This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json) Hash identifier: UWQNqz25G5ERkNC+scnM3Qcowv/vLy0xiE9fwUI8hxE= Subject key identifier: 33:06:53:41:2D:9F:A5:F5:DC:C3:C4:1D:4D:B4:11:D6:72:3D:CB:A2 Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Certificate serial: 019AF4654BC7108138E868BDB742BB116246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft Manifest number: 0FD6 Signing time: Sat 06 Dec 2025 16:01:10 +0000 Manifest this update: Sat 06 Dec 2025 16:01:10 +0000 Manifest next update: Sun 07 Dec 2025 16:01:10 +0000 Files and hashes: 1: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=) 2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: qO1B3cuwWQIkWX9w/QHUjqN+CaLDF3RkRjXt+px1li0=) 3: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (hash: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:4b:c7:10:81:38:e8:68:bd:b7:42:bb:11:62:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Validity Not Before: Dec 6 16:01:10 2025 GMT Not After : Dec 7 16:01:10 2025 GMT Subject: CN=330653412d9fa5f5dcc3c41d4db411d6723dcba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:5f:a8:48:fe:7b:6c:de:c8:31:49:74:20: 00:c2:67:ec:57:b1:5d:bd:89:01:18:f0:a9:12:cd: 38:08:e8:37:c2:c3:63:4c:67:16:7a:b9:0c:ae:97: 2a:cf:37:3d:51:1b:36:4c:4b:f2:6b:83:49:83:b7: 49:fe:5d:1d:49:a7:85:03:3d:9e:ed:7d:e0:b9:a3: ea:05:c1:05:d5:c7:cb:d8:a0:1d:0f:18:8e:cb:43: 9b:07:1b:2a:c5:c2:49:8b:f7:8e:a7:4b:ef:16:f7: 5d:f5:19:70:a1:dc:e0:8d:41:9e:73:13:cc:a2:f7: 70:9b:fe:7c:b0:26:3f:b6:bb:08:d0:ef:33:85:65: 7f:e9:67:22:9c:3c:11:e8:05:25:a8:90:18:0b:7d: 6f:95:59:94:ef:ce:c1:62:19:5f:26:cc:47:7f:33: 28:9b:5f:2c:29:e3:10:3b:cd:bd:f1:24:21:92:af: 57:e0:ea:a0:8c:2e:f8:fc:88:e4:8c:e2:9b:2a:da: 8e:98:16:cf:d6:d1:8e:07:08:07:bf:60:48:44:71: 29:ee:8d:14:1c:d0:30:16:98:79:45:6f:9d:9f:17: c1:ae:be:05:07:65:e0:e2:da:3c:1a:86:98:dc:50: 28:bd:5d:6f:7b:07:ab:6b:b6:e5:e8:e6:76:f8:05: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:06:53:41:2D:9F:A5:F5:DC:C3:C4:1D:4D:B4:11:D6:72:3D:CB:A2 X509v3 Authority Key Identifier: keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4f:01:6c:b4:41:6d:d9:01:3a:92:e3:a6:29:85:8c:ff:71: ee:12:ce:18:57:c6:da:16:d6:74:57:71:d7:d2:26:68:e3:ee: ab:66:ff:04:2b:ad:c0:46:92:7d:51:61:b8:61:e2:d7:8b:02: ec:06:61:e3:70:3e:98:27:28:de:ab:62:e6:ab:4e:82:71:48: 04:2c:e7:f3:06:95:6d:81:ce:42:84:78:66:70:34:85:a6:a5: e6:e9:90:bc:cc:82:78:c6:b4:e3:dd:b3:71:27:cb:45:03:75: 8a:26:50:83:22:cf:03:af:19:e5:55:23:e7:0f:3e:aa:c6:38: 15:0b:94:7d:35:fe:65:ad:f8:8c:c6:35:cd:40:9a:a6:71:2d: 02:99:3e:4c:ac:f2:70:f4:e0:c1:5b:cb:aa:4c:53:7d:eb:6d: 48:55:36:97:06:c0:88:88:3f:72:43:cd:ba:6a:70:f9:ac:ee: c2:e1:5b:d4:e0:4e:9d:d4:5e:6e:63:8f:3c:57:da:d4:70:fe: 27:9e:d1:9a:8d:55:5a:f5:0a:d1:35:51:4b:11:0a:ba:44:41: ad:ee:f2:2b:a7:bd:cb:cd:96:f4:07:a9:de:65:64:0b:f8:45: 97:41:cd:26:6a:65:7e:95:c6:e5:98:b9:69:1c:47:b1:94:ed: 33:eb:09:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUvHEIE46Gi9t0K7EWJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj NzJmMzIwHhcNMjUxMjA2MTYwMTEwWhcNMjUxMjA3MTYwMTEwWjAzMTEwLwYDVQQD EygzMzA2NTM0MTJkOWZhNWY1ZGNjM2M0MWQ0ZGI0MTFkNjcyM2RjYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwilfqEj+e2zeyDFJdCAAwmfsV7Fd vYkBGPCpEs04COg3wsNjTGcWerkMrpcqzzc9URs2TEvya4NJg7dJ/l0dSaeFAz2e 7X3guaPqBcEF1cfL2KAdDxiOy0ObBxsqxcJJi/eOp0vvFvdd9RlwodzgjUGecxPM ovdwm/58sCY/trsI0O8zhWV/6WcinDwR6AUlqJAYC31vlVmU787BYhlfJsxHfzMo m18sKeMQO8298SQhkq9X4OqgjC74/IjkjOKbKtqOmBbP1tGOBwgHv2BIRHEp7o0U HNAwFph5RW+dnxfBrr4FB2Xg4to8GoaY3FAovV1vewera7bl6OZ2+AWQOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMGU0Etn6X13MPEHU20EdZyPcuiMB8GA1UdIwQY MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3 LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbE8BbLRB bdkBOpLjpimFjP9x7hLOGFfG2hbWdFdx19ImaOPuq2b/BCutwEaSfVFhuGHi14sC 7AZh43A+mCco3qti5qtOgnFIBCzn8waVbYHOQoR4ZnA0haal5umQvMyCeMa0492z cSfLRQN1iiZQgyLPA68Z5VUj5w8+qsY4FQuUfTX+Za34jMY1zUCapnEtApk+TKzy cPTgwVvLqkxTfettSFU2lwbAiIg/ckPNumpw+azuwuFb1OBOndRebmOPPFfa1HD+ J57Rmo1VWvUK0TVRSxEKukRBre7yK6e9y82W9Aep3mVkC/hFl0HNJmplfpXG5Zi5 aRxHsZTtM+sJ+w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:21 2025 by rpki-client