This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json) Hash identifier: XtBzm27gXM/L+bhTnpUv+MnCV+pVt17ER4XXYns1ZIY= Subject key identifier: B7:11:6E:C7:E6:33:ED:D3:C2:D0:3B:B3:12:C4:53:DE:CF:11:EA:5F Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad Certificate serial: 019B2852C5B90EA2B53F216F82F0C652F2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 18:01:11 +0000 Manifest this update: Tue 16 Dec 2025 18:01:11 +0000 Manifest next update: Wed 17 Dec 2025 18:01:11 +0000 Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: On7zWFfxhWgALz8CXVcWED4+xzDiJf2mEOphYLtSLzQ=) 2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:c5:b9:0e:a2:b5:3f:21:6f:82:f0:c6:52:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad Validity Not Before: Dec 16 18:01:11 2025 GMT Not After : Dec 17 18:01:11 2025 GMT Subject: CN=b7116ec7e633edd3c2d03bb312c453decf11ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:81:00:89:e3:e4:39:aa:ae:c1:a6:f5:89: 32:b1:0b:88:45:8d:32:95:fc:71:b5:07:a7:27:3a: b4:b0:8a:39:d4:33:83:30:70:5b:1c:39:2d:be:14: 0e:1a:f8:08:eb:fb:e3:86:d7:6d:c5:2f:26:22:85: e0:81:70:89:72:b4:9f:f1:54:3b:21:61:47:f3:2a: ad:75:db:0b:12:45:8d:a8:4d:05:cb:39:fb:79:00: d7:e2:5a:08:6d:38:c2:79:ea:de:49:55:ac:01:e5: 18:78:36:54:f9:b0:90:d5:6c:40:1e:5f:9c:61:87: 01:8e:36:53:4b:83:cf:6f:3d:e4:19:28:70:fd:bf: 25:e8:2c:c1:0f:b4:dc:38:36:8a:5b:c0:c8:81:f5: 0b:c2:34:06:7b:d3:c9:cd:3a:50:86:da:5d:9e:b0: 5b:97:99:8d:bd:32:15:74:67:98:3a:90:3c:6a:ba: 57:e3:90:69:b0:08:c6:7a:96:a9:7c:94:ce:cc:44: e5:ea:aa:cc:e2:5a:ac:4e:70:ca:c4:15:ef:1d:57: 36:83:d5:ca:03:eb:63:07:1d:dc:66:61:e0:91:95: 41:c2:41:b6:ca:7d:8f:46:53:1f:9d:17:6a:f5:36: 8d:8c:f4:01:94:8f:74:48:c4:71:74:2e:81:c7:cc: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:6E:C7:E6:33:ED:D3:C2:D0:3B:B3:12:C4:53:DE:CF:11:EA:5F X509v3 Authority Key Identifier: keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:85:85:81:66:45:1f:4a:2a:92:15:d4:6f:d1:40:1c:14: d8:32:0c:77:5d:4f:7a:77:da:b4:4e:e4:da:f5:ff:63:78:ac: 3b:c4:54:6a:fb:80:21:e5:4d:f4:67:29:49:bc:b5:53:af:66: 21:56:3b:cd:1d:d2:4a:fc:69:90:0c:55:b5:d9:2e:21:10:58: 6b:ec:a3:7c:98:77:4d:e0:0b:b8:cb:54:ba:1b:14:c4:7b:4f: 0a:7e:4d:9a:a9:5d:dd:20:f8:be:53:8b:14:c3:dc:68:29:fb: 97:d2:dc:2b:a1:56:c9:6b:8b:e9:15:74:61:9c:81:75:80:65: 49:f0:08:57:29:ea:73:eb:8e:09:e4:ec:87:4d:d6:f6:f6:ae: 67:eb:75:1c:6a:a8:60:cd:6b:da:ed:39:88:41:55:0c:97:dc: 58:11:42:48:df:c9:48:fe:1c:eb:e1:94:02:ad:40:c4:5a:55: 16:1b:7c:56:f1:aa:dd:dd:e9:c5:ed:11:1c:d1:6c:0d:8a:55: cd:a2:dc:af:e4:65:1d:c4:0e:84:37:5e:62:49:03:3c:b9:38: a6:3d:3a:d0:08:d2:15:dc:50:0c:23:fa:13:06:96:db:f2:b7: 75:63:1d:df:e7:9c:99:dd:b3:b1:a6:00:ab:17:5f:2f:eb:b5: 1d:f1:c4:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUsW5DqK1PyFvgvDGUvLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh ODgzYWQwHhcNMjUxMjE2MTgwMTExWhcNMjUxMjE3MTgwMTExWjAzMTEwLwYDVQQD EyhiNzExNmVjN2U2MzNlZGQzYzJkMDNiYjMxMmM0NTNkZWNmMTFlYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjSBAInj5DmqrsGm9YkysQuIRY0y lfxxtQenJzq0sIo51DODMHBbHDktvhQOGvgI6/vjhtdtxS8mIoXggXCJcrSf8VQ7 IWFH8yqtddsLEkWNqE0Fyzn7eQDX4loIbTjCeereSVWsAeUYeDZU+bCQ1WxAHl+c YYcBjjZTS4PPbz3kGShw/b8l6CzBD7TcODaKW8DIgfULwjQGe9PJzTpQhtpdnrBb l5mNvTIVdGeYOpA8arpX45BpsAjGepapfJTOzETl6qrM4lqsTnDKxBXvHVc2g9XK A+tjBx3cZmHgkZVBwkG2yn2PRlMfnRdq9TaNjPQBlI90SMRxdC6Bx8w2jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcRbsfmM+3TwtA7sxLEU97PEepfMB8GA1UdIwQY MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxiFhYFm RR9KKpIV1G/RQBwU2DIMd11PenfatE7k2vX/Y3isO8RUavuAIeVN9GcpSby1U69m IVY7zR3SSvxpkAxVtdkuIRBYa+yjfJh3TeALuMtUuhsUxHtPCn5Nmqld3SD4vlOL FMPcaCn7l9LcK6FWyWuL6RV0YZyBdYBlSfAIVynqc+uOCeTsh03W9vauZ+t1HGqo YM1r2u05iEFVDJfcWBFCSN/JSP4c6+GUAq1AxFpVFht8VvGq3d3pxe0RHNFsDYpV zaLcr+RlHcQOhDdeYkkDPLk4pj060AjSFdxQDCP6EwaW2/K3dWMd3+ecmd2zsaYA qxdfL+u1HfHEkA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:05 2025 by rpki-client