This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: Ni5JV+aHDw0uOre1vjlzs+I3hVPxWbPhLsYArT/qGCA= Subject key identifier: EC:28:E9:76:A0:DC:D4:E3:DF:74:F9:CA:7C:4E:C5:43:CD:F3:50:C1 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 681C33CF3F6663E9E0D099E17F96ED1F154FBC8F Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 04D9 Signing time: Sat 20 Dec 2025 09:29:09 +0000 Manifest this update: Sat 20 Dec 2025 09:24:09 +0000 Manifest next update: Sun 21 Dec 2025 09:34:09 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: ZXGJiWVCbXjGCjhW5IQRAJ0r/ouXVHBxJJ5fQjrXBcQ=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1c:33:cf:3f:66:63:e9:e0:d0:99:e1:7f:96:ed:1f:15:4f:bc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Dec 20 09:24:09 2025 GMT Not After : Dec 21 09:34:09 2025 GMT Subject: CN=EC28E976A0DCD4E3DF74F9CA7C4EC543CDF350C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:16:2c:b8:12:6e:1e:31:bc:7a:85:ea:4f: a3:96:fd:c7:85:74:a5:a9:0e:ad:a8:ba:bb:8d:97: 7e:a0:c8:7b:1f:6c:d2:11:7d:0f:76:2c:a3:98:f4: 53:c0:8c:ad:cf:1f:41:1a:95:2c:42:e6:09:7f:eb: a8:d8:f1:9f:ba:f9:f9:6e:01:47:8c:e9:ad:d4:c9: bd:bf:fb:0e:d1:e2:e8:8e:32:1c:97:1a:32:c6:95: 1d:25:88:8f:fd:ea:b5:ce:47:1c:61:bd:6a:de:54: c2:e4:a0:3f:29:59:b3:4c:75:c6:18:a9:a6:58:42: ac:bb:82:64:e2:1f:12:a8:30:eb:bf:5a:ee:05:ff: 9f:f3:58:17:3e:1a:08:62:38:52:b4:01:54:50:86: 05:c1:12:5f:75:39:98:a6:33:be:ef:4b:a7:34:2f: e1:75:c2:12:28:ed:b9:c3:c8:19:12:62:1d:19:29: e6:b8:6f:d7:39:56:38:99:ec:10:bc:86:46:04:ae: 9b:44:68:ae:82:48:8b:78:72:f7:aa:c0:25:4f:66: f2:d4:ba:1b:9e:93:0b:1a:6a:49:18:22:87:21:86: 92:0b:c6:31:e5:da:9f:9a:42:e0:39:3b:9a:16:a9: 97:c0:98:20:f7:54:00:0b:e1:1f:90:57:23:3d:f5: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:28:E9:76:A0:DC:D4:E3:DF:74:F9:CA:7C:4E:C5:43:CD:F3:50:C1 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9b:db:c1:ee:7f:a2:14:88:7a:bf:14:03:09:a1:89:cd:0c: 3e:12:7c:0c:8b:60:db:42:33:e7:47:18:15:f5:05:a2:45:7c: 63:c9:df:95:9f:dd:c3:b2:fa:de:85:cb:09:6e:be:b1:f6:60: 72:9e:e8:11:55:1b:7f:81:e6:ca:45:1d:cd:60:b9:84:74:30: c2:cd:6b:97:67:a6:58:b2:05:94:5a:a5:b0:9f:1d:40:e6:b7: f9:b5:08:b0:60:06:4c:71:4f:73:39:1d:da:16:d4:ec:b7:04: 18:4a:7e:e4:d2:b4:b1:fc:3c:58:6b:cb:f9:2d:a6:2e:75:40: 5e:6c:55:39:d5:db:02:4c:11:4a:5a:1e:a4:71:4a:45:5b:b2: 14:78:18:aa:a5:05:a5:20:5e:46:61:65:65:c1:02:ee:c0:68: 69:d4:10:ab:68:f0:94:5e:c9:b2:19:95:5b:7d:57:66:56:b2: ce:bc:3a:b5:22:24:f0:63:7a:dc:bf:b3:18:c5:11:9e:77:53: 0d:99:38:d2:16:7f:a3:2a:41:ee:90:a6:1f:17:67:a0:97:a1: ba:49:28:0e:33:59:2e:da:ff:f5:1a:82:20:ab:b7:b4:3c:9e: 01:62:10:50:90:47:87:0b:91:ae:c5:fb:cf:9a:6c:7b:27:a2: 40:2f:2b:f8 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUaBwzzz9mY+ng0Jnhf5btHxVPvI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTEyMjAwOTI0MDlaFw0yNTEyMjEwOTM0MDlaMDMxMTAvBgNV BAMTKEVDMjhFOTc2QTBEQ0Q0RTNERjc0RjlDQTdDNEVDNTQzQ0RGMzUwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOhYsuBJuHjG8eoXqT6OW/ceF dKWpDq2ouruNl36gyHsfbNIRfQ92LKOY9FPAjK3PH0EalSxC5gl/66jY8Z+6+flu AUeM6a3Uyb2/+w7R4uiOMhyXGjLGlR0liI/96rXORxxhvWreVMLkoD8pWbNMdcYY qaZYQqy7gmTiHxKoMOu/Wu4F/5/zWBc+GghiOFK0AVRQhgXBEl91OZimM77vS6c0 L+F1whIo7bnDyBkSYh0ZKea4b9c5VjiZ7BC8hkYErptEaK6CSIt4cveqwCVPZvLU uhuekwsaakkYIochhpILxjHl2p+aQuA5O5oWqZfAmCD3VAAL4R+QVyM99UfVAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU7CjpdqDc1OPfdPnKfE7FQ83zUMEwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJvbwe5/ohSIer8UAwmhic0MPhJ8DItg 20Iz50cYFfUFokV8Y8nflZ/dw7L63oXLCW6+sfZgcp7oEVUbf4HmykUdzWC5hHQw ws1rl2emWLIFlFqlsJ8dQOa3+bUIsGAGTHFPczkd2hbU7LcEGEp+5NK0sfw8WGvL +S2mLnVAXmxVOdXbAkwRSloepHFKRVuyFHgYqqUFpSBeRmFlZcEC7sBoadQQq2jw lF7JshmVW31XZlayzrw6tSIk8GN63L+zGMURnndTDZk40hZ/oypB7pCmHxdnoJeh ukkoDjNZLtr/9RqCIKu3tDyeAWIQUJBHhwuRrsX7z5pseyeiQC8r+A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:46 2025 by rpki-client