This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json) Hash identifier: HZy0ZraH7x1Gd0hF3PU+FbFhXtXmjCDHkXiLbnrH6LE= Subject key identifier: 86:F1:94:4B:B5:B8:68:E1:A8:58:7E:99:32:1B:47:A4:7E:0D:E5:56 Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b Certificate serial: 019AF46599739346CB1B9A3BEEB47CCBBA44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 16:01:30 +0000 Manifest this update: Sat 06 Dec 2025 16:01:30 +0000 Manifest next update: Sun 07 Dec 2025 16:01:30 +0000 Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=) 2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: u9snIphq13xKOsG3saez4BPwGQ5Roxo1r6xS0q/xMh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:99:73:93:46:cb:1b:9a:3b:ee:b4:7c:cb:ba:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b Validity Not Before: Dec 6 16:01:30 2025 GMT Not After : Dec 7 16:01:30 2025 GMT Subject: CN=86f1944bb5b868e1a8587e99321b47a47e0de556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:5c:d7:8b:96:45:ef:87:26:6f:e2:47:96: ed:49:00:75:9c:f1:66:54:0e:04:4e:de:fc:be:d2: 30:c7:9d:28:f9:c2:d0:b9:17:9d:f1:9f:1a:9b:84: a5:1e:ec:58:68:d7:87:df:2f:ca:d4:20:3e:4a:5c: 51:cd:eb:d0:99:94:e8:90:a5:5c:37:02:08:a0:6c: 63:c2:9c:71:2a:7b:7f:cb:3e:71:da:0e:65:36:c7: ec:31:99:ca:33:ad:a3:65:c4:e9:bb:8c:8e:5b:ba: 8b:ca:af:f8:d5:80:3f:1d:9f:1d:6f:0c:65:8b:a9: 0e:07:9e:05:e5:4c:84:67:df:7c:7d:49:5e:27:52: 66:1a:8d:ef:14:6e:77:3a:03:2d:9d:69:00:24:33: 25:f0:07:e1:39:79:d4:fb:c9:18:31:d2:5e:15:35: 4a:59:05:77:8e:d4:06:5c:1e:21:73:53:ca:0b:c1: d0:7a:fe:a9:1c:25:78:60:2b:7c:04:7a:35:1b:3c: d1:eb:ac:15:fa:ac:c4:ae:ee:ee:6d:3a:a1:45:d4: a9:f5:fe:80:40:d8:6b:c9:5c:cc:28:15:9f:2f:4a: c3:d9:d2:67:4b:17:0c:d9:fa:e1:01:f5:41:13:ed: 3a:a9:e4:1c:2e:67:97:5f:27:db:a2:5a:90:d8:81: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:94:4B:B5:B8:68:E1:A8:58:7E:99:32:1B:47:A4:7E:0D:E5:56 X509v3 Authority Key Identifier: keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:62:f3:4f:59:fb:77:f2:05:80:bf:f5:2c:c4:a3:5a:a6:4c: 0e:4e:eb:31:8b:42:ab:7e:1e:a2:f2:10:bd:e4:fe:24:88:91: bd:76:a5:d1:d7:0a:64:7f:d2:c0:5f:08:bf:88:63:54:6a:b6: 80:c3:6d:3e:fd:19:ff:d1:05:36:e6:fc:80:3c:e2:cb:a5:21: 91:1f:45:b4:5f:19:85:1d:d2:5a:a5:5b:3f:6c:03:db:dd:8f: 6a:a5:b4:47:03:d5:db:74:84:d8:62:63:4e:db:20:9a:f1:a2: c9:36:4e:7e:32:00:fd:a2:09:a4:6b:b6:25:ca:a8:f9:b8:62: 07:61:2a:c2:1d:ec:57:6c:9f:05:f0:42:7c:e2:d7:fb:70:2d: 89:6b:8f:78:13:f2:79:34:6b:c6:0b:eb:42:33:66:ce:93:7c: 24:5c:a8:19:b2:36:c8:1c:5d:3d:3f:9d:6f:e2:2e:03:b7:98: 28:e4:2a:77:30:47:a7:a6:79:9b:8d:8b:06:86:b3:41:eb:8f: 76:15:76:c8:8d:6b:9f:32:0f:6f:b1:9d:61:b9:4b:2f:43:0d: 53:c3:dd:0a:06:50:94:72:5d:7b:1f:9c:ab:9c:09:5a:92:f3: fc:0c:0c:c4:f1:0d:cd:16:9a:d0:68:c8:97:ff:ee:ed:2f:7c: 7b:cf:be:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZlzk0bLG5o77rR8y7pEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTEyYjM1Yzc3YTRiMTZmYmViNTYxMjFjOTc0ZDU5ZDU2 Njc4NGIwHhcNMjUxMjA2MTYwMTMwWhcNMjUxMjA3MTYwMTMwWjAzMTEwLwYDVQQD Eyg4NmYxOTQ0YmI1Yjg2OGUxYTg1ODdlOTkzMjFiNDdhNDdlMGRlNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhhc14uWRe+HJm/iR5btSQB1nPFm VA4ETt78vtIwx50o+cLQuRed8Z8am4SlHuxYaNeH3y/K1CA+SlxRzevQmZTokKVc NwIIoGxjwpxxKnt/yz5x2g5lNsfsMZnKM62jZcTpu4yOW7qLyq/41YA/HZ8dbwxl i6kOB54F5UyEZ998fUleJ1JmGo3vFG53OgMtnWkAJDMl8AfhOXnU+8kYMdJeFTVK WQV3jtQGXB4hc1PKC8HQev6pHCV4YCt8BHo1GzzR66wV+qzEru7ubTqhRdSp9f6A QNhryVzMKBWfL0rD2dJnSxcM2frhAfVBE+06qeQcLmeXXyfbolqQ2IHSHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbxlEu1uGjhqFh+mTIbR6R+DeVWMB8GA1UdIwQY MBaAFKcRKzXHeksW++tWEhyXTVnVZnhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83MWNiZTUtNGEyOS00NTY3LWExZmEt Nzg4ODQyODIyNWI0LzEvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83MWNiZTUtNGEyOS00NTY3LWExZmEtNzg4ODQyODIyNWI0 LzEvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmLzT1n7 d/IFgL/1LMSjWqZMDk7rMYtCq34eovIQveT+JIiRvXal0dcKZH/SwF8Iv4hjVGq2 gMNtPv0Z/9EFNub8gDziy6UhkR9FtF8ZhR3SWqVbP2wD292PaqW0RwPV23SE2GJj TtsgmvGiyTZOfjIA/aIJpGu2Jcqo+bhiB2Eqwh3sV2yfBfBCfOLX+3AtiWuPeBPy eTRrxgvrQjNmzpN8JFyoGbI2yBxdPT+db+IuA7eYKOQqdzBHp6Z5m42LBoazQeuP dhV2yI1rnzIPb7GdYblLL0MNU8PdCgZQlHJdex+cq5wJWpLz/AwMxPENzRaa0GjI l//u7S98e8++jw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:15:59 2025 by rpki-client