This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft File: p75X8mosEHsadWuDFxXr0HqH-5M.mft (raw, json) Hash identifier: S7o5WX+SRkQ7DAGyU9P8THQvlsAO40ChQLxvxEthDxY= Subject key identifier: B4:AC:8B:42:20:B4:2C:FD:EA:6D:8C:AD:D0:10:8B:76:DC:A4:A3:8D Authority key identifier: A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93 Certificate issuer: /CN=a7be57f26a2c107b1a756b831715ebd07a87fb93 Certificate serial: 019AF3F712AB43943A2B4164E5E79B1D4876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft Manifest number: E7 Signing time: Sat 06 Dec 2025 14:00:46 +0000 Manifest this update: Sat 06 Dec 2025 14:00:46 +0000 Manifest next update: Sun 07 Dec 2025 14:00:46 +0000 Files and hashes: 1: JiAa07vPm_-Pb33la8lIiEVcVsk.roa (hash: LTCDMolpBsWj5ww+QHR47bnfnmdoJo1c8oI26KgxQVA=) 2: p75X8mosEHsadWuDFxXr0HqH-5M.crl (hash: s5PKmcWhePKn9BwPRDU52+nwMOY1swDCLr0bep6LeFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:12:ab:43:94:3a:2b:41:64:e5:e7:9b:1d:48:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7be57f26a2c107b1a756b831715ebd07a87fb93 Validity Not Before: Dec 6 14:00:46 2025 GMT Not After : Dec 7 14:00:46 2025 GMT Subject: CN=b4ac8b4220b42cfdea6d8cadd0108b76dca4a38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:6f:d6:4d:01:b3:6b:94:3c:c7:1c:0e:af: ce:27:51:da:e0:d7:a0:be:e0:c5:56:3c:d4:ed:1d: f8:f5:72:05:f1:81:f6:3d:62:f6:37:33:70:73:4e: 6b:95:1a:1f:b2:18:e6:19:15:38:ad:d2:72:b8:40: 67:1f:33:cb:fa:c9:e8:88:8a:a5:93:77:3b:fc:fe: 51:a5:a3:a6:8e:13:6f:13:96:f6:e4:da:5b:ca:31: 2f:3c:09:17:1e:be:6a:e3:92:0c:92:06:e8:ab:4a: b6:e6:29:94:36:1c:22:30:5d:09:49:d5:fa:10:0b: 39:4c:4c:81:94:a0:b7:1f:6e:9c:a6:f8:40:86:a4: 6f:9e:8f:04:51:7e:d1:d9:27:d8:00:6a:54:ee:40: c2:ba:a6:1a:86:49:83:20:55:f8:65:42:a3:da:76: 1c:21:4f:4b:df:40:94:2f:45:18:b5:ff:e8:61:a0: 3d:de:d3:fc:c6:83:32:6a:4c:e3:1f:16:7f:80:29: 64:9c:8f:6a:4a:42:af:b0:5a:70:a5:18:61:e5:1d: 3c:fb:94:b2:8f:94:91:95:08:16:1d:ef:35:b4:b9: a0:e4:a8:e9:36:0c:3b:e6:d9:95:b3:0f:6c:4d:58: 49:5d:0b:7f:75:e2:c2:22:59:61:06:66:c4:96:91: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AC:8B:42:20:B4:2C:FD:EA:6D:8C:AD:D0:10:8B:76:DC:A4:A3:8D X509v3 Authority Key Identifier: keyid:A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:48:f7:fc:77:da:3a:18:a9:5f:48:61:3d:b1:b7:fd:29:e1: 21:fe:6e:2f:d7:8c:a6:d3:99:a2:a3:8c:f3:6b:46:fc:4b:24: 