This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json) Hash identifier: 2cIENwsEjME6ohIgz2PGhuOL+1cuDTwjyIweWbfDjho= Subject key identifier: 8C:F6:B8:5D:56:12:A5:82:BB:49:39:9F:8E:A8:FD:9A:E8:5A:C6:5A Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad Certificate serial: 019B0D498BE17FF655C782B94BBF50D3D499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 12:01:22 +0000 Manifest this update: Thu 11 Dec 2025 12:01:22 +0000 Manifest next update: Fri 12 Dec 2025 12:01:22 +0000 Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: kuYQxhN3Z/bfv16AbUxv2Ft7uiEBorpV2ocPIkRTkmI=) 2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:8b:e1:7f:f6:55:c7:82:b9:4b:bf:50:d3:d4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad Validity Not Before: Dec 11 12:01:22 2025 GMT Not After : Dec 12 12:01:22 2025 GMT Subject: CN=8cf6b85d5612a582bb49399f8ea8fd9ae85ac65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:ce:fa:20:52:93:a7:b6:8f:72:90:3e:40: f7:4c:9d:6a:82:3b:02:07:9c:b0:59:b7:08:03:ea: 1e:e6:05:77:aa:69:d3:01:1c:1b:fe:60:97:f0:f2: 59:76:d0:0b:ec:02:1d:38:a8:1d:d6:b4:d2:49:30: e8:1e:1b:25:6b:52:6a:6e:73:d8:5c:8a:e9:ff:67: 1f:26:93:2f:e0:4a:a4:47:2c:59:89:ec:c5:7f:f0: 76:22:6a:2f:01:44:c1:87:f7:03:2b:2a:bb:d3:dc: 82:d5:da:f8:82:0a:9c:61:94:7c:33:3f:9f:a6:93: c7:3c:1e:ab:a2:65:57:e6:70:2b:67:b3:63:b0:0e: 80:e7:b5:13:e8:62:03:50:9c:16:62:19:78:3b:d2: d4:23:fc:6d:6a:90:8c:f9:56:6b:87:c3:9a:1f:1f: 71:a6:81:31:84:a1:1e:1b:c8:71:b7:a5:bc:42:4e: 60:8d:b4:da:4e:fb:77:9a:62:89:6e:38:a9:9b:fb: ae:17:a3:3b:e8:a4:8f:8e:e9:0b:74:0d:12:67:ab: 4b:4e:91:39:d1:0c:2b:66:e4:08:dd:20:a3:b8:27: ce:e8:b7:df:c4:14:2b:47:08:85:60:99:73:1b:48: ce:b2:d7:50:fe:c2:ef:a7:a1:d3:38:b9:b0:41:58: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:B8:5D:56:12:A5:82:BB:49:39:9F:8E:A8:FD:9A:E8:5A:C6:5A X509v3 Authority Key Identifier: keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f1:9e:ca:bb:7f:f0:45:f3:0c:6b:56:65:6f:ba:cf:38:c8: d1:a5:06:5c:e8:57:2a:3e:7f:db:63:be:1d:aa:3b:e6:13:f3: ad:e7:99:cf:61:60:b8:82:14:b1:1d:32:c8:df:aa:09:da:20: 32:fd:ab:d2:cc:74:3c:01:c3:ed:42:7d:d4:54:a5:23:18:91: ec:41:b1:f6:66:75:b9:a6:78:69:da:bd:81:a6:e4:90:2c:fe: b9:3f:a0:88:ca:4f:9c:db:30:76:43:47:90:07:0d:32:61:22: 42:e4:a9:1f:09:32:3b:e7:6e:3b:6b:be:69:ac:6d:4e:b0:8a: 49:c6:ca:7d:3b:88:e8:f2:78:7b:2f:a6:46:77:df:74:61:5a: 32:6a:d7:e0:47:10:67:c1:10:e0:36:c9:b9:c0:3b:22:79:1e: f9:8a:b6:9b:29:1f:11:44:ba:f4:6c:ac:a7:25:4e:fc:59:e7: 39:40:d9:bd:ee:11:d8:8b:80:72:32:11:2d:a8:9e:06:0b:f4: e4:42:38:be:12:31:d9:23:94:47:ef:2e:79:52:63:df:71:04: 05:8b:14:b8:50:ba:01:f5:4c:45:c1:ca:93:01:0c:15:95:8e: dc:0d:17:d9:0d:81:b9:c7:7f:52:f3:76:27:c9:79:bc:9c:4d: fa:ac:a4:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSYvhf/ZVx4K5S79Q09SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh ODgzYWQwHhcNMjUxMjExMTIwMTIyWhcNMjUxMjEyMTIwMTIyWjAzMTEwLwYDVQQD Eyg4Y2Y2Yjg1ZDU2MTJhNTgyYmI0OTM5OWY4ZWE4ZmQ5YWU4NWFjNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZnO+iBSk6e2j3KQPkD3TJ1qgjsC B5ywWbcIA+oe5gV3qmnTARwb/mCX8PJZdtAL7AIdOKgd1rTSSTDoHhsla1JqbnPY XIrp/2cfJpMv4EqkRyxZiezFf/B2ImovAUTBh/cDKyq709yC1dr4ggqcYZR8Mz+f ppPHPB6romVX5nArZ7NjsA6A57UT6GIDUJwWYhl4O9LUI/xtapCM+VZrh8OaHx9x poExhKEeG8hxt6W8Qk5gjbTaTvt3mmKJbjipm/uuF6M76KSPjukLdA0SZ6tLTpE5 0QwrZuQI3SCjuCfO6LffxBQrRwiFYJlzG0jOstdQ/sLvp6HTOLmwQVhRLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz2uF1WEqWCu0k5n46o/ZroWsZaMB8GA1UdIwQY MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/Geyrt/ 8EXzDGtWZW+6zzjI0aUGXOhXKj5/22O+Hao75hPzreeZz2FguIIUsR0yyN+qCdog Mv2r0sx0PAHD7UJ91FSlIxiR7EGx9mZ1uaZ4adq9gabkkCz+uT+giMpPnNswdkNH kAcNMmEiQuSpHwkyO+duO2u+aaxtTrCKScbKfTuI6PJ4ey+mRnffdGFaMmrX4EcQ Z8EQ4DbJucA7Inke+Yq2mykfEUS69GyspyVO/FnnOUDZve4R2IuAcjIRLaieBgv0 5EI4vhIx2SOUR+8ueVJj33EEBYsUuFC6AfVMRcHKkwEMFZWO3A0X2Q2Bucd/UvN2 J8l5vJxN+qykQA== -----END CERTIFICATE-----Generated at Thu Dec 11 18:45:48 2025 by rpki-client