This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json) Hash identifier: inb9NfVYPDXX5XDmd8czO2O8CbhF+gC63JSdfA82ZdE= Subject key identifier: 64:9A:6E:45:F7:15:E6:F1:EC:67:AE:08:B5:60:5C:CD:58:3E:D8:C3 Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89 Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89 Certificate serial: 019B42B75A8AB3461312D7C597AD709BAF43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft Manifest number: 12FB Signing time: Sun 21 Dec 2025 21:01:11 +0000 Manifest this update: Sun 21 Dec 2025 21:01:11 +0000 Manifest next update: Mon 22 Dec 2025 21:01:11 +0000 Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: z5GvkOW/+BklJep2OttF2fAALbUpf8ofNOjZXYXw6aE=) 2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:5a:8a:b3:46:13:12:d7:c5:97:ad:70:9b:af:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89 Validity Not Before: Dec 21 21:01:11 2025 GMT Not After : Dec 22 21:01:11 2025 GMT Subject: CN=649a6e45f715e6f1ec67ae08b5605ccd583ed8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:b6:10:6c:56:9c:04:c4:d9:ba:6c:4c:c6: 14:dc:99:d4:d0:c5:59:28:70:41:8c:da:fc:e9:2f: 07:28:7b:16:7a:7c:4e:4f:07:e5:f3:46:21:98:b4: fc:b4:88:5b:4d:82:f3:a8:c4:49:30:d2:c0:c8:48: d0:22:5f:9d:c2:e5:af:ce:07:86:49:e2:49:51:98: be:7d:9f:47:51:ea:64:f9:52:f8:d7:f7:04:28:0a: 57:84:e2:a6:e6:7b:e8:2b:bf:21:2a:5d:6e:eb:71: f5:56:05:02:da:ce:c6:6e:da:4e:e9:e1:40:68:00: 2c:77:d0:37:86:42:1a:76:21:71:86:e7:0e:bd:b1: 3f:87:35:a7:a4:42:20:db:77:ac:c2:dc:14:9e:b9: 85:8d:23:59:3c:9d:dd:ba:91:80:d5:7c:5d:3b:a1: 09:e7:e2:99:78:63:38:8f:94:a2:4b:41:f1:d5:c5: 48:41:4a:76:97:95:c3:ba:5b:f4:cc:cf:b6:36:ad: 28:56:aa:48:1e:98:a7:fa:b8:ae:47:41:10:11:13: 9b:b2:57:25:13:9d:32:87:e2:b6:bf:6c:c0:99:f8: d5:2a:a3:58:74:5b:f2:78:08:7a:b8:01:d5:aa:55: 86:f9:bd:b5:b2:5e:c2:a4:65:e0:e2:bb:77:57:44: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:6E:45:F7:15:E6:F1:EC:67:AE:08:B5:60:5C:CD:58:3E:D8:C3 X509v3 Authority Key Identifier: keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3d:0e:59:a6:36:c8:7f:e3:96:76:bc:84:9b:e3:7e:40:62: 52:8d:66:8c:36:f1:ce:92:91:83:76:6c:c2:da:d2:5d:ed:77: 38:a8:63:f6:b5:0a:3d:9d:82:00:b8:56:d4:91:5b:79:e0:71: 25:01:50:4e:d1:d2:d9:3d:d8:16:df:20:28:84:69:e8:f0:36: 8f:35:7e:ef:01:b9:1d:cb:42:03:bb:76:47:bd:9e:3e:38:eb: 55:1c:ca:94:e0:7a:77:e1:36:0f:69:28:43:fa:80:1b:de:e5: 51:7f:d1:ac:cc:99:73:76:4b:38:04:54:5b:54:67:2a:18:0b: b1:00:41:ef:2c:49:dc:99:f2:9f:f4:ee:c6:27:5f:15:4e:d4: 9b:a2:ce:32:2d:38:4c:1e:5e:e5:de:dd:31:eb:0c:47:70:2e: 45:fa:dc:8e:04:39:8c:7d:61:02:78:94:43:45:f0:59:cd:c8: b2:d9:54:f4:f4:c1:42:bc:e0:0c:28:4a:fd:bd:a7:1a:92:e2: ef:8b:df:d9:58:f6:29:8e:a1:24:35:1c:8a:4b:f4:bc:9c:89: 5c:e8:e7:59:50:fc:f8:2b:0a:bf:f0:6a:2e:cc:d1:ea:5c:ab: bb:8a:76:18:89:85:f6:34:e2:47:0c:c8:47:d2:18:dd:8d:68: 28:4e:5e:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1qKs0YTEtfFl61wm69DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGVkMWEwMTUzNzYyYTkyMmU1NWUwZjk0OGNkMWE1NDEx YzdhODkwHhcNMjUxMjIxMjEwMTExWhcNMjUxMjIyMjEwMTExWjAzMTEwLwYDVQQD Eyg2NDlhNmU0NWY3MTVlNmYxZWM2N2FlMDhiNTYwNWNjZDU4M2VkOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYa2EGxWnATE2bpsTMYU3JnU0MVZ KHBBjNr86S8HKHsWenxOTwfl80YhmLT8tIhbTYLzqMRJMNLAyEjQIl+dwuWvzgeG SeJJUZi+fZ9HUepk+VL41/cEKApXhOKm5nvoK78hKl1u63H1VgUC2s7GbtpO6eFA aAAsd9A3hkIadiFxhucOvbE/hzWnpEIg23eswtwUnrmFjSNZPJ3dupGA1XxdO6EJ 5+KZeGM4j5SiS0Hx1cVIQUp2l5XDulv0zM+2Nq0oVqpIHpin+riuR0EQERObslcl E50yh+K2v2zAmfjVKqNYdFvyeAh6uAHVqlWG+b21sl7CpGXg4rt3V0RwKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSabkX3Febx7GeuCLVgXM1YPtjDMB8GA1UdIwQY MBaAFAeO0aAVN2KpIuVeD5SM0aVBHHqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2Mjgt YjYyZGI3NzJiYmZhLzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2MjgtYjYyZGI3NzJiYmZh LzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET0OWaY2 yH/jlna8hJvjfkBiUo1mjDbxzpKRg3ZswtrSXe13OKhj9rUKPZ2CALhW1JFbeeBx JQFQTtHS2T3YFt8gKIRp6PA2jzV+7wG5HctCA7t2R72ePjjrVRzKlOB6d+E2D2ko Q/qAG97lUX/RrMyZc3ZLOARUW1RnKhgLsQBB7yxJ3Jnyn/TuxidfFU7Um6LOMi04 TB5e5d7dMesMR3AuRfrcjgQ5jH1hAniUQ0XwWc3IstlU9PTBQrzgDChK/b2nGpLi 74vf2Vj2KY6hJDUcikv0vJyJXOjnWVD8+CsKv/BqLszR6lyru4p2GImF9jTiRwzI R9IY3Y1oKE5evQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:11:53 2025 by rpki-client