This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.mft
File: 147B2C91005E4AA24DD7C09458234D0BDE85055F.mft (raw, json)
Hash identifier: ZNm6prbkAzWanJwRVRtE7SsGXb6cWSqAupDs5Dic5EA=
Subject key identifier: 14:8E:46:75:B2:32:29:6F:63:3F:44:3B:F0:3E:43:B9:2D:88:8F:DA
Authority key identifier: 14:7B:2C:91:00:5E:4A:A2:4D:D7:C0:94:58:23:4D:0B:DE:85:05:5F
Certificate issuer: /CN=147b2c91005e4aa24dd7c09458234d0bde85055f
Certificate serial: 74CAEFFC04EFA3FA74DD29163C6CA6E6E6D20204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHsskQBeSqJN18CUWCNNC96FBV8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.mft
Manifest number: 0C
Signing time: Fri 26 Dec 2025 12:37:09 +0000
Manifest this update: Fri 26 Dec 2025 12:32:09 +0000
Manifest next update: Sat 27 Dec 2025 15:37:09 +0000
Files and hashes: 1: 147B2C91005E4AA24DD7C09458234D0BDE85055F.crl (hash: H6Ys7OvCjVNkn9hp/T3uUWRHnj723LIaq5P6PGKBOdw=)
2: AS202782.asa (hash: L5VhVVIQz5lfLLm8u+fHFE1ZAc9lBbD7K+nqOwJgnfs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHsskQBeSqJN18CUWCNNC96FBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ca:ef:fc:04:ef:a3:fa:74:dd:29:16:3c:6c:a6:e6:e6:d2:02:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147b2c91005e4aa24dd7c09458234d0bde85055f
Validity
Not Before: Dec 26 12:32:09 2025 GMT
Not After : Dec 27 15:37:09 2025 GMT
Subject: CN=148E4675B232296F633F443BF03E43B92D888FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:5f:21:75:20:45:91:a3:1f:fc:dc:64:87:
09:c2:2a:f6:62:1e:f7:eb:43:a8:ab:b9:aa:86:26:
bc:64:86:43:8b:82:cc:6d:2b:28:4e:a3:39:78:24:
90:95:6f:31:0c:0d:f3:56:5b:a1:35:23:91:90:02:
1a:d7:29:d3:27:b3:57:ac:03:93:6c:0b:81:b6:f1:
50:54:d1:ee:d1:37:63:17:bb:b4:e1:5c:5c:74:ed:
78:9e:54:e9:ae:66:f1:f3:99:e9:1f:06:57:61:bd:
38:e7:2c:b2:c9:ac:35:3c:8d:d7:8e:0b:2a:57:ed:
fb:2f:a6:63:4d:69:7a:b0:d8:fd:36:39:6a:74:d8:
93:25:33:92:da:45:0f:f3:0c:ee:4e:35:10:39:b9:
2e:9a:9e:e6:23:ee:96:15:8f:ab:f4:ff:27:6c:2a:
e7:75:8c:76:7e:43:a3:3c:af:4a:35:06:14:10:e1:
6f:71:c6:22:3a:50:36:e4:8d:64:3f:f5:e4:2a:1f:
f0:68:84:39:70:9c:31:f9:0c:5d:6b:91:ed:ee:3e:
62:58:c3:3e:e8:60:fb:fd:53:29:ef:43:48:9f:92:
63:ab:14:c0:08:67:53:0b:8f:a8:9c:65:60:67:4d:
9a:06:c0:1a:f3:16:48:24:8f:52:c7:93:69:15:66:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:46:75:B2:32:29:6F:63:3F:44:3B:F0:3E:43:B9:2D:88:8F:DA
X509v3 Authority Key Identifier:
keyid:14:7B:2C:91:00:5E:4A:A2:4D:D7:C0:94:58:23:4D:0B:DE:85:05:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHsskQBeSqJN18CUWCNNC96FBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/3/147B2C91005E4AA24DD7C09458234D0BDE85055F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:d3:c9:98:fa:c8:77:7d:f2:e5:05:e6:32:45:27:92:22:
70:03:71:fc:a1:75:d5:84:4f:3d:60:ea:22:84:6f:e6:76:20:
48:1d:3c:12:d0:7c:75:ba:ff:f2:2f:67:53:80:72:0e:43:6a:
77:5c:ef:06:67:3e:28:be:22:0e:b6:f3:d7:5b:5a:8e:53:ef:
0a:2d:79:9f:ff:7b:15:57:1e:2c:eb:18:d3:3d:0a:ab:c2:d6:
5a:13:75:10:e8:e0:f0:b8:ee:89:79:18:60:27:4d:a3:c2:8c:
7f:37:ed:62:87:7c:7a:47:05:2c:ac:ac:53:56:6a:04:36:3d:
ad:99:5f:72:f2:53:82:fe:63:8d:e4:e7:b9:c2:c9:f2:66:cc:
1e:0c:d6:9d:99:0f:46:f7:e2:e9:c7:4c:2e:69:84:61:f9:d1:
5f:c1:64:16:97:87:d4:7d:d1:8b:5e:33:24:5c:78:4d:21:46:
89:74:a7:10:5e:f7:c5:a0:ad:19:e6:2e:c2:56:02:ec:1a:ce:
bd:a9:ae:89:5c:39:d7:47:99:48:7d:f3:a4:b5:8a:bd:0a:a2:
4a:22:c5:00:42:c3:31:51:1d:a8:e8:e9:57:6f:c4:33:5f:94:
0f:c5:08:b5:16:89:a0:16:e6:5c:9d:5c:a3:1e:de:44:78:4f:
90:48:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:43:13 2025 by rpki-client