6c:a9:b5:d9:f8:6c:5e:e3:7b:be:c4:3a:a9:09:14:b9:c7:eb: ac:8e:be:f2:ff:c2:7c:a3:f3:38:23:91:40:f8:70:ca:5b:c1: f5:ae:5a:9d:84:61:73:a5:20:95:0b:39:4c:e6:65:2d:f5:00: 80:99:5d:29:0e:5a:65:75:1b:d1:f7:0c:2e:ae:b2:34:0b:3c: ac:58:fe:26:67:4a:0d:ce:64:80:50:42:d5:f6:cc:48:7d:c4: 26:dc:c7:2d:e3:0f:ab:3e:dd:1e:e2:b4:ee:7b:2f:d0:91:b1: 11:39:f1:df:ce:ef:1a:d4:9d:02:ba:40:0d:8f:4c:6e:f4:3e: d2:72:08:84:01:11:92:a4:2b:c1:aa:e4:d4:e8:0c:d7:3a:87: ec:83:9f:59:ec:49:56:b9:17:02:15:c1:b8:c1:d5:32:b7:c5: d6:da:15:de:76:2d:c7:5c:0c:6f:e8:93:cd:1b:a1:8e:66:b1: 36:af:a1:b3:12:b5:88:28:5a:65:96:ee:8a:39:22:02:aa:2d: 0e:61:88:13:7c:6d:19:93:05:c8:9d:c4:cf:40:f8:56:63:6f: 58:3b:7e:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xKrQ5Q6K0Fk5eebHUh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmU1N2YyNmEyYzEwN2IxYTc1NmI4MzE3MTVlYmQwN2E4 N2ZiOTMwHhcNMjUxMjA2MTQwMDQ2WhcNMjUxMjA3MTQwMDQ2WjAzMTEwLwYDVQQD EyhiNGFjOGI0MjIwYjQyY2ZkZWE2ZDhjYWRkMDEwOGI3NmRjYTRhMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubBv1k0Bs2uUPMccDq/OJ1Ha4Neg vuDFVjzU7R349XIF8YH2PWL2NzNwc05rlRofshjmGRU4rdJyuEBnHzPL+snoiIql k3c7/P5RpaOmjhNvE5b25NpbyjEvPAkXHr5q45IMkgboq0q25imUNhwiMF0JSdX6 EAs5TEyBlKC3H26cpvhAhqRvno8EUX7R2SfYAGpU7kDCuqYahkmDIFX4ZUKj2nYc IU9L30CUL0UYtf/oYaA93tP8xoMyakzjHxZ/gClknI9qSkKvsFpwpRhh5R08+5Sy j5SRlQgWHe81tLmg5KjpNgw75tmVsw9sTVhJXQt/deLCIllhBmbElpEGIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSsi0IgtCz96m2MrdAQi3bcpKONMB8GA1UdIwQY MBaAFKe+V/JqLBB7GnVrgxcV69B6h/uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDc1WDhtb3NFSHNhZFd1REZ4WHIwSHFILTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNzBkNTUtOGZlYy00ZDM1LTgyODIt ZDNmYzkxYTJkYzg5LzEvcDc1WDhtb3NFSHNhZFd1REZ4WHIwSHFILTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNzBkNTUtOGZlYy00ZDM1LTgyODItZDNmYzkxYTJkYzg5 LzEvcDc1WDhtb3NFSHNhZFd1REZ4WHIwSHFILTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEj3/Hfa OhipX0hhPbG3/SnhIf5uL9eMptOZoqOM82tG/EskbKm12fhsXuN7vsQ6qQkUucfr rI6+8v/CfKPzOCORQPhwylvB9a5anYRhc6UglQs5TOZlLfUAgJldKQ5aZXUb0fcM Lq6yNAs8rFj+JmdKDc5kgFBC1fbMSH3EJtzHLeMPqz7dHuK07nsv0JGxETnx387v GtSdArpADY9MbvQ+0nIIhAERkqQrwark1OgM1zqH7IOfWexJVrkXAhXBuMHVMrfF 1toV3nYtx1wMb+iTzRuhjmaxNq+hsxK1iChaZZbuijkiAqotDmGIE3xtGZMFyJ3E z0D4VmNvWDt+wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:06 2025 by rpki-client