This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          AvX/pzWMFvsi+IlKbYogJdqIq1KtWmvFq/b1LbgylXk=
Subject key identifier:   03:BF:9E:C1:29:74:75:24:F0:4C:3F:E0:6C:13:71:D1:59:CC:5D:18
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       5DD242938331E471FFAE95561A36B304E0225C08
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          0515
Signing time:             Mon 02 Feb 2026 13:45:57 +0000
Manifest this update:     Mon 02 Feb 2026 13:40:57 +0000
Manifest next update:     Tue 03 Feb 2026 15:03:57 +0000
Files and hashes:         1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: shTxzfMpFIhrF7CqJNRSXutBzLx4wiUxJYcn98gxPHw=)
                          2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 22:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:42:93:83:31:e4:71:ff:ae:95:56:1a:36:b3:04:e0:22:5c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Feb  2 13:40:57 2026 GMT
            Not After : Feb  3 15:03:57 2026 GMT
        Subject: CN=03BF9EC129747524F04C3FE06C1371D159CC5D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:de:e6:79:9c:a7:57:67:8d:bc:91:a0:ac:
                    2f:04:44:20:d5:6d:8d:36:fe:bb:cd:cc:d2:be:37:
                    02:69:b5:72:75:02:93:c4:a2:7f:5e:e4:fe:38:ce:
                    97:f5:9e:7b:c8:0e:4c:55:eb:9a:ff:fb:35:82:78:
                    0b:00:0b:b8:75:57:cc:b5:18:6e:96:e2:c3:57:d5:
                    f1:9a:72:9a:5f:4c:e6:af:34:80:f1:ae:04:3a:a0:
                    cc:ff:8f:36:64:c9:e5:f3:59:b0:8b:b8:8a:00:f1:
                    ca:c9:ec:d9:8b:16:db:b6:ac:ff:c8:04:07:01:ea:
                    d3:bc:5a:5c:66:e6:6f:af:a1:d0:01:55:9c:dd:48:
                    26:a4:f1:48:fe:d8:05:ec:6c:d9:a2:e3:9f:6f:b9:
                    f6:95:aa:6a:7a:77:b4:03:8d:8c:8e:85:92:22:86:
                    9b:b3:11:7c:57:b6:7a:c0:4a:e7:e0:d9:77:c9:8c:
                    ca:8f:fe:a8:cf:d3:e3:9e:96:03:12:6d:88:aa:2e:
                    e8:e3:33:92:c9:44:c2:5d:de:86:b5:89:08:49:20:
                    74:6d:95:dc:e2:c5:7c:20:0d:2b:ae:e1:f5:b1:3e:
                    aa:17:2b:89:8d:fd:1a:2d:0a:9e:c0:85:6a:23:b6:
                    02:23:7b:1a:72:58:fe:a6:20:55:af:62:58:0d:6b:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BF:9E:C1:29:74:75:24:F0:4C:3F:E0:6C:13:71:D1:59:CC:5D:18
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:62:11:2d:51:4b:77:8d:cc:c8:8e:8a:dc:10:f1:4b:da:f7:
         a1:b0:99:86:0f:b9:e2:30:50:26:f6:da:e1:b9:6d:da:6e:6c:
         2c:dd:60:86:0e:df:0f:d0:92:f2:e3:a3:da:50:c1:26:25:d0:
         5d:3f:16:32:cf:af:8f:cb:b2:75:66:47:a8:10:2c:b7:dc:b3:
         e7:82:80:a2:6f:ac:b4:f4:c6:14:25:03:f5:7b:b7:6d:0c:2d:
         07:e0:56:b3:18:fb:2a:e9:49:38:a3:64:1f:30:8c:29:1a:88:
         0e:7e:35:40:33:4d:60:fb:c5:cc:18:22:b7:0b:a7:ba:2d:2a:
         06:67:bf:7f:ca:20:cd:d3:7e:21:05:d6:07:d1:5e:ed:8f:f9:
         c8:d8:19:75:66:80:a5:74:e2:bb:b7:44:8e:5b:a3:0a:2a:22:
         79:cc:4b:4b:5d:93:6e:1c:4c:8f:36:89:57:a7:17:d2:c4:18:
         c4:81:87:e5:69:bd:35:52:6a:d8:22:b5:1f:e4:24:db:e6:19:
         42:e3:44:f2:27:45:85:e9:d8:c5:cc:a1:77:98:b9:22:75:09:
         55:54:66:48:7c:ed:92:47:55:c3:6d:7f:05:eb:60:d1:7e:4e:
         c7:51:33:58:e9:0c:48:e8:95:9b:32:ef:cb:10:23:33:7b:53:
         b6:53:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:44:50 2026 by rpki-client