This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File: 547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier: dDOBBc04JcwxlCsczJNfEvtWt5uwDLrZneZ6HG1XlbI=
Subject key identifier: AD:6A:AF:21:7D:C9:C5:DB:BA:D6:BC:3F:B0:A4:1D:A0:F4:CA:40:DF
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer: /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial: 7D565AD205AC7FEFC6B3E8790B7BA4E45C49B4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number: 0292
Signing time: Wed 17 Dec 2025 03:50:37 +0000
Manifest this update: Wed 17 Dec 2025 03:45:37 +0000
Manifest next update: Thu 18 Dec 2025 05:02:37 +0000
Files and hashes: 1: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=)
2: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=)
3: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=)
4: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=)
5: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: cYbQ2oSqcvim+ErGpppUJLzW7zL9tHIWFyoHxNYLdf0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 05:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:56:5a:d2:05:ac:7f:ef:c6:b3:e8:79:0b:7b:a4:e4:5c:49:b4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
Validity
Not Before: Dec 17 03:45:37 2025 GMT
Not After : Dec 18 05:02:37 2025 GMT
Subject: CN=AD6AAF217DC9C5DBBAD6BC3FB0A41DA0F4CA40DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1f:26:9d:cb:97:07:a2:96:81:d5:6e:44:25:
a4:11:07:51:6e:cc:cb:f7:34:07:89:44:2f:18:99:
ce:e7:7d:d1:a2:39:0d:5d:93:5a:5e:2e:ff:79:f4:
03:ff:f7:a5:55:11:39:82:1f:96:fb:09:51:19:31:
2f:a2:de:db:bf:15:fd:2a:4e:50:75:ea:11:f0:88:
85:4a:64:5d:50:b7:2e:42:4f:6a:d7:21:2f:fd:81:
ec:1f:0d:ff:5b:bc:17:b9:84:1b:33:bf:a2:70:5c:
fb:a5:de:27:a9:d3:04:05:93:e6:a2:fb:92:2d:34:
f4:2d:a7:e7:6b:57:8f:63:a5:6f:a6:ec:d9:ba:54:
c2:fe:bf:41:bb:c3:3b:69:9c:01:e5:c3:d7:f8:4c:
ee:ed:dd:8e:ad:92:45:08:4f:67:e0:f6:4e:3e:2b:
d5:06:24:8f:7c:0c:5e:e8:35:32:53:8d:a7:77:99:
ff:bd:10:b4:b0:ab:cd:d3:9f:9a:95:40:ef:66:1d:
96:19:3c:d6:bb:2f:a4:de:5b:90:25:32:8e:26:a4:
f1:61:ae:4d:ae:a9:00:a2:bf:e4:ee:f3:7f:f8:c8:
4a:76:44:86:77:5d:97:3a:dd:8e:3a:41:68:6c:9d:
41:69:40:81:8e:33:6c:32:cb:0b:9e:53:8b:be:fa:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:AF:21:7D:C9:C5:DB:BA:D6:BC:3F:B0:A4:1D:A0:F4:CA:40:DF
X509v3 Authority Key Identifier:
keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:ba:48:7b:41:dc:b4:b5:38:15:80:9f:14:6b:c6:d9:f7:
aa:13:76:2d:50:46:5e:76:a5:50:3c:1a:32:28:ce:da:a7:65:
f4:5e:93:63:40:92:cf:52:fd:81:66:24:db:5a:5a:84:bf:a6:
b5:f5:40:14:8e:82:69:6b:2c:00:82:db:3b:89:62:a3:cc:b3:
67:d5:a0:b4:d5:4e:23:f0:ad:13:4a:fc:0a:0f:c6:7d:eb:d5:
9e:ba:23:dd:31:e3:b3:c5:26:ef:50:63:ac:f4:62:ea:a5:28:
a8:b9:59:e8:16:f8:6d:99:2d:a7:91:92:3e:32:d7:19:a6:57:
c4:0b:2c:66:c4:2f:2f:05:c7:10:96:b0:91:47:11:60:6c:4a:
90:f4:97:54:43:52:6b:f9:ba:c9:fa:a1:ce:71:fd:2a:dd:7c:
3a:3e:d6:dd:a5:a6:38:93:8d:0f:50:ae:b6:1c:c3:f0:cd:05:
5f:14:30:66:1b:3f:6a:3d:db:f3:3f:88:e7:04:9c:8f:8a:b3:
cc:82:51:71:01:24:cb:14:a1:f9:14:9f:d4:32:9d:0c:a3:92:
4e:d5:fe:e6:00:90:14:a7:a1:8d:ef:44:91:02:55:88:7a:bf:
a0:0a:3a:27:9f:07:eb:90:0c:05:18:9a:79:19:02:3b:9b:cb:
3f:bd:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:51:48 2025 by rpki-client