This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json) Hash identifier: TiKpvBLWaIGNeEemUAOw1kTSeFFIIHZg5Iqre+cVzmc= Subject key identifier: 1D:D7:70:87:BB:81:34:F6:11:8C:D9:01:C1:70:94:28:E2:06:04:FE Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32 Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132 Certificate serial: 019AF12D2DBCDD8B46A38745775C5F2E1A05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: uzVhUECaa5xkh9KCokfgGvo5m1txxKZJ9egw8Wd2/CM=) 2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2d:bc:dd:8b:46:a3:87:45:77:5c:5f:2e:1a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=1dd77087bb8134f6118cd901c1709428e20604fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:f3:67:25:f2:fd:4a:7e:52:f6:d8:24:ac: 69:0f:b2:fb:df:d4:43:e6:07:35:5c:fe:b5:8d:e1: 97:09:10:90:e5:ed:da:b4:08:32:25:eb:15:1d:06: bc:90:15:18:b5:45:4d:da:05:ce:54:23:46:d3:0c: dd:a2:8a:db:a7:10:d7:e4:1d:5f:97:b8:34:d6:56: 74:8c:2c:16:81:bf:89:e1:a7:ad:9d:f9:ec:81:24: 10:94:9a:a6:2d:5d:9d:9f:1f:9e:ec:4c:66:f5:18: 42:b1:a9:dc:d4:5a:c4:86:db:9f:ba:e6:7e:b3:04: 2e:46:8e:34:2e:82:5b:34:d5:15:03:f8:bd:d2:9b: ff:e6:1d:ee:b8:7e:82:47:35:0e:55:a9:05:94:2c: 27:d1:61:fc:8f:dc:9c:98:ae:a2:27:68:b8:d6:20: 5f:7d:69:83:32:55:a4:7f:d1:6e:aa:a3:74:4e:36: 33:f0:30:34:53:f5:23:bb:ee:14:e0:76:75:ff:42: 14:b2:66:74:e1:c5:4c:f7:25:0e:7c:70:c0:ac:6b: 4f:ad:9b:90:c4:af:a1:56:d0:9f:89:7c:00:64:94: 13:b8:d1:98:97:d8:6d:3d:ac:e9:57:bd:ae:df:98: 76:48:ff:52:7b:d9:66:56:36:d7:88:b7:b1:f6:29: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D7:70:87:BB:81:34:F6:11:8C:D9:01:C1:70:94:28:E2:06:04:FE X509v3 Authority Key Identifier: keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c2:ac:03:43:9e:6e:9f:36:f1:0a:16:41:a8:bc:c1:eb:65: 1c:40:1c:78:cb:cf:ed:1c:24:97:6f:ef:39:ad:d1:54:50:7f: 3c:df:51:0c:9c:a0:ca:b6:7e:10:ca:eb:b6:7d:4f:0e:24:8d: 3b:bb:43:5f:fc:64:bf:f9:ba:7d:66:5f:d5:2e:40:91:ff:34: ee:60:5b:77:3b:bc:20:04:45:63:bb:d9:f9:42:4f:52:c6:72: ab:38:91:0f:b6:1b:43:44:3e:58:a7:e7:51:27:da:4f:aa:56: da:0f:1e:0a:05:36:84:fd:6f:cb:ec:91:b9:b8:9c:fe:1d:0e: 36:2b:7b:b9:d2:b9:d5:ec:73:ca:58:d1:28:7b:7c:69:5e:af: a0:ca:5a:97:dd:b9:4e:20:b3:a1:d8:b3:7f:40:43:e5:1b:24: 3c:e5:07:58:aa:a1:47:66:52:f8:4f:32:34:af:3a:bc:67:10: 18:3e:fb:fd:ff:4a:17:55:6a:82:fa:b6:0c:0b:64:09:ce:96: f2:77:e0:64:d4:6c:35:b2:d4:8d:0b:0a:df:c2:ab:0c:ad:cf: 8e:72:c1:d9:74:0c:b7:f3:a2:3f:3c:62:78:f3:65:3a:64:e6: 08:29:16:a3:60:12:f0:7e:d6:d0:b7:b6:f6:1b:72:33:81:30: 89:60:a3:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS283YtGo4dFd1xfLhoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1 ZDUxMzIwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EygxZGQ3NzA4N2JiODEzNGY2MTE4Y2Q5MDFjMTcwOTQyOGUyMDYwNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR/zZyXy/Up+UvbYJKxpD7L739RD 5gc1XP61jeGXCRCQ5e3atAgyJesVHQa8kBUYtUVN2gXOVCNG0wzdoorbpxDX5B1f l7g01lZ0jCwWgb+J4aetnfnsgSQQlJqmLV2dnx+e7Exm9RhCsanc1FrEhtufuuZ+ swQuRo40LoJbNNUVA/i90pv/5h3uuH6CRzUOVakFlCwn0WH8j9ycmK6iJ2i41iBf fWmDMlWkf9FuqqN0TjYz8DA0U/Uju+4U4HZ1/0IUsmZ04cVM9yUOfHDArGtPrZuQ xK+hVtCfiXwAZJQTuNGYl9htPazpV72u35h2SP9Se9lmVjbXiLex9ilSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3XcIe7gTT2EYzZAcFwlCjiBgT+MB8GA1UdIwQY MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt OWJhODViZTNiZjA5LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5 LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsKsA0Oe bp828QoWQai8wetlHEAceMvP7Rwkl2/vOa3RVFB/PN9RDJygyrZ+EMrrtn1PDiSN O7tDX/xkv/m6fWZf1S5Akf807mBbdzu8IARFY7vZ+UJPUsZyqziRD7YbQ0Q+WKfn USfaT6pW2g8eCgU2hP1vy+yRubic/h0ONit7udK51exzyljRKHt8aV6voMpal925 TiCzodizf0BD5RskPOUHWKqhR2ZS+E8yNK86vGcQGD77/f9KF1Vqgvq2DAtkCc6W 8nfgZNRsNbLUjQsK38KrDK3PjnLB2XQMt/OiPzxiePNlOmTmCCkWo2AS8H7W0Le2 9htyM4EwiWCjeA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:46 2025 by rpki-client