:55: ed:7e:6c:fa:1e:1d:fc:a3:68:fe:6c:19:a4:37:86:ad:4f:c3: 8c:47:66:76 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUHMHEpZZjb2W671ni1fVA5mHs3tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTEyMDYxMDM0MDRaFw0yNTEyMDcxMDQ3MDRaMDMxMTAvBgNV BAMTKDMwODkzODY2REIzNzFFNzg5RjkwN0Y4NUMwREVGNDg3QUQ4RTMyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//ZUqqrOmjHVK4sCAisnLuj3l OlL0NRUGeUYAafZy9NjXUIpTMlht8m2MVU14cajCJbsAB/+Z4owgkG0eQ2zukA8X gmAia9bSIvrN7GcTC8bBQPkyBDc+quL3C8FmBZJFI19350OqtsSa1RKBy4ZjN/Iw sV0IRFFb8oDdJVJEvjRkA3jaqH7Hp5kMpDM2+r0tpw32yoZPaG9Qgfm+0dTZICid ZphCzjK6nbpiRRPYTYPqTSdSSs8+w6zIKxlzUsrPPTksJf3nCWdOsfSSBnnxBUul AoKP/I/bB7MX791Fl8ptqnoXmzOoQ36bsqFT/F4w/nOBSR13yujBgdbvNr9fAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUMIk4Zts3HnifkH+FwN70h62OMrwwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+kDMwzbte9p21SqFD2kQfj0FVHPHdKY 4cvwa4YyUB9rp1g9jRrNt0wf5xjeqnJi0lIOdTsPplCvzHk1uV6cNQIKMi97rN5p Jjc0lqozdaWwWZuWOZxPLaf6N6HhpSSH8Q5MdVIf9yyh7q7EYkXVhMgoNLhwofMe lTtWB0OF9WSiAIQe99GUNReaA7EKQ/7HAR5bxVp+MUsyVnLdLVeJsyPfiiNpCQpZ 6+DMaluYZohIdL7c0am4vdfDaIUwFEtbHTUzpxahLKtiBB0AjXLVkmlrGFQk9aXd cWvgJS7gq17ETtLEsPMPVXJV7X5s+h4d/KNo/mwZpDeGrU/DjEdmdg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:17 2025 by rpki-client