This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft File: 547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json) Hash identifier: wDqag8CQy3LSYw+CxiNWm5s3yWEzNB4mGGdyjPoB4fI= Subject key identifier: A8:2F:55:DF:D6:F0:11:92:A5:6C:5E:CF:37:6C:5C:CE:5B:9C:20:31 Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 Certificate issuer: /CN=547bc28c92a229a5ac78c0de287d89ce37726409 Certificate serial: 433BF7734F7C0B9E2E17DB01FAB9BB084B65BF49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft Manifest number: 0297 Signing time: Sat 20 Dec 2025 19:35:37 +0000 Manifest this update: Sat 20 Dec 2025 19:30:37 +0000 Manifest next update: Sun 21 Dec 2025 23:28:37 +0000 Files and hashes: 1: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=) 2: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=) 3: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=) 4: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: gTL9Cud/dLythxnUI6GDBTv/+GfqaKcDIj5Yst17ln0=) 5: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3b:f7:73:4f:7c:0b:9e:2e:17:db:01:fa:b9:bb:08:4b:65:bf:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409 Validity Not Before: Dec 20 19:30:37 2025 GMT Not After : Dec 21 23:28:37 2025 GMT Subject: CN=A82F55DFD6F01192A56C5ECF376C5CCE5B9C2031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:1a:e0:c4:74:62:ee:3f:56:82:53:bf:98: fa:05:04:08:58:12:6e:35:b0:86:01:e4:b1:84:36: 05:3a:20:3f:4b:bd:04:7e:2b:b2:a4:65:72:f2:75: e3:86:b2:f9:b0:6f:07:e5:4b:96:c1:35:c9:cb:03: e1:f9:0c:b9:ee:e7:96:1d:17:ca:b5:07:95:e1:4a: f7:d8:90:88:b2:94:16:50:74:43:07:00:07:ee:64: 43:e4:3e:b6:65:f8:7b:72:70:f4:40:56:50:ce:1e: 84:3a:b9:7f:a8:51:ec:09:9a:b6:08:b7:7c:04:16: b7:c3:a7:c1:0f:79:0a:59:3b:12:24:23:37:17:59: e7:bc:ce:5b:85:f4:23:fd:ca:7e:60:c7:70:94:ee: 19:23:59:71:25:8d:77:d7:00:66:15:7e:71:78:c8: 6c:0e:90:59:af:6e:f9:1e:86:78:56:ab:0a:90:c3: 8c:6f:bc:e4:00:56:1b:6d:19:2b:0a:49:ff:09:e0: 16:99:05:b6:a0:e8:59:b2:22:b0:96:20:88:6d:aa: 58:a2:ea:ce:dc:2c:f6:86:54:ee:fa:b0:57:29:b3: 30:4e:ed:b1:15:65:87:82:7e:ea:98:c0:27:f0:b4: d9:4e:ea:04:6b:4c:09:06:4f:b9:81:ca:96:9d:6e: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2F:55:DF:D6:F0:11:92:A5:6C:5E:CF:37:6C:5C:CE:5B:9C:20:31 X509v3 Authority Key Identifier: keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2e:f8:7f:aa:18:1d:7f:f5:36:a7:01:f9:e4:d0:62:7f:3d: 91:53:9a:01:80:0d:8a:87:75:3c:2f:44:d4:b1:38:2e:3e:9f: 29:6f:37:4d:1d:b0:63:88:6e:c5:cd:6b:65:a8:60:ec:4a:4d: 49:6d:67:13:c9:08:b7:2d:e5:b8:02:2a:78:94:2b:d1:75:fa: 08:40:b4:a9:5b:a0:e4:c5:d7:ab:9e:7a:30:61:20:5b:9f:48: 76:79:e6:fa:46:d6:cc:45:46:8f:28:b6:d7:49:c9:55:50:76: 34:ad:26:29:cb:43:cd:ec:56:6e:cc:6c:6b:46:b2:31:ad:fb: 5d:65:a5:68:ff:03:17:4d:e2:96:17:c5:56:3d:0b:86:10:4e: f3:d3:eb:6c:9b:1f:de:fe:6d:6f:ce:3c:8a:a7:3f:46:04:92: c4:49:63:90:37:f5:df:6d:a0:00:59:19:c5:a1:ff:84:e2:5f: 2d:28:15:cb:63:b0:91:fe:ce:e7:26:a1:86:9f:4c:cf:0d:8f: 07:54:9e:81:9d:0a:67:89:c3:58:68:7a:46:21:d5:65:0d:c6: e3:28:13:26:90:14:f7:31:c1:f1:1b:14:1f:23:32:9e:b6:0d: 01:30:59:2a:68:75:35:a2:6d:4e:eb:66:25:1e:3d:a2:c4:20: 4a:e9:09:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQzv3c098C54uF9sB+rm7CEtlv0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3YmMyOGM5MmEyMjlhNWFjNzhjMGRlMjg3ZDg5Y2Uz NzcyNjQwOTAeFw0yNTEyMjAxOTMwMzdaFw0yNTEyMjEyMzI4MzdaMDMxMTAvBgNV BAMTKEE4MkY1NURGRDZGMDExOTJBNTZDNUVDRjM3NkM1Q0NFNUI5QzIwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqxrgxHRi7j9WglO/mPoFBAhY Em41sIYB5LGENgU6ID9LvQR+K7KkZXLydeOGsvmwbwflS5bBNcnLA+H5DLnu55Yd F8q1B5XhSvfYkIiylBZQdEMHAAfuZEPkPrZl+HtycPRAVlDOHoQ6uX+oUewJmrYI t3wEFrfDp8EPeQpZOxIkIzcXWee8zluF9CP9yn5gx3CU7hkjWXEljXfXAGYVfnF4 yGwOkFmvbvkehnhWqwqQw4xvvOQAVhttGSsKSf8J4BaZBbag6FmyIrCWIIhtqlii 6s7cLPaGVO76sFcpszBO7bEVZYeCfuqYwCfwtNlO6gRrTAkGT7mBypadboNjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqC9V39bwEZKlbF7PN2xczlucIDEwHwYDVR0j BBgwFoAUVHvCjJKiKaWseMDeKH2JzjdyZAkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY0OWQ3ZjctYmIzZi00MTg3LWJlMjktNTllZjJkODkw MzlhLzAvNTQ3QkMyOEM5MkEyMjlBNUFDNzhDMERFMjg3RDg5Q0UzNzcyNjQwOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZIdkNqSktpS2FXc2VNRGVLSDJKempk eVpBay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjQ5ZDdmNy1i YjNmLTQxODctYmUyOS01OWVmMmQ4OTAzOWEvMC81NDdCQzI4QzkyQTIyOUE1QUM3 OEMwREUyODdEODlDRTM3NzI2NDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjy74f6oYHX/1NqcB+eTQ Yn89kVOaAYANiod1PC9E1LE4Lj6fKW83TR2wY4huxc1rZahg7EpNSW1nE8kIty3l uAIqeJQr0XX6CEC0qVug5MXXq556MGEgW59Idnnm+kbWzEVGjyi210nJVVB2NK0m KctDzexWbsxsa0ayMa37XWWlaP8DF03ilhfFVj0LhhBO89PrbJsf3v5tb848iqc/ RgSSxEljkDf1322gAFkZxaH/hOJfLSgVy2Owkf7O5yahhp9Mzw2PB1SegZ0KZ4nD WGh6RiHVZQ3G4ygTJpAU9zHB8RsUHyMynrYNATBZKmh1NaJtTutmJR49osQgSukJ mA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:43 2025 by rpki-client