This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json) Hash identifier: s9BSicwQdBI7ttTsOZREU8meK2OK0gesUsi9U7rpbIU= Subject key identifier: F2:BA:17:2E:F4:6A:A1:C5:0F:8E:F0:69:0B:9E:AD:98:6B:E4:2F:69 Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Certificate serial: 019B5AF60EE224EEBFB0A8460B06E6A2B250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 14:00:33 +0000 Manifest this update: Fri 26 Dec 2025 14:00:33 +0000 Manifest next update: Sat 27 Dec 2025 14:00:33 +0000 Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=) 2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=) 3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: zQZ6Wv6KT/RD6IvMqgP2a8kmG20fdaD3axUVgHqIQw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:0e:e2:24:ee:bf:b0:a8:46:0b:06:e6:a2:b2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657 Validity Not Before: Dec 26 14:00:33 2025 GMT Not After : Dec 27 14:00:33 2025 GMT Subject: CN=f2ba172ef46aa1c50f8ef0690b9ead986be42f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:10:93:c3:b6:18:59:00:a3:96:78:ed:3f: 90:74:f1:33:b1:c2:36:6a:d5:23:d7:83:77:1a:bc: 96:fd:0a:37:10:f1:59:38:49:13:51:11:04:17:3e: ef:bc:8b:35:49:eb:99:f1:44:b5:64:1b:3c:5c:35: 79:c6:d2:9d:10:7a:60:1f:4c:b0:67:7f:15:81:a1: e1:67:8b:06:eb:47:b6:b6:06:03:8b:09:c9:8e:f3: bf:4e:09:51:a2:14:db:76:16:6e:78:65:2e:1c:3a: 03:a2:bb:c7:40:54:1c:31:ba:96:1e:7d:c0:c3:90: 0a:f1:80:a9:da:88:51:65:01:9e:8a:78:2f:a6:9b: 0c:c8:2c:0a:3f:0d:80:3e:bc:f2:73:04:87:da:dd: 2a:12:a7:10:b0:21:47:ae:ed:0f:97:5f:8c:95:13: ec:4c:f8:56:90:81:5a:0e:e6:49:23:1b:6b:23:b1: 85:9b:3e:9d:f5:55:e6:0a:79:96:b6:ab:69:0f:59: 6d:4f:74:de:c9:4f:b0:d4:5c:c5:63:1a:a6:ee:9e: ac:a4:dd:00:56:32:a2:f0:20:8c:49:9f:4d:eb:67: b1:15:63:35:21:77:83:1e:05:95:29:42:a3:3b:dc: 91:bf:63:bd:97:64:84:90:21:4a:35:4b:94:e6:8a: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:17:2E:F4:6A:A1:C5:0F:8E:F0:69:0B:9E:AD:98:6B:E4:2F:69 X509v3 Authority Key Identifier: keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ab:a6:4a:ee:7f:7f:b2:00:a5:06:b0:f4:ef:d0:22:91:8a: ab:0e:6a:de:61:6a:cd:b9:cc:81:59:0a:3f:59:ff:56:85:27: 34:b6:4b:e3:e0:4b:47:09:2d:ea:0a:f8:03:ea:0e:3d:79:a6: 69:8d:26:e4:68:3e:16:e5:da:0a:4e:aa:41:67:6b:99:4d:a2: 62:e9:90:e3:1e:d1:96:84:b8:de:61:d4:a2:b9:3c:8a:37:d4: 2a:94:8e:5a:93:0d:8b:4a:a2:14:ff:25:3f:b4:bd:0d:2c:35: 78:49:28:82:5d:07:03:2f:5e:d1:cb:67:0e:75:c3:19:d4:c1: 76:d1:3b:99:aa:76:45:1e:77:83:99:d1:7f:50:26:2c:a1:c3: cf:ae:f7:06:90:c2:90:85:5b:3f:bf:77:4c:a4:e8:a3:78:f4: 58:8c:0f:9a:3c:10:71:cf:fd:c5:c5:46:65:e4:fc:0b:9c:3b: 15:20:9c:4a:80:18:cb:5c:6e:f5:15:d7:bf:43:f7:47:77:47: 21:05:a0:14:24:58:fe:3b:38:40:ce:90:41:a4:8b:05:e2:dd: 1e:85:18:0a:45:74:60:87:6d:a0:94:94:de:5a:95:54:fe:5b: 86:a2:6a:5a:3b:04:ca:f2:46:3e:d7:54:bb:2c:a6:a1:7b:e2: 76:7f:fb:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9g7iJO6/sKhGCwbmorJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh OWM2NTcwHhcNMjUxMjI2MTQwMDMzWhcNMjUxMjI3MTQwMDMzWjAzMTEwLwYDVQQD EyhmMmJhMTcyZWY0NmFhMWM1MGY4ZWYwNjkwYjllYWQ5ODZiZTQyZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXAQk8O2GFkAo5Z47T+QdPEzscI2 atUj14N3GryW/Qo3EPFZOEkTUREEFz7vvIs1SeuZ8US1ZBs8XDV5xtKdEHpgH0yw Z38VgaHhZ4sG60e2tgYDiwnJjvO/TglRohTbdhZueGUuHDoDorvHQFQcMbqWHn3A w5AK8YCp2ohRZQGeingvppsMyCwKPw2APrzycwSH2t0qEqcQsCFHru0Pl1+MlRPs TPhWkIFaDuZJIxtrI7GFmz6d9VXmCnmWtqtpD1ltT3TeyU+w1FzFYxqm7p6spN0A VjKi8CCMSZ9N62exFWM1IXeDHgWVKUKjO9yRv2O9l2SEkCFKNUuU5oqq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK6Fy70aqHFD47waQuerZhr5C9pMB8GA1UdIwQY MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt ZTBmNWQ4NmUzN2EzLzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqumSu5/ f7IApQaw9O/QIpGKqw5q3mFqzbnMgVkKP1n/VoUnNLZL4+BLRwkt6gr4A+oOPXmm aY0m5Gg+FuXaCk6qQWdrmU2iYumQ4x7RloS43mHUork8ijfUKpSOWpMNi0qiFP8l P7S9DSw1eEkogl0HAy9e0ctnDnXDGdTBdtE7map2RR53g5nRf1AmLKHDz673BpDC kIVbP793TKToo3j0WIwPmjwQcc/9xcVGZeT8C5w7FSCcSoAYy1xu9RXXv0P3R3dH IQWgFCRY/js4QM6QQaSLBeLdHoUYCkV0YIdtoJSU3lqVVP5bhqJqWjsEyvJGPtdU uyymoXvidn/7FA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:59:58 2025 by rpki-client