This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json) Hash identifier: uvw5Jkdvt1iPRYhN6YewPn+DpZGaCJdPbhaTo07S3Io= Subject key identifier: 86:04:92:B0:B1:49:35:67:15:D8:A7:36:0F:8E:ED:B4:2E:AA:19:5C Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019AF208E6A7DF948ED4E6C9BB310B8FA118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=) 2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=) 3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=) 4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: emxGRCchlB3P57ISFKLwdPgqIplInD6+Njo92EOR880=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e6:a7:df:94:8e:d4:e6:c9:bb:31:0b:8f:a1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=860492b0b149356715d8a7360f8eedb42eaa195c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:45:3a:e9:99:8f:be:39:c4:0d:a3:e4:11: 53:ee:fd:79:be:90:cb:03:fa:78:62:41:12:30:58: cd:69:55:c3:00:e4:2a:2c:b8:b4:71:e2:31:80:94: 5a:4f:6f:61:10:89:22:58:96:3d:19:db:93:ed:c9: 10:3e:64:cf:8c:58:92:c1:29:fe:c3:28:c1:71:9a: d5:e4:b9:3b:d1:3e:b0:d3:51:0e:49:c2:eb:c6:37: 66:c9:73:a3:15:77:e5:ae:7e:f0:76:b8:f5:cc:54: a4:e6:a9:ff:20:32:de:7f:c3:ba:be:ce:12:b9:e5: f4:51:46:01:19:08:06:c9:71:a7:b6:db:ad:3d:31: 79:c5:90:f7:19:71:f9:cc:f3:c2:c2:e4:ca:25:e6: 85:3f:89:e9:97:83:9d:88:22:d6:07:ab:c2:70:e3: 24:4f:93:64:34:30:5f:ad:8f:3d:f6:3b:92:00:27: e9:15:69:d0:3d:19:8b:c7:42:6a:b4:e7:d4:cc:5e: 76:a2:a4:00:50:8c:ef:12:37:c7:f0:02:2e:24:f5: 4f:99:8c:a6:2c:f4:53:6d:ec:28:2a:a9:a2:71:00: d3:ba:0c:b9:47:52:e4:b7:4d:47:aa:db:d0:2c:af: 43:ba:d7:d1:ff:f3:aa:02:41:36:13:6a:b9:ec:40: 23:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:92:B0:B1:49:35:67:15:D8:A7:36:0F:8E:ED:B4:2E:AA:19:5C X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ee:33:35:ef:d0:19:d4:12:bf:c8:7a:a7:53:32:1d:49:24: 07:96:be:e6:08:4b:fb:0f:86:24:f9:4c:eb:d8:52:1a:64:26: f7:60:d3:76:95:3b:b4:2a:57:33:48:b8:fa:77:24:dc:6b:13: 96:7c:a8:57:3a:b9:92:f0:4e:b8:27:61:d3:7c:88:95:ff:72: 2a:98:b4:35:45:e1:1a:52:33:10:5a:06:4b:80:d4:df:51:13: 0e:57:71:09:3a:ec:03:46:92:ae:fe:fe:54:12:aa:2a:71:fa: 03:98:a9:33:68:ad:65:1c:12:7f:48:d6:59:e1:d3:86:45:86: 57:67:32:16:55:f8:99:85:23:3e:af:80:d0:4f:0a:5f:26:80: 55:03:70:37:d6:e8:56:62:74:77:5a:ea:bc:e1:53:e1:7a:29: c2:2c:ba:b2:1c:38:48:36:1c:ef:b0:00:7a:f9:9a:e2:02:9c: b8:b8:e8:74:96:fb:97:c5:5d:b2:f9:83:11:15:23:59:35:8b: 58:e9:9c:24:a3:dc:68:7b:2b:06:a3:20:da:fa:2e:9b:3c:81: 09:0d:d4:e6:1c:c7:06:d2:04:e2:8c:7b:af:08:e6:63:f1:c1: d5:30:8f:f5:6b:bd:77:39:44:ad:dd:92:2d:bb:9f:d4:3b:02: 94:9d:cd:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOan35SO1ObJuzELj6EYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD Eyg4NjA0OTJiMGIxNDkzNTY3MTVkOGE3MzYwZjhlZWRiNDJlYWExOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkZFOumZj745xA2j5BFT7v15vpDL A/p4YkESMFjNaVXDAOQqLLi0ceIxgJRaT29hEIkiWJY9GduT7ckQPmTPjFiSwSn+ wyjBcZrV5Lk70T6w01EOScLrxjdmyXOjFXflrn7wdrj1zFSk5qn/IDLef8O6vs4S ueX0UUYBGQgGyXGnttutPTF5xZD3GXH5zPPCwuTKJeaFP4npl4OdiCLWB6vCcOMk T5NkNDBfrY899juSACfpFWnQPRmLx0JqtOfUzF52oqQAUIzvEjfH8AIuJPVPmYym LPRTbewoKqmicQDTugy5R1Lkt01HqtvQLK9DutfR//OqAkE2E2q57EAjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYEkrCxSTVnFdinNg+O7bQuqhlcMB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO4zNe/Q GdQSv8h6p1MyHUkkB5a+5ghL+w+GJPlM69hSGmQm92DTdpU7tCpXM0i4+nck3GsT lnyoVzq5kvBOuCdh03yIlf9yKpi0NUXhGlIzEFoGS4DU31ETDldxCTrsA0aSrv7+ VBKqKnH6A5ipM2itZRwSf0jWWeHThkWGV2cyFlX4mYUjPq+A0E8KXyaAVQNwN9bo VmJ0d1rqvOFT4Xopwiy6shw4SDYc77AAevma4gKcuLjodJb7l8VdsvmDERUjWTWL WOmcJKPcaHsrBqMg2voumzyBCQ3U5hzHBtIE4ox7rwjmY/HB1TCP9Wu9dzlErd2S Lbuf1DsClJ3New== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:07 2025 by rpki-client