This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json) Hash identifier: k9EYnaMtG3wm3mbONju1sng4xLIxM9vxQAuDvp2fIkk= Subject key identifier: 6F:86:30:92:8D:A9:18:CE:E5:41:45:3D:72:16:99:F7:38:09:D8:E2 Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Certificate serial: 019B43C96B5DA595EB02CDDB7D822CE84585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:00:32 +0000 Manifest this update: Mon 22 Dec 2025 02:00:32 +0000 Manifest next update: Tue 23 Dec 2025 02:00:32 +0000 Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=) 2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=) 3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: Ar30B2oTOhNOvCxFkkt50VvSyIyibzHX+xIUmQC7nC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:6b:5d:a5:95:eb:02:cd:db:7d:82:2c:e8:45:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Dec 23 02:00:32 2025 GMT Subject: CN=6f8630928da918cee541453d721699f73809d8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:03:10:ea:34:c1:76:ab:3f:c3:49:b0:11:9d: f0:b3:db:e5:c3:23:5f:a1:30:8e:94:71:b9:13:54: ab:61:34:58:46:18:5d:4c:93:e9:f1:a7:6f:92:1e: 5b:81:98:8b:23:6b:c1:98:f9:60:75:11:be:27:6d: 92:14:f6:76:7c:40:5a:a5:b1:35:26:48:b1:8f:9b: c2:fe:bc:ef:e7:0b:7c:96:b7:9f:f9:7e:d8:0d:d3: 43:be:d0:72:df:6b:2e:fb:46:ea:d5:cf:a4:81:cf: 82:51:68:56:e7:6b:29:2b:be:a4:56:ec:ef:46:a3: ef:5a:38:ac:dd:97:11:dd:ea:3e:66:b0:70:e4:11: 01:99:8c:17:38:9b:13:4b:0c:e6:ef:37:90:70:f8: e3:6d:70:05:05:c2:a5:f5:91:f0:51:f4:20:55:11: 23:0c:6d:bf:7b:35:3e:96:83:8d:24:98:78:76:b0: a2:37:36:98:bb:6d:a5:9c:fd:6f:80:54:0a:ef:75: fc:ec:8b:47:65:bf:c7:6b:70:b0:27:07:b2:4c:09: d3:b6:d9:0a:cd:eb:18:df:c0:b0:f7:4e:a3:25:0a: ba:5a:12:db:cd:c5:94:42:be:be:be:7d:cc:e0:86: fc:be:ed:3b:0f:06:14:23:8f:d5:95:f6:02:90:bd: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:86:30:92:8D:A9:18:CE:E5:41:45:3D:72:16:99:F7:38:09:D8:E2 X509v3 Authority Key Identifier: keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8a:77:76:a4:7b:2f:1c:bc:cf:b2:27:31:8f:81:76:47:f1: 9a:b6:14:a3:a4:e6:c0:87:d9:10:a1:67:ea:de:4a:8a:33:c1: 92:f2:96:eb:0f:4f:71:ed:9d:a4:b7:36:0c:24:c6:14:8d:79: 4f:ef:b2:3f:80:a1:c6:c9:4b:0a:95:d3:a6:c1:6d:a9:fc:a3: cd:6c:bd:23:77:eb:8d:2d:25:dc:90:d2:33:dd:64:29:b9:f3: 61:55:16:3a:c7:07:83:36:68:b5:af:6e:6c:a4:72:58:6f:f9: 95:97:97:6a:34:b3:e2:b6:dc:bc:7e:e5:94:9e:9e:80:56:2c: 8b:8d:71:93:7a:09:db:18:a3:7c:27:8b:3e:cf:c0:99:29:5d: c6:e2:9c:2d:5e:25:23:a3:a4:8d:35:dd:52:95:c2:11:9d:30: ef:23:e2:e7:42:77:19:08:cf:82:72:63:aa:06:91:b5:ef:04: 96:72:18:c9:04:ed:31:de:be:65:42:62:0c:ad:b3:1f:d7:b8: 21:0e:72:93:36:57:ff:db:34:be:af:cd:2f:d2:b5:2e:52:4f: 29:0b:e1:9a:07:ca:fc:96:a3:7a:3a:7a:ba:f1:06:a9:8d:71: cf:65:76:2d:9a:8c:f0:43:0f:e0:ff:89:b4:48:24:62:18:16: 98:31:55:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyWtdpZXrAs3bfYIs6EWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh OWM2NTcwHhcNMjUxMjIyMDIwMDMyWhcNMjUxMjIzMDIwMDMyWjAzMTEwLwYDVQQD Eyg2Zjg2MzA5MjhkYTkxOGNlZTU0MTQ1M2Q3MjE2OTlmNzM4MDlkOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wMQ6jTBdqs/w0mwEZ3ws9vlwyNf oTCOlHG5E1SrYTRYRhhdTJPp8advkh5bgZiLI2vBmPlgdRG+J22SFPZ2fEBapbE1 Jkixj5vC/rzv5wt8lref+X7YDdNDvtBy32su+0bq1c+kgc+CUWhW52spK76kVuzv RqPvWjis3ZcR3eo+ZrBw5BEBmYwXOJsTSwzm7zeQcPjjbXAFBcKl9ZHwUfQgVREj DG2/ezU+loONJJh4drCiNzaYu22lnP1vgFQK73X87ItHZb/Ha3CwJweyTAnTttkK zesY38Cw906jJQq6WhLbzcWUQr6+vn3M4Ib8vu07DwYUI4/VlfYCkL2xswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+GMJKNqRjO5UFFPXIWmfc4CdjiMB8GA1UdIwQY MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt ZTBmNWQ4NmUzN2EzLzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYp3dqR7 Lxy8z7InMY+BdkfxmrYUo6TmwIfZEKFn6t5KijPBkvKW6w9Pce2dpLc2DCTGFI15 T++yP4ChxslLCpXTpsFtqfyjzWy9I3frjS0l3JDSM91kKbnzYVUWOscHgzZota9u bKRyWG/5lZeXajSz4rbcvH7llJ6egFYsi41xk3oJ2xijfCeLPs/AmSldxuKcLV4l I6OkjTXdUpXCEZ0w7yPi50J3GQjPgnJjqgaRte8ElnIYyQTtMd6+ZUJiDK2zH9e4 IQ5ykzZX/9s0vq/NL9K1LlJPKQvhmgfK/Jajejp6uvEGqY1xz2V2LZqM8EMP4P+J tEgkYhgWmDFVdA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:16:24 2025 by rpki-client