This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json) Hash identifier: 415tEuDcnDE0DqBHS2VgJDNThaFTl/dlqfvbcvLQd8c= Subject key identifier: 2C:D5:D0:BB:76:B5:31:F2:FB:E8:F8:00:F4:EA:27:AC:33:7A:79:67 Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff Certificate serial: 019B3CEC1032A5F20A4D27B66289D7A1D650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft Manifest number: 0734 Signing time: Sat 20 Dec 2025 18:01:02 +0000 Manifest this update: Sat 20 Dec 2025 18:01:02 +0000 Manifest next update: Sun 21 Dec 2025 18:01:02 +0000 Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=) 2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: 4O9pB5yRMaK8T5WXLJLEFL1Ecav9hkC4QhP1FROzq30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:10:32:a5:f2:0a:4d:27:b6:62:89:d7:a1:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff Validity Not Before: Dec 20 18:01:02 2025 GMT Not After : Dec 21 18:01:02 2025 GMT Subject: CN=2cd5d0bb76b531f2fbe8f800f4ea27ac337a7967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:24:98:d3:61:e7:cd:15:40:80:12:6f:08: f4:cf:9c:c7:e4:bc:bb:6e:a5:25:b4:09:31:ec:52: 27:26:23:51:d5:8d:33:4b:13:45:fc:94:4c:77:90: 5e:54:ef:85:29:6f:f8:47:2b:7b:cd:59:b1:70:51: 5e:85:d8:78:8e:a2:da:0a:97:ff:99:4f:03:0d:69: 1c:af:fd:68:16:dc:71:18:90:18:64:a1:91:b9:81: 2f:bc:9c:f3:55:2b:a9:a1:9a:87:a5:e9:24:41:e0: 55:8f:69:ec:a4:18:13:57:db:f4:c2:ad:64:a6:bf: 26:19:d1:94:32:37:ce:a6:41:bd:7f:e4:bd:6a:19: 0f:8d:d0:09:53:26:8e:bf:50:5b:a8:f9:b9:6e:69: 24:8f:42:e3:78:37:0c:0a:12:8a:84:bb:d2:c7:37: 33:70:9f:78:68:4d:90:16:7e:a9:05:c9:b1:c0:41: 35:9a:c8:ee:89:1a:b9:4c:3a:ba:5d:3d:86:a3:66: 5b:b9:04:4a:71:29:c8:2c:e3:28:d5:98:ba:fb:57: 3d:ff:4a:1c:a4:3a:87:0a:01:f3:f2:56:f7:15:08: 37:6c:4c:e0:d3:2f:fd:47:86:af:e2:c7:ab:75:f3: f0:fd:7a:c6:c7:d1:d8:db:69:f2:8e:d4:2c:9c:0d: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:D0:BB:76:B5:31:F2:FB:E8:F8:00:F4:EA:27:AC:33:7A:79:67 X509v3 Authority Key Identifier: keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b2:85:95:e3:e2:c4:65:ed:39:9c:7e:5e:a9:67:5d:37:01: 20:3d:b5:96:75:ba:ff:3c:03:32:5d:29:b8:8a:27:45:b1:6f: cf:44:9c:03:af:8b:fb:e8:c6:47:ca:87:a6:16:4d:51:86:d6: a4:a1:9b:0a:7a:93:54:4b:26:7d:14:51:91:01:14:aa:72:0b: e2:66:f3:13:f2:4d:b1:5e:26:64:a5:b7:e0:a7:6f:68:c0:d2: 50:d3:7c:6e:4f:69:b3:73:54:6a:83:5a:9d:2a:57:4c:b3:6b: 61:89:65:6b:b5:c9:2e:1a:d9:f3:f2:d7:72:e3:de:bf:a4:1e: 1a:db:e7:80:fc:a2:32:6e:89:b6:2f:91:2b:96:54:e4:0f:b7: cc:92:d2:05:19:31:e0:0a:d5:0b:a4:21:be:6f:21:93:19:1b: 21:9e:bb:44:1c:a6:86:0b:4b:05:90:bd:19:f8:f3:8c:69:43: 86:3c:d7:77:54:ed:5d:ea:1a:40:b5:2d:c0:e6:74:97:25:13: 8b:89:51:e4:db:99:cd:32:50:ab:ef:86:af:d7:7b:f1:dd:13: 86:65:d8:61:40:c7:25:98:9c:ec:03:90:7f:65:9a:28:47:10: 79:e4:97:5d:d1:5e:b2:54:86:eb:7e:9a:df:c1:cf:2f:c6:14: 7a:84:d1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87BAypfIKTSe2YonXodZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTA1ZGYyNDcxNzRjZDM1MGIxYWYzNzgzMzMyN2M3NzAy YjhmZmYwHhcNMjUxMjIwMTgwMTAyWhcNMjUxMjIxMTgwMTAyWjAzMTEwLwYDVQQD EygyY2Q1ZDBiYjc2YjUzMWYyZmJlOGY4MDBmNGVhMjdhYzMzN2E3OTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte0kmNNh580VQIASbwj0z5zH5Ly7 bqUltAkx7FInJiNR1Y0zSxNF/JRMd5BeVO+FKW/4Ryt7zVmxcFFehdh4jqLaCpf/ mU8DDWkcr/1oFtxxGJAYZKGRuYEvvJzzVSupoZqHpekkQeBVj2nspBgTV9v0wq1k pr8mGdGUMjfOpkG9f+S9ahkPjdAJUyaOv1BbqPm5bmkkj0LjeDcMChKKhLvSxzcz cJ94aE2QFn6pBcmxwEE1msjuiRq5TDq6XT2Go2ZbuQRKcSnILOMo1Zi6+1c9/0oc pDqHCgHz8lb3FQg3bEzg0y/9R4av4serdfPw/XrGx9HY22nyjtQsnA3inQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzV0Lt2tTHy++j4APTqJ6wzenlnMB8GA1UdIwQY MBaAFEfgXfJHF0zTULGvN4MzJ8dwK4//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMt YWVjOTZmNDMxMDE4LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMtYWVjOTZmNDMxMDE4 LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLKFlePi xGXtOZx+XqlnXTcBID21lnW6/zwDMl0puIonRbFvz0ScA6+L++jGR8qHphZNUYbW pKGbCnqTVEsmfRRRkQEUqnIL4mbzE/JNsV4mZKW34KdvaMDSUNN8bk9ps3NUaoNa nSpXTLNrYYlla7XJLhrZ8/LXcuPev6QeGtvngPyiMm6Jti+RK5ZU5A+3zJLSBRkx 4ArVC6Qhvm8hkxkbIZ67RBymhgtLBZC9GfjzjGlDhjzXd1TtXeoaQLUtwOZ0lyUT i4lR5NuZzTJQq++Gr9d78d0ThmXYYUDHJZic7AOQf2WaKEcQeeSXXdFeslSG636a 38HPL8YUeoTRtA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:46:23 2025 by rpki-client