This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json) Hash identifier: B/WIQ0zhcg2ODezWsHtrfBrdZhxg8dqFSUPx85lBLuU= Subject key identifier: 50:93:60:F0:8A:79:18:74:F2:7A:12:A9:E9:49:B9:87:04:71:E4:8B Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89 Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89 Certificate serial: 019B25BFA3C2DDB8E6E3E588CCAABAF49A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft Manifest number: 12EC Signing time: Tue 16 Dec 2025 06:01:14 +0000 Manifest this update: Tue 16 Dec 2025 06:01:14 +0000 Manifest next update: Wed 17 Dec 2025 06:01:14 +0000 Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: XmV3oF1lYooVNraNcS8dhJmWUM/ksiW7Dr9S6H5z/XA=) 2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:a3:c2:dd:b8:e6:e3:e5:88:cc:aa:ba:f4:9a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89 Validity Not Before: Dec 16 06:01:14 2025 GMT Not After : Dec 17 06:01:14 2025 GMT Subject: CN=509360f08a791874f27a12a9e949b9870471e48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:7c:8f:f2:8a:f6:c6:fc:f1:58:28:5c:7d: 33:ed:12:11:29:12:33:43:83:55:3c:e6:28:60:2a: b4:61:73:32:bd:70:fb:d6:1c:b2:00:d5:48:91:e6: 9b:46:24:a3:1b:ef:51:31:fa:25:43:95:5f:49:2b: 42:cd:04:ce:be:ad:85:ec:5f:31:89:ab:15:d0:3b: c2:ec:1e:43:c8:13:82:3b:83:6e:0d:de:fe:70:f2: d3:a3:c1:b9:d2:88:74:61:8a:32:c4:10:26:8b:bf: 32:53:77:3d:a1:ed:09:2d:32:46:b3:b5:57:dc:61: 3b:f2:62:93:cc:3c:3d:e8:f6:fb:e0:41:69:38:24: 6d:17:75:32:39:ff:5f:3d:13:34:99:0e:ac:43:51: 43:a0:d1:6c:f2:e7:1d:6f:bd:0b:46:ba:08:83:93: 9e:ba:23:e8:59:09:f6:d9:d1:19:bf:37:64:58:cf: 9c:40:2a:53:fe:b9:52:9f:83:0f:bf:ad:ec:8e:24: cc:1a:aa:97:ec:33:7a:b3:65:3d:26:9f:25:92:a4: a7:45:e9:48:fd:fd:2b:88:ac:6b:d1:87:8f:c8:04: 0a:56:57:de:22:5c:5a:fb:ea:42:94:ab:d3:67:bd: 38:1e:78:a1:fe:2a:85:39:3b:8d:5e:43:4a:c5:e2: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:93:60:F0:8A:79:18:74:F2:7A:12:A9:E9:49:B9:87:04:71:E4:8B X509v3 Authority Key Identifier: keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:15:4a:42:1a:68:4e:4d:c3:26:c1:2f:1c:3b:d3:21:64:a1: 8c:7f:43:a2:9d:1f:4f:2f:e5:e0:8e:3b:e4:ba:f4:cf:ff:f2: e6:de:fd:32:a0:5b:82:51:10:a1:e4:65:af:0f:a0:85:06:b5: 49:33:dd:7a:5b:79:59:a8:5a:f3:7d:33:3a:ed:96:03:ff:34: 42:81:93:c2:ee:d6:24:28:d3:ad:97:f0:35:f7:41:c4:b8:4e: 29:6c:d9:64:74:10:17:e3:d1:17:d3:b2:bb:ed:46:97:9e:45: aa:32:36:5e:88:0c:b0:a3:4f:bb:e0:c8:0f:7d:a9:08:e7:5b: 23:19:de:58:02:22:4e:24:91:9b:5c:36:af:52:a7:c2:a2:4a: 20:d9:f2:b9:7c:1a:43:ca:2a:ed:34:1b:83:24:bc:8c:ea:65: 1a:f7:6a:60:90:8b:b5:e9:c1:9c:7a:46:bf:57:18:af:ce:cc: eb:38:e3:21:f2:a8:51:aa:06:1c:01:cf:d7:35:2b:99:b5:5d: d4:31:6a:63:12:cf:82:5b:d7:2f:f7:73:05:ed:38:d4:7e:69: 8c:06:27:74:de:e7:5c:e6:d8:91:a3:84:fe:b6:a6:df:cb:3c: 1f:ef:10:a4:9c:63:70:7c:6b:d3:1b:9d:7d:5e:af:6b:a8:e5: 71:d5:86:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv6PC3bjm4+WIzKq69JqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGVkMWEwMTUzNzYyYTkyMmU1NWUwZjk0OGNkMWE1NDEx YzdhODkwHhcNMjUxMjE2MDYwMTE0WhcNMjUxMjE3MDYwMTE0WjAzMTEwLwYDVQQD Eyg1MDkzNjBmMDhhNzkxODc0ZjI3YTEyYTllOTQ5Yjk4NzA0NzFlNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qB8j/KK9sb88VgoXH0z7RIRKRIz Q4NVPOYoYCq0YXMyvXD71hyyANVIkeabRiSjG+9RMfolQ5VfSStCzQTOvq2F7F8x iasV0DvC7B5DyBOCO4NuDd7+cPLTo8G50oh0YYoyxBAmi78yU3c9oe0JLTJGs7VX 3GE78mKTzDw96Pb74EFpOCRtF3UyOf9fPRM0mQ6sQ1FDoNFs8ucdb70LRroIg5Oe uiPoWQn22dEZvzdkWM+cQCpT/rlSn4MPv63sjiTMGqqX7DN6s2U9Jp8lkqSnRelI /f0riKxr0YePyAQKVlfeIlxa++pClKvTZ704Hnih/iqFOTuNXkNKxeKbgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCTYPCKeRh08noSqelJuYcEceSLMB8GA1UdIwQY MBaAFAeO0aAVN2KpIuVeD5SM0aVBHHqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2Mjgt YjYyZGI3NzJiYmZhLzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2MjgtYjYyZGI3NzJiYmZh LzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRVKQhpo Tk3DJsEvHDvTIWShjH9Dop0fTy/l4I475Lr0z//y5t79MqBbglEQoeRlrw+ghQa1 STPdelt5Waha830zOu2WA/80QoGTwu7WJCjTrZfwNfdBxLhOKWzZZHQQF+PRF9Oy u+1Gl55FqjI2XogMsKNPu+DID32pCOdbIxneWAIiTiSRm1w2r1KnwqJKINnyuXwa Q8oq7TQbgyS8jOplGvdqYJCLtenBnHpGv1cYr87M6zjjIfKoUaoGHAHP1zUrmbVd 1DFqYxLPglvXL/dzBe041H5pjAYndN7nXObYkaOE/ram38s8H+8QpJxjcHxr0xud fV6va6jlcdWGDQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:10:27 2025 by rpki-client