This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier: AvX/pzWMFvsi+IlKbYogJdqIq1KtWmvFq/b1LbgylXk=
Subject key identifier: 03:BF:9E:C1:29:74:75:24:F0:4C:3F:E0:6C:13:71:D1:59:CC:5D:18
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial: 5DD242938331E471FFAE95561A36B304E0225C08
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number: 0515
Signing time: Mon 02 Feb 2026 13:45:57 +0000
Manifest this update: Mon 02 Feb 2026 13:40:57 +0000
Manifest next update: Tue 03 Feb 2026 15:03:57 +0000
Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: shTxzfMpFIhrF7CqJNRSXutBzLx4wiUxJYcn98gxPHw=)
2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 22:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d2:42:93:83:31:e4:71:ff:ae:95:56:1a:36:b3:04:e0:22:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
Validity
Not Before: Feb 2 13:40:57 2026 GMT
Not After : Feb 3 15:03:57 2026 GMT
Subject: CN=03BF9EC129747524F04C3FE06C1371D159CC5D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:de:e6:79:9c:a7:57:67:8d:bc:91:a0:ac:
2f:04:44:20:d5:6d:8d:36:fe:bb:cd:cc:d2:be:37:
02:69:b5:72:75:02:93:c4:a2:7f:5e:e4:fe:38:ce:
97:f5:9e:7b:c8:0e:4c:55:eb:9a:ff:fb:35:82:78:
0b:00:0b:b8:75:57:cc:b5:18:6e:96:e2:c3:57:d5:
f1:9a:72:9a:5f:4c:e6:af:34:80:f1:ae:04:3a:a0:
cc:ff:8f:36:64:c9:e5:f3:59:b0:8b:b8:8a:00:f1:
ca:c9:ec:d9:8b:16:db:b6:ac:ff:c8:04:07:01:ea:
d3:bc:5a:5c:66:e6:6f:af:a1:d0:01:55:9c:dd:48:
26:a4:f1:48:fe:d8:05:ec:6c:d9:a2:e3:9f:6f:b9:
f6:95:aa:6a:7a:77:b4:03:8d:8c:8e:85:92:22:86:
9b:b3:11:7c:57:b6:7a:c0:4a:e7:e0:d9:77:c9:8c:
ca:8f:fe:a8:cf:d3:e3:9e:96:03:12:6d:88:aa:2e:
e8:e3:33:92:c9:44:c2:5d:de:86:b5:89:08:49:20:
74:6d:95:dc:e2:c5:7c:20:0d:2b:ae:e1:f5:b1:3e:
aa:17:2b:89:8d:fd:1a:2d:0a:9e:c0:85:6a:23:b6:
02:23:7b:1a:72:58:fe:a6:20:55:af:62:58:0d:6b:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:9E:C1:29:74:75:24:F0:4C:3F:E0:6C:13:71:D1:59:CC:5D:18
X509v3 Authority Key Identifier:
keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:62:11:2d:51:4b:77:8d:cc:c8:8e:8a:dc:10:f1:4b:da:f7:
a1:b0:99:86:0f:b9:e2:30:50:26:f6:da:e1:b9:6d:da:6e:6c:
2c:dd:60:86:0e:df:0f:d0:92:f2:e3:a3:da:50:c1:26:25:d0:
5d:3f:16:32:cf:af:8f:cb:b2:75:66:47:a8:10:2c:b7:dc:b3:
e7:82:80:a2:6f:ac:b4:f4:c6:14:25:03:f5:7b:b7:6d:0c:2d:
07:e0:56:b3:18:fb:2a:e9:49:38:a3:64:1f:30:8c:29:1a:88:
0e:7e:35:40:33:4d:60:fb:c5:cc:18:22:b7:0b:a7:ba:2d:2a:
06:67:bf:7f:ca:20:cd:d3:7e:21:05:d6:07:d1:5e:ed:8f:f9:
c8:d8:19:75:66:80:a5:74:e2:bb:b7:44:8e:5b:a3:0a:2a:22:
79:cc:4b:4b:5d:93:6e:1c:4c:8f:36:89:57:a7:17:d2:c4:18:
c4:81:87:e5:69:bd:35:52:6a:d8:22:b5:1f:e4:24:db:e6:19:
42:e3:44:f2:27:45:85:e9:d8:c5:cc:a1:77:98:b9:22:75:09:
55:54:66:48:7c:ed:92:47:55:c3:6d:7f:05:eb:60:d1:7e:4e:
c7:51:33:58:e9:0c:48:e8:95:9b:32:ef:cb:10:23:33:7b:53:
b6:53:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:44:50 2026 by rpki-client