This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json) Hash identifier: C81RoRynXFayfJyksiaHi8MAefEpIIETCkkTTL9UGwY= Subject key identifier: A7:C4:5D:98:C9:97:7E:E4:D5:1E:FC:7A:96:5B:A6:F7:55:87:B1:03 Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Certificate serial: 019B3EDAC30F96C99F2845B61D06667E3D16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:01:22 +0000 Manifest this update: Sun 21 Dec 2025 03:01:22 +0000 Manifest next update: Mon 22 Dec 2025 03:01:22 +0000 Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: IPyCrbgZSiXZhH4+Biy50sT1PaXd4YqG61Bq4bfv2FI=) 2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:c3:0f:96:c9:9f:28:45:b6:1d:06:66:7e:3d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Validity Not Before: Dec 21 03:01:22 2025 GMT Not After : Dec 22 03:01:22 2025 GMT Subject: CN=a7c45d98c9977ee4d51efc7a965ba6f75587b103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:dd:fe:23:5a:16:3c:cd:4d:39:f5:ba:b5: 09:86:9a:04:fc:00:bd:e1:10:35:a3:49:2a:c5:b3: 9c:81:36:9c:1d:79:88:0c:79:c3:28:20:d2:dc:e5: ce:6a:e8:22:ae:4f:0d:9b:20:ad:d0:5f:97:c0:09: fb:59:c6:d5:dd:2a:4a:bb:e4:a5:d1:1a:de:4f:92: fa:4d:bd:ba:68:45:96:b5:03:fe:d1:5d:4e:43:3f: e3:9b:73:5f:43:93:dc:9b:e4:e3:ff:c3:ad:41:22: 7f:e1:b0:32:3b:17:15:ab:d6:a7:b1:2a:47:c1:e2: 3b:b4:9f:01:5e:5b:6f:fe:bb:78:f3:ec:a4:1f:6a: ee:f7:f3:51:74:73:20:f4:9c:0a:25:d9:73:28:a9: 8f:bc:77:10:1e:64:6d:34:29:e2:9a:15:bd:da:5d: f2:65:39:db:d6:cb:8c:32:93:c9:c6:54:db:47:10: e6:af:5c:b3:7f:7b:18:ca:50:1b:7f:18:df:8c:73: f8:57:c8:c8:db:07:75:2a:ca:2d:1a:20:53:6a:fa: 7d:12:03:b5:6b:74:0a:f1:2c:7b:ac:a6:cd:c8:af: 26:70:a1:fe:aa:87:1d:29:e1:6e:ff:57:e0:14:b1: ab:bc:33:af:41:4a:24:8d:6c:e9:db:93:59:4b:f6: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:5D:98:C9:97:7E:E4:D5:1E:FC:7A:96:5B:A6:F7:55:87:B1:03 X509v3 Authority Key Identifier: keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1f:24:2c:d6:b5:e3:ab:11:f9:31:82:20:76:9c:a2:c2:e7: c6:1b:58:c6:71:21:fb:57:45:e0:97:22:0f:d8:98:71:41:50: 11:90:f6:72:40:7d:10:3e:d4:cd:92:2a:5e:8a:1d:39:3c:ae: 4b:c9:8a:47:32:6d:c4:34:8f:22:c7:37:54:15:de:35:23:59: d0:7a:37:32:97:84:20:e1:a4:dc:81:1e:22:b6:c4:53:d4:05: 30:bf:7f:0f:17:1e:b5:64:84:7b:1d:5f:d1:48:78:b8:5b:7b: 6b:4d:7f:b8:3c:3b:42:67:95:24:d8:f9:3a:5f:35:99:49:b8: 8e:a1:27:cb:b9:1c:8c:8d:c5:ec:c6:7c:bb:3a:68:c3:19:da: e0:24:fa:0a:1f:8a:e9:d8:27:c4:43:9c:7c:b7:da:8a:75:88: 17:72:b3:0f:3a:2c:20:e4:18:77:f0:d1:df:63:93:54:ad:4e: 94:62:04:9f:6c:48:7a:c8:5e:0c:6f:9a:90:a0:28:d6:48:37: 58:49:73:de:3a:a5:f9:80:63:3b:f5:a2:5a:c0:b3:96:f8:33: 72:a7:1a:fa:ab:22:f9:2e:cd:f4:40:27:a4:6b:1a:50:11:52: 6b:e6:23:53:47:0f:33:8a:0b:cd:27:0c:31:50:ec:40:38:5a: 18:27:ea:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2sMPlsmfKEW2HQZmfj0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4 MjFiZTYwHhcNMjUxMjIxMDMwMTIyWhcNMjUxMjIyMDMwMTIyWjAzMTEwLwYDVQQD EyhhN2M0NWQ5OGM5OTc3ZWU0ZDUxZWZjN2E5NjViYTZmNzU1ODdiMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pnd/iNaFjzNTTn1urUJhpoE/AC9 4RA1o0kqxbOcgTacHXmIDHnDKCDS3OXOaugirk8NmyCt0F+XwAn7WcbV3SpKu+Sl 0RreT5L6Tb26aEWWtQP+0V1OQz/jm3NfQ5Pcm+Tj/8OtQSJ/4bAyOxcVq9ansSpH weI7tJ8BXltv/rt48+ykH2ru9/NRdHMg9JwKJdlzKKmPvHcQHmRtNCnimhW92l3y ZTnb1suMMpPJxlTbRxDmr1yzf3sYylAbfxjfjHP4V8jI2wd1KsotGiBTavp9EgO1 a3QK8Sx7rKbNyK8mcKH+qocdKeFu/1fgFLGrvDOvQUokjWzp25NZS/a3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfEXZjJl37k1R78epZbpvdVh7EDMB8GA1UdIwQY MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt NTlhMGM1ZmY2NTA1LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1 LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlR8kLNa1 46sR+TGCIHacosLnxhtYxnEh+1dF4JciD9iYcUFQEZD2ckB9ED7UzZIqXoodOTyu S8mKRzJtxDSPIsc3VBXeNSNZ0Ho3MpeEIOGk3IEeIrbEU9QFML9/DxcetWSEex1f 0Uh4uFt7a01/uDw7QmeVJNj5Ol81mUm4jqEny7kcjI3F7MZ8uzpowxna4CT6Ch+K 6dgnxEOcfLfainWIF3KzDzosIOQYd/DR32OTVK1OlGIEn2xIesheDG+akKAo1kg3 WElz3jql+YBjO/WiWsCzlvgzcqca+qsi+S7N9EAnpGsaUBFSa+YjU0cPM4oLzScM MVDsQDhaGCfqaw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:13 2025 by rpki-client