This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json) Hash identifier: KTsysvlXLfaZoJZxIeRAC1ALA/yHJIYx5U0GZOPgBao= Subject key identifier: 03:36:72:69:C6:38:1C:98:0F:54:98:6A:13:4F:F4:8B:34:AD:9F:4A Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4 Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4 Certificate serial: 019B7290A66C77DE5A72DF0C6524208A65D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft Manifest number: 12BC Signing time: Wed 31 Dec 2025 04:00:40 +0000 Manifest this update: Wed 31 Dec 2025 04:00:40 +0000 Manifest next update: Thu 01 Jan 2026 04:00:40 +0000 Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=) 2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: 0gx305NFCMBOqI812DgNqxxOU2XwUVRHd/evhhlqBj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:a6:6c:77:de:5a:72:df:0c:65:24:20:8a:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4 Validity Not Before: Dec 31 04:00:40 2025 GMT Not After : Jan 1 04:00:40 2026 GMT Subject: CN=03367269c6381c980f54986a134ff48b34ad9f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:ea:a9:5b:8a:03:19:a0:72:97:00:ef:1d: cd:51:5c:12:b7:53:e4:62:de:d6:6d:cd:ba:4b:8e: 30:68:8a:a1:94:1b:9f:03:82:52:48:7c:26:23:ab: f1:b6:bf:ee:49:62:04:f1:79:2b:b2:9b:bd:c3:ec: 14:4d:09:72:25:23:60:6a:4a:0e:77:79:b2:26:52: ac:d1:8e:44:84:ca:fc:ce:60:58:8f:ba:5e:e7:d3: 1b:22:95:89:d5:b4:a9:eb:bc:89:dd:06:e1:0c:14: 4a:d2:65:07:79:16:37:52:aa:3c:01:cc:16:30:e3: ed:79:c1:cd:24:5e:3c:e6:5a:bd:bf:66:73:c9:f0: d2:28:76:67:50:3c:35:93:b2:c2:ce:a4:54:02:79: 0d:81:40:ca:ba:98:cf:41:20:ad:74:68:01:2b:e8: 6b:50:27:02:43:a2:cb:70:e6:3b:15:96:b2:c1:98: 67:ed:f0:99:19:90:31:27:9c:f8:92:7d:a0:38:b0: e6:d8:d8:8b:8c:4d:23:6c:32:7f:68:fb:7f:05:68: fc:38:38:81:c8:de:ba:34:eb:80:73:41:7c:7c:4d: 01:6b:b5:18:e0:36:54:df:bd:49:41:fa:86:03:df: 77:90:63:45:65:f8:af:71:ac:c4:2b:34:88:15:42: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:72:69:C6:38:1C:98:0F:54:98:6A:13:4F:F4:8B:34:AD:9F:4A X509v3 Authority Key Identifier: keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:27:dc:30:39:17:ee:9e:bb:c9:ac:01:3f:e4:7d:0b:11:8a: 7a:04:5c:b1:2d:a9:9b:31:85:97:01:31:eb:cf:22:34:73:d9: 4f:30:ff:ce:b9:b8:37:26:00:3a:f5:bd:7b:f1:c3:3e:ea:6b: f3:bf:4a:a7:bd:64:54:f7:1a:df:fc:27:37:97:e8:16:dd:1f: bb:2f:ac:4f:1b:b0:f8:12:44:4a:c2:21:03:de:bb:0c:c2:f8: 3f:01:c7:f7:b9:2d:3c:da:59:04:4c:2b:89:8f:99:93:54:41: c5:69:0d:15:33:99:10:25:d9:4f:0f:52:9a:83:28:18:10:99: 35:a1:4b:1f:66:26:7b:fc:4f:26:76:5d:bc:d2:03:aa:ed:f0: 25:b5:57:93:0e:09:d7:95:78:86:b1:9e:59:18:76:74:ac:9f: 04:98:cb:b9:7c:d2:e9:36:28:05:4c:65:f2:3c:0a:8c:9f:b4: 98:fd:d9:4d:1a:85:b4:64:e3:ef:62:e1:fe:22:2b:31:6e:54: b2:f3:45:f7:1f:e9:57:ed:c5:17:10:9a:c3:e8:9c:83:5e:73: 4f:1d:37:9f:6c:68:ba:7b:00:c2:78:fb:33:04:1b:19:65:b4: 7a:ff:53:70:8f:21:77:6b:16:d4:0f:9d:e0:b8:4b:ba:6c:d8: 51:c1:5a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykKZsd95act8MZSQgimXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGVjMzk0MjgxM2QzZjM1MzZjMTI3ZTFhODIxYmZiZWY2 ZGIyYTQwHhcNMjUxMjMxMDQwMDQwWhcNMjYwMTAxMDQwMDQwWjAzMTEwLwYDVQQD EygwMzM2NzI2OWM2MzgxYzk4MGY1NDk4NmExMzRmZjQ4YjM0YWQ5ZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5STqqVuKAxmgcpcA7x3NUVwSt1Pk Yt7Wbc26S44waIqhlBufA4JSSHwmI6vxtr/uSWIE8Xkrspu9w+wUTQlyJSNgakoO d3myJlKs0Y5EhMr8zmBYj7pe59MbIpWJ1bSp67yJ3QbhDBRK0mUHeRY3Uqo8AcwW MOPtecHNJF485lq9v2ZzyfDSKHZnUDw1k7LCzqRUAnkNgUDKupjPQSCtdGgBK+hr UCcCQ6LLcOY7FZaywZhn7fCZGZAxJ5z4kn2gOLDm2NiLjE0jbDJ/aPt/BWj8ODiB yN66NOuAc0F8fE0Ba7UY4DZU371JQfqGA993kGNFZfivcazEKzSIFULolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM2cmnGOByYD1SYahNP9Is0rZ9KMB8GA1UdIwQY MBaAFIOOw5QoE9PzU2wSfhqCG/vvbbKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUt Yjg1MzU2N2RhMGVhLzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUtYjg1MzU2N2RhMGVh LzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABifcMDkX 7p67yawBP+R9CxGKegRcsS2pmzGFlwEx688iNHPZTzD/zrm4NyYAOvW9e/HDPupr 879Kp71kVPca3/wnN5foFt0fuy+sTxuw+BJESsIhA967DML4PwHH97ktPNpZBEwr iY+Zk1RBxWkNFTOZECXZTw9SmoMoGBCZNaFLH2Yme/xPJnZdvNIDqu3wJbVXkw4J 15V4hrGeWRh2dKyfBJjLuXzS6TYoBUxl8jwKjJ+0mP3ZTRqFtGTj72Lh/iIrMW5U svNF9x/pV+3FFxCaw+icg15zTx03n2xounsAwnj7MwQbGWW0ev9TcI8hd2sW1A+d 4LhLumzYUcFatg== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:27 2025 by rpki-client