This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json) Hash identifier: supGTJGCznO/HtZTQdd0eSsC6qokfmiMna17zUOEIgQ= Subject key identifier: BF:04:2F:FD:D5:69:B1:DC:91:DF:50:9F:95:F9:E3:76:2D:43:63:3D Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48 Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48 Certificate serial: 019AF208DC0A97AB4C58FCF16E9B5DA47E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=) 2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: X+BI36pqM/eF1eIm9aAst2Txf5lV08VbSrZDHnAl/io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:0a:97:ab:4c:58:fc:f1:6e:9b:5d:a4:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=bf042ffdd569b1dc91df509f95f9e3762d43633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:b7:0d:e6:24:3e:4e:52:00:8e:1d:e0:44: cf:30:a4:8a:6c:82:c1:28:de:33:57:24:a0:a1:26: 66:11:14:92:5d:bb:1c:eb:e4:38:e7:e1:b7:f3:22: 6f:83:f5:b8:ce:71:94:4f:9b:d4:61:d2:83:b3:55: ce:66:ef:da:ff:fa:0b:eb:dc:6d:91:d0:86:3d:de: 9e:c4:ca:9f:86:f9:7d:63:69:6a:c3:18:d9:91:51: a0:2d:a8:cd:04:ca:3c:00:97:d2:34:89:ee:06:6d: 0c:ee:de:62:ef:ce:41:4a:f6:90:69:44:51:82:17: a0:97:3c:40:e2:50:5a:3b:2d:c4:09:63:26:f9:2b: e5:b3:79:0f:f8:b4:a5:21:32:8d:e5:be:84:7f:82: 52:8c:f6:23:36:11:5b:2e:59:4b:3d:ce:28:70:0b: f8:3e:2c:59:07:8b:5e:af:79:54:35:c8:35:86:70: cc:04:73:a0:b2:e9:85:54:81:6e:6b:15:e7:33:45: f0:70:9f:48:ee:79:c6:02:6e:d9:a3:6d:de:69:34: f3:70:fb:b3:2c:f9:1e:05:dd:c6:8e:78:7e:34:9f: e6:52:da:fe:f0:ff:9f:cf:ad:33:25:a5:2d:01:01: 28:d4:ae:51:92:62:f5:6f:c9:d3:33:90:ae:c9:76: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:04:2F:FD:D5:69:B1:DC:91:DF:50:9F:95:F9:E3:76:2D:43:63:3D X509v3 Authority Key Identifier: keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ef:e7:0d:c6:c3:be:da:81:55:1a:6b:cd:5c:3b:ed:3a:c9: 6d:c5:8f:24:c9:3d:f7:27:20:96:74:e3:67:f0:81:9d:0b:1f: 4d:16:24:bd:c2:6c:05:e1:01:9b:8f:6a:8b:8f:11:5a:51:75: d1:f0:6d:06:17:3b:f8:62:d2:7a:d4:b4:5a:17:79:99:4e:f2: 69:d9:26:a6:a3:3e:2d:c6:c3:3f:57:3a:2e:03:68:68:a9:b1: f3:a0:9a:1c:d0:ce:17:71:b8:61:da:4e:07:ed:10:d1:9a:5e: 5a:40:bf:19:73:5f:63:f0:b3:a1:4c:3f:b4:bc:82:60:0a:ef: 4b:b8:d8:59:9c:05:04:f2:aa:77:94:12:0e:02:f1:d2:61:25: fe:7a:a1:fb:77:ba:b9:ba:02:33:d2:2b:8b:ce:88:06:77:49: 3a:f7:3c:95:b3:ed:89:5d:b4:5d:3a:68:c1:21:df:74:f4:ed: b0:a9:08:43:ac:34:cf:a0:6b:16:dd:e1:a5:77:be:df:70:be: be:23:41:95:36:b3:f9:9b:c7:8b:e7:a0:8f:c8:5e:dc:0b:19: b0:b8:f4:c0:51:37:30:74:03:00:bf:2a:37:1a:59:08:fd:8f: 0c:60:93:7f:de:72:bd:d6:c7:70:02:bd:6b:19:15:6b:2d:d4: 38:df:f8:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNwKl6tMWPzxbptdpH5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTlmZGM3MGQzOWYxM2MzNzg0ZDMyNWFlMmI2MWYwZjNj OTlmNDgwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhiZjA0MmZmZGQ1NjliMWRjOTFkZjUwOWY5NWY5ZTM3NjJkNDM2MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniG3DeYkPk5SAI4d4ETPMKSKbILB KN4zVySgoSZmERSSXbsc6+Q45+G38yJvg/W4znGUT5vUYdKDs1XOZu/a//oL69xt kdCGPd6exMqfhvl9Y2lqwxjZkVGgLajNBMo8AJfSNInuBm0M7t5i785BSvaQaURR gheglzxA4lBaOy3ECWMm+Svls3kP+LSlITKN5b6Ef4JSjPYjNhFbLllLPc4ocAv4 PixZB4ter3lUNcg1hnDMBHOgsumFVIFuaxXnM0XwcJ9I7nnGAm7Zo23eaTTzcPuz LPkeBd3Gjnh+NJ/mUtr+8P+fz60zJaUtAQEo1K5RkmL1b8nTM5CuyXb9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8EL/3VabHckd9Qn5X543YtQ2M9MB8GA1UdIwQY MBaAFKcZ/ccNOfE8N4TTJa4rYfDzyZ9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUt ZDVhNDIzNDQyZDM1LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUtZDVhNDIzNDQyZDM1 LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe/nDcbD vtqBVRprzVw77TrJbcWPJMk99ycglnTjZ/CBnQsfTRYkvcJsBeEBm49qi48RWlF1 0fBtBhc7+GLSetS0Whd5mU7yadkmpqM+LcbDP1c6LgNoaKmx86CaHNDOF3G4YdpO B+0Q0ZpeWkC/GXNfY/CzoUw/tLyCYArvS7jYWZwFBPKqd5QSDgLx0mEl/nqh+3e6 uboCM9Iri86IBndJOvc8lbPtiV20XTpowSHfdPTtsKkIQ6w0z6BrFt3hpXe+33C+ viNBlTaz+ZvHi+egj8he3AsZsLj0wFE3MHQDAL8qNxpZCP2PDGCTf95yvdbHcAK9 axkVay3UON/46A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:14 2025 by rpki-client