This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: LGASPu6QNiIwy/e88VUM2vrgd1lOoyNEUCx8KPM1tXc= Subject key identifier: DA:CF:27:A9:CF:1C:97:F1:C8:AE:5E:71:CF:60:95:22:9B:6E:4C:6A Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 0BC9B659BED7A010D7680104CF888B3BA82C6A51 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 04D3 Signing time: Mon 15 Dec 2025 18:39:06 +0000 Manifest this update: Mon 15 Dec 2025 18:34:06 +0000 Manifest next update: Tue 16 Dec 2025 20:24:06 +0000 Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) 2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: GU1NCYT2rolqvuYAcUDWfS+c9wwq2tLpbzeHrOC6gmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c9:b6:59:be:d7:a0:10:d7:68:01:04:cf:88:8b:3b:a8:2c:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Dec 15 18:34:06 2025 GMT Not After : Dec 16 20:24:06 2025 GMT Subject: CN=DACF27A9CF1C97F1C8AE5E71CF6095229B6E4C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:70:02:91:3d:a2:35:48:c3:cc:12:2b:7f: 00:fa:f5:51:77:c1:4a:d1:b6:30:fe:b2:80:80:5f: 68:f1:1b:c5:a7:54:cf:01:04:9f:60:b0:96:6c:e4: fa:a4:59:6c:d7:93:e8:f7:9f:13:2d:d7:c9:80:e0: 46:f9:d1:53:ef:a7:3a:2b:82:a8:91:7c:7d:f7:12: b5:d9:2e:8e:ca:e2:3c:ed:65:36:4c:36:65:62:b5: 8c:8e:2e:3b:bf:46:b1:55:bd:44:63:60:ab:8a:5d: d3:c9:0a:c9:f8:f4:61:0a:29:80:d2:98:57:00:25: 37:71:d2:a7:fd:64:28:6a:32:f3:2f:8a:25:35:16: fb:6f:70:3f:8f:fd:49:03:37:f2:d2:9b:c3:f0:de: 7b:fa:17:01:32:5d:98:f9:7b:e9:67:86:3f:79:c0: 39:8f:7f:d3:2a:bc:79:60:c0:cc:cd:55:ed:ad:d9: ab:d4:3f:d5:d2:68:ed:6d:a2:fc:b9:a8:ba:d6:49: 39:b2:3d:a6:91:ab:c3:73:65:83:4c:b6:01:2f:bb: 3c:2e:29:f9:87:b8:00:e9:98:fe:6c:63:17:8d:ff: 90:ba:37:00:cc:51:d5:4f:ac:7b:54:58:f3:8c:3f: 2a:3d:6c:38:ce:6d:0c:0e:58:b6:8b:8e:0a:0d:f4: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:27:A9:CF:1C:97:F1:C8:AE:5E:71:CF:60:95:22:9B:6E:4C:6A X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b5:92:9b:f9:40:b7:17:38:1c:3f:42:e6:28:f1:87:be:ca: 44:63:ea:7e:2a:20:50:b3:f8:ec:aa:c7:6b:5d:70:bd:ad:30: 06:25:c0:c9:66:c6:8c:60:7f:24:c4:a7:25:46:69:a8:93:cb: 8f:2c:bb:8c:ab:89:81:24:ca:36:bb:31:b3:6a:10:4f:5a:e4: a5:6d:82:28:88:94:bb:5b:6b:8d:af:94:d0:84:6c:98:6e:0c: b4:d8:e9:b7:9d:1b:b7:42:80:09:27:d6:b4:bd:5d:db:ac:13: e9:3a:53:a6:22:66:a1:e6:d1:30:ff:6a:25:63:fb:08:04:7d: c4:b7:8d:83:c2:70:a8:ed:20:45:fe:2f:6c:97:fb:fe:ef:16: a2:54:b7:e9:d2:9c:56:88:e4:7a:95:f1:ac:d4:1b:91:30:ee: 17:92:76:21:d3:22:5e:43:7f:cc:65:10:e3:d9:9e:52:89:17: a4:87:1a:bc:e2:b7:61:d1:17:47:e4:83:f2:cb:53:9b:28:5c: bf:ff:16:e4:57:2d:84:2a:9b:ab:a1:cc:bf:ec:a3:8b:1c:86: 75:91:1e:dd:f7:01:b0:a9:a8:f6:12:b1:c5:6a:d0:c5:df:2a: e1:08:7f:9e:99:7f:36:38:03:43:65:64:cc:6a:41:d4:91:c1: 5c:b0:56:f7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUC8m2Wb7XoBDXaAEEz4iLO6gsalEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTEyMTUxODM0MDZaFw0yNTEyMTYyMDI0MDZaMDMxMTAvBgNV BAMTKERBQ0YyN0E5Q0YxQzk3RjFDOEFFNUU3MUNGNjA5NTIyOUI2RTRDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHHACkT2iNUjDzBIrfwD69VF3 wUrRtjD+soCAX2jxG8WnVM8BBJ9gsJZs5PqkWWzXk+j3nxMt18mA4Eb50VPvpzor gqiRfH33ErXZLo7K4jztZTZMNmVitYyOLju/RrFVvURjYKuKXdPJCsn49GEKKYDS mFcAJTdx0qf9ZChqMvMviiU1FvtvcD+P/UkDN/LSm8Pw3nv6FwEyXZj5e+lnhj95 wDmPf9MqvHlgwMzNVe2t2avUP9XSaO1tovy5qLrWSTmyPaaRq8NzZYNMtgEvuzwu KfmHuADpmP5sYxeN/5C6NwDMUdVPrHtUWPOMPyo9bDjObQwOWLaLjgoN9JQzAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU2s8nqc8cl/HIrl5xz2CVIptuTGowHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7WSm/lAtxc4HD9C5ijxh77KRGPqfiog ULP47KrHa11wva0wBiXAyWbGjGB/JMSnJUZpqJPLjyy7jKuJgSTKNrsxs2oQT1rk pW2CKIiUu1trja+U0IRsmG4MtNjpt50bt0KACSfWtL1d26wT6TpTpiJmoebRMP9q JWP7CAR9xLeNg8JwqO0gRf4vbJf7/u8WolS36dKcVojkepXxrNQbkTDuF5J2IdMi XkN/zGUQ49meUokXpIcavOK3YdEXR+SD8stTmyhcv/8W5FcthCqbq6HMv+yjixyG dZEe3fcBsKmo9hKxxWrQxd8q4Qh/npl/NjgDQ2VkzGpB1JHBXLBW9w== -----END CERTIFICATE-----Generated at Mon Dec 15 23:16:29 2025 by rpki-client